search for: lorikeet

...Samba 3.0 utility designed for this purpose, which in turn can contact domain controllers, allowing for seamless single sign on. http://samba.org/samba/docs/man/ntlm_auth.1.html I have recently completed reworking mod_ntlm_winbind for a similar purpose, and have patches for cyrus-sasl in my 'lorikeet' subversion repository. These should serve as good examples for the simple fork()/exec() modal that is used, and also show the support for GSS-SPNEGO (aka HTTP Negotiate) that ntlm_auth also provides. http://download.samba.org/ftp/unpacked/lorikeet/trunk/ My hope is that I can tempt a Doveco...

Hi, I am searching for information on how to set up an NT4 RAS server to authenticate users against a Samba 3 PDC. Right now we have 2 domain controllers and the plan is to phase them out. We want to set up samba as the PDC, but we need RAS to work for the time being. Is there a way to do this? We are going to use the LDAP backend for samba. Is it also possible to have our NT4 BDC stay

Hello, I have setup mod_ntlm_winbind to provide authentication for an Apache 1.3.33 webserver running on Fedora Core 3. The authentication works, but I have run into a problem when using Internet Explorer. It seems that the problem might be with Internet Explorer itself, but here is what I think is happening - the browser will not submit any forms with a POST method on a website protected with

Hello, I would like to use NTLM authentication on my Apache2 server, and I've found out this link which works very well for me, http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind I'm newbie to samba, and to make this stuff work, I had to execute "net join -S <DC> -U <Admin>", because winbindd complained about "did we join ?"... (all of this can be found on man winbindd). I'm wondering why do you have to exec "n...

...x pipes, attached to stdin/stdout of ntlm_auth). There is example code, both in the existing module, other modules and in a patch to cyrus-sasl, and I'm quite happy to help out whoever takes this on. The existing code (for apache 1.3) can be found here: http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind/ There is one example Apache2 module here: http://source.grep.no/ It is a good start, but it needs cleaning up (no NTLMSSP parsing at all), and it still seems to use global variables (not permitted in the threaded apache 2). Andrew Bartlett -- Andrew Bartlett...

My goal is to make VPN access to our Samba PDC (FreeBSD 7.0) so that users can access there home shares from Windows clients. I have read the instructions at http://samba.org/ftp/unpacked/lorikeet/pppd/final-report.pdf, but I can't make it work. Don't know if is due to my lack of skills or has something to do with the Popop functionality in FreeBSD. Following the instructions, i made a file /usr/local/etc/pptpd.conf: option /etc/ppp/options.pptpd localip 192.168.1.4 remoteip 192.168...

...Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 14986: Add support for bind 9.18. ?? * BUG 15076: logging dsdb audit to specific files does not work. o? Samuel Cabrero <scabrero at samba.org> ?? * BUG 14979: Problem when winbind renews Kerberos. ?? * BUG 15095: Samba with new lorikeet-heimdal fails to build on gcc 12.1 in ???? developer mode. o? Volker Lendecke <vl at samba.org> ?? * BUG 15105: Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL. ?? * BUG 15118: Crash in rpcd_classic - NULL pointer deference in ???? mangle_is_mangled(). o? Noel Pow...

...Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 14986: Add support for bind 9.18. ?? * BUG 15076: logging dsdb audit to specific files does not work. o? Samuel Cabrero <scabrero at samba.org> ?? * BUG 14979: Problem when winbind renews Kerberos. ?? * BUG 15095: Samba with new lorikeet-heimdal fails to build on gcc 12.1 in ???? developer mode. o? Volker Lendecke <vl at samba.org> ?? * BUG 15105: Crash in streams_xattr because fsp->base_fsp->fsp_name is NULL. ?? * BUG 15118: Crash in rpcd_classic - NULL pointer deference in ???? mangle_is_mangled(). o? Noel Pow...

