Displaying 7 results from an estimated 7 matches for "theinside".
2017 Dec 30
1
spice server and GSSAPI
...KVMs and I can
work with them like I would if I was running virt-manager over ssh with
X forwarding. The only that doesn't work is viewing the consoles.
Details:
- my host is a fully updated CentOS 7 system
- libvirtd is set to listen for tcp connections
- I added the service spice/kvmhost01.theinside.rnr
- I created a keytab for the above and put it on kvmhost01 in
/etc/qemu-kvm/krb5.tab
- the above file has owner:group set to qemu:root with perms 600
- I have the following in /etc/sasl2/qemu-kvm.conf
mech_list: gssapi
keytab: /etc/qemu-kvm/krb5.tab
- I have the following in /etc/libv...
2015 Dec 13
2
Dovecot SASL and GSSAPI (IPA)
...uth client connected (pid=0)
Dec 12 22:31:54 mailman02 dovecot: auth: Debug: client in: AUTH 1 GSSAPI service=smtp nologin lip=10.200.9.14 rip=10.200.5.100 secured resp=<hidden>
Dec 12 22:31:54 mailman02 dovecot: auth: Debug: gssapi(?,10.200.5.100): Obtaining credentials for smtp at mailman02.theinside.rnr
Dec 12 22:31:54 mailman02 dovecot: auth: gssapi(?,10.200.5.100): While processing incoming data: Unspecified GSS failure. Minor code may provide more information
Dec 12 22:31:54 mailman02 dovecot: auth: gssapi(?,10.200.5.100): While processing incoming data: Wrong principal in request
Dec 12 2...
2015 Sep 07
3
Dovecot and IPA
Hi Ranbir
I've worked with freeIPA a little, but without your doveconf or some other
context information, it is difficult to identify the issue.
Regards,
Manuel Delgado
-----------------------------------------------------------
*Usuario Linux* *#520940 <http://counter.li.org/>*
Mag. Computaci?n e Inform?tica
Universidad de Costa Rica
Centro de Inform?tica
On Mon, Sep 7, 2015 at
2015 Sep 07
0
Dovecot and IPA
...other
> context information, it is difficult to identify the issue.
Crap...I meant to include that. Here's what it looks like when I enable
GSSAPI:
# 2.2.10: /etc/dovecot/dovecot.conf
# OS: Linux 3.10.0-229.11.1.el7.x86_64 x86_64 CentOS Linux release 7.1.1503 (Core)
auth_default_realm = theinside.rnr
auth_gssapi_hostname = mailman02.theinside.rnr
auth_krb5_keytab = /etc/imap.keytab
auth_mechanisms = gssapi
auth_realms = theinside.rnr
hostname = imap.thesandhufamily.ca
listen = 1.1.0.0
mail_gid = virtual
mail_location = maildir:~/Maildir
mail_plugins = quota acl
mail_uid = virtual
managesiev...
2015 Sep 08
2
Dovecot and IPA
...cmqWKFL9
foDag8BqF5je64ekOG0UCpcDfT4v3ZwNLLhZL/Fo0THb+xD09LJcGM2AtTzRMFFV8V7YHSV
L1q+/X9exo0mxU6tMeHmXhMDq71PDcqB5zKdCpTmhakqny5x/vLM47xlnzj+oqwgnY
1441680001.087338 + BQQF/wAMAAAAAAAAJbP26AH///8IAt4FH+6nauwY4Oc=
1441680001.096713 B00001 NO [UNAVAILABLE] Temporary authentication
failure. [mailman02.theinside.rnr:2015-09-08 02:40:01]
1441680001.096726 * OK Waiting for authentication process to respond..
Ranbir
--
Kanwar R.S. Sandhu
2015 Sep 07
2
Dovecot and IPA
On Mon, 2015-09-07 at 20:37 +0300, Timo Sirainen wrote:
> It says "tried to use unsupported auth mechanism". In your later mail
> you say that telnet shows AUTH=GSSAPI in capabilities. So that would
> mean that the client isn't using AUTHENTICATE GSSAPI but something
> else.
I'd been considering that perhaps my version of Evolution was too old,
so I upgraded from
2015 Sep 08
0
Dovecot and IPA
...change password
>>
>> paste it
>>
>> is safe
>
> Here's the in rawlog:
>
> 1441680001.046492 B00001 AUTHENTICATE GSSAPI
So it is using AUTHENTICATE GSSAPI.
> 1441680001.096713 B00001 NO [UNAVAILABLE] Temporary authentication
> failure. [mailman02.theinside.rnr:2015-09-08 02:40:01]
> 1441680001.096726 * OK Waiting for authentication process to respond..
I guess it's now crashing with this:
auth: Panic: file auth-request.c: line 733 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL)
That's...