search for: krbservicenam

Displaying 9 results from an estimated 9 matches for "krbservicenam".

Did you mean: krbservicename
2015 Aug 05
5
LDAP bindpw password
Hi. I'm using Samba 4 on two Zentyal servers as Domain Controller and now I have to authenticate some services to it (Apache and PAM in particular). The LDAP integration asks me for a LDAP bind password, but I cannot find out where it is on Zentyal. Is there a way to check (or change it) directly on Samba 4? Or is it preferable to authenticate against Active Directory or Kerberos? Thank you
2009 Sep 17
1
[PATCH server] oVirt server single network installer
...verName AdminNodeFQDN:80 - - ErrorLog /etc/httpd/logs/error_log - TransferLog /etc/httpd/logs/access_log - LogLevel warn - - ProxyRequests Off - -<ProxyMatch ^.*/ovirt/login.*$> - AuthType Kerberos - AuthName "Kerberos Login" - KrbMethodNegotiate on - KrbMethodK5Passwd on - KrbServiceName HTTP - Krb5KeyTab /etc/httpd/conf/ipa.keytab - KrbSaveCredentials on - Require valid-user - ErrorDocument 401 /ovirt/errors/401.html - ErrorDocument 404 /ovirt/errors/404.html - ErrorDocument 500 /ovirt/errors/500.html - RewriteEngine on - Order deny,allow - Allow from all - - # We creat...
2016 Aug 03
4
FW: kerberos nfs4's principals and root access
You need for the apache keytab something like Alias /webmail /usr/share/webmail # <Directory /usr/share/ webmail > AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbServiceName HTTP KrbAuthRealms EXAMPLE.COM Krb5KeyTab /etc/httpd/conf/keytab require valid-user </Directory> chmod 400 /etc/httpd/conf/keytab chown www-data:www-data /etc/httpd/conf/keytab > In fact i'm stuck between my two problems (root acces to Kerberised NFS > share / www-data a...
2015 Aug 05
0
LDAP bindpw password
...win 10 testing with samba, and mainwhile doing a rollout.. :-/ Here are some working examples on debian jessie.. with samba 4.1.7 debian. an apache2.4 kerberos auth example. AuthType Kerberos AuthName "Website Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbServiceName HTTP KrbAuthRealms INTERNAL.DOMAIN.TLD Krb5KeyTab /etc/apache2/hostname-apache.keytab require valid-user an squid kerberos example. auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -s HTTP/hostname.internal.domain.tld at INTERNAL.DOMAIN.TLD auth_param negotiate c...
2016 Aug 03
1
FW: kerberos nfs4's principals and root access
.../share/webmail > >>> # > >>> <Directory /usr/share/ webmail > > >>> AuthType Kerberos > >>> AuthName "Kerberos Login" > >>> KrbMethodNegotiate On > >>> KrbMethodK5Passwd Off > >>> KrbServiceName HTTP > >>> KrbAuthRealms EXAMPLE.COM > >>> Krb5KeyTab /etc/httpd/conf/keytab > >>> require valid-user > >>> </Directory> > >>> chmod 400 /etc/httpd/conf/keytab > >>> chown www-data:www-data /etc/httpd/conf/ke...
2016 Aug 03
0
FW: kerberos nfs4's principals and root access
...he apache keytab something like > > Alias /webmail /usr/share/webmail > > # > > <Directory /usr/share/ webmail > > > AuthType Kerberos > > AuthName "Kerberos Login" > > KrbMethodNegotiate On > > KrbMethodK5Passwd Off > > KrbServiceName HTTP > > KrbAuthRealms EXAMPLE.COM > > Krb5KeyTab /etc/httpd/conf/keytab > > require valid-user > > </Directory> > > chmod 400 /etc/httpd/conf/keytab > > chown www-data:www-data /etc/httpd/conf/keytab > > > That's exactly what I thoug...
2018 Oct 04
2
CentOS 7.5, Apache 2.4, Kerberos
...ectory "${vhost_home}/sso"> AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on KrbMethodK5Passwd off KrbAuthoritative off KrbAuthRealms [list of realms removed for security] Krb5Keytab "/etc/krb5.keytab" KrbServiceName Any require valid-user ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0;url=/login/anonlogin.php\"></html>" </Directory> ====And some output from kinit and klist==== $ sudo kinit -V -t /etc/krb5.keytab HTTP/six....
2016 Aug 02
3
FW: kerberos nfs4's principals and root access
It's ok So, if I create a httpuser and an httpgroup in my AD and use these at owner and group for my apache2 daemon, this one could access to userdirs (while permissions granting it) ? But I need to cron 'kinit' to keep valid ticket... ? My local root user always can't access to the share, but my other problem seems to be resolved. Thanks Le 02/08/2016 à 16:37, Rowland
2009 Nov 26
2
[error] avahi_entry_group_add_service_strlst("AdminNodeFQDN") failed: Invalid host name
Hi, After doing a clean install of ovirt in a Fedora 11 VM, I am unable to get anything working in the web interface. All I get is an error 500. After reviewing the logs I see the following error in /var/log/http/error.log [Thu Nov 26 11:29:11 2009] [notice] Apache/2.2.13 (Unix) DAV/2 mod_auth_kerb/5.4 mod_nss/2.2.11 NSS/3.12.2.0 mod_python/3.3.1 Python/2.6 configured -- resuming normal