Displaying 20 results from an estimated 4000 matches similar to: "NT coexistence scenario with kerberized SAMBA and MIT single-signon"
2003 May 30
1
krb5-1.2.8 on cygwin + kerberized ssh
I have made a bit of progress since I compiled
krb5-1.2.6.
./configure --with-cc=gcc --without-krb4 --disable-dns-for-kdc
It would be nice if there was an option to just
compile client stuff.
The resolv library problem went away. I don't know
if that was a change to krb5 or to cygwin. Bison
problems also went away.
Still need to add
#include <errno.h>
to
2002 Mar 25
2
Using kerberized SSHD. Question.
I have a kerberized SSHD installed on HOST-1, a login server for the
outside world.
How can I make it so users are still authenticated via kerberos, even
though they haven't yet received a ticket?
The main reason for this is that a user who is at home, no vpn, but has
an ssh client could then login and be authenticated by kerberos using
password authentication, get a ticket, then be allowed
2017 Nov 06
0
Unable to upload printer drivers
Hai Manu,
Can you post the output of:
getfacl /var/lib/samba/printers
And
getfacl /var/lib/samba/printers/x64
And run
net rpc rights list accounts -Uadministrator
These are often forgotten or wrong set.
NT Authority\SYSTEM
NT Authority\Authenticated Users
Set on the share AND folder rights.
Share: SYSTEM: Full control.
Share: Verified users: Full controll
Folder security: SYSTEM:
2004 Oct 22
0
automatically authenticate domain logged-on users ina pache with AD/NTDOM?
Yeah, "interoperate over either NTLM or Kerberos to provide SSO", that's
exactly what I'm talking about! Only, I want to trade IIS for apache@unix.
I can still use Explorer@windows for clients.
Very interesting, though, that Mozilla has been kerberized. I knew it would
happen, but I haven't read anything about that.
Thanks for the input,
Palle
--On fredag 22 oktober
2017 Mar 22
0
kerberized-nfs - any experts out there?
Matt Garman wrote:
> Is anyone on the list using kerberized-nfs on any kind of scale?
>
We use it here. I don't think I'm an expert - my manager is - but let me
think about your issues.
<snip>
> Just to give a little insight into our issues: we have an
> in-house-developed compute job dispatching system. Say a user has
> 100s of analysis jobs he wants to run, he
2010 Aug 24
1
Fully kerberized mail system
Hello,
Is it possible to use Dovecot in a fully kerberized mail system?
We have configured authentication via kerberos, now we would like the
imap deamon to access a kerberized nfs file system. Has any one any
experiences?
Regards,
Matthew.
--
Dr Matthew Williams MEng PhD MBCS
Systems Administrator - IT Services - Bangor University
Prifysgol Bangor Tel: (44) (0)1248 382414
2004 Mar 20
1
Not able to Map Network drive from Windows XP using Kerberized Samba 3.0
Hi all,
I failed to map my network drive my,password is not
accepted from windows XP using Kerberized Samba3.0.
My server is Red Hat Enterprise Linux.
Can some one help with the basic steps in mapping
network drive from Windows XP? Or basic configuration
with Kerberos 5.
I am new to Kerberos 5.
Zakaria
__________________________________
Do you Yahoo!?
Yahoo! Finance Tax Center - File
2002 Jan 31
0
kerberized ssh on Mac OS X?
Sigh. Is anyone here working getting K5 kerberized ssh onto Mac OS X?
I'm having trouble building with the Apple krb5 and OS X include files -
seems fp.h gets sucked in by something, and it's got it's own idea
of what "log()" is...
Is there a better place to ask this question? Be gentle, please.
Thanks.
--paw
Pat Wilson
paw at ucsd.edu
2010 Aug 04
0
Kerberized NFS4 w/AD 2008 R2
Is anyone currently using CentOS 5.5 with 2008 R2 AD authentication and a
fully Kerberized NFSv4? If so would you mind sharing your configuration
with me?
I have been able to successfully get it working with Windows 2003 as
discussed earlier on the list
http://lists.centos.org/pipermail/centos/2010-July/096374.html
With the exception that I had to use dynamic UIDs on the machine since we
2017 Mar 22
0
kerberized-nfs - any experts out there?
On 03/22/2017 03:26 PM, Matt Garman wrote:
> Is anyone on the list using kerberized-nfs on any kind of scale?
Not for a good many years.
Are you using v3 or v4 NFS?
