search for: kerberosv

Hi, Would it be possible to make a change in the configure file to search for gssapi.h in <kerberosV/gssapi.h> if it fails to find it in <gssapi/gssapi.h>? That would allow to compile dovecot with gssapi easily on OpenBSD without patching it. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 186 bytes D...

Hi, I've just set up OpenSSH to authenticate through Kerberos tickets. I spent a whole while figuring out I couldn't use SSH2 before stumbling across the information somewhere. First of all: is it possible this could be made very noticable in the sshd_config file? Secondly, is there any chance that SSH2 /will/ become supported in the future? There are already patches at

...license review. As a result, all non-ssh1.x code is under a BSD-style license with no advertising requirement. Please refer to README in the source distribution for the exact license terms. * Rhosts authentication has been removed in ssh(1) and sshd(8). * Changes in Kerberos support: - KerberosV password support now uses a file cache instead of a memory cache. - KerberosIV and AFS support has been removed. - KerberosV support has been removed from SSH protocol 1. - KerberosV password authentication support remains for SSH protocols 1 and 2. - This release co...

...license review. As a result, all non-ssh1.x code is under a BSD-style license with no advertising requirement. Please refer to README in the source distribution for the exact license terms. * Rhosts authentication has been removed in ssh(1) and sshd(8). * Changes in Kerberos support: - KerberosV password support now uses a file cache instead of a memory cache. - KerberosIV and AFS support has been removed. - KerberosV support has been removed from SSH protocol 1. - KerberosV password authentication support remains for SSH protocols 1 and 2. - This release co...

...license review. As a result, all non-ssh1.x code is under a BSD-style license with no advertising requirement. Please refer to README in the source distribution for the exact license terms. * Rhosts authentication has been removed in ssh(1) and sshd(8). * Changes in Kerberos support: - KerberosV password support now uses a file cache instead of a memory cache. - KerberosIV and AFS support has been removed. - KerberosV support has been removed from SSH protocol 1. - KerberosV password authentication support remains for SSH protocols 1 and 2. - This release co...

...license review. As a result, all non-ssh1.x code is under a BSD-style license with no advertising requirement. Please refer to README in the source distribution for the exact license terms. * Rhosts authentication has been removed in ssh(1) and sshd(8). * Changes in Kerberos support: - KerberosV password support now uses a file cache instead of a memory cache. - KerberosIV and AFS support has been removed. - KerberosV support has been removed from SSH protocol 1. - KerberosV password authentication support remains for SSH protocols 1 and 2. - This release co...

.../usr/libexec - daemons such as: kadmind, kdc, kpasswdd /usr/sbin - admin programs such as: kadmin, kstash, ktutil /usr/bin - user programs such as: kauth, kinit, krb5-config, kdestroy, klist /usr/lib - libraries /etc/kerberosV - configuration file: krb5.conf /usr/include/kerberosV - include files Below is the configure command i'm using: # ./configure --prefix=/usr/local/samba \ --localstatedir="/var" \ --with-configdir="/etc/samba" \ --with-lockdir=...

.../.. -I../../src/lib - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" ".deps...

...includes sftp client and server support. We would like to thank the OpenSSH community for their continued support and encouragement. Important Changes: ================== A security hole that may allow an attacker to authenticate if -- and only if -- the administrator has enabled KerberosV. By default, OpenSSH KerberosV support only becomes active after KerberosV has been properly configured. An excessive memory clearing bug (which we believe to be unexploitable) also exists, but since this may cause daemon crashes, we are providing a fix as w...

...checking for ldap.h... no checking lber.h usability... no checking lber.h presence... no checking for lber.h... no configure: error: ldap.h is needed for LDAP support These are my configure options: ./configure \ --with-ldap \ --with-ads \ --includedir=/usr/src/openldap-2.2.23/ \ --with-krb5=/etc/kerberosV The missing file *is* in the openldap-2.2.23/include folder. I have tried copying the ldap.h file to the samba/source/include folder but that doesn't help. I can't seem to get Samba to see this file. Sorry if this an often asked question. I searched Google for an hour and found oth...

