similar to: Is it feasable?

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and

Hi. I'm new to samba, so I don't know many things. I have a big infrastructure based on kerberos, ldap and afs. All our linux clients log nicely on the cell, no problem. The problem is as everywhere... windows. I'm trying to make windows log on the cell, using samba (I will try tomorrow to set up a domain). The questions about samba will come later on, so expect me to bother you :)

Hi. I've built an afs cell, a kerberos kdc, an openldap server, all kerberized. Now all linux clients can login on the cell using k5 authentication, finding informations about their home dirs with ldap. Their home reside on the afs cell, which allows r/w access since it releases a token from the k5 ticket. All macosx clients can login as well... but what about windows? ^___^;;;

Hi. A question on a feature that interests me... Can I specify samba to handle the dot files in our linux samba server as hidden files in windows? It's quite ugly seeing all the hidden unix files .* visible on windows... -- Sensei <mailto:senseiwa@tin.it> <pgp:8998A2DB> <icqnum:241572242> <yahoo!:sensei_sen>

Hi. As I said... I will bother you. :) I'm wondering if it's possible to make samba as a primary domain controller without having samba passwords, but instead using my two KDCs (MIT K5). Is it possible? What should I use in my smb.conf? The wonderful and less painful thing is samba authenticating via pam... but I don't know how... the documentation is quite misty. -- Sensei

Hi. Back again... I'm still looking for a possible integration of MIT K5 and AFS through the windows login, so I will ask you a question. A first considerations is that afs+k5 works fine but we have to create a local account with a fake password. The profile will be on the local disk. We can gain tickets and the token necessary to access \\AFS. The problem is: how to avoid a local account?

Hi. I'm trying to build a nt domain with samba 3.0.5 (only samba, no native nt/xp servers), but I cannot succeed. I'm following this http://thegoldenear.org/toolbox/unices/samba/samba-setup.html because I find the samba documentation not so clear. It's for samba 2, but it must be similar to samba 3... This is what I did: quantum home # groupadd -g 2000 admins quantum home # groupadd

Has anyone successfully built openssh with MIT's KfW (Kerberos for Windows) under Cygwin? Is it even possible? Searching around I found one reference to Nicolas Williams attempting to do this several years ago, but no indication of success and nothing more recent. http://www.cygwin.com/ml/cygwin/2002-01/msg00100.html What about compiling openssh using a native windows compiler? Is

Hi, We are trying to compile OpenSSH with AFS support to enable password-less login in a linux cluster. We are getting the error mentioned at the bottom of this mail. Also, included the information of other packages and the options used with configure. Please help us to sort out this issue. Server is running on RedHat Linux v7.3 OpenAFS Information Downloaded from

Hi everyone, I just upgraded to 5.6 and keep on getting the following error message: [root at rwjafs1 ~]# yum update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * base: centos.mirror.nac.net * extras: mirror.batblue.com * updates: mirror.atlanticmetro.net Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package

I want up-to-dateish versions of TexLive, R, gnumeric, emacs, but on a more-or-less stable base of Centos-5.2. I asked for packages in this, but got no answers. So now I've built them and will let you try them if you want. I used the source packages from Fedora 8 and 9. I wanted TexLive because many of us have jumped ship to Ubuntu Linux 8.04 and it does offer TexLive, and the compatability

Would OpenSSH be willing to accept a modification similar to the one below to replace the kafs modification to get an AFS PAG and token? The nice features of this are that it can be compiled in even if OpenAFS is not available. At runtime if the dynamic library is present, it can be loaded and called. A dynamic lib is used so the setpag is in the same process. It has been reported that the

From: Johnny Hughes <mailing-lists at hughesjr.com> > Nope ... I can't build that with GNU gcc and against GNU glibc and > release it ... sorry, no OpenAFS :( ??? Actually, you _can_. You just can't link it into the GPL kernel program. [ I'm not posting this to cross you. But someone correct me if I'm wrong. ] There is nothing in the GPL that prevents a GPL

(I think the subject is quite descriptive; however for use-cases and details see bellow after the mention of the old conversation and the patch.) Searching the mailing list about this topic yields an old conversation about this from 2008: * https://lists.samba.org/archive/rsync/2008-November/022148.html * https://lists.samba.org/archive/rsync/2008-November/022150.html I'll quote

I'm trying to build the --with-fake-kaserver option in 3.0.4 on RHEL 3.0. I'm using the srpms provided on the samba.org site (http://us3.samba.org/samba/ftp/bin-pkgs/RedHat/SRPMS/samba-3.0.4 -1.src.rpm). My OpenAFS version is 1.2.11, rpms (openafs-1.2.11 and openafs-devel-1.2.11) provided from openafs.org. It compiles fine if I omit the --with-fake-kaserver configure option.

Hi all! Just wondering whether anybody has any idea on configuration for accessing AFS volume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS

I'm using Cygwin OpenSSH 5.1 on a Windows XP SP3 system. Is sshd supposed to create a new "login session" for each user that logs in? Or, is there a way to force it to create a new "login session" for each user that logs in? Once logged in, I'm trying to use the Kerberos for Windows command line utilities (klist/kinit), but I'm told by one of the KfW

We start to use centos 5 for our workstation at our site (University Innsbruck) and we use openafs to hold the home directories. There would be a big advantage to have the openafs kernel module (and the additional rpms) in the centos extras (or addons) repository with an automatic compile for the available kernels. If you need any help to do this i would be happy to participate in any way.

From: Lamar Owen <lowen at pari.edu> > Referencing SL3 and CentOS 3 (as I haven't run SL4 as yet) there were some > scientific applications and some Java stuff, eclipse for one, You do understand the redistribution issues with Java, correct? It's a Sun problem (a typical thorn for Red Hat in general), not a Red Hat one. > part of cluster suite for another, included. >

http://bugzilla.mindrot.org/show_bug.cgi?id=717 Summary: AFS tokens are not generated upon login Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org