search for: kaserver

I'm trying to build the --with-fake-kaserver option in 3.0.4 on RHEL 3.0. I'm using the srpms provided on the samba.org site (http://us3.samba.org/samba/ftp/bin-pkgs/RedHat/SRPMS/samba-3.0.4 -1.src.rpm). My OpenAFS version is 1.2.11, rpms (openafs-1.2.11 and openafs-devel-1.2.11) provided from openafs.org. It compiles fine if I...

...-- ssh_config.5 21 Jun 2002 00:59:06 -0000 1.1 +++ ssh_config.5 9 Aug 2002 21:43:30 -0000 @@ -355,8 +355,8 @@ or .Dq no . .It Cm KerberosTgtPassing -Specifies whether a Kerberos TGT will be forwarded to the server. -This will only work if the Kerberos server is actually an AFS kaserver. +Specifies whether Kerberos V4/5 TGT's will be forwarded to the server. +This will only work with Kerberos V4 if the KDC is an AFS kaserver. The argument to this keyword must be .Dq yes or Index: sshd_config =================================================================== RCS file: /cvs/...

Hi, I've been trying to run samba-3.02a with the fakekaserver option and realised that it needs to have the afs keyfile in secrets.tdb. The function doing this resides in surces/passdb/secrets.c and is called secrets_store_afs_keyfile . How can I use it (and generaly speaking which program do I need to use to manipulate the tdb files) Jan Chorowski

...a patch from dugsong that called ka_UserAuthenticateGeneral at this point... but 3.0.2 does not call any ka_ routines. I am suspecting that ka_UserAuthenticateGeneral is what talks over 7004 and that if I could make an equivalent patch to 3.0.2 that would use it, I'd be able to talk to our kaserver. It's been pointed out that if we created a principal rcmd.grimble I might be able to use what I've got, but I don't want to do anything that requires an admin. Which is the same answer to the suggestions that we're running an out-of-date kaserver. I am not the cell admin. I...

Hi! I've tried to compile samba 3.0.23rc2 --with-vfs-afsacl --fake-kaserver, but I've got errors. The first error and its solution is: I've to add -lssl to the LIBS line in the top level Makefile. Then I've got this: Compiling modules/vfs_afsacl.c with -fPIC modules/vfs_afsacl.c: In function `new_afs_ace': modules/vfs_afsacl.c:145: warning: passing arg...

...s to get the AFS tickets and tokens? Any patches on Samba required? Or is there any "standard" or better way to work with this problem? PAM? I've been looking for some detail descriptions of the following options. Are these options relevant to my situation? --with-afs --with-fake-kaserver --with-krb5=base-directory Any help appreicated. Warren

...und the following details in the config.log configure:34026: result: no configure:34038: checking whether to use smbwrapper configure:34085: result: no configure:34093: checking whether to use AFS clear-text auth configure:34111: result: no configure:34119: checking whether to use AFS fake-kaserver configure:34137: result: no configure:34339: checking whether to use AFS fake-kaserver configure:34357: result: no configure:34376: checking whether to use DFS clear-text auth configure:34398: result: no configure:34407: checking for LDAP support configure:34421: result: no configure:35119:...

Hello all, I'm trying to compile samba 3.0.20 on Freebsd 4.10 with ldap support. The ./configure script fails because it can't find ldap.h: <snip> checking whether to use AFS fake-kaserver... no checking whether to use DFS clear-text auth... no checking for LDAP support... auto checking ldap.h usability... no checking ldap.h presence... no checking for ldap.h... no checking lber.h usability... no checking lber.h presence... no checking for lber.h... no configure: WARNING: ldap.h is n...

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/cell/usr/username (p...

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/cell/usr/username (p...

...s in struct stat... yes checking for st_blksize in struct stat... yes checking for broken RedHat 7.2 system header files... no checking for broken nisplus include files... yes checking whether to use smbwrapper... no checking whether to use AFS clear-text auth... no checking whether to use AFS fake-kaserver... no checking whether to use DFS clear-text auth... no checking for LDAP support... yes checking ldap.h usability... no checking ldap.h presence... no checking for ldap.h... no checking lber.h usability... no checking lber.h presence... no checking for lber.h... no configure: error: ldap.h is need...

