similar to: What about domain trusts

Hello again, I'm not attempting an install of Samba 3.0.4 from source. I want to specifically compile in ads and winbindd support. So, I already compiled and installed OpenLDAP 2.2.13. Now the configure script is hung on krb5 dependancy: checking for krb5.h... no configure: error: Active Directory cannot be supported without krb5.h So I downloaded and attempted compile of krb5 1.3.4, but

Hi, I'm trying to run tinc 1.0.9 on freebsd 7.1-RELEASE-p4. I tried: Device=/dev/net/tun0 DeviceType=tun I tried it without the device-line, i tried the other devicetype-options, none of them work. With all of them I get the following error: 30311: open("/dev/net/tun0",O_RDWR|O_NONBLOCK,05024360414) = 3 (0x3) 30311: ioctl(3,TUNSIFHEAD,0xbfbfec58) ERR#45 'Operation not

Hi everyone, you can find the current version of my enhanced tinc using subversion: svn://tardyon.mon-clan.de/tinc I allowed anonymous read access, so feel free to download the sources. Unfortunately, my enhancements are based on a rather old git-checkout from Guus. The version should run under windows and Debian/Ubuntu. Best, Daniel -----Original Message----- From: folkert [mailto:folkert

When an XP box is reading a file from the Samba server performance is what you would expect with 100 mbs ethernet. When uploading a large file (>1 meg) performance is very slow. 1/20th what I would expect. The Samba server log has these entries: posix_fcntl_lock: WARNING: lock request at offset 12226560, length 61440 returned [2004/12/24 17:28:52, 0] locking/posix.c:posix_fcntl_lock(658)

Hi, I have the following tinc grid: http://keetweej.vanheusden.com/stats/tinc-fvh-network-graph.png Now a funny thing happens: bpsolxp routes traffic to clientbp via 'server', not directly. Both run 1.0.13. Bug? Folkert. -- Nagios user? Check CoffeeSaint, the versatile nagios status display- monitor. http://vanheusden.com/java/CoffeeSaint/

Hi, Something strange is happening at my place: I have lots of packet loss in my tinc vpn. Network layout: laptop --- wifi --- other pc ping from laptop to other pc OUTSIDE tinc: 0% packet loss ping from laptop to other pc VIA tinc: 50% packet loss What could be the cause of that? Folkert van Heusden -- Always wondered what the latency of your webserver is? Or how much more latency you

I'm about ready to smash my head through a wall...I could use a few answers. 1. When using security = ads, and completing net ads join, it was my understanding that samba authenticated username/pword against ads, and local posix accounts were nolonger needed, is this true? 2. If yes, I have not been able to get it to work. If I have a posix user account with the same name as one in

On 6/27/13 3:57 AM, Folkert van Heusden wrote: > Eric, Andreas, > >>>> I have a system with an ext4 filesystem with its journal on an other >>>> device (an SSD). >>>> Now this SSD dropped of the sata bus so the filesystem went r/o. >>>> I would like to remove the journal but it says it can't because >>>> needs_check is set.

Hi, Do you have any documentation on the protocol used by the icecast-server? I wrote a tool for multiplexing (proxying) shoutcast-sessions and I would also like to convert it for icecast-sessions. This shoutcastproxy makes it possible to listen with a couple of people to a session while only 1 is retrieved from a shoutcastserver (http://www.vanheusden.com/shoutcastproxy/). <p>Folkert van

Hi, Do you have any documentation on the protocol used by the icecast-server? I wrote a tool for multiplexing (proxying) shoutcast-sessions and I would also like to convert it for icecast-sessions. This shoutcastproxy makes it possible to listen with a couple of people to a session while only 1 is retrieved from a shoutcastserver (http://www.vanheusden.com/shoutcastproxy/). <p>Folkert van

Hi, I'm trying to write an extremely dense tinc-mini-howto. You can see it at: http://keetweej.vanheusden.com/~folkert/tinc_mini_howto.html Please send me suggestions on how I can make things better and such. Oh, and if someone could tell me how to configure tinc so that it authenticates against the host on the other side, please tell me! (couldn't figure that one out) Folkert. Tinc:

Is the trust function no longer functional in 3.0.10 or is it just experimental I've got 3.0.10 with ldap backend and it consistantly fails. At this point members in the previously trusted w2k domain cannot get into the samba drive even with an ldap username and password.

Hi, At my provider (xs4all) I've got an ipv6 tunnel working. Now I would like to distribute ipv6 via the tinc tunnel. My tinc.conf: ------------ Name=server AddressFamily=ipv4 Device=/dev/net/tun PrivateKeyFile=/etc/tinc/fvhglobalnet/rsa_key.priv GraphDumpFile=|/usr/bin/dot -Tpng -o /var/www/htdocs.keetweej.vanheusden.com/stats/tinc-fvh-network-graph.png Mode=switch KeyExpire=299

>>>>> I have a system with an ext4 filesystem with its journal on an other >>>>> device (an SSD). >>>>> Now this SSD dropped of the sata bus so the filesystem went r/o. >>>>> I would like to remove the journal but it says it can't because >>>>> needs_check is set. >>>> >>>> What does it actually

Hi, I have the following situation: 192.168.64.0/24 is my local network. .1 is my PDC (samba 2.2.6) workgroup is vanheusden 192.168.97.0/24 is an intranet somewhere else to which I'm connected through a vpn. workgroup is enderman ip-forwarding is enabled on 192.168.64.1 (my default gateway and endpoint for the vpn) on 192.168.64.1 I've set hosts allow to 192.168. and 127. hosts allow =

hi i m using the script below ------------------------------------------------------------------------------------------------------------------------------------- iptables -F iptables -t nat -F iptables -P INPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT

In the past 24 hours multiple persons have contacted me regarding the use of elliptic curve cryptography in tinc 1.1 in light of the suspicion that the NSA might have weakened algorithms and/or elliptic curves published by NIST. The new protocol in tinc 1.1 (SPTPS) uses ECDH and ECDSA to do session key exchange and authentication, in such a way that it has the perfect forward secrecy (PFS)

In the past 24 hours multiple persons have contacted me regarding the use of elliptic curve cryptography in tinc 1.1 in light of the suspicion that the NSA might have weakened algorithms and/or elliptic curves published by NIST. The new protocol in tinc 1.1 (SPTPS) uses ECDH and ECDSA to do session key exchange and authentication, in such a way that it has the perfect forward secrecy (PFS)

What's going on? Have you pulled it? Like to know. Last official email said to use 3.0.4 as production release. TMS III

I have some 30 XP boxes in one offices joined to a w2k domain. The w2k server has no problem mapping drives on the samba server, however, the XP workstations refuse. Put in user name and password in the box after mapping, and it just pops back up like you've entered a wrong pass/user name. I have changed signorseal to 0 in registry to no avail. Of course, when the server was NT4, I