search for: huaraz

http://bugzilla.mindrot.org/show_bug.cgi?id=928 Summary: Kerberos/GSSAPI authentication does not work with multihomed hosts Product: Portable OpenSSH Version: -current Platform: Other URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=108008882620573 OS/Version: All

https://bugzilla.mindrot.org/show_bug.cgi?id=928 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |djm at mindrot.org Blocks| |1481 --- Comment #4 from Damien Miller

Hi Samba team, Could someone point me to a documentation which describes which NTLM flag combination in type 1 & 2 create which type 3 response. As far as I read MS has the following client/DC configuration combinations. Send LM & NTLM responses Clients use LM and NTLM authentication, and never use NTLMv2 session security; DCs accept LM, NTLM, and NTLMv2 authentication.

I have compiled samba 3.0.6 with MIT 1.3.1 Kerberos and I can successfully use smbclient with Kerberos against a 2000/2003 Windows share. When I try the same with smbmount I get the warning: "Warning: kerberos support will only work for samba servers". I am wondering why smbmount doesn't work against 2000/2003 fileshares with Kerberos, although smbclient works fine and smbmount

I use Samba with Kerberos and noted that guest access doesn't work, when Kerberos is used. I created a bug report with fix for it. See https://bugzilla.samba.org/show_bug.cgi?id=2691 Regards Markus

I have a setup with a w2k3 AD and Samba 3.0.15pre2 as fileservers on Linux. I created two AD computer objects and used ktpass to create the Keberos keys. The keytab has the following entries host/linux.test.com@TEST.COM mapped to a computer account linux-host$ for general Kerberos services (ftp,ssh,..) cifs/linux.test.com@TEST.COM mapped to a computer account linux-cifs$ for Windows 2003/XP

Hi, Does Samba have a tool which can list the MS PAC content of a Kerberos cache ? Thank you Markus

Apologies if this is off topic. I'd like to decode the Kerberos PAC which is NDR decoded and I know Samba has all the code to decode a PAC. I looked at http://msdn.microsoft.com/en-us/library/cc237933.aspx as an example and read the opengroup document, but I am still lost. Is there a good book, link, course about NDR endocding/decoding ? Thank you Markus

Hi, If I understand the MS documentation right a Windows desktop uses DNS (or WINS) to determine a DC and then connects to the ldap udp port 389 to get further details about the DC. I do not want to run a full DC but only a "simple" Heimdal or MIT kdc for Browser Negotiate authentication. Does Samba include such a standalone ldap service which just returns the only supported

I try to rsync a lot of data over a long distance AU to UK and get a slow data rate because of the known slow scp performance over long distances. Would it be possible with rsync to run multiple scp process at the same time ? Thank you Markus

Darren, We have systems which are multihomed for virtualisation, but run only one sshd. You can connect to any IP-address and should be authenticated with gssapi/kerberos. So the client will ask for a principal host/virt-ip-X and the server has to have an entry for this in the keytab and has to select the right key by determining the hostname from the connection IP-address. There is no other way