...re! PasswordAuthentication yes PermitEmptyPasswords no # Uncomment to disable s/key passwords #SkeyAuthentication no # To change Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #AFSTokenPassing no #KerberosTicketCleanup no # Kerberos TGT Passing does only work with the AFS kaserver #KerberosTgtPassing yes CheckMail no UseLogin no

...swordAuthentication no PermitEmptyPasswords no # Change to no to disable PAM authentication #ChallengeResponseAuthentication yes # Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes #AFSTokenPassing no # Kerberos TGT Passing only works with the AFS kaserver #KerberosTgtPassing no #X11Forwarding yes #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes #KeepAlive yes #UseLogin no #UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression yes #MaxStartups 10 # no default banner path #Banner /some/path #VerifyReverseMapping...

...enabling this may bypass the setting of ''PasswordAuthentication'' #PAMAuthenticationViaKbdInt yes # To change Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #AFSTokenPassing no #KerberosTicketCleanup no # Kerberos TGT Passing does only work with the AFS kaserver #KerberosTgtPassing yes X11Forwarding yes X11DisplayOffset 256 PrintMotd no #PrintLastLog no KeepAlive yes #UseLogin no #MaxStartups 10:30:60 #Banner /etc/issue.net #ReverseMappingCheck yes Subsystem sftp /opt/talisen/ssh/rsftp-server --------- end of file --------- Anyone know wh...

While building Samba 3 for SuSE linux 9.0 I have a problem with the AFS component (it builds fine if I omit the --with-afs and --with-fake-kaserver options). During configure I did get a warning: checking whether to use AFS clear-text auth... yes checking whether to use AFS fake-kaserver... yes checking for /usr/include/afs... yes checking afs.h usability... no checking afs.h presence... no checking for afs.h... no checking afs/afs.h usabili...

...thentication yes PermitEmptyPasswords no # Uncomment to disable s/key passwords #ChallengeResponseAuthentication no # To change Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #AFSTokenPassing no #KerberosTicketCleanup no # Kerberos TGT Passing does only work with the AFS kaserver #KerberosTgtPassing yes #CheckMail yes #UseLogin no #MaxStartups 10:30:60 #Banner /etc/issue.net #ReverseMappingCheck yes Subsystem sftp /usr/libexec/openssh/sftp-server Carl

...get it from a 3rd party repo such as ATrpms/DAG or install from http://openafs.org/release/1.4.12/index-rhel5.html # cd /tmp/ # wget http://samba.org/samba/ftp/stable/samba-3.4.8.tar.gz # tar -zxvf samba-3.4.8.tar.gz # cd samba-3.4.8/packaging/RHEL Edit samba.spec (add --with-afs and --with-fake-kaserver) and then execute # sh makerpms.sh But I can't compile with afs support on CentOS box :( I have the following error ... ... ... checking whether to use AFS clear-text auth... yes checking whether to use AFS fake-kaserver... yes checking for DES_pcbc_encrypt in -lcrypto... yes checking for /u...

http://bugzilla.mindrot.org/show_bug.cgi?id=774 Summary: banner is displaying twice (/etc/issue) Product: Portable OpenSSH Version: 3.7.1p1 Platform: All OS/Version: Solaris Status: NEW Severity: security Priority: P2 Component: sshd AssignedTo: openssh-bugs at mindrot.org ReportedBy:

...with a symlink. o Volker Lendecke <vl at samba.org> * BUG 5198: Fix parsing of the gecos field. * BUG 7202: Fix access by multi-threaded applications. * BUG 7212: Fix returning of group members with 'getent group'. * BUG 7216: Fix the build of net_afs.c with --fake-kaserver=yes. * BUG 7229: Fix a NULL pointer dereference in smbd. * BUG 7232: Fix race conditions in CTDB persistent transactions. * BUG 7254: Fix an uninitialized variable read in smbd. * BUG 7278: Fix a memleak in Winbind. o Roel van Meer <rolek at alt001.com> * BUG 6814: Fix...

...with a symlink. o Volker Lendecke <vl at samba.org> * BUG 5198: Fix parsing of the gecos field. * BUG 7202: Fix access by multi-threaded applications. * BUG 7212: Fix returning of group members with 'getent group'. * BUG 7216: Fix the build of net_afs.c with --fake-kaserver=yes. * BUG 7229: Fix a NULL pointer dereference in smbd. * BUG 7232: Fix race conditions in CTDB persistent transactions. * BUG 7254: Fix an uninitialized variable read in smbd. * BUG 7278: Fix a memleak in Winbind. o Roel van Meer <rolek at alt001.com> * BUG 6814: Fix...