search for: sspi

Hello When we try to connect to our windows sql servers using windows nt authentication (trusted connection) receive the following error message... cannot generate SSPI context. Do anyone know how to resolve it? Regards

...y the authenticity of the Login ID?" I select "with Windows NT authentication using the Network Login ID" then click on "Next" and got the following error Connection failed SQLState: 'HY000' SQL Server Error: 11002 [Microsoft][ODBC SQL Server Driver]Cannot generare SSPI context I beleive its not the wine issue, its some thing related to authentication i.e with samba, because I have created odbc connections(via wine) in a non MS AD environment, and then I have to select the "with SQL server authentication using a login and password provided by the user"...

I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) Modern versions of MIT kerberos support GSS-SPNEGO natively, but are only willing to negotiate for kerberos ticket...

Has anyone successfully built openssh with MIT's KfW (Kerberos for Windows) under Cygwin? Is it even possible? Searching around I found one reference to Nicolas Williams attempting to do this several years ago, but no indication of success and nothing more recent. http://www.cygwin.com/ml/cygwin/2002-01/msg00100.html What about compiling openssh using a native windows compiler? Is

...2 NICs, 2 IPs and our DNS servers have both entries (same name for 2 IPs). Since kerberos is not working around here (tried to fix it for about 3 weeks, then gave up) I found my workaround: I use NetBIOS alias for my server, all clients use this alias for samba access and they authenticate thgrough SSPI. My problem is that only one of my NICs seems to work : ifconfig | grep RX\ bytes gives: RX bytes:2906637535 (2771.9 Mb) TX bytes:4256133463 (4058.9 Mb) RX bytes:13805476 (13.1 Mb) TX bytes:546 (546.0 b) RX bytes:151532631 (144.5 Mb) TX bytes:151532631 (144.5 Mb)...

...indows logon credentials.. It appears to do an NTLM exchange with a blank password and then prompt for a password and then do an exchange with the given password. It does the same thing if PLAIN authentication is used. I'm starting to suspect MS deliberately hobbled outlook so that it uses the SSPI to exchange an entered password but not ever the logon credentials.. Does anyone know different? What a topsy-turvy world when thunderbird using SSPI works better on Windows than outlook. :| Thanks, Jason

Will there be a german translation of lartc? ________________________________________________________________________ Sebastian Spies <sspies@sloc.de> <sspies@rbg.informatik.tu-darmstadt.de> 6bone-PERSON-HDL: SP24-6BONE feel free to send me encrypted mails (GPG): 0x4AE404F3 available from: subkey.pgp.net

...and password, I just hit enter on the domain request and, after entering the password, I'm connected. With winexe I can connect to two of them with a command like, "winexe -U .\\user%password //machine systeminfo". But with the third, I get this response: "[ERROR][com.winpr.sspi.Kerberos] - [kerberos_AcquireCredentialsHandleA]: krb5_parse_name (Configuration file does not specify default realm [-1765328160])". Some online references tell me to be sure the correct default domain is in /etc/krb5.conf and, of course, there is no default domain specified in that file....

Is there a way to run sshd on a windows 2000 server and have ssh clients authenticate to it using domain level authentication? Mike

Client: Windows XP pro, in an AD 2003 domain, running SecureCRT 4.1.11. I've also got MIT Kerberos for Windows installed on the client, and Leash shows that my tickets ARE forwardable. Server: Solaris 8 Sparc server, with MIT Kerberos (krb5-1.4.1), and OpenSSH 4.0p1. I've created two AD accounts, and extracted keys mapped to "host/hostname.domainname.com at REALM.COM" and

...n it can never see it. I'm looking to avoid replacing the convenience functions like sqlSave(). [1] https://stat.ethz.ch/pipermail/r-help/2009-March/190033.html > library(RODBC) > channel <- odbcDriverConnect("driver=SQL Server;server=foo;Initial Catalog=bar;Integrated Security=SSPI;") > x<-data.frame(1:10) > colnames(x) <-c("x") > sqlSave(channel, x, "#x", verbose=TRUE) Query: CREATE TABLE "#x" ("rownames" varchar(255), "x" int) Error in sqlColumns(channel, tablename) : ?#x?: table not found on channel...

