similar to: Compile error with kerberos and samba

Hello, I've the following problem. I tried to compile samba3.0alpha20 with the ads support option. Before that I have installed kerberos5v1.2.6! What is wrong! Have anyone an answer, thanks! Compiling libsmb/trust_passwd.c Compiling libads/ldap.c Compiling libads/ldap_printer.c Compiling libads/sasl.c Compiling libads/krb5_setpw.c Compiling libads/kerberos.c libads/kerberos.c: In function

Hi I try to compile samba-3.0-alpha19 on my Linux-Box (SuSE 8.0, Kernel 2.4.18, cc 2.95.3, make 3.79.1). After "make" I got this errors: Linking bin/smbd /usr/src/krb5-1.2.5/src/lib/libgssapi_krb5.a(accept_sec_context.o): In function `rd_and_store_for_creds': accept_sec_context.o(.text+0x7b): undefined reference to `krb5_rd_cred' accept_sec_context.o(.text+0xdb): undefined

Hi list, I'm trying to compile samba3.0alpha20 on a SOLARIS 7 machine, everything looks quite OK until I end up with this, there seems to be a couple of kerberos related functions missing (?) Undefined first referenced symbol in file krb5_sname_to_principal /usr/krb5-1.2.6/lib/libgssapi_krb5.a(acquire_cred.o) krb5_free_cksumtypes

Hey, I am just wondering how you enforce security (such as permissions) on local workstations while running Samba 2.2.x as a PDC with 2K/XP workstations? As some of us don't have or want 2000 Server to enforce things like policies etc... how do you all do it. E.g. If we want 'Administrator' to have access to all start menu etc... yet standard users to have only programs, no settings

Hi, I'm trying to get Samba-2.1.0-prealpha compiled but I always get stuck at the following error message: root@pc2:/usr/src/samba-2.1.0-prealpha/source > make Using LIBS = -lcrypt Linking bin/rpcclient rpcclient/rpcclient.o: In function `process': rpcclient/rpcclient.o(.text+0x4c3): undefined reference to `wait_keyboard' collect2: ld returned 1 exit status make: ***

As far as I know this patch has no security implications -- I don't believe that allowing sshd to use get_local_name() (in canohost.c) on a connected socket to determine it's own fqdn will allow a malicious client (or router or dns server) to make it come to the wrong conclusion. But please let me know if you think I'm wrong. Please also let me know if you're just not interested

The Kerberos V support may still fail on hosts with two or more interfaces. Regards Markus -------------- next part -------------- *** auth-krb5.c.orig Mon May 20 11:51:57 2002 --- auth-krb5.c Mon May 20 11:53:34 2002 *************** *** 38,43 **** --- 38,44 ---- #include "servconf.h" #include "uidswap.h" #include "auth.h" + #include "canohost.h"

Why wasn't there a FreeBSD security alert for Kerberos 5? Does FreeBSD use the MIT implementation? I got an email from CERT about this. See the attached message below. -- Daniel Rudy >From - Sat Sep 04 03:22:15 2004 X-UIDL: a8f31551eb03ca144862bddc8ccce266 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Apparently-To: dcrudy@pacbell.net via 206.190.37.79; Fri, 03 Sep 2004

I've been banging my head against this for a few days so I thought I'd see if anyone has an idea of what's going on. AIX 5.3 OpenSSH 5.1p1 MIT Kerberos 1.6.3 zlib 1.2.3 Built with CC=cc and LDFLAGS=-brtl When the client attempts to enter their kerberos password the daemon rejects it with the following message: debug1: Kerberos password authentication failed: Not enough space. If

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Since we now have a fix of sorts for CVE-2012-1586, it seems like as good a time as any to do a new release. Go forth, download and build cifs-utils-5.4. Highlights: * the "rootsbindir" can now be specified at configure time * mount.cifs now supports the -s option by passing "sloppy" to the kernel in the options string *

http://bugzilla.mindrot.org/show_bug.cgi?id=1318 Summary: There is no way to really cancel dns queries from the client Product: Portable OpenSSH Version: 4.3p2 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Release Announcements --------------------- This is the latest stable release of the Samba 4.20 release series. LDAP TLS/SASL channel binding support ------------------------------------- The ldap server supports SASL binds with kerberos or NTLMSSP over TLS connections now (either ldaps or starttls). Setups where 'ldap server require strong auth = allow_sasl_over_tls' was required

Hi, We were unable to use nsupdate-gss to a Windows 2003 Active Directory. I modified the nsupdate-gss script to use the local Domain Controller to do the DNS update and then it works (albeit giving a TKEY integrity error). The patch attached adds a 5th argument to the command line to specify the local Domain Controller to send the DNS update to. Usage: nsupdate-gss.pl HOST DOMAIN IP TTL

Hi, I used Samba 4.0.5 in Wheezy. Here is that I have done: --------------------------------------------------------------- samba-tool domain provision --realm=CHEZMOI.PRIV --domain=CHEZMOI \ --server-role=dc --dns-backend=SAMBA_INTERNAL --adminpass='+toto123' echo "nameserver 192.168.0.21" > /etc/resolv.conf samba ln -s /usr/local/samba/lib/libnss_winbind.so

Hi All, I am using libsmbclient.so (3.0.25b). But I am getting following error when I try to compile my program. Could any one of you please let me know as how should I go about resolving this error ? Thanks and Regards, Avinash g++ -g -O2 -o GenericCrwl crwl_cmdargs.o crwl_main.o crwl_crawl.o ../thirdparty/libs/libdb_cxx-4.3.so

http://bugzilla.mindrot.org/show_bug.cgi?id=1066 Summary: off-by-one error with GSSAPI names Product: Portable OpenSSH Version: 4.1p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: dleonard at

Hello - make fails to build the latest git of samba4 - erroring on drsblobs.so. Below is a full log from autogen.sh to the make. Would you have any suggestions on proceeding? Thank you, Ryan ryan at test1:~/samba-master/source4$ sudo ./autogen.sh ./autogen.sh: running script/mkversion.sh ./script/mkversion.sh: 'version.h' created for Samba("4.0.0alpha12-GIT-d83850a")

this is the proposed gssapi diff against OpenSSH-current (non-portable). note: if this goes in, the old krb5 auth (ssh.com compatible) will be removed. please comment. jakob Index: auth.h =================================================================== RCS file: /home/hack/jakob/mycvs/sshgss/auth.h,v retrieving revision 1.1.1.2 retrieving revision 1.3 diff -u -r1.1.1.2 -r1.3 --- auth.h

Hey hey, This is my situation: [a] --- [b] \ --- [c] Computer [a] is my router / server, running SuSE and samba. It has ip address 192.168.1.1 for computer b, 217.67.235.57 for computer c and also 213.84.96.18 (my ISP IP) and 217.67.235.2 for my 217.67.235.57/29 to work. Computer [b] is a windows XP professional workstation using ip 192.168.1.2, connected with the internet through SNAT