Displaying 20 results from an estimated 2000 matches similar to: "VS: WinXP allows login to expired/forbidden accounts"
2002 Jun 03
1
WinXP allows login to expired/forbidden accounts
Hi,
I've stumbled upon this problem while trying to limit access to specific
machine to specific domain users. I did it by setting Samba to obey PAM
restrictions, and then using the pam_access PAM module ('account' clause)
to do user validation (described below).
On Win2000, this works fine - if an unauthorized user tries to login,
Win2000 says 'Account not permitted to
2002 Aug 21
0
Tenure track positions in Statistics
This email is forwarded on behalf of Dr. Herbert Gaskill.
Please do not reply to me but direct enquiries to
Ms Wanda Heath <wanda at math.mun.ca> or Dr. Herbert Gaskill
<head at math.mun.ca>. Apologies for cross-posting.
MEMORIAL UNIVERSITY OF NEWFOUNDLAND
St. John's, Newfoundland, Canada A1C 5S7
www.math.mun.ca
DEPARTMENT OF MATHEMATICS AND STATISTICS
The Department of
2006 Nov 21
1
Samba selectively obeying pam restrictions
Having a difficult problem getting my pam_access.so module enforced on a 3.0.22 version of Samba.
Here is my /etc/pam.d/samba file:
auth required pam_winbind.so debug
account required pam_access.so
account sufficient pam_winbind.so debug
account include system-auth
session include system-auth
session required pam_winbind.so debug
My
2006 Nov 29
1
pam_access not working?
Hi,
I am having a strange problem, where I cannot get pam_access to work as
intended. I have placed the following line in /etc/pam.d/system-auth
account required /lib/security/pam_access.so
Then, in /etc/security/access.conf, I have put the following line:
-:mok:10.14.44.104
I.e. I should prevent myself from logging on from host 10.14.44.104.
However, when I try to log on (using
2016 Jan 20
1
linking icecast to ios and android phones
.PLS files should work for iOS devices. See sample text:
[playlist]
numberofentries=1
File1=http://91.121.91.172:31090/LG73
Title1=LG73 Vancouver's Best Music Mix!
Length1=-1
Version=2
On Wed, Jan 20, 2016 at 1:27 PM, Holden Stanford <hstanford1 at gmail.com>
wrote:
> You can create a .m3u or .mp3 container linking to the stream URL. I can't
> remember the exact tags
2009 Mar 20
1
pam_access.so restrictions not working - syntax errors?
Hi folks,
I want to restrict root access via ssh to certain (internal) hosts.
That is what pam_access.so is for, I thought, so I configured:
in /etc/security/access.conf I added (nothing in there before):
+ : root : 192.168.123.0/24 10.72.0.0/16
- : root : ALL
in /etc/pam.d/ssh I added at the end:
account required pam_access.so
Then I restarted the ssh server.
Basically, this kinda works.
2012 Oct 10
1
CentOS6 and pam_access
I just realised that pam_access no longer works under CentOS6 - or it works
differently from CentOS5.
Under CentOS5, I used this configuration to restrict access to root only:
# cat /etc/security/access.conf
+ : root : ALL
- : ALL : ALL
# cat /etc/pam.d/system-auth-ac
...
account required pam_access.so
account required pam_unix.so
account sufficient pam_localuser.so
2010 Sep 14
1
cron breaking when enabling ldap
Hi
When I enable a box to do authentication using LDAP it breaks cron for users like jboss.
I get the following in /var/log/secure
Sep 14 15:25:01 exoipatest01 crond[7214]: pam_access(crond:account): access denied for user `jboss' from `cron'
I have the following in /etc/ldap.conf
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,tomcat,radiusd,news,mailman,nscd,jboss
2003 Nov 07
2
samba + user/host authentification
hi, i'm using suse 7.3 with samba 2.2.8 as PDC and openldap for
authentification in network with wfw-, winnt-, w2k-clients. everything works
fine.
because not every client has the same configuration (same progs, same
path's, hardware...), i got problems, if a user dosn't login from his
ordinary workstation, his roaming-profile doesn't work fine.
