search for: mynet

I changed my SMB.conf on the DC's and the member as per your instructions. Now the connection dropped at 10 hours, which appears to be the default end time of the certificate. KLIST on a windows box returns..... Cached Tickets: (3) #0> Client: hans @ MYNET.MYNET.COM Server: krbtgt/ MYNET.MYNET.COM @ MYNET.MYNET.COM KerbTicket Encryption Type: RSADSI RC4-HMAC(NT) Ticket Flags 0x40e00000 -> forwardable renewable initial pre_authent Start Time: 1/3/2020 7:59:07 (local) End Time: 1/3/2020 17:59:07 (local)...

...problems with the management of the id of the users, in the DC and in the domain members (RFC2370). I'm using Samba Version 4.2.10-Debian on Debian8.5. This is the DC configuration / result. root at samba4:/var/lib/samba# cat /etc/samba/smb.conf |grep -v '#' [global] workgroup = MYNET realm = ad.mynet.lan netbios name = SAMBA4 server role = active directory domain controller server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, smb server services = -s3fs -dns dcerpc endpoint servers = +winreg +srvsvc interfac...

...6 and connected to the DC by Winbindd.? I notice that when my 24 hours is up, smbstatus will show that I have a new PID.? The files are unfortunately still being held open by the old PID and are no longer accessible (I think.). Here is the global part of my DC smb.conf [global] ??????? workgroup = MYNET ??????? realm = mynet.mynet.com ??????? netbios name = MY_DC ??????? server role = active directory domain controller ??????? server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate ??????? idmap_ldb:use rfc2307 = yes ??????? kdc:service ticket lifetime...

Hi I using ipp2p to block p2p traffic. How to enable to use p2p to me host in my net ? I using this setup: iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -j DROP This setup: iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -d ! mynet -j DROP iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -s ! mynet -j DROP not works .... roberto -- Ing. Roberto Pereyra ContenidosOnline Looking for Linux Virtual Private Servers ? Click here: http://www.spry.com/hosting-affiliate/scripts/t.php?a_aid=426&a_bid...

...Configured and compiled ok: ./configure --prefix=/usr/local/samba --sysconfdir=/etc --localstatedir=/var --mandir=/usr/man --bindir=/usr/bin --sbindir=/usr/sbin --libdir=/lib --enable-fhs --with-ads --with-shared-modules=idmap_ad,pam Installed ok. Kerberos OK. I can run kinit and klist root at MYNETSRV08:/etc/samba# kinit Administrator Password for Administrator at MYNET.NET: root at MYSRV08:/etc/samba# root at MYNETSRV08:/etc/samba# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at MYNET.NET Valid starting Expires Service principal 28/08/2013 19:59 29/...

...dd.? I notice > that when my 24 hours is up, smbstatus will show that I have a new PID.? The > files are unfortunately still being held open by the old PID and are no > longer accessible (I think.). > > Here is the global part of my DC smb.conf > [global] > ??????? workgroup = MYNET > ??????? realm = mynet.mynet.com > ??????? netbios name = MY_DC > ??????? server role = active directory domain controller > ??????? server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > winbind, ntp_signd, kcc, dnsupdate > ??????? idmap_ldb:use rfc2307 = yes &...

...connected to the DC by Winbindd. I notice that when my 24 hours is up, smbstatus will show that I have a new PID. The files are unfortunately still being held open by the old PID and are no longer accessible (I think.). Here is the global part of my DC smb.conf [global] workgroup = MYNET realm = mynet.mynet.com netbios name = MY_DC server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes kdc:service ticket lif...

...e, since it's a reversion of an earlier change, but just to beat a dead horse ... I encountered this change in a surprising way: Being new to IPSec, I started by setting up a gif tunnel (without IPSec) between my singly-homed host, fred, running FreeBSD: ep0 192.168.0.2/24 gif0 ${mynet}.27 -> ${mynet}.17 tunnel 192.168.0.2 -> 192.168.0.1 and a dual-homed host, bob, running NetBSD: tlp0 ${mynet}.24/28 tlp1 192.168.0.1/24 gif0 ${mynet}.24 -> ${mynet}.27 tunnel 192.168.0.1 -> 192.168.0.2 I did this so I could test the tunneling...

...assphrases) to gain proper access. The major difference was between keys used for "real users" and keys used for scriting (scp, rsync). I would therefore like to propose a "server related key" feature. Let me explain this feature on a small example: I have two host 1.) backup.mynet.local 2.) devel.mynet.local For the first host I have a keyset with no password for automated use by rsync to backup files. For the second host I have a keyset with a strong password to login manually. With the "server related key" I would save the according keys as ~/.ssh/id_dsa.backup...

We have identified a problem joining samba to a windows 2003 rc2 domain. Using mit kerberos 1.5, and the latest version of samba (3.0.25b), net join ads would throw up the error: cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine domaincontroller.mynet.mydomain.com. Error was NT_STATUS_ACCESS_DENIED net_rpc_join_ok: failed to get schannel session key from server domaincontroller.mynet.mydomain.com for domain mynet. Error was NT_STATUS_ACCESS_DENIED Failed to verify membership in domain! Failed to join domain: Success return code = -1 A temporar...

