search for: kclient

...rg/dns/dynupd/secure-ddns-howto.html In a nutshell (I used TSIG keys for simplicity, the procedure is analogous with SIG(0) asymettric keys) this is how you do it. On the client computer that will be allowed to update the database do: % dnssec-keygen -a HMAC-MD5 -b 512 -n HOST client.example.com Kclient.example.com.+157+13404 This creates the shared key, which will live in a file called Kclient.example.com.+157+13404.key and .private % cat Kclient.example.com.+157+13404.private Private-key-format: v1.2 Algorithm: 157 (HMAC_MD5) Key: I9FvX+F3fcSVLkzlPSVR9THww+oN6o0mj/JgKTu9auzMx0IM7lmBd9RIfk2cbH...

...Solaris 11 and Linux clients as Samba domain members with a Win 2008 AD domain controller/directory server. I am also trying to configure Kerberos for unix level authentication. I am unclear if Samba can create a keytab file or only use a previously created on. With solaris, there is "kclient" command that creates the machine account on the server and then creates a krb5.keytab on the client machine. As per earlier e-mails I found that with Solaris, I found that the Kerberos client and Samba (4.4.8) expected different locations for the krb5.keytab file. Both the samba "...

...Windows 2008 domain (one Win 2008 DC, one Win 2012 R2 DC.) I am trying to join a Solaris 11 machine to the domain for both Samba and other services. For "unix" logins and ssh, Solaris 11 is configured to use LDAP for user and group lookup and kerberos for authentication. The "kclient -T ms_ad" command joins the Solaris machine to the AD domain. It even creates the /etc/krb5/krb5.keytab file with several service principal entries. (I pasted this at the bottom of this e-mail.) This allows me to ssh in to the machine using my kerberos password. When I run "n...

x86 snv 108 I have a pool with around 5300 file systems called home. I can do: zfs set sharenfs=on home however zfs set sharenfs="sec=krb5,rw" home complains: cannot set property for ''home'': ''sharenfs'' cannot be set to invalid options I feel I must be overlooking something elementary. Thanks, Alastair -------------- next part --------------

...Win 2012 R2 DC.) > > > I am trying to join a Solaris 11 machine to the domain for both Samba > and other services. For "unix" logins and ssh, Solaris 11 is > configured to use LDAP for user and group lookup and kerberos for > authentication. > > > The "kclient -T ms_ad" command joins the Solaris machine to the AD > domain. It even creates the /etc/krb5/krb5.keytab file with several > service principal entries. (I pasted this at the bottom of this > e-mail.) This allows me to ssh in to the machine using my kerberos > password....