similar to: "LDAP only" authentication without NSS/PAM - possible?

I'm trying to cross-compile Samba 3.0.21a to run on mipsel (using uClibc). It fails at some point however, and I can't spot the problem: # ./configure --target=mipsel-linux --host=mipsel-linux --build=i386-pc-linux-gnu && make (...) Compiling lib/sendfile.c Compiling lib/time.c lib/time.c: In function `GetTimeOfDay': lib/time.c:66: error: too few arguments to function

I just compiled Samba 3.0.21a for Linux/mipsel/uclibc. When I want to start smbd, it fails: [2006/01/19 12:29:09, 0] lib/util_sec.c:assert_gid(113) Failed to set gid privileges to (-1,65534) now set to (0,0) uid=(0,0) [2006/01/19 12:29:09, 0] lib/util.c:smb_panic2(1554) PANIC: failed to set gid The only way to start smbd is to put this into smb.conf: guest account = root But I'm

There is a reason most NMS systems used SNMP in the past and REST apis past 7+ years. They don't use CLIs except toy Expect type scripts.. Not just security but better error handling and more. Good luck learning! On Thu, Mar 29, 2018 at 9:03 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > SNMP is mainly used for monitoring, not _server_ automation. > > Also, it's

Al like any open-source or free sofware you need to put the leg work into what you want it to be. My company is actually creating something using TINC and we believe in it. If successful we'll be giving back to TINC monetarily in a big way to make TINC even better so if TINC isn't for you keep an eye on further developments in the future. Thanks, Rafael On Thu, Mar 29, 2018 at 12:03

SNMP is mainly used for monitoring, not _server_ automation. Also, it's inherently insecure for anything else - only SNMPv3 offers any kind of encryption, and it's DES - 56 bit only, and you can easily brute-force it on an average computer. If you could provide some serious articles about why is CLI insecure, I'd be interested to read. Tomasz Chmielewski https://lxadm.com On

automation refers to day to day vpn management from non-IT layman... not a geek running shell/ansible scrpits. On Thu, Mar 29, 2018 at 8:48 AM, al so <volkswak at gmail.com> wrote: > Just search online why in general that is insecure via CLI vs programmatic > for first class automation.. there is a reason why snmp, rest, ... exist. > > On Thu, Mar 29, 2018 at 3:50 AM, Tomasz

I have a strange issue with Brother MFC-5440CN printer. When I print from Linux/CUPS, it prints colours fine. When I print from Windows, using Windows drivers (without Samba), it also prints fine. When I print from Windows through Samba/CUPS (drivers added using cupsaddsmb...), it gives me wrong colours: expected | result -------------------- yellow | blue blue | red red | green

Hello ! If anybody want`s to implement the psexec unix port or samba equivalent, maybe taking a look at xCmd from Zoltan Csizmadia at http://www.codeguru.com/Cpp/I-N/network/remoteinvocation/article.php/c5433/ may help a LOT and is a very good example. (This one seems to work similar like psexec - but it is available with sourcecode!) I don`t know if the author is still reachable via this

Just search online why in general that is insecure via CLI vs programmatic for first class automation.. there is a reason why snmp, rest, ... exist. On Thu, Mar 29, 2018 at 3:50 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > You've mentioned security issues in your previous email, but now you're > hopping to management issues. > > Have you tried Ansible, Chef or

You've mentioned security issues in your previous email, but now you're hopping to management issues. Have you tried Ansible, Chef or Puppet for automation? It works well for hundreds of servers, different services and not just one kind of VPN. Tomasz Chmielewski https://lxadm.com On 2018-03-29 16:10, al so wrote: > Programmatic management with first class APIs is preferred for

Hi, this commit https://github.com/dovecot/core/commit/c9d76e2baf653fa5504d6849e5c1aae32eff3c53 added code which can not be compiled with uclibc-ng 1.0.26 using buildroot: make[3]: Entering directory '/home/bernd/buildroot/br4/output/build/dovecot-2.2.33.2/src/lib-test' /bin/bash ../../libtool --tag=CC --mode=compile

Programmatic management with first class APIs is preferred for larger deployments.. On Mon, Mar 26, 2018 at 12:28 PM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > Could you elaborate on why CLI (SSH) managing is insecure? > > > Tomasz Chmielewski > https://lxadm.com > > > On 2018-03-27 04:23, al so wrote: > >> So, for remote manageability of Tinc, we

I have a share with a couple of symlinked files in it. On a Samba server, it looks like this for "addon" directory: # ls -l (...) acrobatreader7 (...) addon -> /home/samba/unattended-write/packages Now, if I mount it on a Linux client using smbmount, symlinks point to non existing directories locally (/home/samba/unattended-write/packages exist only on a Samba server): #

There are rumors that 2k8 will support Paravirtualization, but I have yet to see anything to confirm that and haven''t found it in my testing of 2k8. -Nick >>> On Fri, May 2, 2008 at 9:15 AM, Tomasz Chmielewski <mangoo@wpkg.org> wrote: Venefax schrieb: > Is there a "xenified" version of Windows 2008 Server? If not, are there any > special drivers to make

With ssh tunnel (-L option), is it possible to set _remote_ bind address? Say, I have a remote SSH server with two IP addresses, 1.1.1.1 and 2.2.2.2. I would like to make sure that any outgoing connections to 3.3.3.3 will be made from 2.2.2.2: ssh client ---> 1.1.1.1 ssh server 2.2.2.2 >--- 3.3.3.3 Pseudo "--remote-bind" command here to illustrate what I mean: ssh -N -L

I'm running Samba 3.0.23c on Debian-arm (unstable), kernel 2.6.18. I can copy files from the Samba server just fine, when I do it from a Linux machine. When I want to copy files from the Samba server to a Windows XP SP2 machine (connection made from Windows), it copies a couple of files, and then everything just freezes - Samba doesn't send any more packets, and I have to reconnect

Hello, In my reading over the last couple of days, I have read that in order for klee to work with "native" Linux programs, I need to install the uClibc posix support for klee. I am not finding the uClibc source in the llvm svn repository anywhere. Is this still necessary for testing native Linux applications, and if so, where do I get the uClibc source to compile? Thanks in

On Wed, Dec 3, 2014 at 9:40 AM, Tomasz Chmielewski <mangoo at wpkg.org> wrote: > rsync in daemon mode is very powerful, yet it comes with one big > disadvantage: data is sent in plain. > > The workarounds are not really satisfying: > > > - use VPN - one needs to set up an extra service, not always possible > > - use stunnel - as above > > - use SSH - is not

> I just upgraded one of our samba BDC's (with LDAP back end on > solaris 10) from 3.0.23c to > 3.0.26a and can no longer mount shares. > > The error message I'm seeing in the samba logs is > > [2007/11/15 14:15:26, 1] auth/auth_sam.c:sam_account_ok(172) > sam_account_ok: Account for user 'dbb' password must change!. > [2007/11/15 14:15:26, 3]

For some reason, I'm unable to transfer *sometimes*, *some* files from a Windows server running rsyncd. 1. First, a try that succeeds - I want to copy "backup" directory, which is in "share": $ rsync --partial --dry-run -a -v --progress rsync://user@server/share/backup /tmp Password: receiving file list ... 30 files to consider backup/ backup/acls-c.bat.txt