similar to: MIT Kerberso or Heimdal Kerberos what is the question?

Getting this on a FreeBSD 5.2.1-RELEASE #0: Sat Aug 28 11:56:25 CDT 2004 system when trying to start the smbd process after an upgrade to the newest release. Didn't see anything helpful in the referenced appendix bugs of the Samba HOWTO collection. An attempted smbd -d10 yielded a core dump but no futher info. -------------------------------log

ood Morning Everyone: This question is a bit different from the run of the mill -- HELP ME I GOT TROUBLE questions here on the list, however I am interested in getting this situation working correctly and also need to understand the basis behind the process so that I can implement it properly and extend it as necessary First off -- Some Background I am running a 150 station lan where all the

In a directory with approximately 6000 files, several files are missing on the Windows side. If I check the directory on Unix (AIX) they are all there. As far as I can see there's nothing strange with this files en I can't see any connection between the missing files. It looks like it's randomly. A few examples of missing files: FAKTREF.10062005.16 (See debug information)

Guys is it possible on samba 4 to raise the expiry time on tgt tickets to be more than 10 hours ? I have users running scripts that need a longer expiry time on the token on another side note is it the Samba 4 DC that decides the renewal date of the tokens also ? Regards -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business Park Moulden Way, Sulhamstead, Berkshire,

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But

On Mon, 2023-03-20 at 10:39 +0200, Alexander Bokovoy wrote: > Indeed. For the record, current set of tests not supported by > > --with-system-mitkrb5 build: > > > > ---------------------------------------- > > $ cat selftest/skip_mit_kdc > > # We do not support RODC yet > > .*rodc > > .*RODC > > ^samba4.ntvfs.cifs.ntlm.base.unlink >

I have a freshly installed FreeBSD 6.0-BETA1 system, which comes with Heimdal & OpenSSH w/GSSAPI enabled (version 4.1p1 FreeBSD-20050605) Most of the servers I connect to have OpenSSH w/GSSAPI enabled but they use MIT Kerberos (1,3.x and 1.4.x) Now, I can use ticket authentication between all systems where the libraries are all the same (Heimdal or MIT), but trying to use, for example,

My college is kerberized, and so in many situations authentication is both faster and more secure using kerberos tickets. Sadly I have run into a problem. The Heimdal included in FreeBSD seems to be incompatible with my school's servers running MIT kerberos when authenticating over gssapi. For example ssh in verbose mode returns: debug2: we sent a gssapi-with-mic packet, wait for reply

What is the difference between Heimdal and MIT as far usability goes? MIT seems to be the default on major linux distrobutions, but I here a lot about people preferring Heimdal, but I can't find any reasons why. Is one generally more stable/faster/reliable than the other? There is already a blank wiki page at http://wiki.samba.org/index.php/Samba_%26_Kerberos so if anyone has any good

Hi there ! I checked Vorbis' performace for mono files at approx. 64-80 kbps (it does a good job) and I'm wondering why the current OggEnc still uses Point-Stereo (>10kHz) for -q4 and -q5 I know, we're usually unable to percieve those phase correlations above 10 kHz, But a Dolby Prologic Decoder isn't. I think a future version of OggEnc which is able to use a user-selectable

I have previously gotten samba 3.0.4 to work with the MIT implementation, now with 3.0.7, the configure is looking for -lgssapi and not finding it. I can get the AD to issue me a kerberos ticket, samba is just complaining about not geing able to find the gssapi library. Does anyone have a tried-and-true approach using the ports system? Thanks, Graham

On Sun, 2023-03-19 at 09:29 +0200, Alexander Bokovoy via samba- technical wrote: > Hi, > > > I would be against a blended build against both MIT Kerberos and > Heimdal > Kerberos in a distribution. It is not going to bring you anything > good, > support wise. > > Andreas and I have submitted a talk to SambaXP about MIT > Kerberos/Heimdal Kerberos-based Samba AD

Hi! I already asked a similar question before, but it keeps popping up in different contexts and forms, and the more I use samba myself, the more often it comes to me too, especially in context of using various security tokens for auth. And the more I think about all this, the more sane it looks to me. The thing is: mit-krb5 has much better user-level support than heimdal. But samba does not

Thread-split from the vorbis-mailing list ("Vorbis determined to be as good as MPC at 128 kbps!") <p>On Sun, 30 May 2004, Segher Boessenkool wrote: [Steven So] SS>> If iTunes AAC can encode castanets with much less pre-echo at SS>> ABR 128 kbps, then hopefully there will be an imaginative SS>> (and non-patented) way of doing this in Vorbis without the SS>>

Hello List, I am (unsuccessfully) trying to automatically get a valid kerberos ticket for my linux box. I have - in a test environment: - a windows 2000 server with Active directory and DNS properly set up. - a suse linux 9.0 router with samba3.0.2.rc.1 and heimdal 0.6.-67. - I am able to join the domain and get a valid ticket through kinit, if I enter the Administrator's password or the

I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. When I select the option "Account is sensitive and cannot be delegated" (in Active Directory Users and Computers under the Account tab) for a user account regardless of its

Hi, I’ve been running a samba 4 DC for quite some time now, and while testing some kerberos related stuff, I noticed that all kerberos tickets I can get from the DC are of encryption type ?arcfour-hmac-md5“: # kinit testuser1 testuser1 at S4DOM.TEST's Password: # klist -v Credentials cache: FILE:/tmp/krb5cc_0 Ticket etype: arcfour-hmac-md5, kvno 1 I can create keytabs containing

Hello, On 1/20/2024 1:03 AM, Adan Calderon wrote: > Remember the vmware versions of their loader are diffrent. Phew, what does that mean? It's their "bootx64.efi". Running "file" on it says it's an "MS-DOS executable". > I remember looking at the source for the mboot file and it was > diffrent from the syslinux version. Not sure what this means

Hello, So I'm running syslinux.efi Which loads menu.c32 Which is supposed to start ESXi's bootx64.efi/mboot.efi But that gives """ Loading mboot.efi... ok Invalid Boot signature 0x2, bailing out Booting kernel failed: Bad file number """ Secure boot is disabled. Thoughts? The reason why it would be nice using PXE and syslinux here is because we have