...ogin). I sniffed the plain communication and the "a0000 AUTHENTICATE GSSAPI" line has around 1873 chars. When I enlarged the LOGIN_MAX_INBUF_SIZE to 2048 the problem disappeared and I'm now able to login to dovecot using gssapi in mutt client. I use also thunderbird (on windows with sspi) and it works ok with LOGIN_MAX_INBUF_SIZE = 1024. Does anybody have any idea why it's so large or how to fix it another way? It's terrible to patch each version of dovecot rpm package. Or is there any possibility to change constant? I have no idea how much this should affect memory usage....

Greetings all, To all the good souls that happen to know NTLM and Rails.... Short version: -------------- - I''m looking for server code to extract credentials through NTLM dialog with the client (IE) - I found nothing usable/useful (as they both implement the client side code) in - rubyntlm on rubyforge - lib ntlm-ruby by Jonathan Bastien-Filiatrau LONG version:

...e are many more issues it might start to get politically difficult *not* to blame the DCs, and I don't want to point fingers at Samba. Are there any known issues with running complex Windows stacks on top of Samba 4 DCs (eg: Hyper-V clusters with migration, 3rd party Windows software that uses SSPI from the MSSQL client libraries)? Perhaps some intricacies of AD that Heimdal doesn't mirror? Can anyone on the list give me a confidence boost, something like "Yes Luke, I've got forests of Samba 4 DCs behind several Hyper-V Clusters with live migration, MSSQL clients and servers all...

...ses a totally different set of rules to determine the principle all hope seems to be lost to have a single service principle name for an imap server :( I was able to make things work for my environment using only the auth_gssapi_hostname feature if only MIT kerberos was used, but as soon as windows SSPI was involved it choose a different hostname. Thus we want to have GSSAPI to match any service principle in the keytab. As far as security concerns go, the admin can configure the keytab for dovecot to be seperate from the system key tab and contain only valid imap SPNs, but in truth it probably d...

...t; > difficult *not* to blame the DCs, and I don't want to point fingers at > > Samba. > > > > Are there any known issues with running complex Windows stacks on top of > > Samba 4 DCs (eg: Hyper-V clusters with migration, 3rd party Windows > > software that uses SSPI from the MSSQL client libraries)? Perhaps some > > intricacies of AD that Heimdal doesn't mirror? > > > This would seem to be interesting information, but of limited value. > Unless you have a set of specific errors (error codes, return messages, > etc) that your windows pr...

I?m knew to rewrites on apache in combination with mongrelcluster. It?s urgend for me, because the server has an loadaverage about 10 :-((((( Ok so I?m using 3 mongrel-server on an mongrelcluster. The Loadbalancer ist apache I think, that my rewrites are not correct. Please can anybody check my rewrites ? That?s in my /etc/apache2/conf.d/rails.proxy_cluster.conf <Proxy

...ncode is ok because if I change some characters in the > encoded string, It doesn't show me CN=PC00... in the response. > > C:\Users\denis.morejon.DTCF.002>ldifde -i -f rename.ldif -s zentyal1 > Conect?ndose a "zentyal1" > Iniciando sesi?n como usuario actual usando SSPI > Importando directorio desde el archivo "rename.ldif" > La compatibilidad con compromiso relajado no est? disponible en el > servidor; (*Support for relaxed commitment is not available on the > server) > el compromiso relajado se deshabilitar?. (relaxed commitment will b...

...y more issues it might start to get politically difficult *not* to blame the DCs, and I don't want to point fingers at Samba. > > Are there any known issues with running complex Windows stacks on top of Samba 4 DCs (eg: Hyper-V clusters with migration, 3rd party Windows software that uses SSPI from the MSSQL client libraries)? Perhaps some intricacies of AD that Heimdal doesn't mirror? > This would seem to be interesting information, but of limited value. Unless you have a set of specific errors (error codes, return messages, etc) that your windows programs are able to log or sh...

I get the following error message when trying to connect to ms sql server: Open OLE error code:80040E4D in Microsoft OLE DB Provider for SQL Server Login failed for user ''XXXXXXXX''. HRESULT error code:0x80020009 Exception occurred. I google''d for those error codes but nothing useful so far. To set up ruby for ms sql server, I followed the