similar to: Using the RedHat 9.0 Samba 3.0.13 RPM with Kerberos 1.4 from MIT

YES!!!!!!!!!!!!!!! HOT DOGGIES!!!!!!!!!!!!!!!!!!!!! I think I fixed it. The problem - Squid worked at my test site - it did not popup a login window, but instead used Ssamba's ntlm helper program to get credentials from IE. But at my customer site it did (improperly) popup a login window. The squid.conf files were almost identical - even to the point where my working test site incorrectly

Thanks to everyone for all the help getting this done. As promised, here are the detailed notes I put together. These step by step instructions should work starting with a raw RedHat Linux 9.0 system. - Greg Scott GregScott@InfraSupportEtc.com These are step by step instructions for how to install and configure the Squid proxy server with transparent authentication for users in a

This turned into the mother of all system integration exercises and I **almost** have it working. I am trying to set up proxy authorization using: RedHat Linux 9.0, MIT Kerberos 1.4 built from source, Samba 3.0.13 built from source, Squid 2.5.STABLE7 built from source SmartFilter 4.01. Active Directory with Windows 2003 Why not use RPMs? Well - ADS support for Windows 2003 needs

I am trying to get windind to work so my domain users can touch shares on this Linux box without being prompted for credentials. I put these in nsswitch.conf: passwd: files winbind group: files winbind Then I did this: cp /usr/src/samba-3.0.13/source/nsswitch/libnss_winbind.so /lib ln --symbolic /lib/libnss_windbind.so /lib/libnss_winbind.so.2 Make libnss_windbind

Here is a puzzle. I have a network with several servers. It''s a mess. It''s a /24 and pieces and servers are all over the place inside this /24 block, on both sides of the firewall. For example, the router at 1.2.3.1 is outside the firewall and many of the servers at 1.2.3.nnn/24 are behind the firewall. (Obviously, 1.2.3.nnn is a fudged network.) eth0 points outward to

Hi All - I looked for mention of this in the archives but wasn''t able to find anything. This isn''t even an advanced routing question, it should be a dirt-simple, basic, no-brainer, routine routing job. But I''m not getting it! I have a Linux iptables based firewall system that is making me crazy. The gist of the problem is, even when I turn off all firewall rules

I see it is posting to the archive website but not emailing them out. Is anyone else getting emails or is it just me? Thanks - Greg Scott _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi all After reading one of DHH''s recent posts, I realized that it''s important to release even small pieces of software under a license. As the author of the first incarnation of acts_as_ferret I felt the need to put it under a licensing scheme. MIT was chosen, as suggested by DHH. It''s now included in the source listing on the ferret wiki.

While the ports freeze is still in effect, I have a new MIT KRB5-1.4 port ready for commit. Anyone willing to use this preview version of the port or test it is welcome to use it. I've put it at http://komquats.com/ports/krb5- 1.4.tar.bz2. If you have any problems or issues with it, just send me an email. Cheers, Cy Schubert <Cy.Schubert@komquats.com> Web: http://www.komquats.com

I will be updating the MIT krb5 port to krb5-1.3.2 this weekend. Unfortunately crypto-publish.org does not distribute the new source yet. Traditionally I disabled support for fetch from crytpo-publish.org until they updated their website with the latest krb5 sources, requiring the port to fetch the source from MIT in all cases. This time will be different, that is unless of course someone

I'm in the process of setting up a samba file server, and I'd like to set it up so users can authenticate with their Kerberos realm credentials. It seems that every article I read wants me to bind the thing to a domain, and authenticate that way. The only problem with that is user accounts aren't domain accounts, they are "shadow" Kerberos realm accounts (forgive me,

My apologies. I'll do that. Dimitri On Wed, 2005-05-18 at 12:39 -0400, Charlie Brady wrote: > On Tue, 17 May 2005, Dimitri Yioulos wrote: > > > Hello to all. > > > > I read in a prior post that samba 3.x.x doesn't play well with MIT kerberos > > from version 1.2.something and earlier (or vice-versa. Sorry, I looked > > briefly, but didn't find

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have found bits and pieces of howto's for configuring Windows XP clients to do Kerberos authentication but I have been unable to find anything regarding how to enable Samba to use Kerberos. Has anyone enabled Samba to use Kerberos and if so how the smb.conf file needs to be configured to support this? Thanks. -----BEGIN PGP SIGNATURE-----

Hello, thanks for the time to read this. I am doing a proof of concept in the following context. I have a NT 4.0 domain and because I don't want AD, I am moving towards a MIT Kerberos managed domain which still gives me SSO and thru kerberized SAMBA, file sharing. What I have setup so far is XP workstations SSO into the MIT Kerberos domain, I can access shares on the Samba server

Hi, I have a large client who has an MIT Kerberos realm set up. According to MS guidelines, they have also set up a one way trust between their AD domain and their MIT realm so that their users could continue using their MIT kerberos login and password to access kerberized services on their network. Essentially, users log into their PCs using their MIT names/passwords but can access

Hi all, I've read through much of the list archives and other various docs and am now more confused than ever regarding how samba interacts with external services. All of the docs seem to assume that a Windows AD server is part of the picture when ldap/krb5 are involved. What I'm trying to do is set up a samba fileserver that Windows clients can connect to via something like: "net

Hi, I am new to Clang. There is a warning when I use clang $llvmc -clang test.c "./bin/ld: warning: cannot find entry symbol mit-llvm-bc; defaulting to 00000000004003c0 llc: bitcode didn't read correctly." When I use lli to execute the test.bc as $lli test. bc The error message is "lli: error loading program 'test.bc': Bitcode stream should be a

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Has anyone successfully built openssh with MIT's KfW (Kerberos for Windows) under Cygwin? Is it even possible? Searching around I found one reference to Nicolas Williams attempting to do this several years ago, but no indication of success and nothing more recent. http://www.cygwin.com/ml/cygwin/2002-01/msg00100.html What about compiling openssh using a native windows compiler? Is

Hi, I'm writing a linux application that uses LoadLibraryA to load a windows dll, which works fine on a local Xserver but I was hoping to use it remotely as well. When I call the same function running on a remote machine I get an X error caused by XShmAttach - is there a way to run or compile wine so it doesn't need to use the MIT-SHM extension to X? I would be very grateful for any