search for: reauthenticate

We've been having trouble with OpenSSH 2.9p2, running on Solaris 8 (a domain of an E10k), with PAM authentication turned on. It intermittently crashes with signal 11 (seg fault) after the password is entered, after the MOTD is displayed, but before control is passed over to the login shell. I eventually managed to persuade sshd's child process to consistently crash, upon entry of an

...little more detail, I want to do per SNMP what the following does over ssh/telnet (assuming I want to do it on port "A1" and I am able to find out that "A1" is port #1): ----------------------------- config aaa port-access supplicant A1 initialize aaa port-access web-based A1 reauthenticate aaa port-access mac-based A1 reauthenticate ----------------------------- I already have some perl code to do snmp writes, I just can''t find what variable and value to use for this purpose. Sometimes, access policy for a user changes and I want it to be enforced immediately, not after...

>> >Could we please have a clarification on the semantics of >> >PAM_CRED_ESTABLISH vs. the semantics of PAM_REINITIALIZE_CREDS? >> >> My interpretation is: >> >> You call PAM_ESTABLISH_CRED to create them >> You call PAM_REINITIALIZE_CRED to update creds that can expire over time, >> for example a kerberos ticket. Oops. I meant

...essing the remote resources.” According to Microsoft’s SMB2 protocol documentation <https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/717222e4-72c6-40e7-9121-a9646d874058> “If the Status field in the SMB2 header is STATUS_NETWORK_SESSION_EXPIRED, the client MUST attempt to reauthenticate the session that is identified by the SessionId in the SMB2 header, as specified in section 3.2.4.2.3. If the reauthentication attempt succeeds, the client MUST retry the request that failed with STATUS_NETWORK_SESSION_EXPIRED. If the reauthentication attempt fails, the client MUST fail the operati...

>Neither the Sun PAM documentation nor the Linux-PAM documentation >describe the semantics of PAM_REINITIALIZE_CREDS in any useful detail. I would agree it is vague, but then that is also a problem with the XSSO document (http://www.opengroup.org/onlinepubs/008329799/) >Could we please have a clarification on the semantics of >PAM_CRED_ESTABLISH vs. the semantics of

I want to get ACLs (output similar to that of smbcacls) for a *lot* of files (potentially millions). I can only process about 10 files per second when running the command (`smbcacls -U ...` via a Python wrapper), I'm looking for a faster way. Does anyone know any libraries or other commands that could help me? Failing that, I assume that much of the time taken is spent on authenticating

...bind (from Samba 2.2.3a) so that our Windows users can ssh into our Linux box. I've set up Samba, PAM and winbind, and it's working well. Users can see their files, and they can log in using their windows usernames. No problem. When users access their Samba share, they don't need to reauthenticate, because they've already done so with the PDC via their Windows box. Is there a way to set up PAM so that authenticated Windows users who ssh into the Linux box don't need to type a password? (This will make using CVS much easier) I have looked at winbind, pam_smb_pass, pam_smb_auth and...

hi, i've compiled Version: 1.9.18-HEAD, with NTDOMAIN, and after many hours of testing/reading/debugging it seems it 'almost works'. So if there is a kind soul out there who can give me a hand in getting it working ... tia, danny -- Daniel Braniss e-mail: danny@cs.huji.ac.il Institute of Computer Science phone: +972 2 658 4385 The Hebrew University Fax: +972 2

Hi Rowland, > I hope someone has seen this before and knows what's going on. Given > > the time delay between the problem recurring, I'm guessing the issue > > lies with Kerberos, but I'm not sure how to verify that or how to > > resolve the issue. If you need more info, please let me know. > > > > Problem: > > Each morning, windows users are

...wrong a long time: > > HKLM\System\CCS\Services\Netlogon\Parameters\RequireStrongKey was set to 0, > and should be 1. > > After restarting NETLOGON, I was able to use the NLTEST tool to reset the > secure channel between the machine and the PDC, which causes the machine to > reauthenticate. Bingo. Problem solved. This is interesting. We did upgrade the security requirements with Samba 4.1 by default. It is odd the RequreStrongKey actually forces *down* what Windows will do. > 2. Samba 3.6.24 PDC and Win7 clients cannot browse Samba 4.0 shares > > > This one was real...

...n that server (from my win7 client), I notice that I regularly have to re-authenticate to the server. I'm running Samba+SSSD. I'm not sure which piece is responsible for prompting for authentication, or what I have to setup incorrectly. (Windows servers on my domain don't ask me to reauthenticate like this). Can someone point me in the right direction? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Hello, A quick question. Is there any way to implement a Max-Session lifetime in SSH? I know there is an idle timeout available, but I am really looking for some mechanism to force a reauthentication and stop people holding onto login sessions for weeks at a time. thanks Paul

I've seen pam_shield recommended several times for protecting against malicious login attempts; but I'm not quite clear if this requires one to be already running some pam-based software? Also, I'm running shorewall, and would prefer a shorewall based protection, but the advice I read on googling for this seemed excessively complicated. -- Timothy Murphy e-mail: gayleard /at/

Hello all, I'm about to set up many NT machines with generic logins and I need to log printer useage. My problem is that NT doesn't seem to handle rejection very well (you'd think it would by now...). This is a university computer lab enviornment with clients running WinNT4.0SP5, a Samba 1.9 server on DU4.0b and ppr as the printing daemon/accounting agent. The NT logins are

Hello all, I didn't receive any replies to my question the first time, so here it is again: The environemt is as follows - a university computer lab with clients running WinNT4.0 SP5, a Samba 1.9 server on DU4.0b and ppr as the printing daemon/accounting agent. Account A = generic NT lab machine login Account B = valid unix login with permissions to print The NT logins are necessarily

Hi folks, I have been using Samba 2.2.2 on Solaris 7 happily for a while now. All of a sudden users can map other users home accounts without having to reauthenticate. The dialogue box to map as user doesn't even appear on Win 98/NT/2000. The facts: I added a pointer to a wins server a few weeks ago, but removing it doesn't seem to effect anything.(not that it should...) all my users are in a common Unix group. To see if it was just flaky Unix permissi...

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: smb.conf Type: application/octet-stream Size: 5711 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20020909/6dea2db6/smb.obj

Hi, I am running samba 2.2.7 and am trying to access a samba file as a virtual directory from a Windows NT IIS web server. I am currently using security=server, encrypt passwords = yes ,password server = test1 test2 test3, and dead time = 10. When I first start the samba server the virtual directory in IIS works fine. After some time, I think that it is the dead time, I can no longer connect to

Hi, a while ago i had to migrate from old server on Debian Sarge to new one on Debian Etch (amd64). Since then, with the same config i had earlier it became a common problem that client workstations connecting to the server have to reauthenticate very often (at least few times a day), and the staff is going to kill me if i dont fix this soon. Any ideas what could be the cause/solution ? -- Goblin

Hello, I have configured Samba 3 with Winbind and installed the mod_auth_ntlm_winbind module deployed on Ubuntu 10 which is used by a web application to enforce logging using windows domain credentials. I have verified that all these layers are properly working? ie.. wbinfo ?u (good), wbinfo ?a <username> (good), ntlm_auth ?helper-protocol=squid-2.5-basic (good). Next step I