...I../../src/lib - - -I../../src/lib-sql -I../../src/lib-settings -I../../src/lib-ntlm - - -DAUTH_MODULE_DIR=\""/usr/local/lib/dovecot/auth"\" - - -DPKG_LIBEXECDIR=\""/usr/local/libexec/dovecot"\" -I@includedir@ @INCLUDE_des@ -I/usr/local/include -I/usr/include/kerberosV - - -std=gnu99 -O2 -march=athlon -pipe -Wall -W -Wmissing-prototypes - - -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 - - -Wbad-function-cast -MT mycrypt.o -MD -MP -MF ".deps/mycrypt.Tpo" - - -c -o mycrypt.o mycrypt.c; \ then mv -f ".deps/mycrypt.Tpo" &qu...

.../usr/libexec - daemons such as: kadmind, kdc, kpasswdd /usr/sbin - admin programs such as: kadmin, kstash, ktutil /usr/bin - user programs such as: kauth, kinit, krb5-config, kdestroy, klist /usr/lib - libraries /etc/kerberosV - configuration file: krb5.conf /usr/include/kerberosV - include files Here's the configure command i'm using: # ./configure --prefix=/usr/local/samba \ --localstatedir="/var" \ --with-configdir="/etc/samba" \ --with-lockdi...

Hi, When following the install instructions in README, I get the following build error: cc -O2 -DKRB5 -I/usr/include/kerberosV -DGSSAPI -I/usr/src/usr.bin/ssh/ssh/.. -c /usr/src/usr.bin/ssh/ssh/../sshconnect2.c /usr/src/usr.bin/ssh/ssh/../sshconnect2.c: In function `input_userauth_pk_ok': /usr/src/usr.bin/ssh/ssh/../sshconnect2.c:460: dereferencing pointer to incomplete type /usr/src/usr.bin/ssh/ssh/../sshconnect2.c:...

...PID file: /usr/local/etc Privilege separation chroot path: /var/empty sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin Manpage format: man PAM support: no KerberosIV support: no KerberosV support: no Smartcard support: no AFS support: no S/KEY support: no TCP Wrappers support: yes MD5 password support: no IP address in $DISPLAY hack: no Use IPv4 by default hack: no Tr...

...more from the archives, a private email, and some general research, I see that KerbV support has been dropped in favor of GSSAPI. Which is fine, and wonderful, I support GSSAPI. But, erm, the announcement says, "This release contains some GSSAPI user authentication support to replace legacy KerberosV authentication support. At present this code is still considered experimental and SHOULD NOT BE USED." Confidence inspiring! =) At USC, we are currently using (patched) 3.6.1p2 which has TGT passing support in kerb1, which is kinda nice - but doesn't seem to work right with kerberos pass...

...ssue I encounter with ntlm_auth process. You can get a complete overview of the discussion at the url specified below but you can also get a summary later in this mail. http://www.mail-archive.com/squid-users@squid-cache.org/msg60371.html I get a complete platform based on OpenLDAP 2.3.43, MIT-KerberosV 1.6, Samba 3.0.32, Cyrus-SASL 2.1.22, OPenSSL 0.9.8i and SQUID 2.7.4 proxy running on SOlaris 8. All these servers are member of our Windows 2003 Domain Controllers. Process /usr/local/sbin/winbindd is the one activated, smbd and nmbd are not because I just need to authenticate ntlm requests com...

...PID file: /var/run Privilege separation chroot path: /var/empty sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/opt/bin Manpage format: man PAM support: no OSF SIA support: no KerberosV support: no SELinux support: no Smartcard support: S/KEY support: no MD5 password support: no libedit support: no Solaris process contract support: no Solaris project support: no IP address...

...PID file: /usr/local/etc Privilege separation chroot path: /var/empty sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin Manpage format: man PAM support: no KerberosIV support: no KerberosV support: no Smartcard support: no AFS support: no S/KEY support: no TCP Wrappers support: yes MD5 password support: no IP address in $DISPLAY hack: no Use IPv4 by default hack: no Tr...

...ivilege separation chroot path: /var/empty sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin Manpage format: man PAM support: yes OSF SIA support: no KerberosV support: no SELinux support: no Smartcard support: no S/KEY support: no TCP Wrappers support: yes MD5 password support: yes libedit support: no...

Can I get someone runing IRIX to tell me if this http://bugzilla.mindrot.org/show_bug.cgi?id=151 http://bugzilla.mindrot.org/show_bug.cgi?id=280 or http://bugzilla.mindrot.org/show_bug.cgi?id=281 are still valid. And if PrivSep works on it? If not a sshd -d -d -d of the server side? - Ben