similar to: "Unwilling to Perform" UNIX Attributes

Hi, I've been kicking this idea around, and the problem with it escapes me. I'm looking for someone to tell me why this is a bad idea. The new OpenSSH includes the AuthorizedKeysCommand, which was mostly added to let people use a command to look up user keys in LDAP. LDAP key lookup have some limitations -- specifically, the common openssh-lpk_openldap schema won't let you add

Hi, Thought there would be some interest here. I'm writing a small book on OpenSSH. Am now looking for tech reviewers. http://blather.michaelwlucas.com/archives/902 ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlucas at BlackHelicopters.org, Twitter @mwlauthor

Hi, I'm attempting to test the AuthorizedKeysCommand feature with the new port of ssh-ldap-wrapper to OpenBSD. I'm running yesterday's OpenBSD-current i386 snapshot, which includes AuthorizedKeysCommand. The port of ssh-ldap-helper (at http://old.nabble.com/-new--ssh-ldap-helper-td34667413.html) contains all the bits I need, and the individual pieces appear to work once configured:

Hi, I've recently published a short book on OpenSSH, as part of my "exterminate ALL the passwords" initiative. I'm giving copies to anyone who is interested in writing a review for a blog -- either theirs, or a tech association they're with, or basically anywhere. http://www.michaelwlucas.com/nonfiction/ssh-mastery Please contact me off-list if interested. Thanks, ==ml

Hi folks, Is there any hope for an external source of public keys, such as given in bug 1663? I have dozens of servers, and I have to patch sshd on the vast majority of them. OpenSSH is a BSD program, but the BSD boxes are the most difficult to manage because of this. Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: SSH Mastery

Hi everyone samba --version Version 4.0.0alpha18-GIT-bfc7481 openSUSE 12.1 If I do this: ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site dn: CN=steve6,CN=Users,DC=hh3,DC=site changetype: modify add: objectclass objectclass: posixaccount - replace: primarygroupid primarygroupid: 1134 I get an error something like: ERR: (Unwilling to perform) error 53 If however I do the

My tool is growing fast and it takes me to the finishing line for setting up my new user database. But nw I came across another strange issue: I'd like to change the primaryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM:

On 23/10/15 23:51, Jonathan Hunter wrote: > Hi, > > I am sure I have come across this before but have previously either > ignored it or somehow worked around it. However it has come up again > and this time I will try to find out what's going on, hopefully we can > fix whatever the issue is. > > I have a Samba 4.2.2 domain that generally works fine; I have rfc2307 >

Hello All, I have a custom built version of Samba 4.19.2 running on Rocky Linux 9. When I attempt to change a password via LDAP, I get an error, "Unwilling to Perform". In Google searches I found that this is due to password complexity requirements. However, in my case, I get the error no matter how complex the password. Also, I have the following line in my smb.conf file: ldap

On 24/10/15 18:18, Jonathan Hunter wrote: > Thanks Rowland - appreciated. > > I have checked the ldbsearch result and both groups look to be pretty > much exactly the same to me, one of them is shown below (I have > sanitised some of the output, replacing parts with 123/a/b/c, but the > rest of the output is byte for byte as seen) > > In the time between posting my original

On 24 October 2015 at 18:57, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 24/10/15 18:18, Jonathan Hunter wrote: >> - 'getent group newgroupname2' *does* now work, whereas it definitely >> did not last night. I don't know if there is normally a time delay >> between creating a new group and it becoming visible to UNIX? The >> [...]

Hi, I am sure I have come across this before but have previously either ignored it or somehow worked around it. However it has come up again and this time I will try to find out what's going on, hopefully we can fix whatever the issue is. I have a Samba 4.2.2 domain that generally works fine; I have rfc2307 enabled so that I can keep UIDs/GIDs consistent across machines whilst still being

Thanks Rowland - appreciated. I have checked the ldbsearch result and both groups look to be pretty much exactly the same to me, one of them is shown below (I have sanitised some of the output, replacing parts with 123/a/b/c, but the rest of the output is byte for byte as seen) In the time between posting my original message and checking again just now, however, I have the following additional

"A Guide for the Unwilling S User" is available at http://www.burns-stat.com/pages/Tutor/unwilling_S.pdf (Or click on Tutorials from the main web page.) This is an improved version of the document that was put in the same location a few days ago. It has dropped the "draft" status, but I am always interested in suggestions for improvements. The 8 page document has the aim of

There is a draft of a new document at http://www.burns-stat.com/pages/Tutor/unwilling_S.pdf entitled "Using S for the Unwilling". (Or click on Tutorials from the main web page.) The aim is to get an inexperienced person who has a task to do in S-PLUS or R oriented and comfortable enough not to give up. The audience I have in mind has no experience with either statistics or

Hi, I'm pondering building my own SSL accelerator out of a multi-CPU FreeBSD system and a crypto accelerator. What's the recommended hardware crypto accelerator card these days? Thanks, ==ml -- Michael Lucas mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org Today's chance of throwing it all away to start a goat farm: 49.1% http://www.BlackHelicopters.org/~mwlucas/

Hi, I installed Wine 20050111 on my FreeBSD 6-current (freshly updated yesterday afternoon) to play SimCity 2000. Whenever I start the program with "wine SIMCITY.EXE", the various start-up pop-ups appear, as well as the dialog asking if you want to start a new city, open an old city, etc. I get the side toolbar. The main window where you play the game is never drawn, however; it

Hello security folks I (not so) recently asked for volunteers to the security documentation project. I got delightfully large number of volunteers! Thank you! Right now I have some personal (medical) issues to deal with, and I'll be out of town for the next 2 weeks. When I get back, we can move ahead at top speed. The project will have 3 parts. FAQ: This will cover any kind of basic

Hi everyone, I''m trying to set a port with spawner, and it''s not working: ruby /var/rails/ldapadmin/current/script/process/spinner -c /var/rails/ldapadmin/current/script/process/spawner --port=7000 -i 4 -d spinner: invalid option: --port=7000 Same with -p: ruby /var/rails/ldapadmin/current/script/process/spinner -c /var/rails/ldapadmin/current/script/process/spawner -p 7000

Hi, I have some doubts about how to manage Samba4 LDAP. I'm trying to access with LdapAdmin, but i don't know the default user and password. Have a way to access internal ldap with LdapAdmin or other tool? How can i connect samba4 with a external ldap server? Regards, João Marcos