similar to: AFS Auth with Samba

I've been beating myself senseless trying to build OpenSsh 3.0.1 on Solaris 2.5.1 and get AFS login working. The symptoms of the problem are: sshd builds (used --with-afs and -with-kerberos4 - there is no PAM on this box), accepts connections from non-AFS users, but does not accept a connection from an AFS user; the user sees "permission denied" after entering the password. The

Hi, We have Windows2k machines connected and authenticated with Samba. We also have MIT kerberos for Linux systems. What we want to do is using samba as a gateway, clients using Windows2k machines can access their AFS file space. We are trying to encrypt the usernames and passwords and send to samba side which then decrypt and retrieve the plain-text password. Does Samba have

Okay I don't think what I want to do is possible but here goes. I want to deploy a samba domain for my windows clients, but I want samba to use AFS on the back end. But AFS requires kerberos to get tickets and tokens. So is there anyway to make this work. I personally don't care if samba accepts kerberos tickets from the client or not, but a ticket and AFS token will need to be

I am looking at setting up ADS authentication for my current samba configuration. I am quite wary of making big changes that I do not understand as there are shares currently setup and I do not want to lose this. I have read through the "how to's" and I am at the point where I want to "Create the computer account" and running the command :- Net ads join -U

> I do not know how to proceed. I tried to comment out the line in the spec file to no avail. this is bad idea ;) > Any suggestions? OpenAFS is not supplied directly by CentOS/RHEL. You would have had to get it from a 3rd party repo such as ATrpms/DAG or install from http://openafs.org/release/1.4.12/index-rhel5.html # cd /tmp/ # wget http://samba.org/samba/ftp/stable/samba-3.4.8.tar.gz

I have downloaded samba-3.0.0.tar.bz2 (and samba-latest.tar.gz) and attempted to run "./configure --with-ldapsam --with-winbind --with-pam_smbpass --with-smbmount --with-ads --with-ldap" Only to find that ./configure complains of a missing ldap.h file. Does anyone else have this issue? I'm trying to do a simple setup to having a Linux box communicate to my Windows 2000 Server PDC,

Hello all, If you don't compile in Kerberos, AFS etc. support, the ssh/sshd man page still mentions them as valid options, and ssh/sshd complains loudly and refuses to run if you set options about them in ssh_config or sshd_config. I'm not sure if this is the intended (or good?) behaviour. Should it be better to modify the man pages when ./configuring too? Like, adding a small sentence

Dear OpenSSH developers, Hello, I strongly support this suggestion ie. adding the sentence "This option has been disabled at compile time" as appropriate. It would be even more helpful if you said how to enable it (krb) at compile time. Remember, this is the only documentation available. I spent some time wondering about this before searching the archives. Ok, while we are on the

Hello, i'm currently trying to find a way to integrate a openafs cell and samba (without plaintext passwords). this should all be possible with a windows kdc, giving out afs tickets and forward these tickets to the samba server. unfortuntely this is not an option here. is there a way to connect samba 3.x to a mit krb5 server ? Holger Brueckner net-labs Systemhaus GmbH

With a little help, I managed to get ssh to compile. (original post 05.02.02) Now, I can login using an account that is local to the target machine but logins with AFS accounts fail. The details: IRIX 6.5.15 ssh 3.1.p1 gcc 3.0.1 ssl-0.9.6c zlib-1.1.4. I am configuring with: env CC=gcc CFLAGS=-g LDFLAGS=-Wl,-rpath,/usr/local/krb4/lib,-rpath,/usr/local/ssl/lib ./configure

Hello all, I'm trying to compile samba 3.0.20 on Freebsd 4.10 with ldap support. The ./configure script fails because it can't find ldap.h: <snip> checking whether to use AFS fake-kaserver... no checking whether to use DFS clear-text auth... no checking for LDAP support... auto checking ldap.h usability... no checking ldap.h presence... no checking for ldap.h... no checking lber.h

I think I have come across what seems to be a bug in the interplay between Samba and AFS. I'm running 1.9.16p11 on an IBM RS/6000 (AIX 4.1.5) with the AFS support included (AFS 3.4a). The client machine is running Windows 95. I've created an AFS area which is writeable (rlidwk) to an AFS protection group. The group contains two AFS users, say user1 and user2. If user1 creates a file in

Hi! I've noticed that openssh always does a do_setpag() if compiled with AFS-support no matter which authentication method is used. Maybe I'm missing something but shouldn't it only get a pag, if AFS-token-passing is used? If password authentication is used, an AFS-pam-module (or the authenticate function on AIX) will do the job, otherwise, no token can be obtained and therefore no

Hi all! Just wondering whether anybody has any idea on configuration for accessing AFS volume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS

This maybe more appropriate on the developers list but I'll ask here first. Anybody know if any improved support for AFS is being added to either samba 3 or 4? We currently share all user home directories, shared files, web sites, etc. etc. from AFS using Samba. This setup is working great, thank you to everyone involved!! I'm just concerned that AFS support might not make it

For some reasons the afs tokenforwarding stuff has changed siginificantly from v 2.9p2 to 2.9.9p2. This makes it impossible to use public key authenticication in a standart AFS environment. I don't know the reasons for these changes. In any case attached is a patch which restores the old behaviour. Regards Serge -- Serge Droz Paul Scherrer Institut mailto:serge.droz at

I'm sorry, but I've been looking in the archives, and I can't find an answer to this question. I believe OpenSSH supports AFS, but I can't seem to make it work. I've tried to install krb5-devel, but it doesn't work. I've made configure --with-kerberos4 --with-afs, and it says it can't find krb.h. Did anyone manage to compile openssh 2.3.0 with AFS? Which kerberos

With the help of Jan Iven I have been able to compile openssh-2.9.9p2 on Solaris 2.6 with AFS/kerb4 support using gcc. ./configure --sysconfdir=/etc/ssh --with-tcp-wrappers \ --with-egd-pool=/var/run/egd-pool \ --with-kerberos4=/usr/athena --with-afs=/usr/afsws to do this I modified the resulting Makefile, from: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include

Appologise if this did make it to the list but I just subscribed and didn't see it come back... I am attmepting to install ssh/sshd on my RH6.1 Intel Box. Everything seems to be working (not quite smooth sailing - I had to resort to precompiled RPM for OpenSSL). I did however get it "working." I generated a host key as root and then changed back to joe-user. I created a key for

http://bugzilla.mindrot.org/show_bug.cgi?id=717 Summary: AFS tokens are not generated upon login Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org