similar to: LDAP congestion

Mandi! Andrew Bartlett via samba In chel di` si favelave... Ok, i coma back to an old thread, because vendor finally reply. Little fast-rewind: i own some Konica-Minolta BizHub multifunction printers/copiers, and i need to ''bind'' it to my new AD domain. But authentication does not work, seems bacause that printer try to use SASL over plain LDAP (no SSL nor TLS). After

Hello everybody, I have a problem with LDAP userdb and dovecot. Let me first explain my LDAP configuration: I got three Active Directory LDAP servers (a.galliera.it, b.galliera.it, c.galliera.it) responding round robin to the name galliera.it. I want to use LDAP for the userdb lookup, so I configured dovecot-ldap-userdb.conf.ext as follow: hosts = galliera.it # round robin base =

Mandi! Rowland Penny via samba In chel di` si favelave... > I think that is what Andrew is trying to tell you, the printer needs to > support SASL over TLS/SSL or it will never work. I don't think there is > anything you can do, but I am surprised that the print doesn't already > support it, after all, it isn't something new ;-) Mi confusion grow. ;-) As stated in my

Hi, I have no success in using AD with dovecot. The little checkpassword script I cooked up that uses ldapsearch to lookup a user DN (with an authenticated bind) and then ldapsearch with an authenticated bind for that DN again works well. * Approach 1: use a service account to bind to AD, lookup the user DN, and bind to that DN. It fails. The LDAP config looks like: hosts =

On Thu, 2018-05-10 at 15:48 +0200, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > Ok, i coma back to an old thread, because vendor finally reply. Thanks! > > Little fast-rewind: i own some Konica-Minolta BizHub multifunction > printers/copiers, and i need to ''bind'' it to my new AD domain. > >

to my knowlidge, konica = xerox. and this works fine imo but im not able to look this up now. i did have xerox connected to my ldapS addc’s. i can check this monday. Greetz, Louis > Op 11 mei 2018 om 04:09 heeft Andrew Bartlett via samba <samba at lists.samba.org> het volgende geschreven: > >> On Thu, 2018-05-10 at 15:48 +0200, Marco Gaiarin via samba wrote: >> Mandi!

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > This mean that the printer try to auth in LDAP 'plain' (no SSL, no > > TLS), and so samba refuse that? > No, it means that Samba is refusing to accept a NTLM or Kerberos > authenticated connection without SIGN or SEAL negotiated, as an > attacker could take over an unprotected network connection and do

Hi list! Just wondering, why is * sticking with an mpg123 version from the stoneage? Gentoo comes with 0.59s-r8 and this version doesn't even start. Ik know I could forcibly unmerge mpg123 and install the old version but I guess some day newer versions will have to be supported? Thanks!

I'm trying to test/move some of my LDAP-enabled devices from my actual OpenLDAP server(s) to my new samba AD domain. For now, i'm poking with printers, and i'm testing a Konica-Minolta BizHub C224e. Defining user autentication to external source, i can set (between LDAP, NTLM, NDS, ...) 'Active Directory', and i can/must provide the domain naime. After that, DNS and kerberos

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > There's some way to ''tight'' that configuration , eg permit 'ldap server require strong auth = > > no' only by some hosts? > > Or some other smb.conf options that i've missed? > Nothing at this stage. Ok. > The issue is that they need to do fully signed or sealed Kerberos

Hi, Splus allows pasting a graphics object into the plotting window, which makes it possible to do what you describe below. Now I use R which doesn't seem to allow pasting the picture into the graphics window, so I copy the graph onto a transparency sheet, and stick it onto my screen using tape. The coordinates need to be converted to make sense (as you describe). My methodology with the

On Fri, 2018-05-11 at 11:26 +0200, Marco Gaiarin via samba wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > I think that is what Andrew is trying to tell you, the printer needs to > > support SASL over TLS/SSL or it will never work. I don't think there is > > anything you can do, but I am surprised that the print doesn't already >

Hello, I am using dovecot-2.0.6 with NetBSD amd64. Active Directory is used as an authentication server. (Windows Server 2008 R2) However, the message of "Operations error" was displayed first and it did not move. It solved it by understanding that this is because the authority of the user who used it for bind was insufficient, and adding to "Account Operators" group. #

http://bugs.freedesktop.org/show_bug.cgi?id=25754 Summary: Nouveau - GPU Lockup on 2.6.33-rc1 Product: xorg Version: unspecified Platform: x86 (IA32) OS/Version: Linux (All) Status: NEW Severity: critical Priority: medium Component: Driver/nouveau AssignedTo: nouveau at lists.freedesktop.org

Hi again. With your help I managed to get the configure run through - i installed or updated the various librarys. it is unsure though if the errors seen are not in the end fatal. when i now run make it tells me this: Making all in src make[1]: Wechsel in das Verzeichnis Verzeichnis »/root/icecast/icecast/src« Makefile:220: *** Fehlendes Trennzeichen.. Schluss. make[1]: Verlassen des

Hi, <p>while I do understand that using stoneage tools everywhere for maximum compatibility is silly, top-notch requirements are silly, too. ;P Is autoconf 2.53 really necessary? E.g. OpenBSD 3.2 comes with 2.52 in the ports, but that minor difference is already enough for vorbis-tools' autogen.sh and friends to throw up. Any chance to lower that requirement to somethling like

I suspect the problem is that dovecot tries to report LDAP error over GSSAPI. So the best fix is to make sure your LDAP server does not return error. =) Aki On 15.8.2019 14.56, Eugene Bright wrote: > That's right. > GSS-API is not used anywhere else. > Do you like to inspect my full configuration? > I can dump connection session and send pcap file here. > > On August 15,

Hello, two days ago I've upgraded to 1.2rc2 and the new sieve implementation (version 0.1.4). Today I got the first mail that got stuck in the postfix queue because deliver was dying with a segfault. The mail is spam, thus I don't have any issues sharing it: http://users.birkenwald.de/~berni/temp/deliver-segfault.mail It happens with this small sieve script (my normal one is larger, but

I see nothing suspicious in FreeIPA slapd logs because connection drops before SASL negotiation completion. Network analysis shows client sending RST after receiving `bindResponse(7) saslBindInProgress`. On 8/15/19 3:07 PM, Aki Tuomi via dovecot wrote: > I suspect the problem is that dovecot tries to report LDAP error over GSSAPI. So the best fix is to make sure your LDAP server does not

Hi Rowland, Sorry to inform that none of thus packages solve my problem. But today, with some Tranquil.it helps, I have some news: - Upgrade from 4.11.14 -> 4.12.9 is OK - Upgrade from 4.12.9 -> 4.13.2 : problem is present with Tranquil.it AND Louis package - Fresh install + member join with 4.13.2 is OK (Centos AND Buster packages) Problem only occur when upgrading member to 4.13.2 with