similar to: ? AD user autherntication ?

We have a small Ubuntu 9.10 file server in a large Win 2003/2008 domain. There is no X nor web browser in the server. I have rights to join machines to the domain, but I'm not an Administrator There is about 10 users in this server, who want to authenticate with domain passwords when they mount their home directories to WindowsXP workstations. The ssh passwords should be local and separated

I have two similar PC with similar Ubuntu 9.10 srv installation. In the beginning both authenticated fine against our AD with Samba. I changed the NIC to another PC and moved it to another subdomain. Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32. The other PC works OK. SSH works in both. So the network is up. kinit myname at MYDOMAIN - OK klist - OK /etc/init.d/samba restart - OK net ads

Hi! I can Join, wbinfo -u etc works but getent passwd doesnt... I think the problem is: get this error: 'get_dc_list: preferred server list: ", *"' but why does it not know my domain? (already joined) Can someone help? Greetz Conf: #GLOBAL PARAMETERS [global] workgroup = CHAOS realm = chaos.local password server = beelzebub.chaos.local preferred master = no

dovecot version: 2.2.13 NetBSD 5.1 on an amd64 architecture Based on the log file, I think this problem first manifested itself when I upgrade from 2.2.9 to 2.2.12. I tried to go back to 2.2.9, but I would have had to rollback some of the other dependencies. I built 2.2.13 and the problem still exists. Mail gets successfully delivered, but the sender get a non-delivery message. I've

It seemed I found possible llvm-g++ bug. Programs compiled with llvm-g++ 4.5 crashed with SIGSEGV during stack unwinding in such testcase: chaos at chaos-desktop ~ % g++ --version g++ (Ubuntu/Linaro 4.5.1-7ubuntu2) 4.5.1 chaos at chaos-desktop ~ % echo "struct X{ ~X(){} }; int main() { X x; throw 1; }" > test.cpp && g++ test.cpp && ./a.out terminate called after

Hi, I'm running a mixed linux/Windows network with authentication done using Active Directory. The Linux clients use Samba/Winbind for authentication (with help from the list, thanks!). I've setup smb.conf such that doing 'net ads join -Uadministrator' populates my /etc/krb5.keytab (see configuration files below). klist shows me a nice set of principals from /etc/krb5.keytab

Winbindd is having trouble finding the Domain Admins group in my domain. It appears to be searching for the group but does not show what domain it's looking into - then it tries the local PC (ANC-Gentoo): log.winbind: [2004/01/07 13:20:43, 3] nsswitch/winbindd_group.c:winbindd_getgrnam(237) [23792]: getgrnam Domain Admins [2004/01/07 13:20:43, 5] nsswitch/winbindd_acct.c:wb_getgrnam(522)

Good morning! First of all thanks Rowland for the fast answer yesterday! I realized that samba-technical might have been the wrong mailing list and switched it to the normal samba users list (hopefully it worked, as it does get a bit confusing with spamgourmets addresses!). Unfortunately the problem with samba_dnsupdate remains after the changes. I did changed the smb.conf, krb5.conf, and hosts

hallo, today I have updated the first node of our tinc clout (33 tinc nodes currently) to 1.0.12 - all the others still use 1.0.10 or 1.0.11. It seems the whole tinc link to already activated connections pauses when there is a name resolution or authentication timeout. Feb 5 14:44:29 fwhh tinc.chaos[16262]: Already connected to royksopp Feb 5 14:45:00 fwhh tinc.chaos[16262]: Error while

Dear OpenSSH developers, Hi, taking the liberty of sending this to your mailing list in the hope someone will be able to help. The KTH version of Kerberos 4 was the only one I was able to find. In case you don't want to look at all the stuff below, the situation is briefly that I am trying to compile openssh with kerberos 4 support, which it apparently has. However, it can't find krb.h,

I encountered a strange libzfs behavior while testing a zone fix and want to make sure that I found a genuine bug. I''m creating zones whose zonepaths reside in ZFS datasets (i.e., the parent directories of the zones'' zonepaths are ZFS datasets). In this scenario, zoneadm(1M) attempts to create ZFS datasets for zonepaths. zoneadm(1M) has done this for a long time (since

hi! can join and see users with wbinfo -u and getent passwd.. On w2k8r2 is identity management for unix installed so there are uid/gid infos inside... winbind uses home dir and shell informations but dont uses uid/gid from ad... why? example: my user has 10000 uid in ad but winbind/getent shows 10003. My config: [global] workgroup = CHAOS realm = CHAOS.LOCAL netbios name = SATAN

Thank you for the answers Peter and Rowland and sorry to everybody for the spam...switched to another e-mail address and hope my messages will arrive only once from now on. As I wrote in my first mail, Kerberos does work. I can successfully request and list a ticket on the AC DC. kinit administrator at INTRANET.MAYWEG.NET Password for administrator at INTRANET.MAYWEG.NET: klist Ticket cache:

Hi, I'm trying to build samba 3.4.2 on Solaris 10 using SunStudio 12 but I've hit a snag. The configure line used was: CFLAGS="-xcode=pic32 -KPIC -m64 -I/ec/sw/samba/openldap/current/include -Iec/sw/samba/krb/current/include" \ CPPFLAGS="-xcode=pic32 -KPIC -m64 -I/ec/sw/samba/openldap/current/include -I/ec/sw/samba/krb/current/include" \

I am trying to build openssh-3.2.3p1 on solaris8 with support for afs token passing. I have the KTH-kerberos 4.1.1.1 libraries installed. The configure script generates the following warnings checking krb.h usability... no checking krb.h presence... yes configure: WARNING: krb.h: present but cannot be compiled configure: WARNING: krb.h: check for missing prerequisite headers? configure:

Hello All, I am using Kerberos-V in my machine (HP-UX version 11.11) and i successfully installed it. When i run the setup service # /opt/krb5/sbin/krb5setup options entered: ---------------- 1) Configure as a Primary Security Server 2) Default Security mechanism DES-MD5 3) Do you want to stash the principal database key on your local disk (y/n)? [y] : n 4) Secondary security server - q (skipped)

Hi, I have the following problem. I think it's arising from the fact, that DES algorithms are fetched from libcrypto and not from libdes anymore. But, some types still clash. I use krb4-1.2.1 from http://www.pdc.kth.se/kth-krb cc -O2 -n32 -TARG:platform=IP22 -OPT:Olimit=0 -I/usr/local/include -I/software/@sys/usr/include -I/usr/local/BerkeleyDB.4.0/include -I/usr/local/openssl/include

please test Olaf Kirch's patch. it looks fine to me, but i don't to K5. i'd like to see this in the next release. thx -m -------------- next part -------------- --- openssh-3.4p1/auth-krb5.c.krb Sun Jun 9 21:41:48 2002 +++ openssh-3.4p1/auth-krb5.c Tue Jul 23 15:15:43 2002 @@ -73,18 +73,17 @@ * from the ticket */ int -auth_krb5(Authctxt *authctxt, krb5_data *auth, char

Could people who have been having issues with Portable OpenSSH and Kerberos 4 please try the following patch. You will need to run "autoreconf" (i.e you will need autoconf installed) and then run ./configure again. Index: configure.in =================================================================== RCS file: /var/cvs/openssh/configure.in,v retrieving revision 1.267 diff -u -r1.267

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But