search for: kadmind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:09.kadmind Security Advisory The FreeBSD Project Topic: heimdal kadmind remote heap buffer overflow Category: contrib Module: crypto_heimdal Announced: 2004-05-05 Credits: Evgeny D...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:09.kadmind Security Advisory The FreeBSD Project Topic: heimdal kadmind remote heap buffer overflow Category: contrib Module: crypto_heimdal Announced: 2004-05-05 Credits: Evgeny D...

...ing to 127.0.0.1 at port 445 Connecting to 127.0.0.1 at port 139 Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED) dnl at storestone:~$ sudo netstat -tulpn | egrep "53|88|135|137|138|139|389|445|464|636" tcp 0 0 0.0.0.0:464 0.0.0.0:* LISTEN 2255/kadmind tcp 0 0 0.0.0.0:48336 0.0.0.0:* LISTEN 1536/rpc.statd tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 15607/samba tcp6 0 0 :::464 :::* LISTEN 2255/kadmind tcp6 0 0 :::33968 :::* LISTEN 1536/rpc.statd udp...

Hello all I have a problem using kadmind patch. # cd /usr/src/kerberos5/libexec/k5admind # make depend && make all install ... /usr/src/kerberos5/libexec/k5admind/../../../crypto/heimdal/lib/hdb/hdb.h:41: hdb_asn1.h: No such file or directory In file included from /usr/src/kerberos5/libexec/k5admind/../../../crypto/heimdal/ka...

...ILE:/var/log/krb5libs.log <FILE:/var/log/krb5libs.log> <FILE:/var/log/krb5libs.log <FILE:/var/log/krb5libs.log> > kdc = FILE:/var/log/krb5kdc.log <FILE:/var/log/krb5kdc.log> <FILE:/var/log/krb5kdc.log <FILE:/var/log/krb5kdc.log> > admin_server = FILE:/var/log/kadmind.log <FILE:/var/log/kadmind.log> <FILE:/var/log/kadmind.log <FILE:/var/log/kadmind.log> > [libdefaults] ticket_lifetime = 24000 default_realm = PREFIX1.PREFIX2.COM dns_lookup_realm = false dns_lookup_kdc = false [realms] PREFIX1.PREFIX2.COM = { kdc = KDC01.PREFIX1.PREFIX2...

...# # kerberos. Do not run the admin daemons on slave servers # kerberos5_server_enable="NO" # Run a kerberos 5 master server (or NO). kerberos5_server="/usr/libexec/kdc" # path to kerberos 5 KDC kerberos5_server_flags="" # Additional flags to the kerberos 5 server kadmind5_server_enable="NO" # Run kadmind (or NO) kadmind5_server="/usr/libexec/kadmind" # path to kerberos 5 admin daemon kpasswdd_server_enable="NO" # Run kpasswdd (or NO) kpasswdd_server="/usr/libexec/kpasswdd" # path to kerberos 5 passwd daemon Which options...

...ot identifying itself. adam at sogo:~$ sudo service krb5-kdc start * Starting Kerberos KDC krb5kdc krb5kdc: Configuration file does not specify default realm, attempting to retrieve default realm adam at sogo:~$ sudo service krb5-admin-server start * Starting Kerberos administrative servers kadmind kadmind: Configuration file does not specify default realm while initializing, aborting I'm using Ubuntu 14.04 LTS I provisioned Samba as follows: samba-tool domain provision --domain=SMBDOMAIN \ --dns-backend=SAMBA_INTERNAL --server-role=dc \ --function-level=2008_R2 --use-xattr=yes \ --us...

...lists.samba.org/mailman/options/samba > [root at centos7pdc ~]# cat /etc/resolv.conf search testing.domain.com.au nameserver 192.168.1.10 [root at centos7member ~]# cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] dns_lookup_realm = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false # default_realm = EXAMPLE.COM default_ccache_name = KEYRING:persistent:%{uid} [realms] # EXAMPLE.COM = { # kdc = kerberos.example.com # admin_server = kerberos.example.com...

...I'm wondering if anyone can provide some insight into the "logging" lines in krb5.conf.? By default, they don't exist. I've seen mention of adding these lines: [logging] ?default = FILE:/var/log/krb5libs.log ?kdc = FILE:/var/log/krb5kdc.log ?admin_server = FILE:/var/log/kadmind.log As far as I can tell, the "admin_server" lines don't apply to Samba because the DC doesn't seem to be running anything on the admin port (I think). Should these lines be on all the Linux AD clients, or does it only make sense to put these on the server? Am I modifying /e...

...bin.com/gAk6nX0x $ cat /etc/resolv.conf search studelec-sa.com nameserver 192.168.0.250 $ cat /etc/krb5.conf (ALTHOUGH THE WIKI DOES STATE ANY CONFIGURATION IS REQUIRED IN THAT FILE) [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] dns_lookup_realm = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false # default_realm = EXAMPLE.COM # Utile ou pas ? default_realm = STUDELEC-SA.COM dns_lookup_kdc = true default_ccache_name = KEYRING:persistent:%{uid} [realms] # EX...

