similar to: Heimdal Update MFC Date?

I would like to request that some useful work on networking be MFCed from -CURRENT to -STABLE in time for the release of FreeBSD 6.3. In particular, I'd like to see some of the Netgraph nodes which are new or which have seen extensive development brought in -- ng_nat and ng_car in particular. Bringing in the latest version of ng_nat would allow more flexible in-kernel NAT, while ng_car (which

Dear Soeren, a couple of months ago, namely > revision 1.8 > date: 2003/05/01 06:20:50; author: sos; state: Exp; lines: +17 -2 > I'm pleased to announce that Promise is now supporting the FreeBSD > project by providing documentation (under NDA) and hardware for > testing. This commit is the first result of the cooperation, and > adds support for several of their new

After installing 6.4-RELEASE on my secondary KDC I decided to test the secondary KDC. When trying kinit I get this error: jcw@w17 ~ $ kinit jcw@STRADAMOTORSPORTS.COM's Password: kinit: krb5_get_init_creds: Key size is incompatible with encryption type One post on the net says that Heimdal changed the key format to add some padding or somesuch. I haven't gone about fixing the problem

Could somebody please confirm that they are actually using 8.1-R with heimdal as a KDC successfully? A little confirmation would help me greatly. Thanks, Jason C. Wells

Hello list. Heimdal documentation still refers to Windows 2000 for Kerberos compatibility issues. Is there anything more recent somewhere, considering Windows 2003 and 2008, for instance ? In particular, I'm quite curious to know if, when using a ldap-backend for heimdal, I could just copy my kerberos password attributes into the AD server, provided I'm using compatible encryptions,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:08.heimdal Security Advisory The FreeBSD Project Topic: heimdal cross-realm trust vulnerability Category: core Module: crypto_heimdal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:08.heimdal Security Advisory The FreeBSD Project Topic: heimdal cross-realm trust vulnerability Category: core Module: crypto_heimdal

I have FreeBSD-6.1 and it appears the default installation has a full complement of Kerberos5. But, /usr/src/kerberos5/README states: This subtree is world-exportable, as it does not contain any cryptographic code. At the time of writing, it did not even contain source code, only Makefiles and headers. Please maintain this "exportable" status quo. Thanks!

My college is kerberized, and so in many situations authentication is both faster and more secure using kerberos tickets. Sadly I have run into a problem. The Heimdal included in FreeBSD seems to be incompatible with my school's servers running MIT kerberos when authenticating over gssapi. For example ssh in verbose mode returns: debug2: we sent a gssapi-with-mic packet, wait for reply

Hi! I have been reading for about two weeks (maybe I'm reading on the wrong places). I have found as many documents as one could expect describind how to build a LDAPv3 server, or how to build samba with ldap. This far, I have failed, and have a BIG confution in the order in wich the things should go: In one document, they recommend this: samba -> ldap -> sasl -> kerberos

Hello, I've run into some issues building Samba 4.20.2 due to problems concerning Heimdal. First, I am unable to build with the embed Heimdal due to a variety of errors during compilation of the embedded heimdal. As result, I built a "system" heimdal using the current master branch of heimdal from GitHub. Then I tried to build Samba again using the --with-system-heimdalkrb5, but it

Trying to follow Chapter 9.3.3 of S3BE to create a SuSE 8.2 Active Directory domain member server. 9.3.3 says heimdal >= .6 is required. I installed the Sernet packages and saw 0.6.2 source is included. Running ./configure after unpacking the heimdal source completes OK, but running make results in the following errors: creating libss.la /usr/bin/sed: can't read

On Mon, Oct 24, 2005 at 03:35:41PM -0400, William Jojo wrote: > > Has anyone been able to get Heimdal 0.7.1 with Samba 3.0.20b to compile successfully without commenting out the __cplusplus stuff in include/includes.h? If I comment it out, it's fine on FC3. The Heimdal people are using "private" as a structure member name, so I know it's a Heimdal problem :-). I think you

On Fri, Jul 22, 2016 at 02:54:05PM +0200, Stefan Schäfer wrote: > Hi List, > > I do my best to ask my question in english. ;-) > > Samba4 integrated heimdal kerberos to do the kerberos work for > Active Directory. Some Linux Distributions like fedora/RedHat and > openSUSE/SUSE don't accept heimdal even if it is shipped inside > samba. > > Their argument is that

Hello, My first problem is compilation against Heimdal. It does not work because of the following: /products/source/heimdal/heimdal-0.5.1/i386_linux24/lib/roken/../../../lib/r oken/getprogname.c(.text+0xc): multiple definition of `get_progname' openbsd-compat//libopenbsd-compat.a(bsd-misc.o)(.text+0x0):/usr1/ahaupt/open ssh-3.6.1p1/openbsd-compat/bsd-misc.c: first defined here /usr/bin/ld:

I would like to start testing this? I saw a few months back Alexander Bokovoy Released a build for F23 and I started using that. Now that F24 is out I have to look for a way to upgrade. Is there a build for rawhide with this? The standard samba-ad package for rawhide that install still doesn't come with samba-tool. And compiling samba 4.4.5 with-mit-krb5 automatically disables ad support it

On Thu, 2017-01-05 at 10:45 +0100, Stefan G. Weichinger via samba wrote: > Am 2017-01-05 um 00:28 schrieb Andrew Bartlett: > > > > > > > > > In Debian we re-bundled heimdal.  Samba is only known to work and > > > is > > > only tested with the bundled copy.  The semi-private interfaces > > > we > > > use > > > with the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everybodey, i can't compile 3.0.20 the following message occurs : Compiling dynconfig.c In file included from include/includes.h:452, ~ from dynconfig.c:21: /usr/local/heimdal-0.7/include/krb5.h:660: error: syntax error at '#' token /usr/local/heimdal-0.7/include/krb5.h:660: warning: no semicolon at end of struct or

I've had some trouble compiling GSSAPI on SuSE Enterprise 9 using Heimdal. It turns out that this installation has /usr/include/heimdal/gssapi.h rather than gssapi/gssapi.h. krb5-config correctly sets -I/usr/include/heimdal in the CFLAGS. Looking back, there was a similar issue a few months ago:- http://www.dovecot.org/list/dovecot/2006-July/014945.html I'm a complete newbie to

On Sun, 2023-03-19 at 09:29 +0200, Alexander Bokovoy via samba- technical wrote: > Hi, > > > I would be against a blended build against both MIT Kerberos and > Heimdal > Kerberos in a distribution. It is not going to bring you anything > good, > support wise. > > Andreas and I have submitted a talk to SambaXP about MIT > Kerberos/Heimdal Kerberos-based Samba AD