search for: kerberoses

Samba is trying to be a member server in an AD in native mode, using winbind, nss, and kerberose. There are 3 kdc's (2 are Win2003, 1 is Win2000), samba server is RH-AS3 + Samba version 3.0.9 (from samba.org) + krb5 1.3.1-6 (from Fedora Core). I thought I had things working (join succeeded, could access shares, modify files), and then it stopped working. After clearing out the host account

Hi, We want to setup a Samba4. What is the best distribution to start from CentOS 6.4 or Ubuntu 12.04LTS? I would choose CentOS because it is an enterprise OS. But the kernel of CentOS is a version 2.x and Ubuntu server 12.04 kernel is 3.x. Are there any down sides on the older kernel version for Samba4 / smb / nfs. Thanks for your answer. Kr, Joeri VGP wins Pro Carton/ECMA Award of the Year

After 2 weeks of trying to configure samba as a member server in a native AD domain, with winbind+nss+kerberose following the Samba Collection and (Samba-3 By Exmaple) docuentation, with RedHat AS3, samba 3.0.9, krb5 1.3.1, where 2 KDC's are Windows 2003 and one is Windows 2000, and smb-signing has been turned off,... when a user tries to access a share, they are prompted for a password, and

...d to make it work reliably. Finally there are a couple of patches to the rijandel code that don't seem related? I am right in thinking that the basic change that is required is to conditionally remove auth_krb5_password (or just make it a stub that does nothing useful) if built against old MIT Kerberoses? Cheers, Simon.

Hi Everybody, We are working on samba 3.0.2a with sun kerberos SEAM and Netscape iDirectory Server support. We are able to integrate samba with ldap support. we tried integrater kerberos for authentication. We found a solution using pam via pam_krb5 module provided by the sun solaris 8. One important fact we found out using samba pam authentication, it directly calls for an account

Configuration: Samba 3.0.14a-1 (on debian 3.1) + winbind 3.0.14a-1 + krb5-user 1.3.6-2 I need help debugging pam_winbind.so in /etc/pam.d/ssh on debian. Samba is a member of an AD domain, authenticating access to shares via winbind+nsswitch.conf. Authentication to shares works great. Now I want winbind to authenticate ssh users as a pam module and it's failing. Below I show the output of

Hello Samba group, I have setup iptables on a Samba-3.0.8 member server (with one IP) in a native mode Active Directory domain. Searching Samba list archives directs me to read http;//www.netfilter.org documentation and doesn't attempt to describe ports needed for samba to function as a member server in native AD. I would appreciate any constructive feedback regarding whether these

We currently have a samba install on Solaris 8 providing a front-end to a Rational ClearCase system. Because of some recent changes, we are having Kerberose issues in validating files (too many open files). After some research, I found that the best way to resolve these is to re-compile samba as a 64bit application to increase the open file restrictions on a Solaris 32 bit app. The problem I am

Hi, I have a samba share on centos5 that uses AD authentication. I can do wbinfo -u and it returns the AD users.. but getent only returns the local centos users. Any pointers on where i have gone wrong? I am trying to chown to an AD user/group, but it is now working.. is the format chown domain\user:domain\group path/to/file ? Thanks..

I've been copying old passwd/shadow/group files from system to system for ages across different distributions/updates and would like to get them back in sync with each other so the system tools will work. Now they hang like: #userdel irose hangs forever, syslog says: Jul 12 11:19:32 newftp userdel[30335]: delete user `irose' Jul 12 11:19:32 newftp userdel[30335]: delete `irose'

https://bugzilla.mindrot.org/show_bug.cgi?id=2775 Bug ID: 2775 Summary: Improve kerberos credential forwarding support Product: Portable OpenSSH Version: 7.5p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Kerberos support Assignee:

I''d like to hear some suggestions about securely administering a system remotely. Here''s the application: a project is going to scatter some server machines around the US. The server machines will be running Linux, with the only network servers being a custom application. Ignoring the separate question of physical security, how can I remotely check the system''s