...= /etc/samba/dhcp.conf The contents of /etc/krb5.conf [libdefaults] default_realm = ALFA-MOVING.SE [realms] ALFA-MOVING.SE = { kdc = 192.168.10.10 kpasswd_server = 192.168.10.10 } [logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log [appdefaults] pam = { ticket_lifetime = 7d renew_lifetime = 7d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false } The contents of /etc/nsswitch.conf passwd: compat winb...

...skew = 300 default_realm = KK.LOCAL [realms] KK.LOCAL = { kdc = ADMCONTROLLER default_domain = KK.LOCAL kpasswd_server = ADMCONTROLLER } [domain_realm] .KK.LOCAL = KK.LOCAL [logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false } ---eof--- /etc/samba/smbusers: root = administrator ---eof--- /etc/samba/smbpa...

...NSLEGAL.COM # admin_server = APPS.ELLISONSLEGAL.COM # kpasswd_server = APPS.ELLISONSLEGAL.COM #} #OTHER.REALM = { # kdc = OTHER.COMPUTER #} [domain_realm] # .my.domain = MY.REALM .ellisonslegal.com = ELLISONSLEGAL.COM [logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false } Dimitri would you be able to repost that link for the HOW-TO please? I tried it but it seems like...

...= /var/log/samba/%m.log max log size = 50 security = ads realm = ch.domain.intern password server = wsvch01 wsvch02 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 my krb5.conf: [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm = CH.DOMAIN.INTERN # default_tgs_enctypes = des-cbc-crc des-cbc-md5 # default_tkt_enctypes = des-cbc-crc des-cbc-md5 forwardable = true proxiable = true dns_lookup_realm = false dns_lookup_kdc = false [realms] CH.DOMAIN.INTERN = { kdc = wsvc...

...vice.c:close_cnum(887) saisie-srag (10.143.31.100) closed connection to service tmp A w2k client can't log on my samba server. Here's my krb5.conf : [logging] default = FILE:/var/log/kerberos/krb5libs.log kdc = FILE:/var/log/kerberos/krb5kdc.log admin_server = FILE:/var/log/kerberos/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm = DRAF.FC default_tgs_enctypes = des-cbc-crc des-cbc-md5 default_tkt_enctypes = des-cbc-crc des-cbc-md5 permitted_enctypes = des-cbc-crc des-cbc-md5 #default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc #default_tkt_enctypes = des3-hmac-sh...

.../etc/resolv.conf >> search testing.domain.com.au >> nameserver 192.168.1.10 >> >> [root at centos7member ~]# cat /etc/krb5.conf >> [logging] >> default = FILE:/var/log/krb5libs.log >> kdc = FILE:/var/log/krb5kdc.log >> admin_server = FILE:/var/log/kadmind.log >> >> [libdefaults] >> dns_lookup_realm = false >> ticket_lifetime = 24h >> renew_lifetime = 7d >> forwardable = true >> rdns = false >> # default_realm = EXAMPLE.COM >> default_ccache_name = KEYRING:persistent:%{uid} >> >>...

...]        path = /usr/local/samba/var/locks/sysvol/domain.local/scripts        read only = No [sysvol]        path = /usr/local/samba/var/locks/sysvol        read only = No Content krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] dns_lookup_realm = false dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false default_realm = DOMAIN.LOCAL default_ccache_name = KEYRING:persistent:%{uid} [realms]# EXAMPLE.COM = {#  kdc = kerberos.example.com#  admin_server = kerberos.ex...

Hi, I'm working with samba 3.0.13-1, krb5...1.2.7-10 and following parameters settings: /etc/krb5.conf: [logging] default = FILE:/var/log/krb5libs.log <FILE:/var/log/krb5libs.log> kdc = FILE:/var/log/krb5kdc.log <FILE:/var/log/krb5kdc.log> admin_server = FILE:/var/log/kadmind.log <FILE:/var/log/kadmind.log> [libdefaults] ticket_lifetime = 24000 default_realm = SINTER.GKN.COM dns_lookup_realm = false dns_lookup_kdc = false [realms] SINTER.GKN.COM = { kdc = MILAD01.SINTER.GKN.COM } [domain_realm] .sinter.gkn.com = SINTER.GKN.COM sinter.gkn.com = SINTER...

Hi, I'm working with samba 3.0.13-1, krb5...1.2.7-10 and following parameters settings: /etc/krb5.conf: [logging] default = FILE:/var/log/krb5libs.log <FILE:/var/log/krb5libs.log> kdc = FILE:/var/log/krb5kdc.log <FILE:/var/log/krb5kdc.log> admin_server = FILE:/var/log/kadmind.log <FILE:/var/log/kadmind.log> [libdefaults] ticket_lifetime = 24000 default_realm = REALM.COM dns_lookup_realm = false dns_lookup_kdc = false [realms] REALM.COM = { kdc = KDC.REALM.COM } [domain_realm] .realm.com = REALM.COM realm.com = REALM.COM [kdc] profile = /var/kerbero...

...default_realm = SOME.DOMAIN clockskew = 300 [realms] ENT.CML.LIB.OH.US = { kdc = adserver.some.domain } [domain_realm] .kerberos.server = SOME.DOMAIN [logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug =...