search for: cred

From: "Richard W.M. Jones" <rjones at redhat.com> This commit models libvirt authentication events through the API, adding one new event (GUESTFS_EVENT_LIBVIRT_AUTH) and several new APIs: guestfs_set_libvirt_supported_credentials guestfs_get_libvirt_requested_credentials guestfs_get_libvirt_requested_credential_prompt guestfs_get_libvirt_requested_credential_challenge guestfs_get_libvirt_requested_credential_defresult guestfs_set_libvirt_requested_credential See the documentation and example which shows ho...

Hi, I am trying to connect to remote libvirt via script, and I get password prompt from the shell. ============================================================================ uri='xen+ssh://root@myserver/?no_verify=1' def req(credentials, user_data): print('in req...\n') for cred in credentials: if cred[0] == libvirt.VIR_CRED_AUTHNAME: cred[4] = username elif cred[0] == libvirt.VIR_CRED_PASSPHRASE: cred[4] = passwd return 0 auth = [[libvirt.VIR_CRED_AUTHNAME, libvi...

As in the example code below. static void do_auth (guestfs_h *g, void *opaque, uint64_t event, int event_handle, int flags, const char *buf, size_t buf_len, const uint64_t *array, size_t array_len) { char **creds; size_t i; char *prompt; char *reply; size_t replylen; // buf will be the libvirt URI. It is always \0-terminated so // buf_len can be ignored in this case. printf ("Authentication required for libvirt connection '%s'\n", buf); // Ask libguestfs what credential...

http://bugzilla.mindrot.org/show_bug.cgi?id=1073 Summary: if userok rejects a user their creds still get set Product: Portable OpenSSH Version: 3.9p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: Kerberos support AssignedTo: bitbucket at mindrot.org ReportedB...

...he password of root for remote machine is "123456". Even I running the example in libvirt library esxlist.py(change uri to a qemu type and assign the username and password). Bellow is my simple test code, unfortunately it still need me to input the password. import libvirt def authcb(ncred, cbdata): for cred in ncred: if cred[0] == libvirt.VIR_CRED_AUTHNAME: cred[4] = "root" elif cred == libvirt.VIR_CRED_PASSPHRASE: cred[4] = "123456" return 0 class connection: def __init__(self, uri): self.uri = uri def open(self): auth = [[libvirt.VIR_CRED_AUTHNAME, libvirt.VIR...

--- /etc/smtpd/smtpd.conf pki mx.domain.tld certificate "/etc/smtpd/tls/smtpd.crt" pki mx.domain.tld key "/etc/smtpd/tls/smtpd.key" table creds "/etc/smtpd/creds" table vdoms "/etc/smtpd/vdoms" table vusers "/etc/smtpd/vusers" listen on eth0 tls pki mx.domain.tld listen on eth0 port 587 tls-require pki mx.domain.tld auth <creds> accept from any f...

>> >Could we please have a clarification on the semantics of >> >PAM_CRED_ESTABLISH vs. the semantics of PAM_REINITIALIZE_CREDS? >> >> My interpretation is: >> >> You call PAM_ESTABLISH_CRED to create them >> You call PAM_REINITIALIZE_CRED to update creds that can expire over time, >> for example a kerberos ticket. Oops. I meant PA...

...the past few days, I've been working on getting the Azure Linux VMs to join the AD domain in Azure, login as domain users, and mount Azure file shares over SMB3. Most things work fine. Except that I need perform a few Kerberos related tasks manually, for the SMB3 mount to work with domain user credentials. I did some debugging of the issue, and looks like cifs.upcall (the userspace helper program for cifs.ko) is unable to find the krb5 TGT for the domain user in the cred-cache. If the cred-cache is missing, it looks for it in the system krb5.keytab. Since winbind is configured with kerberos...

...omain unavailable. > > I think we should continue recommending to add the two records > manually. :-) > > > Regards, > Marc > I will try again to see if it was just a one off, but at least it gives us a pointer to what is wrong ;-) When samba_dnsupdate tries to get the credentials, there is this line: creds.guess(lp) I 'think' it is guessing wrong ?? Rowland

...Jul 12, 2018 at 12:04 AM, Larry Rosenman <larryrtx at gmail.com> wrote: > --- > /etc/smtpd/smtpd.conf > pki mx.domain.tld certificate "/etc/smtpd/tls/smtpd.crt" > pki mx.domain.tld key "/etc/smtpd/tls/smtpd.key" > > table creds "/etc/smtpd/creds" > table vdoms "/etc/smtpd/vdoms" > table vusers "/etc/smtpd/vusers" > > listen on eth0 tls pki mx.domain.tld > listen on eth0 port 587 tls-require pki mx.doma...

