Displaying 20 results from an estimated 1000 matches similar to: "AD and SAMBA"
2002 Jul 22
2
rSync on RTOS
Hi All,
I need one information
How much effort is required to port the the rSync utility to
any of the RTOS available? (how much is the linux dependent
code in the implementattion?)
regards
Thanks in Advance
Biju
--
Biju Perumal
HCL Technologies Ltd. Voice +91-44-3728366 (Xtn-1134)
http://san.hcltech.com
2023 Oct 22
1
Question about silos and Authentication policies
Talking to myself again ;-)
Samba-tool is working a little bit different then the silo/policy
management on a Windows-DC.
On a Windows-DC after assigning the user and host to the silo you have
to assign the silo to the user and the host. When assigning the user and
host to the silo with samba-tool, the assignment to the user and the
host will be done at the same time. So now my policy looks
2023 Oct 23
2
Question about silos and Authentication policies
Hi Stefan,
We had a long weekend in New Zealand, I'm catching up now to your emails.
Some of the slight differences between Windows tools I've already picked
up on and are in my PR Andrew Bartlett mentioned on Friday, but I'm
always open to learning what things are missing or different etc.
On 23/10/23 02:58, Stefan Kania via samba wrote:
> Talking to myself again ;-)
>
>
2023 Oct 23
2
Question about silos and Authentication policies
Thanks Rob for chiming in.
Stefan,
I do want to be very clear, one of the big challanges that we as
developers face building these kind of tools is that we don't run AD
domains day-to-day. So we really value good feedback on the
ergonomics.
If you can test with our work in progress, we are keen to adapt the
tooling where possible to be more in line with what is 'naturally
expected, so
2015 May 11
6
Authenticating Apache Against Active Directory
Hello,
Using Nagios on Ubuntu 14.04.1 LTS. I'm attempting to authenticate
users against Samba 4.2.1. When I edit 'apache2.conf' with
<Directory />
Options FollowSymLinks
AllowOverride None
Require all granted
Allow from all
AuthName "AD authentication"
AuthBasicProvider ldap
AuthType Basic
2012 May 15
1
would like to use samba3 pdc, no ldap account backend db, but use ldap for authN
I'd like to:
1) use samba3 as a PDC, and
2) not use LDAP as the account backend database, and
3) specify samba to use but use "encrypt passwords = true", and
4) use an ldap server as the authentication source for samba.
Is that possible?
I'd assumed it would be given that samba is pam-aware, and I can tell pam to use ldap for authN.
However, the man page for smb.conf seems to
2020 Sep 28
1
custom userdb server, Exim, and proxying
Hi all,
We have Exim using Dovecot for authentication. Dovecot, in turn, consults a custom internal server that answers Dovecot?s userdb queries.
When IMAP connections arrive, for some users we want to forward those connections--without authentication--to an external IMAP server. For these users, we return ?proxy_maybe? and ?nopassword? in the authn response from our userdb server. This tells
2002 Jul 29
1
Fundamental rsync design question.
Hi folks,
Was looking at a commercial product which does something similar
to rsync.
It seems to optimise incremental change determination by logging the
changes that
have occured since the first full transfer happened, using techniques
common in snapshot techniques.
Is there any reason for rsync not using this approach ? Is it the
space constraints
imposed by a logging approach or
2014 Feb 09
1
master user and ACL's
Hi,
Quick question...I read in the docs that:
"Master user is still subject to ACLs just like any other user, which
means that by default the master user has no access to any mailboxes of
the user."
... and that the standard workaround is to return master_user=%u from
the userdb.
But why is the master_user authn-id used in the ACLs and not the
authz-id (requested-login-user) ?
2024 Jun 27
1
Proposal to add a DisableAuthentication option to sshd ServerOptions
On 6/26/2024 9:34 PM, Henry Qin wrote:
> Hi folks,
>
> I've recently started to work on a patch for openssh that introduces a new
> option to disable authentication.
> I'd like to explain why I think this might be generally useful, and solicit
> opinions on whether such a patch would be acceptable to the maintainers as
> a pull request.
Why not just use a different
2023 Oct 30
2
Question about silos and Authentication policies
I was playing around again with Windows and when you add members to
silos, or remove them, it should not set/unset assigned silo on the user.
