search for: muc

Hi, during debuging with level 10 logfile on my PDC, I saw during the joining process off a member server: [2009/05/29 21:27:20, 5] lib/smbldap.c:smbldap_search_ext(1205) smbldap_search_ext: base => [sambaDomainName=MUC,sambaDomainName=MUC,dc=mr,dc=lfmg,dc=de], filter => [(&(objectClass=sambaTrustedDomainPassword)(sambaDomainName=MUC))], scope => [2] ..... [2009/05/29 21:27:20, 10] lib/smbldap.c:smbldap_search_ext(1269) Failed search for base: sambaDomainName=MUC,sambaDomainName=MUC,dc=mr,dc=lfmg,dc...

Smb.conf: [global] security = ADS workgroup = MUC realm = europe.bmw.corp netbios name = EDAINT netbios aliases = edaint.muc log file = /lfs/EDA/DATA/SOFTWARE/samba/var/log/samba/%m.log log level = 10 # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member. Th...

...s when connecting to samba shares from windows. In the corresponding samba logs I found entries: .... [2020/07/23 12:08:06.697678, 1] ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/lpeda1.muc at EUROPE.BMW.CORP(kvno 26) in keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)] [2020/07/23 12:08:06.698028, 1] ../../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step) gensec_spnego_server_negTokenInit_step: gse_krb5: parsing NEG_TOKEN_INIT content failed (next[(null)]):...

Hi Gert, Thanks for your reply. But we can't upgrade to 7.2 version also we don't have plan to upgrade in near future. Can I fix these vulnerabilities in the current version? Regards Abhishek On Tue, Mar 8, 2016 at 6:42 PM, Gert Doering <gert at greenie.muc.de> wrote: > Hi, > > On Tue, Mar 08, 2016 at 06:14:01PM +0530, abhi dhiman wrote: > > Actually I am working with the OpenSSH version 6.2p which is vulnerable > to > > above mentioned vulnerabilities. > > > > So am looking for some help how I can fix these vul...

>The 'idmap config' lines are borked, the default domain '*' lines are >okay, but the 'MUC' domain lines are half correct, yes you can use the >'rid' backend, but you must set a range. You did set a range, but it was >incorrect and you have commented it out. The two ranges must not >overlap, but what you had before you commented it out, well, overlap >would be...

This was dicovered in openssh-2.9p2 on BSDi 4.1. If you configure --with-ssl-dir and give a relative path (like ../openssl-0.9.6b), it will not compile because that path is no longer valid once it cds to openbsd-compat. In the CPPFLAGS variable in openbsd-compat/Makefile, you can put in another ../ (-I../openssl-0.9.6a/include becomes -I../../openssl-0.9.6a/include) and it works. Perhaps there

Hi, i was not able to find anything about my issue in the bug-tracker, the mailinglist or the release notes. We see the following issue using samba-tool dsacl: samba-tool dsacl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)' new descriptor for cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de: O:DAG:DAD:AI(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA)S:AI(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)...

Hi, On Tue, Oct 17, 2017 at 05:54:52AM -0600, The Doctor wrote: > The best solution is if (LIBRESSL) || (OPENSSL < 1010...) > > Else > > Whatever. > > Is that too much work? Littering code with #ifdef is almost never a good idea. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at greenie.muc.de fax: +49-89-35655...

I noticed that AIX now comes with a version of zlib installed in /usr. (I'm working on 5.2) My first inclination was to simply uninstall it and use the one we compile (and put in /usr/local). However, IBM has made zlib part of the RPM package itself! So, I cannot uninstall it without removing RPM.... Next, I tried passing --with-zlib=/usr/local to configure for ssh. This seems to work, but

As I understand currently there is no way in sshd_config to match based on the client public key so different configuration for the same username can be applied depending on the key, right? My case is a backup login that needs to run as a root to access all the files and where I want to use ForceCommand to allow the login only to execute a particular command and yet still allow normal root

Try net ads keytab add_update_ads cifs/$(hostname -f) -U Administrator And i hope this is not your hostname : lpeda1.muc Because thats a domainname. Also make sure you check the resolving of the A and PTR records Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Georg.Biberger--- via samba > Verzonden: donderdag 23 juli 2020 12:29 &g...

Hello, I'm having two DC in my domain. When I run # samba-tool dbcheck I receive 27 errors on the first one and 49 on the second one. All errors are like this one: ERROR: target DN is deleted for member in object CN=Medical Office,CN=Users,DC=muc,DC=medizinische-genetik,DC=de - <GUID=dae3b481-4ca2-49f2-b3f2-0d617d277c7d>;<SID=S-1-5-21-1362721961-1801182073-732966438-17206>;CN=mschmoelz\0ADEL:dae3b481-4ca2-49f2-b3f2-0d617d277c7d,CN=Deleted Objects,DC=muc,DC=medizinische-genetik,DC=de Target GUID points at deleted DN CN=mschmoe...

Hi, i have setted up a DC ESC.LAN, if i try to do "samba-tool domain join MUNICH.ESC.LAN SUBDOMAIN -Uadministrator" i get the following error, how can i build up a AD Subdomain (Domain Tree) [root at MUC-PDC ~]# samba-tool domain join MUNICH.ESC.LAN SUBDOMAIN -Uadministrator Administrator password will be set randomly! Finding a writeable DC for domain 'ESC.LAN' Found DC esc-pdc.esc.lan Password for [ESC\administrator]: Reconnecting to naming master 6f13c3e5-b440-4696-8e07-359f4a3955bf._m...

Attached smb.conf now inline: [global] security = ADS workgroup = MUC realm = europe.bmw.corp netbios name = eda netbios aliases = lpeda1 lpeda1.muc log file = /lfs/EDA/DATA/SOFTWARE/samba/var/log/samba/%m.log log level = 2 # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member....

...samba-tool dsacl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)'...

All, When logging into an HP-UX 10.2 system from a Windows NT machine running Cygwin and openssh 2.9p2, control-c sends a sigint to the ssh client on the NT system, thus killing the ssh process. Interestingly enough, this behavior is only observed when using X11 forwarding. I can eliminate the behavior by changing clientloop.c to ignore SIGINT (signal(SIGINT, SIG_IGN) ) but then I'm bak to

...some visual sugar which works about as well in ASCII... ... wtf? The whole idea of using UTF8 in a single place inside OpenSSH just for eye candy needs to be burnt in flames. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany gert at greenie.muc.de fax: +49-89-35655025 gert at net.informatik.tu-muenchen.de

I would like to implement an arbitrary script to be executed when logging on via SSH. This is supposedly possible using the ForceCommand option to sshd. However, as soon as I implement any script, even as simple as echoing a string, clients can no longer connect to the server. Clients report only that the connection was dropped by the server. The server, in debug mode, shows: Feb 17 16:14:01

Gert, Thank you for the feedback. Can you give any further direction on where to get more information on what you are describing? On Wed, Feb 17, 2016 at 3:17 PM, Gert Doering <gert at greenie.muc.de> wrote: > Hi, > > On Wed, Feb 17, 2016 at 12:59:57PM -0600, Lesley Kimmel wrote: > > I would like to implement an arbitrary script to be executed when logging > > on via SSH. > > I'd just do this in the PAM session handler. > > ForceCommand means "ru...

On 01/07/2020 12:59, Georg.Biberger--- via samba wrote: >> The 'idmap config' lines are borked, the default domain '*' lines are >> okay, but the 'MUC' domain lines are half correct, yes you can use the >> 'rid' backend, but you must set a range. You did set a range, but it was >> incorrect and you have commented it out. The two ranges must not >> overlap, but what you had before you commented it out, well, overlap &...