similar to: [Bug 1276] Link stage fails when gssapi exists

http://bugzilla.mindrot.org/show_bug.cgi?id=635 ------- Additional Comments From mmokrejs at natur.cuni.cz 2003-10-17 21:13 ------- Please commit the patch http://bugzilla.mindrot.org/attachment.cgi?id=396&action=view and close this bug. KRB5 does not work, but I don't care anymore as there's krb4 patch from ftp://ftp.mcc.ac.uk/pub/misc/ssh/ . :) Thanks! ------- You are

In the latest snapshot's configure file, there is a K5LIBS="`$KRB5CONF --libs gssapi | sed 's/-L[^- ]*//g'`" which doesn't work well on my system: $ krb5-config --libs gssapi -L/opt/heimdal-0.6/lib -lgssapi -lkrb5 -lasn1 -L/opt/lib -lcrypto -lroken Please consider changing it to K5LIBS="`$KRB5CONF --libs gssapi | sed 's/-L[^ ]*//g'`" if that

I just tried to build the 4.7p1 on AIX 5.2, with Kerberos 5 enabled, using the IBM Kerberos implementation (krb5.client.rte, krb5.toolkit.adt, etc.) Is this supposed to work, or is the full MIT Kerberos distribution required? IBM provides an older version of OpenSSH (4.3p2), with Kerberos support, but there are some problems with it, and I was hoping the problems would be resolved with

https://bugzilla.mindrot.org/show_bug.cgi?id=2080 Bug ID: 2080 Summary: Add debug statements for gss_krb5_copy_ccache Classification: Unclassified Product: Portable OpenSSH Version: 6.1p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: Kerberos

http://bugzilla.mindrot.org/show_bug.cgi?id=635 Summary: openssh-SNAP-20030903: configure does not work well with heimdal(krb5) Product: Portable OpenSSH Version: -current Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Kerberos support

Hi All, I am using samba 4.2.10+dfsg-0+deb8u3 and have winbind running and joined to a windows AD. When starting winbind everthing works, wbinfo -u, wbinfo -g returns all stuff correct. But after an hour or so this is being shown in the logs: [2016/06/14 19:15:02.239460, 0] ../source3/librpc/crypto/gse.c:341(gse_get_client_auth_token) gss_init_sec_context failed with [ Miscellaneous failure

I review a few other servers, all 4.4.5 works fine. The few i test now with 4.4.6 all the same errors in the logs. The smb.conf of this setup. P.S. This server is accessed only by windows clients so this is why all the shares have : acl_xattr:ignore system acl = yes [global] workgroup = NTDOM security = ADS realm = INTERNAL.DOMAIN.TLD netbios name = MEMBER1 # Prio member

Centos samba version is 3.0.10 which is the package that comes with the disto - is the only way to upgrade to the latest samba 3.0.24 is to recompile the samba source? I have tried "yum update samba" however it says 3.0.10 is the latest so i downloaded 3.0.24 and tried rpm -Uvh or yum localinstall but i get the following dependency errors to # yum install

Hai,   I had some users today that couldnt login. Windows stopped at the “Welcome” screen.     Now, i checked the logs and i noticed a change in winbind. i noticed 2 logs files with increase a 1000% in size.  log.winbindd-idmap and log.wb-NTDOM     Before ( samba 4.4.5 ) log.winbindd-idmap [2016/09/30 11:32:37.040567,  0] ../source3/winbindd/winbindd.c:280(winbindd_sig_term_handler)

Build attempts of the new ssh-openbsd-2003091700 distribution fail like this on OpenBSD 3.2: cc -o sshd sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o sshpty.o sshlogin.o servconf.o serverloop.o uidswap.o auth.o auth1.o auth2.o auth-options.o session.o auth-chall.o auth2-chall.o groupaccess.o auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o auth2-none.o auth2-passwd.o

On 17/05/2020 16:54, James Atwell wrote: > > Strange results on a domain member > > jatwell at osticket:~$ net ads user info administrator -U administrator > Enter administrator's password: > create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for > file /var/run/samba/smb_tmp_krb5.Bgy6b4. Errno Permission denied > That works for me, but on Devuan (Debian

On 5/17/2020 5:29 AM, Rowland penny via samba wrote: > On 17/05/2020 00:24, James Atwell wrote: >>>> So I suppose I still have trouble with my domain. >>>> >>>> root at pfdc1:/# net ads user info administrator -U administrator >>>> >>>> Enter administrator's password: >>>> kerberos_kinit_password SAMBA at SAMBA.LOCAL

hi i am installing scalix mailserver while installing RPM i am getting this error: Failed dependencies: compat-libstdc++-296 is needed by scalix-server-10.0.1.3-1.fc4.i386 libcrypto.so.5 is needed by scalix-server-10.0.1.3-1.fc4.i386 libgssapi_krb5.so.2(gssapi_krb5_2_MIT) is needed by scalix-server-10.0.1.3-1.fc4.i386 libical >= 0.24.RC4.20050413 is needed

On 5/17/2020 1:43 PM, Rowland penny via samba wrote: > On 17/05/2020 16:54, James Atwell wrote: >> >> Strange results on a domain member >> >> jatwell at osticket:~$ net ads user info administrator -U administrator >> Enter administrator's password: >> create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for >> file

On Jan 17, 2017, at 9:57 AM, Douglas E Engert <deengert at gmail.com> wrote: > On 1/16/2017 2:09 PM, Ron Frederick wrote: >> I?m working on an implementation of ?gssapi-with-mic? authentication for my AsyncSSH package and trying to get it to interoperate with OpenSSH. I?ve gotten it working, but there seems to be a discrepancy between the OpenSSH implementation and RFC 4462.

On 11/07/16 13:55, Alex Crow wrote: > Hi List, > > I am currently testing inter-forest trusts between a pair of AD > domains. All DCs and member servers are using Sernet Samba 4.4.5. > > I have set up conditional forwarding in by Bind setup (I'm using > BIND9_DLZ) and all machines can resolve each other. On the DCs, I can > see users from the other side of the trust

this is the proposed gssapi diff against OpenSSH-current (non-portable). note: if this goes in, the old krb5 auth (ssh.com compatible) will be removed. please comment. jakob Index: auth.h =================================================================== RCS file: /home/hack/jakob/mycvs/sshgss/auth.h,v retrieving revision 1.1.1.2 retrieving revision 1.3 diff -u -r1.1.1.2 -r1.3 --- auth.h

> > net ads keytab create -U username > > 8. Verify the contents of the Kerberos keytab file: > > klist -ke > > This is a step I was missing. What is the purpose of the keytab? Can it help > with the default ticket FILE:/tmp/krb5cc_0 expiration? A Kerberos keytab contains Kerberos principals and encrypted keys which can be used to authenticate without entering a

Hi List, I am currently testing inter-forest trusts between a pair of AD domains. All DCs and member servers are using Sernet Samba 4.4.5. I have set up conditional forwarding in by Bind setup (I'm using BIND9_DLZ) and all machines can resolve each other. On the DCs, I can see users from the other side of the trust using wbinfo -u --domain=<other domain>. In addition if I set up ID

Hi All, I am using libsmbclient.so (3.0.25b). But I am getting following error when I try to compile my program. Could any one of you please let me know as how should I go about resolving this error ? Thanks and Regards, Avinash g++ -g -O2 -o GenericCrwl crwl_cmdargs.o crwl_main.o crwl_crawl.o ../thirdparty/libs/libdb_cxx-4.3.so