similar to: Update .k5login with Puppet

Hi, we are currently moving our mailserver to a new server with Dovecot, virtual users in LDAP, Passwords in Kerberos Setup. Everything works fine except for GSSAPI which seems to be a bit buggy. The thing is, that when using a .k5login [1] file it seems that SASL does not get passed the home directory specified userdb. In other words, mails for user1 (see below) are stored in

https://bugzilla.mindrot.org/show_bug.cgi?id=2063 Bug ID: 2063 Summary: RFE: export principal which was used for .k5login Classification: Unclassified Product: Portable OpenSSH Version: 6.1p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

I am running dovecot 2.1.7 on Debian Squeeze 64 bit, config information at the end of the email. I am working on a Kerberos/GSSAPI based setup that requires cross-realm authentication. I have regular GSSAPI working, I can log in using pam_krb5 with password based logins or with the GSSAPI support when using a kerberos ticket in the default realm. However when I attempt to authenticate using

I´m trying to utilize the new stdlib module, but got stuck after installation on my puppet server. I´ve tried to use the included test file file_line.pp on the server, but it´s only creating the file - but not managing the content. the same problem on my clients (the new provider file_line has been synced), it´s just not working: file_line { ''puppet master host

I see that there are an assorted bunch of "provider" types for resource type user. Are there not any "local file" providers for it? I have need of ensuring that certain local user accounts get created on all machines, reguardless of what the system "/bin/password" and "useradd" type mechanisms are set to. It would be really nice to find a pre-written

I''m trying to create a ssh class where the /etc/ssh/ssh_known_hosts and /etc/ssh/shosts.equiv stays updated. The issue i''m finding is that if I include a "tag == anything" in the Collector filter, it collects all resources EXCEPT it''s own. In this case, the known_hosts and .equiv files will have all the other hostnames, but not it''s own hostname.

Playing around with the [wonderful] GSS-API patches for OpenSSH [1] I noticed that there is a bit of functionality missing from OpenSSH/GSS-API, namely that authorized_keys2 has no meaning when using GSS authentication. Yes, ~/.k5login can be used to grant access to an account for applications that support Kerberos, as does OpenSSH with those GSS patches, but .k5login does not and cannot provide

Hello, SSH supports ~/.ssh/authorzied_keys for SSH keys and ~/.ssh/authorized_principals for X509 certs. I could not find an equivalent of authorzied_keys using Kerberos authentication. IMHO it should be possible using the Kerberos principal very much like the principal contained inside a X509 certificate. My main use case is assigning a specific command to a user logging in using Kerberos

Hi, I want to write a puppet module for xen on Debian. This module will need to manage one line in the file /etc/default/grub, namely the line starting with "GRUB_CMDLINE_XEN=". Currently I want to leave the rest of the file untouched. Which would be the best way to do this? I see two options: a) Do some `sed` magic on the file in a `exec` call. Downside: puppet won''t notice

Try this : #source: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/1484262 Add in /etc/krb5.conf in [libdefaults] ignore_k5login = true Did it help? If (as in my case) root is not allowed in the user homdirs it can validateon $HOME/.k5login Above fixed it for me. I only cant tell based on the config if this applies to you. Its a simple thing to try. Greetz, Louis

This patch (to OpenSSH 3.0.2p1) adds support for using krb4, krb5 and other principal names in authorized_keys entries. It's a sort of replacement for .klogin and .k5login, but it's much more general than .k*login as it applies to any authentication mechanism where a name is associated with the ssh client and it supports name patterns and all the normal authorized_keys entry options

Hi, Is it possible to record say 30 seconds of audio and then have LumenVox convert to text ? or any available tool open source for speech to text . Regards Dhaval -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100914/b56c3d9c/attachment.htm

Hi, I tried asking this question on ask.puppetlabs.com, but haven''t got any responses yet: https://ask.puppetlabs.com/question/1975/recommended-method-of-running-puppet-periodically-on-mac-os-x/ Is there some source of puppet & mac os x knowledge that I''m unaware of? I was kind of hoping that the ''osx'' tag on ask.puppetlabs.com would become that.

hello all, i have 2 asterisk boxes on that 1 have public IP Address and another is only have local IP address now on public IP there are some 7 DID forwarded , now i want to forward 3 DID out of 7 DID to local machine we called server B , I know there are DIal , and Switch statement in asterisk , but is there any other convenient way to do this. because if call ratio is high then my call legs

hi all, any one know, about echo cancellation with digium card, is it actually needed or it okay if we dont purchase because it increase price which half of new card, regards Dhaval -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20090827/8d6c680a/attachment.htm

Hi all, I have n no. of extensions in my dialer. from 456 to 556 extensions. I was created 2 other extensions 667 and 668 I need to allow only STD calls to go from this extensions. These all extensions are same context . I need to define the STD dialplan for only this 2 extensions. how I can ? Best Regards, Mahesh Katta *BUZZ**WORKS* Business Services Private Limited BANGALORE | CHENNAI |

Hello Friends, I am trying to Installl dahdi on amazon EC2 which have Open-SUSE-11.1 X86 version. and here is snap of uname- a command *Linux ip-10-160-86-41 2.6.32.19-0.3-ec2 #1 SMP 2010-09-17 20:28:21 +0200 x86_64 x86_64 x86_64 GNU/Linux* when I try to run DAHDI distribution dahdi-linux-2.1.0.4 I am getting following error *echo "You do not appear to have the sources for the

Dear All, How can we know the On board supports echo cancellation I have *Digium, Inc. Wildcard TE410P quad-span T1/E1/J1 card 3.3V (rev 02)*board all working fine but sometimes i got echo when user are calling a PRI. is there any way to know on board echo cancellation . regards Dhaval -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hello All, can anybody tell me how can i integrate asterisk and skype users so that skype users can dial my asterisk number or dial internal dialplan form skype regars Dhaval -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20090708/cccd4587/attachment.htm

hi all, can anybody help me to give Opensource SIP client information which can be modified as per our requirment regards Dhaval -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20090518/802cc3ac/attachment.htm