similar to: samba4 success/failure report...all's working despite kerberized ssh

https://bugzilla.mindrot.org/show_bug.cgi?id=2204 Bug ID: 2204 Summary: gssapi-with-mic and UsePrivilegeSeparation sandbox Product: Portable OpenSSH Version: 6.4p1 Hardware: amd64 OS: Linux Status: NEW Severity: minor Priority: P5 Component: Kerberos support Assignee:

Hi, can you anyone suggest me how can i update .k5login to append new entry or remove existing line when i tried using k5login { ''/root/.k5login'': ensure => present, path => ''/root/.k5login'', principals => ''dhaval@MYREALM.COM'', } it completelty removes all lines form k5login and put

Hi, we are currently moving our mailserver to a new server with Dovecot, virtual users in LDAP, Passwords in Kerberos Setup. Everything works fine except for GSSAPI which seems to be a bit buggy. The thing is, that when using a .k5login [1] file it seems that SASL does not get passed the home directory specified userdb. In other words, mails for user1 (see below) are stored in

I am running dovecot 2.1.7 on Debian Squeeze 64 bit, config information at the end of the email. I am working on a Kerberos/GSSAPI based setup that requires cross-realm authentication. I have regular GSSAPI working, I can log in using pam_krb5 with password based logins or with the GSSAPI support when using a kerberos ticket in the default realm. However when I attempt to authenticate using

https://bugzilla.mindrot.org/show_bug.cgi?id=2063 Bug ID: 2063 Summary: RFE: export principal which was used for .k5login Classification: Unclassified Product: Portable OpenSSH Version: 6.1p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

Hey all, I'm trying to install CIV IV on Ubuntu 10.10 (64 bit....), running wine 1.2.2 (which is part of the repositories). I put the first CD in, open it up and run setup.exe and everything seems to be fine. Then, when the program asks me to insert the second CD, I get a permissions error. Wine is looking for the CD at Code: Z:\media\CIV4DISC2 which exists when I try to browse for

Hello, On a computer, a sparc64 with Debian, with hostname tw89 and domain name KUDDE thinks `smbpasswd` that the domain name is TW89 | tw89:~ | # grep workgroup /etc/samba/smb.conf | # Change this to the workgroup/NT-domain name your Samba server will part of | workgroup = KUDDE | tw89:~ | # ldapsearch -LLxW -H ldaps://tw89 -D cn=admin,ou=people,dc=gst,dc=stappers,dc=nl \ | -b

Well here is something simple, well I think it is for the smarty's out there :) I got a connection to freshtel and want to get the iax working. I have config'ed up iax.conf with the register line and get in return in the cli> -- Registered to '202.168.7.130', who sees us as 203.29.98.221:4569 So that appears to be connected. When I call the DID number I get the Voicemail

Hi, I rarely deal with kerberos but everytime I do it's painful... I have a Windows Server 2016 VM at foo-ad.foo.com. It has the AD role and it owns the FOO.COM domain. I added a *AD* account FOO\aaptel%aaptel. PS C:\share> get-aduser aaptel DistinguishedName : CN=aaptel,CN=Users,DC=foo,DC=com Enabled : True GivenName : Name :

Playing around with the [wonderful] GSS-API patches for OpenSSH [1] I noticed that there is a bit of functionality missing from OpenSSH/GSS-API, namely that authorized_keys2 has no meaning when using GSS authentication. Yes, ~/.k5login can be used to grant access to an account for applications that support Kerberos, as does OpenSSH with those GSS patches, but .k5login does not and cannot provide

Hi all, I'm not yet a "100 % Samba Guru" and I'd very much appreciate feedback of some guru's out there regarding the following: Our team started trials with Samba 2.2.5 on Red Hat AS using OpenLDAP technologies and a LDAP backend keeping Samba's "SAM data". Ideally we want to kick out as much of Microsoft's server infrastructure as possible - means

Just working on Configing up Voicemail and now that I have got it working and configed and answering the way it should be I have another challange. on the * CLI> I get this -- Recording the message -- x=0, open writing: /var/spool/asterisk/voicemail/default/6001/INBOX/msg0000 format: wav49, 0x8133390 -- x=1, open writing:

Hello I want to create a domain using samba4 and from there to authenticate users against ad. The challange for me is that i have never worked out with domain or with ldap , and that i need to use AD users/passwords to authenticate not only the domain clients , but the mail users and perhaps the ftp, or web users , that are on another linux distro's. It is possible to implement a AD with

Ok I have a challange that I can't seem to find a way to fix it. My Voicemail in * timesout after 30secs without fail everytime no matter what I do. I have incomming calls comming in through Freshtel IAX2, if it goes to SIP extension when it is online it can hang on for what ever time the call goes for. If however it goes to the Voicemail it will timeout at 30sec and I can't seem to

Hello there, I have a client connecting to dovecot and comunicating like this: * OK Dovecot ready. * AUTHENTICATE MYAUTH + base64 challange base64_response {NNN} * NO Invalid base64 data in continued response The problem is that dovecot seems to reject the response because of the {NNN} in the end of the string. If I remove the {NNN} it authenticates just fine. Any idea of whether it's

Am 2017-12-12 um 09:56 schrieb Aki Tuomi: > > > On 12.12.2017 02:59, Jakob Sch?rz wrote: >> Hi! [...] > > With v2.3 you are required to provide ssl_dh=</path/to/dh.pem yourself. > > You can generate suitable parameters with openssl gendh 2048 (or 4096). > Make sure you run it on something that has plenty of entropy available, > it will take some time.

Hi there, fellow icecast users. I have just started using icecast and really like it, but seem to have a small problem for now, let's call it a challange ;) I am using version 2.1.0 and use ices 0.4 to stream my mp3 collection to the server. They both run on linux (fedora core2) and looks like it is working ok. But when listening to the stream it stops playing, does anyone perhaps recognizes

This is very possibly not a question on R. I was under the impression that the argument that gives rise to Fisher's LSD method in ANOVA works in other situations with three-way comparisons too, given that formal logic works the same ("if the omnibus test rejects, only two of the three groups may be equal, and therefore only one hypothesis can be rejected falsely"). However, when I

Hi Aki, On 4/4/20 8:12 PM, Aki Tuomi wrote: > Can you provide doveconf -n and try turning on mail_debug=yes on both ends and try doveadm -Dv expunge .... mail_debug=yes is on on both ends and dovecot was restarted but anyway nothing is logged when I issue "doveadm -Dv expunge " In the shell where I issue the "expunge" I see the following: # /usr/bin/doveadm -Dv expunge

I am playing with the dialplan to get it working and I have a challange with this error. I can't find what it means on the wiki :( Any sugestions would be helpful at being able to forward it to the SIP phone if it is online and avaliable but then let that fail and drop into voicemail if it is not online or is busy. cheers David -- Executing Dial("IAX2/firefly@89280250/3",