Hi, I have a few remote user who use a PPTP based VPN. The server is running PoPToP (http://www.poptop.org/), and a pppd patched to support MPPE/MPPC for (some) added security. Currently, users authentication information is stored in plaintext in /etc/ppp/chap-secrets. I'd like to be able to put users into LDAP, and have ppp authenticate either directly against LDAP, or against Samba (with an

Hi. As I said... I will bother you. :) I'm wondering if it's possible to make samba as a primary domain controller without having samba passwords, but instead using my two KDCs (MIT K5). Is it possible? What should I use in my smb.conf? The wonderful and less painful thing is samba authenticating via pam... but I don't know how... the documentation is quite misty. -- Sensei

Hi. Back again... I'm still looking for a possible integration of MIT K5 and AFS through the windows login, so I will ask you a question. A first considerations is that afs+k5 works fine but we have to create a local account with a fake password. The profile will be on the local disk. We can gain tickets and the token necessary to access \\AFS. The problem is: how to avoid a local account?

well i'm trying to fire up the mod_ntlm_winbind module for apache. but i get alot of errors trying to compile it. i just downloaded it from ftp://ftp.samba.org/pub/unpacked/mod_ntlm_winbind/ but i dunno what the status is for this module ? just looking for a good and nice way to get our intranet up and authenticate it agains A Samba pdb/bdc i started with the mod_ntlm2 witch actualy works,

I'm playing with the mod_ntlm_winbind from http://download.samba.org/ftp/unpacked/lorikeet/mod_ntlm_winbind/ on Centos 4.3 but running into problems when trying to authenticate via the browser. IE says it cannot find the server when trying to access http://server/auth Firefox pops up an authentication box but this also does not work. Can anyone point me into what I might be doing wrong...

I solved this issue by updating the 2003 AD Servers to SP1. Regards, Bob Bostwick -----Original Message----- From: Tim P [mailto:panterafreak@gmail.com] Sent: Tuesday, July 26, 2005 10:18 AM To: samba@lists.samba.org Subject: [Samba] NTLMv2 - wrong password with samba? I have samba 3.0.14-5 installed (installed via Fedora Core 4's Yum) I have enabled "client NTLMv2 auth = yes" in

...documented costs (as seen when we got stuck on 'old Heimdal'), the choice to embed an copy of Heimdal has been a significant advantage to upstream Samba. As a current example, this is allowing Claims support to be added, with the KDC-side changes (to link the device and user) recorded in lorikeet-heimdal and proposed upstream but not required to be accepted at the time that the patches land in Samba. Likewise, security releases, which have been a significant burden of late, can be made from Samba master and directly consumed by our users. I'm very sorry I won't be at SambaXP this...

I'm trying to use the mod_auth_winbind module from lorikeet SVN to control access to an Apache 2.2.3 server. Samba is 3.0.23b supplied with Mandriva 2007 and is configured is a member of a w2k3 AD domain. The Apache users are using IE on W2k or XP domain member clients. Samba and winbind are working as expected, and if I just use the mod_auth_winbind m...

...ography module for our testing. The use of well known cryptography libraries makes Samba easier for end-users to validate and deploy, and for distributors to ship. This is the end of a very long journey for Samba. Updated Heimdal import ---------------------- Samba's Heimdal branch (known as lorikeet-heimdal) has been updated to the current pre-8.0 (master) tree from upstream Heimdal, ensuring that this vendored copy, included in our release remains as close as possible to the current upstream code. Revocation support in Heimdal KDC for PKINIT certificates -------------------------------------...

...ography module for our testing. The use of well known cryptography libraries makes Samba easier for end-users to validate and deploy, and for distributors to ship. This is the end of a very long journey for Samba. Updated Heimdal import ---------------------- Samba's Heimdal branch (known as lorikeet-heimdal) has been updated to the current pre-8.0 (master) tree from upstream Heimdal, ensuring that this vendored copy, included in our release remains as close as possible to the current upstream code. Revocation support in Heimdal KDC for PKINIT certificates -------------------------------------...

...ography module for our testing. The use of well known cryptography libraries makes Samba easier for end-users to validate and deploy, and for distributors to ship. This is the end of a very long journey for Samba. Updated Heimdal import ---------------------- Samba's Heimdal branch (known as lorikeet-heimdal) has been updated to the current pre-8.0 (master) tree from upstream Heimdal, ensuring that this vendored copy, included in our release remains as close as possible to the current upstream code. Revocation support in Heimdal KDC for PKINIT certificates -------------------------------------...

...ography module for our testing. The use of well known cryptography libraries makes Samba easier for end-users to validate and deploy, and for distributors to ship. This is the end of a very long journey for Samba. Updated Heimdal import ---------------------- Samba's Heimdal branch (known as lorikeet-heimdal) has been updated to the current pre-8.0 (master) tree from upstream Heimdal, ensuring that this vendored copy, included in our release remains as close as possible to the current upstream code. Revocation support in Heimdal KDC for PKINIT certificates -------------------------------------...