search for: xca

My ldaptest.php works now. Can't tell the "missing link" so far ... but it seems it's connect via ldaps now (and reading users etc)

Hi All, This Samba release changelog (https://wiki.samba.org/index.php/Updating_Samba#Incorrect_TLS_File_Permissions) specifically mentions a security issue and that that the multiple *.pem files needed for LDAP via TLS all need "special permissions" - and mentions to delete old files without the required permissions to force file renewal. Yet in the official Samba documentation

Hi folks, Does anybody have experience using ADCS in conjunction with Samba? I would like to create certificates using ADCS as a CA to create certificates to be deployed to servers running web applications. It would be very convenient to have joined Windows computers automatically trust certificates issued my own CA instead of having to import certificates manually on every browser on every

...YO, YD, ZO, ZD)) Here is my example: xAB <- as.ts(round(rnorm(10, 0, 1), 2), start = c(1990, 1)) xAC <- as.ts(round(rnorm(10, 0, 1), 2), start = c(1990, 1)) xBA <- as.ts(round(rnorm(10, .75, 1.5), 2), start = c(1990, 1)) xBC <- as.ts(round(rnorm(10, .25, 1.9), 2), start = c(1990, 1)) xCA <- as.ts(round(rnorm(10, 1.5, 2.2), 2), start = c(1990, 1)) xCB <- as.ts(round(rnorm(10, .5, 0.8), 2), start = c(1990, 1)) yA <- as.ts(round(rnorm(10, -0.2, 0.3), 2), start = c(1990, 1)) yB <- as.ts(round(runif(10, -1, 1), 2), start = c(1990, 1)) yC <- as.ts(round(runif(10, -1, 1), 2...

...internet for mobile use. The idea is that clients with a trusted client certificate do not need a password so that I can change my password for Roundcube without having to change passwords on other IMAP clients (Roundcube will connect to localhost without SSL). To do so I did the following: - use XCA (v0.9.3, Windows version) to setup a private root CA with a CRL - export root CA certificate and CRL in PEM format and join them into a ca.pem file (order: certificate, CRL) - configure Dovecot to use the ca.pem file and require a client certificate - use XCA to generate a private key and...

...> [4] "\026\027\030\031\032%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz\x83\x84\x85\x86\x87\x88\x89\x8a\x92\x93\x94\x95\x96\x97\x98\x99\x9a\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xff\xc4" > [5] "\v\xff\xc4"...

...s. Which is in a AD-DC, in my personal opinion, not good, yes it works fine, if you use only 1 DC. With mutliple DC's, you should really think of seting up your own CA. So here you go, a "possible" setup for your sslcert if you use your own CA. A handy tool https://hohnstaedt.de/xca/ , which i personly use. Difficult, naah.. See : https://hohnstaedt.de/xca/index.php/documentation/ Or create the CA yourself with openssl. Or tinyCa , etc lots of options here. My current layout. ls -al /etc/ssl/ total 84 drwxr-xr-x 9 root root 4096 Mar 14 16:15 . drwxr-xr-x 112 root...

I am currently NOT using SSL on my Samba domain. While reading "Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC" and thinking about implementing. I'm having trouble "getting my head" around what certificates go where. Simply put, I am not clear as to generating certificates on the clients and then copy which files to to the server or vice versa? What happens when

...; > Am I correct in understanding that the certificates and keys in > private/tls/ are only meant to enable StartTLS/LDAPS connections? For samba yes, but if you add the RootCA to you computers then you can do with with what you want. Small tip of you want own certs. https://hohnstaedt.de/xca/ but you can use anything you like to generate certs. If you search good in the list, you wil find some user that make lets encrypt work also with dehydrated. > > > Pietro Greetz, Louis

...t; > Per example look here : > > https://www.brightbox.com/blog/2014/03/04/add-cacert-ubuntu-debian/ > > Is that > > dcX:/var/lib/samba/private/tls/ca.pem If YOU created the CA.pem and all server use that one, then yes. Then you should deploy that to all servers and pc.s XCA is a handy tool to manage Certificates, thats the one i use. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: donderdag 27 februari 2020 13:39 > Aan: samba at lists.samba.org > Onde...

Hi, I have zlib compressed strings (example is attached) and would like to decompress them using memDecompress ... I try this: > connection <- file("compressed.txt","r") > compressed <- readLines(connection) > memDecompress(as.raw(compressed),type="g") Error in memDecompress(as.raw(compressed), type = "g") : internal error -3 in

Hi everyone, I have a basic SAMBA setup with a main AD DC ad1 and a backup AD DC ad2, running on Samba 4.5.16-Debian on Raspbian. I would now like to enable LDAPS so my users can authenticate in other non Samba services using Active Directory. From reading the documentation here: https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC I understand that for the most

...t; 'DC=40,DC=30.168.192.in-addr.arpa,CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=de' > [ldap://location-000002.domain.de] > Difference in attribute values: > dnsRecord => > [' > \x00\x0c\x00\x05\xf0\x00\x00\xaf\x00\x00\x00\x00\x00\x0e\x10\x00\x00\x00\x00\xca\xf17\x00\x1e\x03\x0fnxtcloud-000002\tdomain\x02de\x00'] > [' > \x00\x0c\x00\x05\xf0\x00\x00#\x01\x00\x00\x00\x00\x0e\x10\x00\x00\x00\x00\n\xf27\x00\x1e\x03\x0fnxtcloud-000002\tdomain\x02de\x00'] > FAILED > > Comparing: > 'DC=41,DC=30.168.192.in-addr.arpa,CN=Mic...

