similar to: Compiling mod_webauth on CentOS 5 - krb dependency failure

Has anyone set up any form of apache user isolation on CentOS? I have multiple virtual hosts on my machine, run by users who do not trust eachother. The problem is that any php script run by apache is able to do things like raw file io on other users' .htpasswds, php scripts, hidden directory listings, and so on. Database passwords can even be divulged in this way, since they are often stored

Hi all, again, I'm not knowledgeable about Kerberos, but we have a few users who use it to make sure that it works well on Solaris... so, they would like a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on Solaris Nevada (the current development release), and the configure script choked for a couple of reasons. First, script uses 'grep -qv' in the case that you specify

Hi, Here I am trying something simple. My objective is to make ip rule fwmark command work :) Network Diagram: --- 192.168.250.197 (eth0) Linux Box (eth1) 192.168.8.88 -------------192.168.8.122 (eth0) Windows XP Client Configuration done on Linux Box:- (1) [root@g webauth]# iptables -t mangle -A PREROUTING -j MARK --set-mark 5 [root@g webauth]# iptables -t mangle -L Chain PREROUTING (policy

Hi, I been trying on ip rule fwmark and iptables MARK. I will show my testing in detail, but my ultimate question is why ONLY marking in Mangle OUTPUT tables works, but not others? Network Diagram ------------ 192.168.250.197 eth0 LINUX ROUTER eth1 192.168.8.88 ------------------ 192.168.8.112 eth0 Windows XP Client Steps (performed on LINUX ROUTER) (1) Delete route to 192.168.8.0 from

Hi, I am trying to achieve Stateless NAT with ip rule and ip route. Thanks to LARTC doc, I have done it :) But, I have a lot of client wanted access to Internet, setting up 2 rules for each of them is not desirable. For example I have 2 clients: Current setting: [root@son-ag webauth]# ip ru 0: from all lookup local 32760: from 192.168.8.113 lookup main map-to 192.168.250.113 32761:

Has anyone managed to get krb5-1.4.3 to compile on Solaris 8? My compile fails because it can't find freeifaddrs or getifaddrs, using gcc. [........] making all in lib/rpc/unit-test... gmake[3]: Entering directory `/var/tmp/sambastuff/krb5-1.4.3/src/lib/rpc/unit-test' gcc -L../../../lib -R/usr/local/testsamba/kerberos/lib -g -O2 -Wall -Wmissing-prototypes -Wcast-qual -Wcast-align

> > >> For historical reasons, the administrator is member in lots of groups. As >> a result the ticket size is too big for UDB, so the W2k3-server sends an >> KRB5KRB_ERR_RESPONSE_TOO_BIG (Response too big for UDP, retry with TCP) >> error back to kinit. >> >> Unfortunatly this case is not handled in lib/krb5/get_in_tck.c - >> krb5_get_in_cred().

See subject. Am I missing here something or is it a bug? Best regards Rainer

Hello, I would like to download the DVD image for the s390x hardware - could someone seed the torrent or point me to an image I can download? Thanks, Mike. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20070829/8e5f1920/attachment.html>

Hi All. Recently a change was merged from OpenBSD's sshd into Portable that implements a KerberosGetAFSToken option (patchset attached). This change causes compile errors with both MIT Kerberos and Heimdal (errors when compiled with MIT Kerberos below). I've figured out that the functions called in the new code are in Heimdal's libkafs, so adding -lkafs to the start for the

Forgive the lack of antecendents. I just now joined the list, but will respond generally to what I saw in the list archives. I think jack's suggestion of distinguishing between static and time-depended data is a smart one. I would also suggest that many of the ranking issues people are concerned about can be addressed through the description field. Punting things like 'now

Hai,   Im wondering, im missing the  _ldaps._tcp. INTERNAL.DOMAIN.TLD entries in my dns. Now, before the updates ( badlock ) etc. this wasnt notice i think. But now since im setting up that everything is doing ldaps i noticed this in my squid setup   ( squid mailing subject : [squid-users] ext_kerberos_ldap_group_acl problem )   My question is...   did someone resently setup a new AD

Dear Asterisk experts, I've just downloaded Asterisk CVS version (since I'd like to manage its configuration from RealTime). Next, I have kphone on the same Linux host, and VmWare virtual machine with Windows and X-Lite IP phone inside. I successfully tested the demo's with X-Lite, but failed to hear something with kphone (v4.1.1). There were NO problem with this kphone and stable

Hi , I'm triying to use kphone 4.02, but when i'm make a call the programs doesn't respond any command, so i can't hear any sound .. in sip.conf that's my codec config: disallow=all allow=gsm allow=ulaw allow=ilbc and the kphone give the follow : SipClient: Sending: 06:46:28.116 -------------------------------- ACK

Hi, We want to upgrade both our servers to asterisk 1.8, the one from Romania and the one from Chicago, but for the moment I`m trying to install Asterisk 1.8 on a test machine running CentOS 5.5 with the kernel: Linux asterisk3 2.6.18-194.17.4.el5PAE #1 SMP Mon Oct 25 16:35:27 EDT 2010 i686 i686 i386 GNU/Linux . I`ve tried many things from the forums and mailing lists but none seemed to help me.

I'm so confused about the use of Samba. This is my situation: I have one Win2k domain with Active Directory. The main network has only one PDC, but in others networks I have 5 servers more, all under the same main domain (I don't have subdomains). I need to put some files in a Solaris 8 and 9 servers that Win2kPro and WinXP can to access, with its domain accounts. Aditionally, I

Dear all, I hope you could assist me in finding a problem with samba and krb connects when packet signing is activated in a domain. I have a samba server as a AD 2k3 domain member and the connects are working well, but when I try to use krb auth to connect to another Windows server in the network I get an error. Thanks a lot --- smbclient -d5 -U micha -k -L //gunter/software ... session

On Thu, 31 Mar 2016, Service Informatique IF wrote: > The problem for us is to join computer automatically to Samba : Maybe > you have a solution ? (without passwd) It's not exactly without password, but if you are building your own machines via kickstart or similar and just want to automate the join, you can do a "net ads join -UAdministrator%password". In theory you

I've been running Samba 4x on FreeBSD successfully for years with a single Active Directory domain controller but have recently added a second domain controller. The setup worked great for a few days but suddenly developed a series of permission-denied style errors and UID mapping errors on the new/second DC2 which I've been slowly working through. My current issue which I've been

On Fri, 11 May 2018 14:14:39 +0000 Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: > I"m seeing this as well, after I updated my CentOS 7 hosts to the > latest release. > Something seems to have broken! > Do you have a 'include' line in krb5.conf ? If you do, remove it. Rowland