similar to: Samba PDC/Windows BDC domain sync

Attached is a patch that allows for an interactive Kerberos password change via keyboard-interactive, and also reports any banners received from krb5_g_i_c_p() (e.g., password expiration notification if you have krb5-1.2.x patched appropriately). This could probably be refactored a bit and probably done better, but I'm sending this in in case anyone finds it useful. The major drawback is

I took Markus Friedl's advice and set up a KbdintDevice for Kerberos password authentication/expiry. It took me a bit to wrap my head around privsep, but I think it's working properly (code stolen shamelessly from FBSD's PAM implementation :->). The hardest part was working out how to get the interaction between krb5_get_init_creds_password() (along with the prompter) to work

The attached patch restricts any keyboard-int method from allowing root password authentication. Other methods (bsdauth? I don't even really know what that is) could be added as well. FWIW, it appears that when using the "password" method the code in auth.c is never reached due to the following code in auth-passwd.c: #ifndef HAVE_CYGWIN if (pw &&

of the remotely connected socket is in in monitor_read(). The easiest way to pass them in would be to add fields to the Authctxt structure, which gets passed down into auth_krb5_password(), although possibly not the best. Perhaps using a prompter isn't the best way to go, either, I'm not sure. Ultimately, I'm simply looking for any pointers as to the best way to proceed, even if

This bug causes a segfault when compiled against heimdal, but not MIT krb5. Either way, I think this code is correct. HTH. ---------------------------------------------------------------------- | Jim Hranicky, Senior SysAdmin UF/CISE Department | | E314D CSE Building Phone (352) 392-1499 | | jfh at cise.ufl.edu

http://bugzilla.mindrot.org/show_bug.cgi?id=568 Summary: Kerberos password auth/expiry kbdint patch Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P4 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org

I have tried this patch (against 3.5p1) and would very much like it to be in the OpenSSH 3.6p1 release, if possible: http://bugzilla.mindrot.org/show_bug.cgi?id=14 On that note, I'd like the Sun BSM patch to be included also, if possible. I have it working applied to 3.5p1: http://bugzilla.mindrot.org/show_bug.cgi?id=125 In fact, both patches work together, apparently. If I have any

http://bugzilla.mindrot.org/show_bug.cgi?id=701 Summary: With 'PermitRootPassword without-password' set, root w/pass can still log in with a using 'keyboard-int/pam' Product: Portable OpenSSH Version: 3.7.1p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority:

Hi everybody, our university uses a Samba 3.6.9 server as PDC for a windows domain on a single physical server (external LDAP on another server is used). To get some redundancy up running a second physical machine was bought, which is exactly the same as the one running. Now I?m searching for the best way to get the job done. The first thought was to build a HA-Cluster with Corosync/Pacemaker

Yes, I saw that they are different I was just willing to test something similar. Actually, I'm searching for a Samba feature that allow transparent failover, or continuos availablity in a cluster setup (Samba + ctbd + gluster) Based on the following link my understanding is that such feature is not currently available in Samba:

I am hereby announcing the immediate availablity of ASTCC for *alpha* testing. ASTCC is an AGI script and CGI script which greatly simplifies the task of creating a calling card application on Asterisk. Just check it out of Asterisk CVS as module astcc: export CVSROOT=:pserver:anoncvs@cvs.digium.com:/usr/cvsroot cvs login (password is anoncvs) cvs co astcc ASTCC is, of course, distributed

I'd like to announce the availablity of the Ogg Vorbis QuickTime component for MacOS 9. It only exports at the moment, import and decompressing is next. http://homepage.mac.com/snicolai Email me with comments, log the bugs/feature requests at http://bugs.xiph.org/ Steve Nicolai --- >8 ---- List archives: http://www.xiph.org/archives/ Ogg project homepage: http://www.xiph.org/ogg/ To

Hi all, >From the manpage of rsync, I can see the following descriptions: --inplace The option implies --partial (since an interrupted transfer does not delete the file) So I do the following testings on the `--inplace' and `--partial' for resuming a file with the following steps: 1- rsync ftp.cn.debian.org::debian/dists/wheezy/main/binary-amd64/

Hey, The company I work for is in the market for a new firewall. Right now we're hosting all of our own stuff (on CentOS servers) behind an old checkpoint firewall. I think Checkpoint is overkill for our needs and very expensive, plus I don't like the "per-user" charges of some commercial solutions. What do you guys suggest that we upgrade to? Here are some of the

+the people I hashed this out with so many months ago I think it's a reasonable proposal, but obviously I floated it. :) Let's try to get a second opinion. Again, it's a syntax something like: define void @foo() prefix [i8* x 2] { i8* @a, i8* @b } prologue [i8 x 4] c"\xde\xad\xbe\xef" { ret void } On Thu, Aug 21, 2014 at 1:58 PM, Ben Gamari <bgamari.foss at

Hi all We are running tests on gluster to see if it is suitable for inclusion in a live environment. Software is 3.4.0beta4 Cluster is Proxmax with 2 nodes + quorum disc. Gluster is set to replicate mode - 2 replicas. Many tests are very satisfactory but last week we discovered two facts which make gluster unsuitable for our application. I assume this is a misunderstanding or misconfiguration

*Call for Papers* *IEEE Computing in Science & Engineering* ** *Special Issue on Cloud Computing in Science & Engineering* http://www.computer.org/portal/web/computingnow/cise ** *Submissions due: November 04, 2012* *Estimated Publication date: July/August, 2013* Cloud computing has emerged as a dominant paradigm that has been widely adopted by enterprises. Clouds provide on-demand

*Call for Papers* *IEEE Computing in Science & Engineering* ** *Special Issue on Cloud Computing in Science & Engineering* http://www.computer.org/portal/web/computingnow/cise ** *Submissions due: November 04, 2012* *Estimated Publication date: July/August, 2013* Cloud computing has emerged as a dominant paradigm that has been widely adopted by enterprises. Clouds provide on-demand

Hi R Developers, Greg is helping me with debugging R on Solaris 10 x64. Please let us know if you have any thoughts or tips that can help us debug this. Thanks, David ************ Using default transfer plist in vector_io: permuting About to write *** caught segfault *** address e8554000, cause 'memory not mapped' Traceback: 1: .External("do_hdf5save", call,

As discussed previously on this list, Samba RPMs for Fedora Core do not include idmap_rid support. This is also true for older RedHat distributions. SuSE on the other hand, seems to have been patching in idmap_rid support since 3.0.5 or so; and with trusted domain support, to boot. Harrumph. I've been able to rebuild samba srpms on FC2 and RedHat 8 by patching the samba distributed rpms,