....2; option netbios-node-type 2; default-lease-time 21600; max-lease-time 43200; allow unknown-clients; range 192.168.65.100 192.168.65.150; } ====================================================================== // // sample BIND configuration file // acl mynet { 192.168.65.0/24; 127.0.0.1; }; options { listen-on { 127.0.0.1; 192.168.65.0/24; }; allow-query { 192.168.65.0/24; localhost; }; allow-recursion { 192.168.65.0/24; localhost; }; tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; forwarders {8.8.8.8;}; }...

...puppet master send those configuration to those nodes when they connect. the documentation says, "The interpreter looks through the list of node definitions for one matching the client name and evaluates the resulting definition if it finds one." my clients dont have hostnames like sql.mynet.com. instead they have random hostnames which we assign. is there any way to make puppet master to match node definitions based on some information from client? _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com https://mail.madstop.com/mailman/list...

...ould use to avoid HWaddr changing? Currently, I have added a short snippet into tinc-up script that persists the (once given) HWaddr to a file and tries to reset it before starting dhclient. This works, but I feel it a bit hacky solution... -- tinc-up -- #!/bin/sh set -e MACFILE="/etc/tinc/mynet/mac" if [ -e $MACFILE ]; then MAC=`cat $MACFILE` ifconfig $INTERFACE hw ether $MAC fi dhclient $INTERFACE & MAC=`ip link show mynet | awk '/ether/ {print $2}'` echo $MAC > $MACFILE -- tinc-up ends -- Best regards, Ville -------------- seuraava osa -------------- HTML liit...

...nassigned-bugs at mindrot.org Reporter: pcl at pclewis.com Created attachment 2482 --> https://bugzilla.mindrot.org/attachment.cgi?id=2482&action=edit Patch to make ssh_connect_direct use port parameter. To reproduce: -- # ~/.ssh/config CanonicalizeHostname yes CanonicalDomains mynet.local Host *.mynet.local Port 99 -- $ ssh -vvv somedomain ... debug1: Canonicalized hostname "somedomain" => "somedomain.mynet.local" debug1: Hostname has changed; re-reading configuration debug1: Reading configuration data /home/user/.ssh/config debug1: /home/user/.ssh/conf...

...e domain, I get an error message: Logon failure, unknown user name or bad password After looking at the log for the win2k machine, all I can see is a problem with opening a pipe to netlogon just before I get the error message on the workstation. my smb.conf looks like this: [global] workgroup = MYNET netbios name = FURIES server string = MYNET SAMBA PDC SERVER passwd program = /usr/local/bin/smbldap-passwd.pl -o %u passwd chat = *new*password* %n\n *new*password* %n\n *successfully* passdb backend = ldapsam unix password sync = yes ldap suffix = dc=mynet,dc=com ldap admin dn = cn=Manager,dc=myn...

I have a problem joining Samba to a Windows 2003 sp1 ADS domain. I'm running Samba 3.0.28 on Solaris 10 with MIT Kerberos 1.6.3 and OpenLDAP 2.3.38. When I run 'net ads join' i get the following error. ./net ads join -S domaincontroller.mynet.mydomain.com -U Administrator -d10 ...... ....... .... 2008/01/22 12:06:09, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open(2222) cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine domaincontroller.mynet.mydomain.com. Error was NT_STATUS_ACCESS_DENIED [2008/01/22 12:06:09, 0] util...

Hi, I`m trying to use the agent snmp buit in the asterisk-1.4, but I can`t do this... I used this link to do it: http://www.voipphreak.ca/archives/382 but I can't... Does somebody know how to do this or knows a how-to to do this?? Thank's _______________________________________________________ Yahoo! Mail - Sempre a melhor op??o para voc?! Experimente j? e veja as

...cess.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed acl mynet src 192.168.101.0/24 http_access allow mynet httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on I am ruunnig itables on the SAME BOX. I have added below rules for squid. #Redirecting traffic destined to port 80 to port 3128 iptables -t nat -A...

...nto a libvirt dom xml and using domxml-from-native doesn't seem to know how to handle all of it. It's for ARM using some new virtio syntax: qemu-system-arm -machine virt -cpu cortex-a15 -enable-kvm -m 512 -kernel mach-virt-guest-3.11-zImage -display none -serial stdio -netdev type=user,id=mynet -device virtio-net-device,netdev=mynet -drive index=0,id=mydrive,file=saucy-server-cloudimg-armhf.img -device virtio-blk-device,drive=mydrive -initrd saucy-server-cloudimg-armhf-initrd-lpae -append "console=ttyAMA0 root=/dev/vda" Does anyone have any suggestions for converting the rest o...

I like the config generator of tinc 1.1! An issue to consider on the default behavior: It turns out 'tinc -n mynet init mynodename' makes up a default Port=... when the standard port is taken: "Warning: could not bind to port 655. Tinc will instead listen on port 22911". It is nice that this is autodetected and warned, but I wonder whether it is nice to let this automatic-adaptation a default beh...