Displaying 6 results from an estimated 6 matches for "principal_name".
2006 Sep 18
1
Incorrect GSSAPI Service Name for POP3
...mech-gssapi.c dovecot-1.0.beta8.new/src/auth/mech-gssapi.c
--- dovecot-1.0.beta8/src/auth/mech-gssapi.c 2006-09-18 17:35:02.000000000 -0500
+++ dovecot-1.0.beta8.new/src/auth/mech-gssapi.c 2006-09-18 17:37:46.000000000 -0500
@@ -101,7 +101,11 @@
gss_name_t gss_principal;
principal_name = t_str_new(128);
- str_append(principal_name, t_str_lcase(request->service));
+ if(strcmp(request->service, "POP3") == 0) {
+ str_append(principal_name, "pop");
+ } else {
+ str_append(principal_name, t_str_lcase(request->s...
2011 Aug 29
4
Kerberos GSSAPI - proper item name in keytab
...em, so I dig into source code of
gssapi module, "mech-gssapi.c". For versions 2.0.13 and 2.0.14 of
dovecot I see there the following:
********* mech-gssapi.c *********
static OM_uint32
obtain_service_credentials(struct auth_request *request, gss_cred_id_t
*ret_r)
/* blah-blah-blah */
principal_name = t_str_new(128);
str_append(principal_name, service_name);
str_append_c(principal_name, '@');
str_append(principal_name, request->set->gssapi_hostname);
auth_request_log_debug(request, "gssapi",
"Obtaining credentials for %s", str_c(princi...
2007 Mar 27
2
gssapi auth issue...
...ros tickets of the form
imap at foobar.sfbay.sun.com
Which I presume is their standard-- and probably not negotiable.
However, the hostname of the machine is: "foobar", not foobar.sfbay.sun.com
(as reported by gethostname(3c)).
So when dovecot does this:
mech-gssapi.c:
principal_name = t_str_new(128);
str_append(principal_name, service_name);
str_append_c(principal_name, '@');
---> str_append(principal_name, my_hostname);
We wind up asking kerberos to look for a ticket for imap at foobar,
instead of imap at foobar.sfbay.sun.com.
Obviously we can...
2014 Apr 01
1
upgrade samba3 -> samba4, difficulties with koha
...4 config:
<ldapserver id="dc1">
<hostname>dc1.my.domain</hostname>
<base>CN=Users,DC=samba,DC=my,DC=domain</base>
<replicate>1</replicate>
<update>1</update>
<auth_by_bind>1</auth_by_bind>
<principal_name>CN=%s,CN=Users,DC=samba,DC=my,DC=domain</principal_name>
<mapping>
<firstname is="givenName" ></firstname>
<surname is="sn" ></surname>
<address is="streetAddress" >o...
2002 Nov 01
0
Re: Samba PDC and Kerberos(MIT or SEAM in Uinx,without microsoft ADS)
...$password $username' to synchronize with Kerberos
Easier (not yet more secure though) way is creating a separate Kerberos
principal with permissions for password change, saving the key (with
ktadd -k "file") in separate keytab and using the key with kadmin -k -t
/path/keytab -p "principal_name". Then "cpw user@DOMAIN" will change
password for the user. The cpw command can be passed to kadmin via
expect script or via STDIN (less secure though).
>
> this has the potential to work(I think)but... im missing a few parts.. can a script >like this synchronize password...
2008 Oct 13
10
Shibboleth
Can anyone direct me to a really good tutorial on Shibboleth integration
with Rails, or indeed some sample code? I''ve been tearing my hair out
all day on this one.
Thanks
RobL
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To post to this group, send email to