now, how can i force users only
2002 Apr 12
1
NT MD4 password check failed
Hello All,
Well, I've admitted defeat. I've installed Samba 2.2.3a on a Solaris 7
machine and am trying to connect to it from a Win2K SP2 PC. I am using
encrypted passwords. The same user (darren) exists on the pc (called
'plm') and the samba server ('sparky2'). The password for this user is
the same on the PC, and the /etc/shadow and /apps/samba/private/smbpasswd
2005 Oct 21
0
a gotcha with cron and 4.2
the new cron in 4.2 activates the pam access module. if you have been
using that to control ssh access or other things, now suddently cron is
going to use it as well. this only seems to affect user crontabs and
crontabs in /etc/cron.d. from some digging around i was able to determine
that cron sets the tty to 'cron', so you can just add a line like:
+:ALL:cron
to
2004 Sep 04
0
pam_access
I've discoverd when I add the line pam_access for access
authentication, It always denys a login, even when access.conf accepts
everything. I've tested this with other programs, and they work okay.
Any ideas?
2006 Nov 14
2
isolinux menu32 (Re: Problems booting on Intel i9x5 motherboards.)
See: http://syslinux.zytor.com/archives/2006-May/006887.html
I think I've tracked the problem down a bit more specifically.
In edd.S when the kernel calls int 0x13 with %dl=80 [primary disk] &
%al=1 [read one sector] and ah set to READ_SECTORS it never returns.
However, the following code [which does drive diagnostics] works.
mov $0x7E, %al
call prtchr
movw $0x0000, %ax
movb
2004 Sep 20
2
late or replayed packet warning
I get a lot of these in my log, especially when I am moving lots of traffic
across the vpn:
Sep 20 10:45:11 titan tinc.tdvpns[16152]: Got late or replayed packet from
holden (xx.yy.zz.ww port 655), seqno 37609, last received 37610
(sequence numbers displayed generally differ by only one)
What exactly is this trying to say? Surely this doesn't simply mean that
the udp packets arrived in a
2002 Nov 24
1
unif_rand() and exp_rand()
Dear R-users:
Recently I found my simulation run into an apparently infinite loop.
After a few days of tracing and chasing, I believe it is caused by
the built-in unif_rand() and exp_rand() functions: unif_rand() can
produce a value of 0 which causes the following part of exp_rand()
running into an infinity loop
u = unif_rand();
for (;;) {
u += u;
if (u > 1.0)
break;
2003 Dec 30
4
Assignments in loops
Greetings all. Any help with the following would be appreciated.
I want to create a data frame for each file in a directory. The following
code does not work but it may show what I am trying to do:
carmakes <- c('BMW','Chrysler','Citroen','Fiat','Ford','Holden','Honda',
2009 Jul 23
1
ggplot2 : commands on one line vs two lines.
I have just started using ggplot2 and I seem to be doing something stupid
in writing ggplot2 commands on more than one line.
In the example below the commands on one line are working fine, but as
soon as I put them on two lines I get an error. Can any one point out
what I am doing wrong? It must be something blindingly simple.
Thanks
Example
2005 Jan 27
2
Samba not recognizing secondary groups
Hi all. I'm having a strange issue with a server running Samba 3.0.2a.
The server has a single share, and under that are subfolders that
contain documents. Each subfolder is owned by a different
folder-specific group, and users belong to the groups that own the
folders to which they need access.
But suddenly one user can't access any folders. Windows (the client)
suggests that she
2005 Jan 18
1
Users with changed passwords can't log on remotely (but can locally)
(I submitted this last week, but hopefully someone who knows the
intricacies of secrets.tdb and machine migrations will read this ...)
I migrated a complete Samba configuration from an old server to a new
one, including the entire /etc/samba directory and all user accounts.
At first, no clients were aware that anything had changed. But when I
changed the passwords of two users they suddenly
2012 Dec 29
5
Users list email totals by year .
2003, 24471
2004, 48608
2005, 59116
2006, 41215
2007, 26414
2008, 20746
2009, 18304
2010, 14948
2011, 11588
2012, 7542
--
+------------------------------------------------------------------+
| James W. Laferriere | System Techniques | Give me VMS |
| Network&System Engineer | 3237 Holden Road | Give me Linux |
| babydr at baby-dragons.com | Fairbanks, AK. 99709 | only on