similar to: X.509 support in ssh (revisited)

Hi all, Am trying to find a way to disable SSLv3 protocol in smb.conf on Samba4. I am using the following: tls enabled = yes tls keyfile = tls/myKey.pem tls certfile = tls/myCert.pem tls cafile = With a self-signed cert. But when I remote connect from another host using: openssl s_client -showcerts -connect samba4-dc:636 -ssl3 I get a successful

Hello all, What are the instructions for making an SSL cert for Dovecot IMAPS? Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect. Thank you, method 1 : self signed openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout mykey.key -out mycert.pem method 2 : Let's Encrypt (LE) CA Created with Certbot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've recently set up a Red Hat Enterprise Linux 4 WS server, and decided to try using Dovecot as my IMAP server, as I was impressed with the dedication to security that seems to be the core development goal. I'm really happy with it, but I can't get it to work with a self-signed cert. Normally, on a RHEL system, you just go into

Good day All I am re proposing this topic as it keeps happening in our enviroment and is creating some trouble now. I have 1 samba file share server, and a different samba4 AD server. the file server has been recently updated to Ubuntu 14 and its native samba 4.1.6. The samba4 AD is on Ubuntu 14 and on sernet-samba 4.2.2. what happens is that every 4~5 days the file share server loses randomly

Samba - General mailing list wrote > On Mon, 16 Jan 2017 09:07:35 -0800 (PST) > rawi via samba < > samba at .samba > > wrote: > >> Samba - General mailing list wrote >> >> [2017/01/11 16:42:34.522067, 1] >> >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) >> >> gss_accept_sec_context failed with [

Hello,     Looking up a users group membership I'm showing different results on each DC. UID and GID mapping appears consistent but not all group membership is displayed. I've verified idmap.ldb is backup up and copied over to the other DC's. I do notice when taking a hot backup of idmap.ldb, the file size is dramatically smaller than the original. Using Microsoft RSAT to view

> > I am running Samba Version 4.1.6. > > > > I have a PDC and two BDC setup. > > > > I have a specific computer named eds, it is a Windows 7 Pro box, When > > I add it to the domain everything works normally and it works well. > > Domain users can login, and they have the proper permissions, but am > > seeing two problems. > > > > 1)

Hello, Thanks for your answer. I read this Wiki tip, but it does not fit, as I serve emails for several domains, each using its iwn (potentioally enciphered) private key. I thus need to use the directive as port of a local_name block. I tried to create 2 blocks in 2 different files automatically loaded from conf.d: ### private.conf ### <-- prevented read permission for other than root:root

Hello I have a problem with my Windows 10 drive connections dropping every 24 hours, very briefly. It's enough to cause me to be unable to save my file, or access a geodatabase. I have followed much trouble shooting and I believe that its due to the KDC Service ticket lifetime expiring, I have it set for 24 hours in smb.conf. I have a Samba 4.9 DC and an Ubuntu 18.04 member file

On Saturday, April 18, 2020 5:42:11 PM CEST Joshua C. Colp wrote: > On Sat, Apr 18, 2020 at 8:47 AM hw <hw at gc-24.de> wrote: > > Hi, > > > > how do I make a bug report? I filled in the form to make a report and > > https://issues.asterisk.org/jira/issues/?filter=-2 still shows no issues > > reported by me. > > If successful then JIRA will redirect

On 16/10/2017 18:18, Rowland Penny wrote: > > 'workgroup' is not the netbios name, it is the NetBIOS domain name. > The workgroup should also not have a dot in it, 'DOMAIN.LAN' looks > suspiciously like a dns and realm name. > Indeed i lacked of precision, purpose of the post was more "change NetBIOS domain name during clasicupgrade". DOMAIN.LAN is the

On 5/1/24 17:51, Peter Carlson via samba wrote: > > On 5/1/24 17:32, Peter Carlson via samba wrote: >> >>>>>> In an ideal world, the Samba dns server (be it the internal or >>>>>> Bind9) should just be responsible for the AD domain and forward >>>>>> anything unknown to another dns server (which is how dns servers

If I were guessing, based on some experience with certificate usage in other apps, concatenate your certificate and intermediate certificates into a single file which is then your "tls certfile" then point "tls cafile" to your issuers proper CA or just to your distro's CA bundle, e.g /etc/pki/tls/certs/ca-bundle.crt. Nick On 06/08/2020 16:36, MAS Jean-Louis via samba

Hello, I'm trying to set up a sendmail server on 4.8 that supports auth-based relaying. I followed the procedures at http://puresimplicity.net/~hemi/freebsd/sendmail.html, and aside from having to run makes manually in the library directories, I had no difficulty. I did not use the rebuild world recommendation, though. Everything is up and running, but whenever I try to send mail

Hello, This is a selfsigned cert. Both of the below methods were used. May I ask for 1. pointer to info setting up "intermediate certs" and where the certfile goes? The objective is to generate a self-signed cert and use it for just internal use with IMAPS dovecot. Separately, what are your thoughts as to why evolution works and thunderbird does not? Thank you, ==1 openssl

Hi, how do I make a bug report? I filled in the form to make a report and https://issues.asterisk.org/jira/issues/?filter=-2 still shows no issues reported by me. If someone knows how to get asterisk to re-register when using pjsip after the registration shows as Rejected, like after the internet connection to the VOIP provider goes away (and comes back), please let me know. This bug makes

Rowland, yes, they are equal except for FSMO. These can be only dedicated to one DC. Wayne, why do you use parameters for AD DC (use rfc2307 yes) and for member servers (idmap schema etc) in one conf? Tim Am 14. Januar 2015 20:25:50 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 14/01/15 19:14, Wayne Andersen wrote: >>>> I am running Samba Version 4.1.6.

As this is my first message to this ML: Hello! I am using a password-protected SSL key for my dovecot MDA. When I tried to use the ssl_key_password configuration directive as follow: ssl_key_password = </path/to/passfile it did not work as I logged the following: dovecot: imap-login: Error: SSL: Stacked error: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt dovecot:

Samba - General mailing list wrote > On Tue, 17 Jan 2017 03:03:28 -0800 (PST) > rawi via samba &lt; > samba at .samba > &gt; wrote: > >> Samba - General mailing list wrote >> >> Rowland, thank you >> >> Please note the comments starting with two '#'. They give info about >> erroneous behavior I encontered. >> >>

Hello, A very simple question but I am stuck. I have an excel file each row is an address. However, I cannot make geocode read each line and come up with the latitude longitude. Could you please correct my code? library(ggmap) X<-c (2 Afxentiou Ampelokipi Thessaloniki Greece, 2 Afxentiou Ampelokipi Thessaloniki Greece, 4 Afxentiou Ampelokipi Thessaloniki Greece, 55 Agathonos