similar to: X509v3 Subject Alternative Name in puppet generated certs...

Hi Roumen, I discovered that the need of appending the .pub part of id_rsa(client key+cert) on the server can be eliminated by adding the Certificate Blob to authorized_keys which could look something like this: x509v3-sign-rsa subject= /C=FR/ST=PARIS/L=DESEl/O=SSL/OU=VLSI/CN=10.244.82.83/emailAddress=client at company.com This is extracted from the client certificate using openssl as

I've seen a variety of patches on the list for supporting the x509v3 certificate authentication. Are there any plans to include any of these in the official openssh? Thanks, Kevin Stefanik

Dear List, Regarding the "X509v3 Certificates" patch ... (See links below) - http://marc.info/?l=openssh-unix-dev&m=110976923021961&w=2 - http://marc.info/?l=openssh-unix-dev&m=110973268111830&w=2 - http://roumenpetrov.info/openssh How would I apply this patch to the OpenSSH currently in FreeBSD(.org) and/or PC-BSD(.org)?? Please CC: me on the reply because I

New version "x509e" is out on http://satva.skalasoft.com/~rumen/openssh/ . Now OpenSSH (client and server) can use x509 certificates for hostkeys too. Try it and give to forum (prefered) feedbacks, comments, suggestions, etc.

I'm working with the Solaris bundled version of samba 3.5.5 and having a problem with server signing. samba is configured into an active directory domain with security = ads. With signing enabled, connections from clients in the domain work fine. However, connections from clients not in the domain fail: ----- >net use /user:WIN\henson \\ike.unx.csupomona.edu\henson Enter the password for

I'm trying to get Samba 3.0.28 to work as an MS Dfs root providing a share that links home directories to the actual servers they reside on. Unfortunately, when I access the share from a Windows XP client, and try to open one of the directories, the client gives an error that it "refers to a location that is unavailable". I've done a lot of searching, and found a number of

Hi All, I''ve run into a bit of a tangle. I currently have two puppet masters which are "load balanced" with round robin DNS (one is also the CA). I''m using dns_alt_names to let them each answer to puppet.my.domain.com For the past year this has been fine. About a week ago I tried to add a third & while all my Linux clients are happy with the new arrangement,

Sorry about this one being long, and I apologise beforehand if there is something obvious here that I have missed. I am new to creating my own functions in R, and I am uncertain of how they work. I have a data set that I have read into a data frame: > gctable[1:5,] refseq geometry X60_origin X60_terminus length kingdom 1 NC_009484 cir 1790000 773000 3389227 Bacteria 2

Package: logcheck-database Version: 1.2.36 Severity: wishlist Hello, I recently blew away my old logcheck-databse and lost a number of changes that i had made to postfix entries. The default database for postfix reports the following errors that do not seem to be important... Apr 2 13:00:19 terminus postfix/local[29516]: 574B9B3B9F: to=<doug at localhost>, relay=local, delay=13,

On Sat, Dec 27, 2014 at 05:07:04PM +0100, Geert Stappers wrote: > On Mon, Dec 22, 2014 at 11:06:58AM +0200, Ady wrote: > > > On Sun, Dec 21, 2014 at 12:21:32PM -0800, Patrick Masotta wrote: > > > > [ ... Failed to build gnu-efi. ... ] > > > > For some reason I have not received the original email from Patrick > > Masotta in my inbox, so I am using the

On Sun, Mar 27, 2016 at 7:42 AM, Geert Stappers via Syslinux <syslinux at zytor.com> wrote: > On Sun, Mar 27, 2016 at 10:10:01AM +0200, Patrick Masotta via Syslinux wrote: >> On Sun, Mar 27, 2016 at 01:06:54AM +0000, Gene Cumm via Syslinux wrote: >> > On Sunday, March 20, 2016 11:18 PM, Patrick Masotta via Syslinux <syslinux at zytor.com> wrote: >> > > I

> On Sun, Dec 21, 2014 at 12:21:32PM -0800, Patrick Masotta wrote: > > sudo apt-get install build-essential > > sudo apt-get build-dep gcc-multilib > > sudo apt-get install gcc-multilib > > > > sudo apt-get install nasm > > sudo apt-get install uuid-dev > > > > I run > > #make spotless > > #make > > > > but it

I was wondering if there was any news on the patches proposed by Ed Plese last year regarding updates for shadow copies to be better compatible with Solaris ZFS: http://lists.samba.org/archive/samba-technical/2007-February/051510.html Reviewing the release notes for the upcoming 3.2 release: http://us3.samba.org/samba/ftp/pre/WHATSNEW-3-2-0pre2.txt I don't see any mention of changes to

On Fri, Jan 2, 2015 at 3:43 PM, Geert Stappers <stappers at stappers.nl> wrote: > On Sat, Dec 27, 2014 at 05:07:04PM +0100, Geert Stappers wrote: >> On Mon, Dec 22, 2014 at 11:06:58AM +0200, Ady wrote: >> > > On Sun, Dec 21, 2014 at 12:21:32PM -0800, Patrick Masotta wrote: >> > > > [ ... Failed to build gnu-efi. ... ] >> > >> > For some

On Mon, Dec 22, 2014 at 11:06:58AM +0200, Ady wrote: > > On Sun, Dec 21, 2014 at 12:21:32PM -0800, Patrick Masotta wrote: > > > [ ... Failed to build gnu-efi. ... ] > > For some reason I have not received the original email from Patrick > Masotta in my inbox, so I am using the first reply sent by Geert in > order to actually reply to the OP... What is visible in the

On Sun, Mar 27, 2016 at 01:06:54AM +0000, Gene Cumm via Syslinux wrote: > On Sunday, March 20, 2016 11:18 PM, Patrick Masotta via Syslinux <syslinux at zytor.com> wrote: > > I stopped receiving e-mails from the list. > > is there anything I can do? > > Does this bounce? Is there a still an issue with Yahoo! or not? At least things are delivered. Just a few days ago

Supposing I want to use the File decoder., and set the I/O callbacks. How do I do it? The API (version 1.1.2) documentation gives functions to set the ``write``, ``metadata`` and ``error`` callback. What about the ``read``., ``eof``, etc. callbacks. If i'm using the file decoder., can i still use the functions from the stream_decoder_set_* for this? -- Joe Steeve (http://www.joesteeve.org/)

Package: logcheck-database Version: 1.2.37 Severity: normal Hello again, openntpd gives messages like these failry often: Apr 7 14:25:55 terminus ntpd[673]: peer 204.17.42.202 now invalid Apr 7 14:26:10 terminus ntpd[673]: peer 204.17.42.202 now valid I am not sure if this is something that an admin may find relevant but they happen fairly often and they do not offer a lot of info for me.

https://bugzilla.mindrot.org/show_bug.cgi?id=928 Paul Henson <henson at acm.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|henson at acm.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching someone on the CC list

We've been using a fairly old version of samba for quite some time to serve user home directories and group project directories with a configuration approximately like: ----- [global] default service = groups [homes] path = /export/user/%u [groups] path = /export/group/%S ----- This has worked out very well, the samba configuration is minimal, and does not need to