search for: krb

...hope someone will be able to help. The KTH version of Kerberos 4 was the only one I was able to find. In case you don't want to look at all the stuff below, the situation is briefly that I am trying to compile openssh with kerberos 4 support, which it apparently has. However, it can't find krb.h, which is right there. And it compiles OK, but gives "KerberosTgtPassing yes" as a bad option, which can't be good, and I don't get properly authenticated when I log in, which is obviously the whole point. If this ssh cannot be compiled with this krb4 version, can you suggest a...

...ets for zonepaths. zoneadm(1M) has done this for a long time (since zones started working on ZFS?) and worked fine until recently. Now I''m seeing zoneadm(1M) fail to create ZFS datasets for new zones while running sparc bits from the daily.1110 ONNV nightly build: ----8<---- root krb-v210-4 [20:05:57 0]# zoneadm list -cv ID NAME STATUS PATH BRAND IP 0 global running / native shared - godel installed /export/godel native shared - turing...

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But when I see the docs that I need to have krbdc or...

...we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed <snip> checking for krb5-config... no checking for library containing res_search... no checking for library containing __res_search... -lresolv checking for library containing crypt... -lcrypt checking for krb5_init_context in -lkrb5... no checking for krb5int_getspecific in -lkrb5support... no checking for library...

Dear all, I hope you could assist me in finding a problem with samba and krb connects when packet signing is activated in a domain. I have a samba server as a AD 2k3 domain member and the connects are working well, but when I try to use krb auth to connect to another Windows server in the network I get an error. Thanks a lot --- smbclient -d5 -U micha -k -L //gunter/sof...

Hi, I'm trying to build samba 3.4.2 on Solaris 10 using SunStudio 12 but I've hit a snag. The configure line used was: CFLAGS="-xcode=pic32 -KPIC -m64 -I/ec/sw/samba/openldap/current/include -Iec/sw/samba/krb/current/include" \ CPPFLAGS="-xcode=pic32 -KPIC -m64 -I/ec/sw/samba/openldap/current/include -I/ec/sw/samba/krb/current/include" \ LDFLAGS="-L/ec/sw/samba/openldap/current/lib -L/ec/sw/samba/krb/current/lib -R/ec/sw/samba/openldap/current/lib -R/ec/sw/samba/krb/current/lib"...

I am trying to build openssh-3.2.3p1 on solaris8 with support for afs token passing. I have the KTH-kerberos 4.1.1.1 libraries installed. The configure script generates the following warnings checking krb.h usability... no checking krb.h presence... yes configure: WARNING: krb.h: present but cannot be compiled configure: WARNING: krb.h: check for missing prerequisite headers? configure: WARNING: krb.h: proceeding with the preprocessor's result checking for krb.h... yes The build fails at this p...

Hello All, I am using Kerberos-V in my machine (HP-UX version 11.11) and i successfully installed it. When i run the setup service # /opt/krb5/sbin/krb5setup options entered: ---------------- 1) Configure as a Primary Security Server 2) Default Security mechanism DES-MD5 3) Do you want to stash the principal database key on your local disk (y/n)? [y] : n 4) Secondary security server - q (skipped) 6) Realm name : TESTDOMAIN.COM /o...

Hi, I have the following problem. I think it's arising from the fact, that DES algorithms are fetched from libcrypto and not from libdes anymore. But, some types still clash. I use krb4-1.2.1 from http://www.pdc.kth.se/kth-krb cc -O2 -n32 -TARG:platform=IP22 -OPT:Olimit=0 -I/usr/local/include -I/software/@sys/usr/include -I/usr/local/BerkeleyDB.4.0/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/software/@sys/usr/include/libxml2 -I/software/@sys/...

please test Olaf Kirch's patch. it looks fine to me, but i don't to K5. i'd like to see this in the next release. thx -m -------------- next part -------------- --- openssh-3.4p1/auth-krb5.c.krb Sun Jun 9 21:41:48 2002 +++ openssh-3.4p1/auth-krb5.c Tue Jul 23 15:15:43 2002 @@ -73,18 +73,17 @@ * from the ticket */ int -auth_krb5(Authctxt *authctxt, krb5_data *auth, char **client) +auth_krb5(Authctxt *authctxt, krb5_data *auth, char **client, krb5_data *reply) { krb5_error_co...