...e two records >>> manually. :-) >>> >>> >>> Regards, >>> Marc >>> >> I will try again to see if it was just a one off, but at least it >> gives us a pointer to what is wrong ;-) >> >> When samba_dnsupdate tries to get the credentials, there is this line: >> >> creds.guess(lp) >> >> I 'think' it is guessing wrong ?? >> >> Rowland >> > OK, after a lot more testing, I can get the records created without > turning the first DC off. > > Provision the first DC. >...

...; > I am trying to connect to remote libvirt via script, > > and I get password prompt from the shell. > > > > > > ============================================================================ > > uri='xen+ssh://root@myserver/?no_verify=1' > > def req(credentials, user_data): > > print('in req...\n') > > for cred in credentials: > > if cred[0] == libvirt.VIR_CRED_AUTHNAME: > > cred[4] = username > > elif cred[0] == libvirt.VIR_CRED_PASSPHRASE: > > cred[4] = pa...

...at gmail.com> wrote: > > --- > > /etc/smtpd/smtpd.conf > > pki mx.domain.tld certificate "/etc/smtpd/tls/smtpd.crt" > > pki mx.domain.tld key "/etc/smtpd/tls/smtpd.key" > > > > table creds "/etc/smtpd/creds" > > table vdoms "/etc/smtpd/vdoms" > > table vusers "/etc/smtpd/vusers" > > > > listen on eth0 tls pki mx.domain.tld > > li...

...c 2007-08-20 19:56:38.000000000 -0400 @@ -134,6 +134,9 @@ /* Default lifetime (0 == forever) */ static int lifetime = 0; +static int run_inform = 0; +char inform_cmd[MAXPATHLEN]; + static void close_socket(SocketEntry *e) { @@ -247,6 +250,28 @@ MD5_CTX md; Key *key; +#if defined(SO_PEERCRED) + if (AUTH_CONNECTION == e->type) { + struct ucred cred; + socklen_t len = sizeof(cred); + char inform_cmdline[MAXPATHLEN]; + + if (run_inform && getsockopt(e->fd, SOL_SOCKET, SO_PEERCRED, &cred, &len) >= 0) { + int ret; + + snprintf(inform_cmdline, sizeof inform_c...

..._NETWORK_ERROR') File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 1059, in run dns_conn = dns_connect(server, self.lp, self.creds) File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 40, in dns_connect dns_conn = dnsserver.dnsserver(binding_str, lp, creds) adam at eagle:~$ 'sogo.smbdomain.com' is DC1 and the command is being run on DC1 I've seen the same error on DC1 It looks l...

...ng the Azure > Linux VMs to > join the AD domain in Azure, login as domain users, and mount > Azure file > shares over SMB3. > > Most things work fine. Except that I need perform a few > Kerberos related > tasks manually, for the SMB3 mount to work with domain user > credentials. For that to work, you need to add the CIFS/hostname.fqdn at REALM to the host your logging in. The COMPUTER$ should hold it. Allow the computer to delegate the cifs service. ( or all ) Try that. > I did some debugging of the issue, and looks like cifs.upcall (the > userspace...

...File "/usr/lib/python2.7/site-packages/samba/netcmd/__init__.py", > line 175, in _run > return self.run(*args, **kwargs) > File "/usr/lib/python2.7/site-packages/samba/netcmd/dns.py", line > 809, in run > dns_conn = dns_connect(server, self.lp, self.creds) > File "/usr/lib/python2.7/site-packages/samba/netcmd/dns.py", line > 40, in dns_connect > dns_conn = dnsserver.dnsserver(binding_str, lp, creds [snip] and try this: samba-tool dns zonelist localhost -U Administrator >>>> >>>> >>>>...

Hi, just joined the list and know very little about smb. I'm trying to do something that should be simple, but my current solution isn't working 100% All I need is a list of smb shares on the network. I'm doing this: /usr/bin/nmblookup -M -- - and then use this on each ip returned: /usr/bin/smbclient -g -p 139 -NL <ip addr> That works for most cases but it fails to find

...e Azure Linux VMs > to > > join the AD domain in Azure, login as domain users, and mount Azure file > > shares over SMB3. > > > > Most things work fine. Except that I need perform a few Kerberos related > > tasks manually, for the SMB3 mount to work with domain user credentials. > > I did some debugging of the issue, and looks like cifs.upcall (the > > userspace helper program for cifs.ko) is unable to find the krb5 TGT for > > the domain user in the cred-cache. If the cred-cache is missing, it looks > > for it in the system krb5.keytab. &gt...

...p-policy-book/) I also installed samba version 4.15.3 with the command samba-gpupdate, when I run the command samba-gpupdate --rsop with sssd working it reports these errors: Traceback (most recent call last): File "/usr/sbin/samba-gpupdate", line 117, in <module> rsop(lp, creds, logger, store, gp_extensions, opts.target) File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 511, in rsop dc_hostname = get_dc_hostname(creds, lp) File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 358, in get_dc_hostname cldap_ret = net.fi...