similar to: Virtual Servers, or different authentication setups.

Hello! I use tincd to interconnect 3 LANs: A, B and C. So long, it works fine: everybody reaches everybody. But I want a different behavior: A and B should be allowed to talk, as should B and C. I tried to simply delete the host-files on the nodes that should not be allowed to talk to eachother: A has a hostfile from B B has a hostfile from A and C C has a hostfile from B But this is no

Dear friends, We have samba-3.0.21c-1 under RH9 + openldap 2.3.11 under FC4. When a windows user changes his password using Ctrl-Alt-Del the password is stored on ldap in SSHA format but we need to work with CRYPT because we have some apps that don't support SSHA. These are the lines related with authentication defined in smb.conf: encrypt passwords = yes ldap passwd sync = Yes

Hi People, I recently setup a replication service within dovecot between two machines in different datacenters, which has the following configuration; (yes it is hashed out, because I needed to) #service replicator { # unix_listener replicator-doveadm { # mode = 0666 # } # process_min_avail = 1 #} # #service aggregator { # fifo_listener replication-notify-fifo { # mode = 0666 #

Poking around in the code for dovecot-stable seems to indicate that support has been added for the {SSHA} password scheme. This is not reflected in dovecot-ldap.conf. Is the SSHA code actually functional? Thanks! -Ben

Hi I would like to simulate dovecot's dovecotpw with a perl script I tried / used use Crypt::SaltedHash; my $csh = Crypt::SaltedHash->new(algorithm => 'SHA-1'); $csh->add($passwd_string); my $salted = $csh->generate; also use Digest::SHA1; use MIME::Base64; $ctx = Digest::SHA1->new; $ctx->add($passwd_string); $ctx->add('salt'); my $salted =

Hallo. First of all I'm sorry for my bad english. I have a question about how dovecot use passwords. I have all my mail accounts in a ldap database. The user password are stored in form: {crypt}mypasswd. In dovecot-ldap.conf I have default_pass_scheme = CRYPT. All is working fine. The problem in the crypt scheme is that I can't have passwords more than 8 characters long. So I've tried

Hello, I migrated 140 users and computer accounts from NT4 to Samba 3.0.14 with ldap today. Smbldap-tools are the latest stable version from tarball. No errors during vampire and everyone came over and the groups and group memberships populated fine. We couldn't connect to the server as any user from client PC's. The smbldaptools were set to use SSHA encryption for password attribute

Hello everyone, I'm trying to make dovecot do user authentication against a SQL database. The passwords (managed by Django) are stored as salted SHA1 encoded in hex. I monkey patched Django's password method so that the password hash is made with <password><salt> (Django does <salt><password>, the patched method was verified to return same value as

Is it possible to take a SSHA password from an ldif and create a proper sambaNTpassword from it? Here's the scenario: the ldap servers in our organization do not have the samba schema installed and the likelihood of that happening is slim. I still want to provide clients with as close to a single sign on solution as possible and I can get an ldif of the accounts I need. However, the

Hi there, I was wondering if someone could explain how dovecot/dovecotpw produces salt for use in ssha passwords, I'd like to replicate this in PHP so I can write my passwords from php in ssha instead of just sha1. Thanks in advance, Andrea Baitis

Hello, I've got dovecot set up to authenticate against our LDAP server. So far seems to work well. I have two concerns that I haven't been able to find answers for in the documentation or archives. Is there any intention to support "authentication binds" so you don't have to bind as a user with read privileges to everyone's userPassword attribute? For security

Hey all, heres my problem/s. I have to write code which upon a message from another component 1. Reserves bandwidth for a voip call between 2 hosts.My code will reside on neither of the hosts but the hosts will have to go through me to talk to eachother. 2. Since i''m reserving bandwidth for these hosts to talk to eachother i have to limit everything else. 3. I need to do this

Hi guys/girls, We are running a TDM04B card with Asterisk in a Linux box that has 15 GrandStream102 extensions and 1 SNOM190 phone which we are using as an operator console. The FXO ports in the TDM04B are plugged directly into our telecoms provider's analogue lines. Something I've picked up with the SNOM is that sometimes when there are two active incoming calls via Zap channels they end

i have CentOS 4.5 with OpenLDAP 2.2.13. OpenLDAP contains users with SSHA-ed and CRYPT-ed passwords. the one and ugly thing is that users with CRYPT-ed passwords cannot bind to this LDAP server. however users with SSHA passwords do can. is there any solution without recompiling anyhting? -- Be Secure, Stay Open - live w/ OpenBSD -------------- next part -------------- An HTML attachment was

Hi, I have dovecot-0.99.11-1.FC3.4 running on fedora core 3, and authenticating with openLDAP on a remote server. When i try to authenticate, i get the error "Unknown password scheme SSHA". I read that earlier on this mailing list, SSHA was not suported by dovecot. Is it supported now? what should i do to make my password authentication work? The users in the openLDAP database have

Hi there, I have two ethernet connections of 2Mbit/s each and I''m trying to add them together to one 4Mbit/s connection but I cannot get more than approximate 1Mbit/s! My setup: I have a LAN (10.2.18.0/24), connected to a larger network (10.0.0.0/8) by two WAN-connections with 2Mbit/s each. On each end I have a Linux router. I first setup the routers to use TEQL with one of the

I am running tinc v. 1.1pre (truly as I read somewhere, ?one of the internet?s best kept secrets?) on some consumer home routers flashed with tomato firmware. I have a whole network of these, but for the purposes of this question I will focus on just three Router A (subnet 192.168.5.0/24) is connected via a standard tinc ?router? mode network with Router B (subnet 192.168.15.0/24). Router B, in

Hi, I've just read the postings regarding the interworking between * and SER. As these persons seem quite knowledgeable on this, I would like to have their advise on my planned installation: - I have broadband cable access - I plan to install a SIP-aware router - I plan to install a Linux server with Digium analog IF card(s) for connection to my analog line (incoming and outgoing) - I plan

Hi all, For some reason, I didn't go to http://wiki2.dovecot.org/NFS until now, and I'm starting to get worried ... The plan was to have multple servers (MXes) receiving mail, and delivering via LMTP to multiple backend dovecot servers (with amavis in front of dovecot; LMTP both sides). Then we'd have multiple servers for clients to use IMAP or POP3. This is more or less how the

Hi All, I have two networks: 10.10.20.0/24 and 10.10.30.0/24 The two networks can talk IPv4 to eachother, but only subnet 10.10.20.0/24 has access to the public internet, whereas 10.10.30.0/24 cannot reach the public internet. I have a windows host on the 10.10.30.0/24 network at 10.10.30.50 and I would like to use tinc to connect the windows host to my linux workstation at 10.10.20.40 to