...==================================== RCS file: /var/cvs/openssh/configure.in,v retrieving revision 1.267 diff -u -r1.267 configure.in --- configure.in 2001/03/18 23:09:28 1.267 +++ configure.in 2001/03/27 06:16:46 @@ -404,75 +404,6 @@ ] ) - - -# Check whether user wants Kerberos support -KRB4_MSG="no" -AC_ARG_WITH(kerberos4, - [ --with-kerberos4=PATH Enable Kerberos 4 support], - [ - if test "x$withval" != "xno" ; then - - if test "x$withval" != "xyes" ; then - CPPFLAGS="$CPPFLAGS -I${withval}/include" - LDFLAGS=&q...

...wrapped inside an #ifdef HEIMDAL? Since I know approximately zero about Kerberos, any assistance would be appreciated. Thanks, -Daz. gcc -o sshd [snip objs] -L. -Lopenbsd-compat/ -L/usr/kerberos/lib -lssh -lopenbsd-compat -lwrap -lresolv -lskey -lutil -lz -lnsl -lcrypto -lcrypt -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err session.o: In function `do_child?: /home/builder/gate/openssh-tinderbox/session.c:1427: undefined reference to `k_hasafs? /home/builder/gate/openssh-tinderbox/session.c:1433: undefined reference to `k_setpag? /home/builder/gate/openssh-tinderbox/session.c:1435: undefine...

https://bugzilla.mindrot.org/show_bug.cgi?id=1945 Bug #: 1945 Summary: Only 1 of the 2 krb cache files is removed on closing the ssh connection with UsePrivilegeSeparation=yes Classification: Unclassified Product: Portable OpenSSH Version: 5.8p1 Platform: All OS/Version: HP-UX Status: NEW Severity: norm...

Hi all, I was hoping to setup a realm trust between a Samba AD domain and a kerberos realm running mit-krb5, however it looks like that isn't currently supported. Is that correct, or am I missing something (I'm running Samba 4.9.4)? Having noticed that "samba-tool domain trust" only seems to cater for trusts involving other AD domains, I tried to workaround that (in the hope that...

On Thu, 31 Mar 2016, Service Informatique IF wrote: > The problem for us is to join computer automatically to Samba : Maybe > you have a solution ? (without passwd) It's not exactly without password, but if you are building your own machines via kickstart or similar and just want to automate the join, you can do a "net ads join -UAdministrator%password". In theory you

...nticating from the original DC1 against the new DC2 so DC1 doesn't see any sort of clock skew at all. I've seen other people complain about this issue a few times in the archives but there's never a resolution. I've also tried changing the 'clockskew' setting in my 'krb5.conf' file to some massive number and that doesn't seem to make a difference. Both DC's are running Samba 4.4.8 on FreeBSD 11 with ZFS filesystem. Any help with this would be very appreciated.

On Fri, 11 May 2018 14:14:39 +0000 Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: > I"m seeing this as well, after I updated my CentOS 7 hosts to the > latest release. > Something seems to have broken! > Do you have a 'include' line in krb5.conf ? If you do, remove it. Rowland

...14:39 +0000 > Kristj?n Valur J?nsson via samba <samba at lists.samba.org> wrote: > >> I"m seeing this as well, after I updated my CentOS 7 hosts to the >> latest release. >> Something seems to have broken! >> > > Do you have a 'include' line in krb5.conf ? > If you do, remove it. Yes, it was there but I removed it before I sent my original post. The issue was still there. Last night after I posted, I decided to recompile samba. That resolved the issue (at least till next time). I do not understand why one DC needed to be recompiled and t...

On Fri, 11 May 2018 16:17:57 -0400 (EDT) me at tdiehl.org wrote: > > I am curious, do you have any idea why having an include line in > krb5.conf pointing to an empty directory might impact the operation? > I would expect it to just ignore it unless something put something in > it. > It is a MIT thing which Heimdal knows nothing about and confuses it. ;-) Rowland

...with permisions to access the shared folder in Solaris, get the files, through his/her Windows Active Directory account. First: Is this possible? I've installed samba-3.0.20rc1.tar.gz (before I tested samba-3.0.14a.tar.gz, but I cannot get connected). I installed openldap-2.2.26.tar and krb5-1.4.1-signed.tar. I've compile Samba with this options: LDFLAGS="-L/opt/local/openldap/lib -Wl,-R/opt/local/openldap/lib" CPPFLAGS=-I/opt/local/openldap/include ./configure --prefix=/opt/local/samba --with-winbind --with-ads --with-ldap --with-krb5=/opt/local/kerberos5...