So I've got a new pull request in Draft state still where I remove that
functionality, as well as add some new commands to samba-tool user command.
It turned out to be easier to add sub commands to user, as edit user
wasn't quite what I thought
2024 Jun 27
1
Proposal to add a DisableAuthentication option to sshd ServerOptions
When I looked at `man pam_unix`, I did not see any obvious options that
would
cause ssh to authenticate without prompting for a password at all, short of
setting an empty password which is similar to PermitEmptyPasswords option.
However, I am not very familiar with the internals of PAM, so pointers to
documentation would be greatly appreciated.
Also, I think adding a single line to sshd_config
2015 Feb 25
2
Proxying of non "plain" SASL mechnisms.
Hi,
I understand from earlier discussions that the reason dovecot doesn't
support proxying of other SASL mechanisms than those which supply the
plaintext password is that in general it would be possible to proxy any
SASL mechanism since it might protect against man-in-the-middle attacks
(which would prevent proxying).
However, that has led to choice between letting users use PLAIN (or
2024 Jun 27
1
Proposal to add a DisableAuthentication option to sshd ServerOptions
see pam_permit(8)
On Thu, Jun 27, 2024 at 10:37?AM Henry Qin <hq6 at cs.stanford.edu> wrote:
>
> When I looked at `man pam_unix`, I did not see any obvious options that
> would
> cause ssh to authenticate without prompting for a password at all, short of
> setting an empty password which is similar to PermitEmptyPasswords option.
>
> However, I am not very familiar
2020 Sep 24
2
Can't connect after AuthN: NT_STATUS_ACCESS_DENIED
Been using Samba since the early days and it's always worked terrifically.
Install it from RPM or apt or yum, make a few tweaks to the smb.conf and
I'm off and running without fail.
So to run into a situation where I'm getting denied has really stumped me.
I dialed up logging to try and get a peek into what's failing and things
start falling apart around NT_STATUS_ACCESS_DENIED
2010 Sep 03
1
Multiple Samba PDCs doubt
First, excuse me because I don't speak english very well (perhaps this
is the reason that I mess up something when reading the documentation).
I have read the Howto, some Examples and the book and I have some doubts
which I like to solve. Excuse me for the big post, too ;)
My starting point:
- 3 Debian Linux Samba Servers
- 1 Windows XP SP3 Professional
- 1 OpenLDAP Server (on another Debian
2024 Jun 27
1
Proposal to add a DisableAuthentication option to sshd ServerOptions
Thanks for the pointer!
I played around with PamServiceName set to 'sshd_disable_auth' and got it
working with the minimum contents below in the file
/etc/pam.d/sshd_disable_auth.
auth required pam_permit.so
account required pam_permit.so
session required pam_permit.so
Thus, this does indeed enable disabling authentication.
Unfortunately, as far as I can tell, only root can create files
2008 Aug 12
5
[PATCH] Support GSS-SPNEGO natively
I cooked this up while trying to figure out why thunderbird on Windows
w/ SSPI was not working, but it turned out thunderbird does not use
it, so I haven't been able to test it yet. I'm presenting it for
discussion only, unless someone else can try it :)
Modern versions of MIT kerberos support GSS-SPNEGO natively, but are
only willing to negotiate for kerberos tickets and not NTLM
2007 May 02
2
VPN between Asterisk server and phone client
> -----Original Message-----
> From: asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-
> bounces@lists.digium.com] On Behalf Of Biju
> Sent: Wednesday, May 02, 2007 5:38 AM
> To: 'Asterisk Users Mailing List - Non-Commercial Discussion'
> Subject: [asterisk-users] VPN between Asterisk server and phone client
>
> Hi,
>
> I wish to make a secure
2011 May 09
2
Round down to earliest hour or half hour
I have times and would like to round down to the earliest 30 minute
increment. For instance, a time of
2011-04-28 09:02:00
(the as.numeric value = 1303999320)
I would like it to be rounded down to:
2011-04-28 09:00:00
(the as.numeric value = 1303999200)
Any ideas of how to do this?
-----
In theory, practice and theory are the same. In practice, they are not - Albert Einstein
--
View this