similar to: Re: Samba and Kerberos PDC(MIT or SEAM, without microsoft ADS)

Hi, Thank you very much for you reply. Some people think storing the sensitive information in the LDAP is not very secure.They think the sensitive information and the public information should be stored in seperate place.So we want the samba PDC authentication can integrete the Kerberos authentication directly. John ---- Original Message ---- From: Yura Pismerov Date: Thu 10/31/02 18:39

A few more questions and comments... related to this topic If Kerberos is the back-end to LDAP.. there is no need to synchronize or store a password in the LDAP tree.. just the principal for the user in the userpassword attribute: userpassword = {kerberos}name@domain in the smb.conf file do I need stuff like this? Unix password sync = yes passwd program =

Jonathan Higgins wrote: > > A few more questions and comments... related to this topic > > If Kerberos is the back-end to LDAP.. there is no need to synchronize or store a >password in the LDAP tree.. just the principal for the user in the userpassword >attribute: userpassword = {kerberos}name@domain That is correct. I did not mean sync between Kerberos and LDAP, I mean sync

Hi, Andrew, Thank you very much for your answer. Now our case is as below: 1, our client machine is the windows 2000 2, We want our Kerberos run in the Unix box. 3, We also want the samba as PDC for all windows user and machine. 4, We want integrate the Kerberos Authentication with samba authentication. So in this situation, can we get the kerberos login from the windows

I'm trying to get openssh to work with SEAM(Solaris Enterprise Authentication Mechanism) on Solaris 9. I have a few questions. Any help would be appreciated. I am working with openssh 3.8. 1. First of all, does anyone know if it is possible to get openssh working with SEAM? 2. Which options do i need to use when compiling openssh? Do i need to use --with-kerberos5=kerbpath or --with-pam

Greetings all, I hope this is the right place to ask this question, if not please redirect me. I'm compiling OpenSSH 4.3p2 on Solaris 9, and want to compile with Kerberos5 support. However, since we are using Solaris SEAM for Kerberos, I can't seem to specify "--with-kerberos5=PATH" during configure because it doesn't look like SEAM's gssapi libraries are all in

I know it''s completely off topic, but I am having such a hard time with this that I thought maybe I might be able to get some answers here. I''m a Rails developer recently forced into a Java Seam/Richfaces project. The presentation layer is so convoluted with stuff that it''s virtually impossible for me to get the kind of presentation I want without creating multiple XML

i've compiled openssh with the gssapi patches on a solaris 8 system using sun's SEAM. gssapi isn't initializing properly it seems. debug2: input_userauth_request: try method gssapi debug1: Mechanism negotiation is not supported Failed gssapi for xxxx from xxxx port 33555 ssh2 sun's kerberized tools are working fine. any help would be appreciated. -- http://chemlab.org -

Hi, In the great tradition of web framework comparisons ;-) : here is a blog entry focused on a source code analysis of RoR, Django and Seam: http://www.mininglabs.com/2008/05/13/web-frameworks-a-free-software-oriented-study --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To

Hi, I compiled Samba 3.0.7, MIT Kerberos 1.3.5 and OpenLDAP 2.2.17. I did not notice any errors during compilation. I searched and found the #define HAVE_LDAP 1 and #define HAVE_KRB5 1 statements in the config.h file of Samba 3.0.7's include dir. So, ADS should be supported in the compiled Samba 3.0.7 version. Here is what I did up to now. As described in the How-To Samba doc, I created

I have been frustrated with J2EE technology just like any other developer who has worked in that technology for a long time. This made me learn about Rails and I was excited about RoR. Today I came across JBoss Seam framework and I am not able to contain my excitement. My passion for JEE development is back. It seems like it is better than RoR. I would like to hear differnt opinions about this

Hi, I have a problem to compile Samba 3 with ADS support on Solaris. Unfortunatly, Solaris 8 doesn't come with integrated kerberos support, so that configure doesn't find any support for kerberos. For Solaris 8 there is a package called SEAM 1.0.1 with provides kerberos functionality for Solaris, but the needed header file, i.e krb5.h, are not included and according to my

Hi list, I'm trying to compile samba3.0alpha20 on a SOLARIS 7 machine, everything looks quite OK until I end up with this, there seems to be a couple of kerberos related functions missing (?) Undefined first referenced symbol in file krb5_sname_to_principal /usr/krb5-1.2.6/lib/libgssapi_krb5.a(acquire_cred.o) krb5_free_cksumtypes

Hello, I've the following problem. I tried to compile samba3.0alpha20 with the ads support option. Before that I have installed kerberos5v1.2.6! What is wrong! Have anyone an answer, thanks! Compiling libsmb/trust_passwd.c Compiling libads/ldap.c Compiling libads/ldap_printer.c Compiling libads/sasl.c Compiling libads/krb5_setpw.c Compiling libads/kerberos.c libads/kerberos.c: In function

So, I'm trying to figure out how to get Samba to work in this way. Specifically, I have a 2003 R2 AD in 2003 functional level. All user accounts are mapped to the same user account name @ our MIT Kerberos server. Users do not know their AD password. Can Samba authenticate users with their Kerberos realm passwords, and know to use the same user name so the UIDs match for both platforms +

From: Wei Yongjun <yongjun_wei at trendmicro.com.cn> Those symbols only used within this file, and should be static. Signed-off-by: Wei Yongjun <yongjun_wei at trendmicro.com.cn> --- drivers/char/virtio_console.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/char/virtio_console.c b/drivers/char/virtio_console.c index 13ad9b1..f73ad64 100644 ---

From: Wei Yongjun <yongjun_wei at trendmicro.com.cn> Those symbols only used within this file, and should be static. Signed-off-by: Wei Yongjun <yongjun_wei at trendmicro.com.cn> --- drivers/char/virtio_console.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/char/virtio_console.c b/drivers/char/virtio_console.c index 13ad9b1..f73ad64 100644 ---

From: Wei Yongjun <yongjun_wei at trendmicro.com.cn> Fix to return -ENOENT in the pcistub_device_find() and pci_get_drvdata() error handling case instead of 0(overwrite to 0 by str_to_slot()), as done elsewhere in this function. Signed-off-by: Wei Yongjun <yongjun_wei at trendmicro.com.cn> --- drivers/xen/xen-pciback/pci_stub.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3

From: Wei Yongjun <yongjun_wei at trendmicro.com.cn> Fix to return -ENOENT in the pcistub_device_find() and pci_get_drvdata() error handling case instead of 0(overwrite to 0 by str_to_slot()), as done elsewhere in this function. Signed-off-by: Wei Yongjun <yongjun_wei at trendmicro.com.cn> --- drivers/xen/xen-pciback/pci_stub.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3

On 20/12/2016 14:10, Rowland Penny wrote: >> I can't use rlm_krb5, because I plan to use PEAP+MSCHAP for wifi >> authentication. The krb5 module requires a cleartext password, but >> MSCHAP does not pass a cleartext password. (It is possible to use >> krb5 authentication with TTLS+PAP or TTLS+GTC, both of which send a >> cleartext password) > You might want to