similar to: msdfs problem

I'm trying to log into a problem server. The server is running an old kernel - 2.6.10 - and samba 3.0.25C. When I try to mount a share from another server running samba 3.0.26b, I get: root@Lethe:/tmp/log/samba# mount.cifs //kahn/yan /tmp/x --verbose -o user=xxx,pass=yyy,ip=10.8.0.1 parsing options: user=xxx,pass=yyy,ip=10.8.0.1 ip address 10.8.0.1 override specified ip address specified

I migrated my config to a new server, and now logins against the AD server are failing. If I try the correct password, I get: check_ntlm_password: Authentication for user [yans] -> [yans] FAILED with error NT_STATUS_NO_SUCH_USER But if I try with a wrong password I get: check_ntlm_password: Authentication for user [yans] -> [yans] FAILED with error NT_STATUS_WRONG_PASSWORD Where do

https://bugzilla.mindrot.org/show_bug.cgi?id=1545 Daniel Kahn Gillmor <dkg at fifthhorseman.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dkg at fifthhorseman.net --- Comment #15 from Daniel Kahn Gillmor <dkg at fifthhorseman.net> ---

I have a client with an older server that is running into a weird file locking problem. The server is running FC2, samba 3.0.7 and kernel 2.6.10. They have recently installed AutoDesk Revit, which is apparently some sort of collaborative design software. Revit keeps a central repository and then allows different clients to access it. What is happening is that only the person who created the

Processing commands for control at bugs.debian.org: > # changing bug submitter e-mail address from > # dkg-debian.org at fifthhorsemannet to > # dkg at fifthhorseman.net for consolidation > submitter 318123 ! Bug#318123: [CVE-2006-0061] xlockmore: xlock segfaults with libpam-opensc, returns to user session Changed Bug submitter from Daniel Kahn Gillmor <dkg-debian.org at

https://bugzilla.mindrot.org/show_bug.cgi?id=1808 Summary: "SetupCommand" invoked before connecting Product: Portable OpenSSH Version: 5.6p1 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: ssh AssignedTo: unassigned-bugs at mindrot.org

On Thu, Oct 15, 2015 at 04:15:03PM -0400, Daniel Kahn Gillmor wrote: > if the intermediary machine (the "jumphost") is jumphost.example, and > you are trying to reach bar.example.com (which is behind the firewall), > you would do: > ssh -oProxyCommand='ssh jumphost.example -W %h:%p' bar.example.com We use jump host, but there are literally hundreds of hosts behind

Hello everybody! Still struggeling with my latest Samba setup, I've just run accross another problem which I can't figure out on my own. Samba is supposed to act as a WINS server (among other things) on a multihomed machine. (The Samba version is 3.5.1 as part of Debian Squeeze) Here's the [global] part of the samba setup: ----------------------------------- 8<

Is it possible to have rsync order transfers by file size (smallest files first) ? Would it be a big patch ? Thanks Viki

I see. From reading that wikipedia article, I'm wondering what gets compressed when compression is enabled in openssh. Is it the ciphertext or the cleartext? Regards, Mark On Fri, 2013-10-25 at 15:47 -0400, Daniel Kahn Gillmor wrote: > On 10/25/2013 03:23 PM, Mark E. Lee wrote: > > Thanks for the response, what kind of problematic interactions would > > occur (other than

On 04 Feb (10:46:55), Daniel Kahn Gillmor wrote: > On Thu 2016-02-04 07:40:39 -0500, David Goulet wrote: > > > I would like to know if adding support for Unix socket to sshd would be a > > feature that would be consider to be added upstream? (ListenAddress). > > fwiw, i think this is a good idea, but i wouldn't implement it as an > explicit ListenAddress option:

Message: 12 From: Gery Kahn <geryk@sphera.com> To: "''lartc@mailman.ds9a.nl''" <lartc@mailman.ds9a.nl> Date: Tue, 5 Jun 2001 20:28:30 +0200 Subject: [LARTC] priority of class ->split traffic in 2 more classes ->tc class add dev eth0 parent 2:0 classid 2:21 cbq avpkt 1000 bandwidth ->100Mbit \ ->rate 70Mbit prio 3 maxburst 20 ->tc qdisc add

I guess I didn't want to litter the users table either - it just seems "wrong" to be actually adding things to the host when it is really so transient. It feels like it should be LDAP-ish. Just ask the server for the keys and do a one-off authentication. But I've seen even LDAP creates the user directories. I see that 2.6 kernels can have some 4B users, which should last me a

On Tue, Oct 20, 2015 at 01:31:46AM +0200, ?ngel Gonz?lez wrote: > On 16/10/15 12:46, hubert depesz lubaczewski wrote: > >On Thu, Oct 15, 2015 at 04:15:03PM -0400, Daniel Kahn Gillmor wrote: > >>> if the intermediary machine (the "jumphost") is jumphost.example, and > >>> you are trying to reach bar.example.com (which is behind the firewall), >

Is it possible to tell rsync *not* to use file names, date stamps, etc and only use the checksum for deciding if a file is the same? the remote machine "normalizes" a set of file names to remove all punctuation marks and forces all file names to lower case. The files themselves are unchanged. --checksum looks promising but it does not say anything about file names: -c, --checksum

On Tue 2015-05-26 14:02:07 -0400, Hubert Kario wrote: > On Tuesday 26 May 2015 13:43:13 Daniel Kahn Gillmor wrote: >> On Tue 2015-05-26 12:57:05 -0400, Hubert Kario wrote: >> > creating composites that will pass even 100000 rounds of Miller-Rabin is >> > relatively simple.... >> > (assuming the values for M-R tests are picked randomly) >> >> Can you

On Fri, 29 Dec 2017, Daniel Kahn Gillmor wrote: > On Thu 2017-12-28 21:31:28 -0800, Dan Mahoney (Gushi) wrote: > > Why not make minimum key length a tunable, just as the other options are? > > Because the goal of building secure software is to make it easy to > answer the question "are you using it securely?" This is a nice summation of our approach. It's the

On 09/22/2017 03:22 PM, Daniel Kahn Gillmor wrote: > On Thu 2017-09-21 18:12:44 -0400, Joseph S Testa II wrote: >> I gotta say... having a fallback mechanism here seems pretty >> strange. The entire point of the group exchange is to use a dynamic >> group and not a static one. > > fwiw, i think dynamic groups for DHE key exchange is intrinsically > problematic

Hi list, I use Samba 3.0.24 on Etch. I want to connect to my Samba share trough routed vpn. Samba server works well from the lan, and my openvpn works fine. But something is strange ... In my smb.conf : hosts allow = 127.0.0.1 192.168.10.0/24 10.8.0.0/24 hosts deny = 0.0.0.0/0 bind interfaces only = yes interfaces = 127.0.0.1 192.168.10.254 10.8.0.1 where 192.168.10.254 is my lan

Hello, On Sat, Dec 30, 2017 at 12:16 AM, Daniel Kahn Gillmor <dkg at fifthhorseman.net > wrote: > On Thu 2017-12-28 21:31:28 -0800, Dan Mahoney (Gushi) wrote: > > > > Perhaps if you're dead-set on this being so dangerous, > > It's not the developers who are dead-set on weak-keyed RSA being > insecure, it's the cryptanalysts who have shown that to be the