search for: init_sec_context

Hi, I used Samba 4.0.5 in Wheezy. Here is that I have done: --------------------------------------------------------------- samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI \ --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123' echo "nameserver 192.168.0.21" > /etc/resolv.conf samba ln -s /usr/local/samba/lib/libnss_winbind.so

....text+0x1aa): undefined reference to `krb5_ser_auth_context_init' /usr/src/krb5-1.2.5/src/lib/libgssapi_krb5.a(import_name.o): In function `krb5_gss_import_name': import_name.o(.text+0x162): undefined reference to `krb5_sname_to_principal' /usr/src/krb5-1.2.5/src/lib/libgssapi_krb5.a(init_sec_context.o): In function `make_ap_req_v1': init_sec_context.o(.text+0x25b): undefined reference to `krb5_fwd_tgt_creds' /usr/src/krb5-1.2.5/src/lib/libgssapi_krb5.a(init_sec_context.o): In function `krb5_gss_init_sec_context': init_sec_context.o(.text+0x1282): undefined reference to `krb5_fr...

...b5_ser_rcache_init' gssapi_krb5.o(.text+0x19a): undefined reference to `krb5_ser_auth_context_init' /usr/lib/libgssapi_krb5.a(import_name.o): In function `krb5_gss_import_name': import_name.o(.text+0x162): undefined reference to `krb5_sname_to_principal' /usr/lib/libgssapi_krb5.a(init_sec_context.o): In function `make_ap_req_v1': init_sec_context.o(.text+0x240): undefined reference to `krb5_fwd_tgt_creds' /usr/lib/libgssapi_krb5.a(init_sec_context.o): In function `krb5_gss_init_sec_context': init_sec_context.o(.text+0x1252): undefined reference to `krb5_free_cksumtypes'...

...ache_init' gssapi_krb5.o(.text+0x1aa): undefined reference to `krb5_ser_auth_context_init' /usr/local/lib/libgssapi_krb5.a(import_name.o): In function `krb5_gss_import_name': import_name.o(.text+0x162): undefined reference to `krb5_sname_to_principal' /usr/local/lib/libgssapi_krb5.a(init_sec_context.o): In function `make_ap_req_v1': init_sec_context.o(.text+0x23b): undefined reference to `krb5_fwd_tgt_creds' /usr/local/lib/libgssapi_krb5.a(init_sec_context.o): In function `krb5_gss_init_sec_context': init_sec_context.o(.text+0x147f): undefined reference to `krb5_free_cksumtypes'...

...ms to be a couple of kerberos related functions missing (?) Undefined first referenced symbol in file krb5_sname_to_principal /usr/krb5-1.2.6/lib/libgssapi_krb5.a(acquire_cred.o) krb5_free_cksumtypes /usr/krb5-1.2.6/lib/libgssapi_krb5.a(init_sec_context.o) krb5_mk_error /usr/krb5-1.2.6/lib/libgssapi_krb5.a(accept_sec_context.o) krb5_fwd_tgt_creds /usr/krb5-1.2.6/lib/libgssapi_krb5.a(init_sec_context.o) krb5_rd_cred /usr/krb5-1.2.6/lib/libgssapi_krb5.a(accept_sec_context.o) krb5_ser_auth_context_init /usr/krb5...

Hey, I am just wondering how you enforce security (such as permissions) on local workstations while running Samba 2.2.x as a PDC with 2K/XP workstations? As some of us don't have or want 2000 Server to enforce things like policies etc... how do you all do it. E.g. If we want 'Administrator' to have access to all start menu etc... yet standard users to have only programs, no settings

Hi, I'm trying to get Samba-2.1.0-prealpha compiled but I always get stuck at the following error message: root@pc2:/usr/src/samba-2.1.0-prealpha/source > make Using LIBS = -lcrypt Linking bin/rpcclient rpcclient/rpcclient.o: In function `process': rpcclient/rpcclient.o(.text+0x4c3): undefined reference to `wait_keyboard' collect2: ld returned 1 exit status make: ***

...t security release and CentOS 8 Stream is EOL. o Ralph Boehme <slow at samba.org> * BUG 15676: Fix clock skew error message and memory cache clock skew recovery. o Stefan Metzmacher <metze at samba.org> * BUG 15603: Heimdal ignores _gsskrb5_decapsulate errors in init_sec_context/repl_mutual. * BUG 15621: s4:ldap_server: does not support tls channel bindings for sasl binds. o Xavi Hernandez <xhernandez at redhat.com> * BUG 15678: CTDB socket output queues may suffer unbounded delays under some special conditions. ###################################...

...t security release and CentOS 8 Stream is EOL. o Ralph Boehme <slow at samba.org> * BUG 15676: Fix clock skew error message and memory cache clock skew recovery. o Stefan Metzmacher <metze at samba.org> * BUG 15603: Heimdal ignores _gsskrb5_decapsulate errors in init_sec_context/repl_mutual. * BUG 15621: s4:ldap_server: does not support tls channel bindings for sasl binds. o Xavi Hernandez <xhernandez at redhat.com> * BUG 15678: CTDB socket output queues may suffer unbounded delays under some special conditions. ###################################...

...roller to send the DNS update to. Usage: nsupdate-gss.pl HOST DOMAIN IP TTL [NS] Here is the example output when it fails: ---- [root@rhun root]# nsupdate-gss rhun REALM.DOM 1.2.3.4 3600 Found 93 nameserver(s) Using DNS server name somedc.REALM.DOM creds acquired init done calling RR new init_sec_context step 2: Unspecified GSS failure. Minor code may provide more information Message stream modified Failed to negotiate a TKEY ---- And this is shown when it works (using the extra argument): ---- [root@rhun redhat]# nsupdate-gss rhun REALM.DOM 1.2.3.4 3600 localdc.REALM.DOM Found 1 nameserver...

...vent_context_find? is deprecated (declared at ./lib/events/events.h:6) Compiling auth/credentials/credentials_ntlm.c Compiling auth/credentials/credentials_krb5.c Compiling auth/credentials/../kerberos/kerberos_util.c Partially linking bin/mergedobj/credentials.o Compiling heimdal/lib/gssapi/spnego/init_sec_context.c Compiling heimdal/lib/gssapi/spnego/external.c heimdal/lib/gssapi/spnego/external.c:46: warning: cast discards qualifiers from pointer target type heimdal/lib/gssapi/spnego/external.c:97: warning: cast discards qualifiers from pointer target type Compiling heimdal/lib/gssapi/spnego/compat.c heimd...

...(&ms, &(*ctx)->creds); + if ((*ctx)->client != GSS_C_NO_NAME) + gss_release_name(&ms, &(*ctx)->client); + if ((*ctx)->client_creds != GSS_C_NO_CREDENTIAL) + gss_release_cred(&ms, &(*ctx)->client_creds); + + xfree(*ctx); + *ctx = NULL; +} + +/* + * Wrapper to init_sec_context + * Requires that the context contains: + * oid + * server name (from ssh_gssapi_import_name) + */ +OM_uint32 +ssh_gssapi_init_ctx(Gssctxt *ctx, int deleg_creds, gss_buffer_desc *recv_tok, + gss_buffer_desc* send_tok, OM_uint32 *flags) +{ + int deleg_flag = 0; + + if (deleg_creds) { + deleg_fla...