...quot;, "adjusted", "trend", "irregular", "calendar", "weights", tblnames) if(calendar == "C") tblnames <- c("b1", "d10", "d11", "d12", "d13", "xca", "c17", tblnames) else tblnames <- c("b1", "d10", "d11", "d12", "d13", "c16", "c17", tblnames) } for(i in seq(along = comp)) { series <- read.table(paste(file, ".", tblnames[i], sep =...

Okay, it's done. Here is the file Le mar. 6 ao?t 2019 ? 10:55, Rowland penny via samba <samba at lists.samba.org> a ?crit : > On 06/08/2019 09:36, Guillaume Couvreur wrote: > > it doesn't work, here is the log file > > Nothing there, can you try raising the log level ? > > start by adding: > > log level = 4 > > to smb.conf and restart Samba and

...urandom/random-seed" libguestfs: trace: filesize = 512 libguestfs: trace: truncate "/var/lib/urandom/random-seed" libguestfs: trace: truncate = 0 libguestfs: trace: write_append "/var/lib/urandom/random-seed" "\x87}\x96\x13\xa73\xd6\xc8\x7f\x93\xd0)\x1d\xcd\xf1\xab\xca?`[u\x80\x0b\xd4\xebIwC\xd2\x94\xfcm\xc9!\x0fj\x04\xe9\x92h\xdc\xf5\x07\xc3\xc5\xd4\xae\x1f\xff\xc9\xb0K%\x9f\xad\xff{Y\xbfT\xb2\x92\x0b\x03\xde<\xb2\xfe\xc7\xeb\x01\xb6\xd4!\xdb\xb1\x18\x1d6\xa9\xb9SO#\xae8\xb80\x1b|\xa4\xc3V\xda\x0e%\x81\xc1\x9a\xbfS\xa5\xeb\x94\xb9\xf0{\xe8 \xcb|\x00\xe8\xe2-\...

...quot; > libguestfs: trace: filesize = 512 > libguestfs: trace: truncate "/var/lib/urandom/random-seed" > libguestfs: trace: truncate = 0 > libguestfs: trace: write_append "/var/lib/urandom/random-seed" "\x87}\x96\x13\xa73\xd6\xc8\x7f\x93\xd0)\x1d\xcd\xf1\xab\xca?`[u\x80\x0b\xd4\xebIwC\xd2\x94\xfcm\xc9!\x0fj\x04\xe9\x92h\xdc\xf5\x07\xc3\xc5\xd4\xae\x1f\xff\xc9\xb0K%\x9f\xad\xff{Y\xbfT\xb2\x92\x0b\x03\xde<\xb2\xfe\xc7\xeb\x01\xb6\xd4!\xdb\xb1\x18\x1d6\xa9\xb9SO#\xae8\xb80\x1b|\xa4\xc3V\xda\x0e%\x81\xc1\x9a\xbfS\xa5\xeb\x94\xb9\xf0{\xe8 \xcb|\x00\xe8\xe2-\...

Am Sa., 6. Apr. 2019 um 18:01 Uhr schrieb Rowland Penny via samba < samba at lists.samba.org>: > On Sat, 6 Apr 2019 17:21:26 +0200 > Martin Krämer <mk.maddin at gmail.com> wrote: > > > Hello Rowland, > > > > thanks for your help. > > Below my comments > > > > See here: > > > > > > http://apt.van-belle.nl/ > > >

...t; libguestfs: trace: filesize = 512 >> libguestfs: trace: truncate "/var/lib/urandom/random-seed" >> libguestfs: trace: truncate = 0 >> libguestfs: trace: write_append "/var/lib/urandom/random-seed" "\x87}\x96\x13\xa73\xd6\xc8\x7f\x93\xd0)\x1d\xcd\xf1\xab\xca?`[u\x80\x0b\xd4\xebIwC\xd2\x94\xfcm\xc9!\x0fj\x04\xe9\x92h\xdc\xf5\x07\xc3\xc5\xd4\xae\x1f\xff\xc9\xb0K%\x9f\xad\xff{Y\xbfT\xb2\x92\x0b\x03\xde<\xb2\xfe\xc7\xeb\x01\xb6\xd4!\xdb\xb1\x18\x1d6\xa9\xb9SO#\xae8\xb80\x1b|\xa4\xc3V\xda\x0e%\x81\xc1\x9a\xbfS\xa5\xeb\x94\xb9\xf0{\xe8 \xcb|\x00\xe8\xe2-\...

...IeFvCt+ qctncB8ukgcL1YAxi8lhpkZZO9fIBGwqvffU6W5hk2e3aGzUViHQmAC7FbIU+qIUjiPdoTFG RJCZRrILvBoOicJ8L9YcWsfZCw+/51O9q5XVurNYSY4vhXJHcjnErI/8EPt4n/UQVCj9xl6B r8o6KcuFYaaHuFo5jLzlae6NsMvcrekMqNPf9riEo52QMaRsaV0bnUtpZJPMsSotaG3DEqaJ GSoG0R/l87qYx0yYH4WWQ3gUSdRCpph0xEXTCqs/DRiQn1xh/eUQhkUVYycHyldlcem4WxEf xcA+frclVbm1K+Tb4FIoP6T4FVF+B7xNzEiasfet+hh+SvUerPTUuuaAKpnrZOlib5UPyCCb JCmXqLJufkxPc5ul7ryekI+FoT1UIUr6ACXVg9Oa/HPgnm+hmD3+2lwU5Ewpp8sOxgBzyUda lBAGhyvlKY5uR0tgLwQw+nOWWEOpVPTZZY0/yfa3eWWyuNhPj0Z5aUCpcGAEZE/7SY0hpvEs kvjuhj78emETLVXthgTkU7w8EYLSJ7eyn/2TZshS+Tw73lHcnGhVLW6tvyKax9p4wjxUXTzC 1xXCkWKWQl7...