Also, you can probably stuff the rpc.gss* and idmapd services into
verbose mode, which may give you a better ideas as to whats going on.
And yes, the kernel does some kerberos caching. I think 10 to 15 minutes.
2014 Feb 20
0
samba4 success/failure report...all's working despite kerberized ssh
Just a tip...
is all server have same time ?
not sure that will help you..
-----------------------------------
St?phane PURNELLE Admin. Syst?mes et R?seaux
Service Informatique Corman S.A. Tel : 00 32 (0)87/342467
samba-technical-bounces at lists.samba.org wrote on 20/02/2014 10:46:38:
> De : Georg Hopp <georg at steffers.org>
> A : Sumit
2016 Nov 28
0
Samba and kerberized NFSv4
Am 2016-11-28 07:14, schrieb Matthias Kahle via samba:
> Hi Folks
Hi Matthias,
> I'm trying to share user home directories hosted on a Samba-4 member
> server via NFSv4. Everything's working well with the Windows shares but
> when it comes to kerberized NFSv4 it fails. I can't even mount the
> home
> root directory via nfs on the server itself ("mount.nfsv4:
2016 Dec 02
0
Samba and kerberized NFSv4
Hi Matthias,
adding (or better replacing) the userPrincipalName attribute
with the nfs/* one, is exactly what you need to do.
For some reason the NFS client's request *only* matches
the userPrincipalName attribute, while all other services
I tried so far are fine when matching one of the values
in servicePrincipalName attribute.
NFS seems to be a very special kind of kerberos service
as it
2007 Feb 02
1
minor kerberized dovecot build issue
Hi all, again,
I'm not knowledgeable about Kerberos, but we have a few users who use it
to make sure that it works well on Solaris... so, they would like
a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on
Solaris Nevada (the current development release), and the configure
script choked for a couple of reasons. First, script uses 'grep -qv'
in the case that you specify
2017 Mar 22
5
kerberized-nfs - any experts out there?
Is anyone on the list using kerberized-nfs on any kind of scale?
I've been fighting with this for years. In general, when we have
issues with this system, they are random and/or not repeatable. I've
had very little luck with community support. I hope I don't offend by
saying that! Rather, my belief is that these problems are very
niche/esoteric, and so beyond the scope of typical
2002 Jun 23
2
SAMBA + LDAP Single Signon Achieved
Hello all!!
I have partially achieved full single-signon, synched passwords with
Samba 2.2.5 and OpenLDAP 2.0.25 on Mandrake 8.2.
I can change my PDC password from a Win2K box and it synchs the
Linux/Unix/LDAP password correctly. I can change my password from Linux
using 'passwd' and it synchs the PDC password.
Samba is the PDC, and uses LDAP as the smbpasswd backend.
This all works
2016 Aug 01
0
kerberized nfs4 homedir and local account access (www-data)
Hi,
I'm stuck since one week on how to give access on a kerberized nfs4
share to client-side local account (more precisely www-data account)...
My client setup and step-by-step configuration :
- Installed OS : XUbuntu 16.04 x64
1. Installing Samba4 from repos
2. Configuring Samba :
My client-side smb.conf :
[global]
netbios name = TEMPOINST
workgroup = WKG
security =
2006 Jan 18
1
MIT KDC for Samba authentication?
Hi Samba Users,
I have Samba providing shares to several XP clients. The clients
currently authenticate using private/smbpasswd. I do not have an Active
Directory server nor any Windows servers.
I also have an MIT KDC. Various services have been Kerberised including
SSH (proper GSSAPI negotiation) and Apache (Basic auth). This is all
functioning correctly. The Apache login and SSH logins from
2019 Oct 30
0
Automate Kerberized SSH Connections using Samba 4 as the KDC??
On 10/29/19 6:14 AM, L.P.H. van Belle via samba wrote:
> I'm pretty sure this is a resolving problem.
>
> Can you verify this:
> https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record
> Especialy these : for both guids and cross check if from both servers.
> host -t CNAME 50507d18-c8ee-4ef4-bbda-4d0d9bc31caa._msdcs.....
>
> Can you post from both
2013 Dec 19
0
problem with password in a changing scenario
Hello,
I'm having a problem with with password changing. According to
http://wiki2.dovecot.org/Authentication/Caching, I understand "normal
scenario" and "Using old cached password scenario", but I'm having a
problem with the "Early change scenario".
I understand that in this case, if in step 4 user tries password Y,
then this password is not