search for: sso

Hello Samba, ???????, 30 ??????? 99, you wrote: sso> SAMBA Digest 2359 sso> For information on unsubscribing see http://lists.samba.org/ sso> Topics covered in this issue include: sso> 1) Re: Unix .TXT vs DOS .TXT files sso> by Gerry Creager N5JXS <gerry@cs.tamu.edu> sso> 2) Switch...

I have been trying to get SSO to work correctly with the following packages, and I appear I am missing something and I was wondering if anyone can help me or point me in the right direction? I am currently using the "auth_ntlm_winbind_module" for apache to try and authenticate and was hoping to get SSO to work. I ha...

Hi all, I have a running Samba4 Server. I am able to authenticate Windows and Linux Clients very. (1) I want to use samba4 as SSO. In this regard my next step is to authenticate our web site users from samba4 server. In this web site, at home page our corporate users give their e-mail address username at companydomain.com and password (not e-mail password). (2) Our E-mail server is hosted on cloud. We want to deploy our own...

Hi, I?ve been reading up on SSO-based logins for the last couple of weeks. I?ve found a lot of information about it, but nothing that matches my situation. Here?s the gist of my situation... - I have a Samba 3 PDC in our corporate office as well as three remote offices. - Each remote office is in a different physical building a...

So I was googling around about this over the last week and here is what I found: nis/yp is for some reason bad. Kerbos is holy, but no how-to's that don't involve windows and active directory. What is the recommended sso approach for centos? Where are there examples / docs to follow? Jason -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Sr. Consultant...

On 30/06/16 18:30, Turner,Jonas wrote: > I have been trying to get SSO to work correctly with the following packages, and I appear I am missing something and I was wondering if anyone can help me or point me in the right direction? > > I am currently using the "auth_ntlm_winbind_module" for apache to try and authenticate and was hoping to get SSO to wo...

...related lines in the client's smb.conf results in `getent passwd` ... Use : getent passwd username Check if wbinfo -u works also. As tip, if you try these. id username getent passwd username wbinfo -u | grep username If all work and show your usename, then you should be able to login (sso) on ssh. If your users are only on this server and you dont need to share homedirs. Then you need mk_homedir in pam also. To enable, its simple on ubuntu/debian pam-auth-update --package mkhomedir pam-auth-update And enable mkhomedir ( you can use pam-auth-update --force also ) Greetz, L...

Can someone send me some example configs etc for a 3 nic card , 3 workgroup setup (ie : 192.168.10.x is workgroup sso, 192.168.32.x is nscc , 192.168.64.x is crc) I want each to be basically separate from the next (when used this way does it even pay attention to the workgroup = in the global of each conf file?) so far I have a smb.conf / smb.conf.nscc / smb.conf.sso #======================= Global Setting...

Hello all, I will introduce myself, I'm french, about 34 years old and works for a mechanic company. I've discovered linux in 2006 and I'm really enjoyed by all the things that can be done with. Now this is questions : Is it possible to configure a system of authentication based on SSO samba (and certainly ldap and lot of others things) ? Is it possible to do this without any windows's system which act as any authority ? Wat I mean is that I would like to do this only one linux's computer.... And the last one of my questions : Could you help me ? Thanks In advance fo...

Hi, I think it is great that samba4 has a single sign on solution for Windows platforms and it seems to work well too, but I am wondering is it possible to do the same for a Linux environment? I have been studying how to implement single sign on using the Ubuntu way through this document: https://help.ubuntu.com/community/SingleSignOn and I am wondering if I can do the same with samba4 where the

...mba/smb.conf /etc/krb5.conf /etc/ssh/sshd_config Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Harpoon [mailto:harp00n at protonmail.com] > Verzonden: vrijdag 18 januari 2019 7:15 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] SSH SSO without keytab file > > > I was caught up in another issue so could't reply earlier. No problem at all, so are we ;-) > > > OS? > Debian stretch on all nodes. > > > > Samba version? > Version 4.5.12-Debian > > > > AD or member setup? > I...

...blem that I've never been able to solve; when I attempt to connect to a remote file server, while logged on to the CentOS 8 system using a domain account, it asks for credentials. Theoretically, this should work as it's just Kerberos. Can anyone point me at resources on what is needed for SSO to domain resources to work properly? This may be related to another issue that I'm seeing; I don't see the CentOS 8 user logon event (event ID 4624) on the Domain Controller. I see lots of logon events for the computer account, but none for the user account. Thank you, Dominic L. Hilsb...

Hai, Lets start here. Handy for us to know. OS? Samba version? AD or member setup? And I suggest, set this in the ssh server. # GSSAPI options GSSAPIAuthentication yes Restart the ssh server and try to SSO login. If its a AD server this should work. Yes, you dont get home dir etc, end up in / after login, but lets check if this works. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Harpoon via samba > Verzonden: d...

...(in an unreadable unicode hash). In other words, >AD must be in charge. This is not to say that you could not setup an >external ldap server and sync users & passwords between it and AD, but >it will be, in my opinion, a lot of work for little return, especially >as there are other SSO providers that work with AD directly. I see, there's the reason that I struggle with this so much: so this idea has to be put on hold for now. ...but thinking of the broader picture: are there any plans to make this even work or AD will "have to be in charge" in the foreseeable futu...

...words are stored (in an unreadable unicode hash). In other words, AD must be in charge. This is not to say that you could not setup an external ldap server and sync users & passwords between it and AD, but it will be, in my opinion, a lot of work for little return, especially as there are other SSO providers that work with AD directly. Rowland

...ec_context() failed: An unsupported mechanism was requested (, Unknown error) [headers:debug] mod_headers.c(900): AH01503: headers: ap_headers_error_filter() [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of <RequireAny>: granted, referer: https://six.***********.com/sso [authz_core:debug] mod_authz_core.c(809): AH01626: authorization result of Require all granted: granted, referer: https://six.***********.com/sso [authz_c...

Announcement: The self service can be configured for passwordless SSO with Okta/OpenID. PHP 8.3 is supported and a new cron job can deactivate inactive accounts based on lastBind overlay data. This is a test version. Please report any issues till 2024-03-12. Full changelog: https://www.ldap-account-manager.org/lamcms/changelog Download: https://www.ldap-acco...

Announcement: The self service can be configured for passwordless SSO with Okta/OpenID. PHP 8.3 is supported and a new cron job can deactivate inactive accounts based on lastBind overlay data. There is also a security fix included. Full changelog: https://www.ldap-account-manager.org/lamcms/changelog Download: https://www.ldap-account-manager.org/lamcms/relea...

Dear list members, i am trying to implement SSO solution on my windows network. Right now, for testing purposes, i have setted a kerberos server to authenticate my users. Using this kerberos server, i am able to log on any of my unix workstations. Users information is retrieve from nis and the authentication process is performed by keberos on it...

.... 2) Use gssapi and PAM (thus allowing using a kerberos password). But the extrafields feature isn't available with PAM passdb driver, so again the proxy won't work. The case for NTLM would fall into the first case, I think. Am I right regarding this scenario? Is there a way I could make SSO and proxying work? I'm currently using dovecot 2.0.16 (had to patch it to increment LOGIN_MAX_INBUF_SIZE to 4096 for GSSAPI to work, as I read somewhere in this list), but I could upgrade to a newer version if that allows all this to work. Thanks!