Displaying 9 results from an estimated 9 matches for "krbservicename".
2015 Aug 05
5
LDAP bindpw password
Hi.
I'm using Samba 4 on two Zentyal servers as Domain Controller and now
I have to authenticate some services to it (Apache and PAM in
particular).
The LDAP integration asks me for a LDAP bind password, but I cannot
find out where it is on Zentyal.
Is there a way to check (or change it) directly on Samba 4?
Or is it preferable to authenticate against Active Directory or Kerberos?
Thank you
2009 Sep 17
1
[PATCH server] oVirt server single network installer
...verName AdminNodeFQDN:80
-
- ErrorLog /etc/httpd/logs/error_log
- TransferLog /etc/httpd/logs/access_log
- LogLevel warn
-
- ProxyRequests Off
-
-<ProxyMatch ^.*/ovirt/login.*$>
- AuthType Kerberos
- AuthName "Kerberos Login"
- KrbMethodNegotiate on
- KrbMethodK5Passwd on
- KrbServiceName HTTP
- Krb5KeyTab /etc/httpd/conf/ipa.keytab
- KrbSaveCredentials on
- Require valid-user
- ErrorDocument 401 /ovirt/errors/401.html
- ErrorDocument 404 /ovirt/errors/404.html
- ErrorDocument 500 /ovirt/errors/500.html
- RewriteEngine on
- Order deny,allow
- Allow from all
-
- # We create...
2016 Aug 03
4
FW: kerberos nfs4's principals and root access
You need for the apache keytab something like
Alias /webmail /usr/share/webmail
#
<Directory /usr/share/ webmail >
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
KrbMethodK5Passwd Off
KrbServiceName HTTP
KrbAuthRealms EXAMPLE.COM
Krb5KeyTab /etc/httpd/conf/keytab
require valid-user
</Directory>
chmod 400 /etc/httpd/conf/keytab
chown www-data:www-data /etc/httpd/conf/keytab
> In fact i'm stuck between my two problems (root acces to Kerberised NFS
> share / www-data ac...
2015 Aug 05
0
LDAP bindpw password
...win 10 testing with samba,
and mainwhile doing a rollout.. :-/
Here are some working examples on debian jessie.. with samba 4.1.7 debian.
an apache2.4 kerberos auth example.
AuthType Kerberos
AuthName "Website Login"
KrbMethodNegotiate On
KrbMethodK5Passwd Off
KrbServiceName HTTP
KrbAuthRealms INTERNAL.DOMAIN.TLD
Krb5KeyTab /etc/apache2/hostname-apache.keytab
require valid-user
an squid kerberos example.
auth_param negotiate program /usr/lib/squid3/negotiate_kerberos_auth -s HTTP/hostname.internal.domain.tld at INTERNAL.DOMAIN.TLD
auth_param negotiate ch...
2016 Aug 03
1
FW: kerberos nfs4's principals and root access
.../share/webmail
> >>> #
> >>> <Directory /usr/share/ webmail >
> >>> AuthType Kerberos
> >>> AuthName "Kerberos Login"
> >>> KrbMethodNegotiate On
> >>> KrbMethodK5Passwd Off
> >>> KrbServiceName HTTP
> >>> KrbAuthRealms EXAMPLE.COM
> >>> Krb5KeyTab /etc/httpd/conf/keytab
> >>> require valid-user
> >>> </Directory>
> >>> chmod 400 /etc/httpd/conf/keytab
> >>> chown www-data:www-data /etc/httpd/conf/key...
2016 Aug 03
0
FW: kerberos nfs4's principals and root access
...he apache keytab something like
> > Alias /webmail /usr/share/webmail
> > #
> > <Directory /usr/share/ webmail >
> > AuthType Kerberos
> > AuthName "Kerberos Login"
> > KrbMethodNegotiate On
> > KrbMethodK5Passwd Off
> > KrbServiceName HTTP
> > KrbAuthRealms EXAMPLE.COM
> > Krb5KeyTab /etc/httpd/conf/keytab
> > require valid-user
> > </Directory>
> > chmod 400 /etc/httpd/conf/keytab
> > chown www-data:www-data /etc/httpd/conf/keytab
> >
> That's exactly what I though...
2018 Oct 04
2
CentOS 7.5, Apache 2.4, Kerberos
...ectory "${vhost_home}/sso">
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate on
KrbMethodK5Passwd off
KrbAuthoritative off
KrbAuthRealms [list of realms removed for security]
Krb5Keytab "/etc/krb5.keytab"
KrbServiceName Any
require valid-user
ErrorDocument 401 "<html><meta http-equiv=\"refresh\"
content=\"0;url=/login/anonlogin.php\"></html>"
</Directory>
====And some output from kinit and klist====
$ sudo kinit -V -t /etc/krb5.keytab HTTP/six.*...
2016 Aug 02
3
FW: kerberos nfs4's principals and root access
It's ok
So, if I create a httpuser and an httpgroup in my AD and use these at
owner and group for my apache2 daemon, this one could access to userdirs
(while permissions granting it) ? But I need to cron 'kinit' to keep
valid ticket... ?
My local root user always can't access to the share, but my other
problem seems to be resolved.
Thanks
Le 02/08/2016 à 16:37, Rowland
2009 Nov 26
2
[error] avahi_entry_group_add_service_strlst("AdminNodeFQDN") failed: Invalid host name
Hi,
After doing a clean install of ovirt in a Fedora 11 VM, I am unable to
get anything working in the web interface. All I get is an error 500.
After reviewing the logs I see the following error in
/var/log/http/error.log
[Thu Nov 26 11:29:11 2009] [notice] Apache/2.2.13 (Unix) DAV/2
mod_auth_kerb/5.4 mod_nss/2.2.11 NSS/3.12.2.0 mod_python/3.3.1
Python/2.6 configured -- resuming normal