similar to: Different realm for different listeners?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 10-03-15 18:20, Chris Adams wrote: > I see this has been asked a few times over the years (but not in > several years), and the response was along the lines of "maybe > someday", so I figured I'd see if someday was here yet... > > I have a need to have a different default realm for different > listeners.

Once upon a time, Tom Hendrikx <tom at whyscream.net> said: > You could drop the default realm completely, and create a second > passdb lookup which uses only the username part to lookup credentials. > This means that, as long as you have no conflicts as usernames > 'john at foo.com' vs 'john at bar.com', you'd be able to support username > 'john'.

I'm currently working on a control panel which is using postfix, dovecot and other applications and I want to add application specific passwords to increase security. I found one solution [1], however it requires the password to be included in the query which is something I do not want to do, because the query may be written in clear-text to log-files. So I'm wondering if there is a way

Hi all, I was hoping to setup a realm trust between a Samba AD domain and a kerberos realm running mit-krb5, however it looks like that isn't currently supported. Is that correct, or am I missing something (I'm running Samba 4.9.4)? Having noticed that "samba-tool domain trust" only seems to cater for trusts involving other AD domains, I tried to workaround that (in the

Try change your resolv.conf from : >nameserver 127.0.0.1 >domain intranet.mayweg.net to nameserver 192.168.11.250 search intranet.mayweg.net >The only thing I was unsure about, was which hostname to enter >for Kerberos >Server and Kerberos admin server when asked during the >installation of the >packages.. Try these defealt settings for kerberos.. You didnt have to

can you run these commands and tell us the output. ( copy past it. ) SETFQDN=`hostname -f` SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SETSERVERIP=`hostname -i` echo "==========Test DNS Records ===============================" echo "Testing : dns entries" if [ -z "`host -t SRV _ldap._tcp.${SETDNSDOMAIN}. | grep 'not found'`" ]; then echo

Good morning! First of all thanks Rowland for the fast answer yesterday! I realized that samba-technical might have been the wrong mailing list and switched it to the normal samba users list (hopefully it worked, as it does get a bit confusing with spamgourmets addresses!). Unfortunately the problem with samba_dnsupdate remains after the changes. I did changed the smb.conf, krb5.conf, and hosts

I am in the process of trying to setup a Samba 4.0.6 AD DC on Fedora 18, but dnsupdate is not updating the DNS records since I changed the addresses that I have assigned to my NICs. At first I thought the internal server didn't want to work, so I tried getting things setup with Bind (which is working just not with Samba yet). I am wanting to replace our Windows Server 2003 with RHEL 7 (or

Hi all! I want create a large IMAP server setup where dovecot is listening on multiple interfaces and needs a different default realm on each interface. I'm using dovecot 2.0.5 on FreeBSD9 and authenticate against a LDAP database. I found an old mail thread from 2007 that said I'm basically screwed. Has that change since than? Is there any way to use different default realms per listener?

Hi, SAMBA users, If I try to access the shares by \\samdom.asta.lan I get an "element not found" error but if I access it with the samba servers ip address, everything works just fine! I'm using samba4 4.0.0-1 Greets Flo

Hi all, Trying to find where i got wrong in my config.... Is the "realm" parameter in sip.conf only used for possible autentication? The thing is, i got my box more-or-less working as i wanted, but i can only reach internal functions (like echo-test and so on) and other sip-clients if i dial "1234 at fqdn", while i was expected to be able to just dial "1234" I

Hi Guys, i've a problem joining a samba 3.0.7-1.3E.1 in a w2k domain: [root@proxynode2 squid]# net ads join -U myuser myuser's password: [2004/11/18 13:29:32, 0] utils/net_ads.c:ads_startup(183) ads_connect: Program lacks support for encryption type I've also changed the Administrator's password for key generation... what can i check? I have a similar server in the same net

Here is our scenario. We have a Windows 2008 domain I'll call CORP and an MIT realm I'll call REALM. There is a one-way trust (AES enabled) such that users in the CORP domain can access REALM resources. If I log into a CORP workstation, I can access REALM resources as expected (including samba). We have a third Windows 2008 domain I'll call LAB. If I log into a LAB workstation

This is a follow-on to the "SQL field format for digest-md5?" thread. After some additional debugging, I've found the problem is a mismatch in what Dovecot expects and Postfix uses for the user and realm. For a username "user at example.com" and password "sekret", Dovecot expects: username = "user" realm = "example.com" but Postfix sends

This one has been puzzling me for quite a while now. I have been able to set up Samba 3 as an NT4 DC replacement, using the passdb backend. For other applications, I have run Samba and Winbind alongside a Windows Server 2003 Domain Controller and used distributed authentication across the two platforms. What I would like to do now is to use Samba in what is effectively a BDC-type role. I

I've written a GSSAPI cross-realm auth patch for people not lucky enough to have the __gss_userok function, though it should apply pretty cleanly with that patch in place as well. The patch is available at: http://zinux.cynicbytrade.com/svn/servers/dovecot/cross-realm.diff.bz2 It works for me on MIT-kerb, and I tested compilation against heimdal, but I don't have a cross-realm setup

I'm setting up a windows server 2003 ADS Realm with a few samba servers associating to it, however i've found that the accounts on the DC that i use to associate samba with need to be in the administrator group otherwise the association fails. ("ads_join_realm: Insufficient access") I'm just curious what the absolute minimum privileges are on the Windows Server 2003 DC

hi, im trying to log on to my win2003 ADS from Samba3-0.2a, buet every time to run i got the same message dmm:/home/dmagana # net ads join -U dmagana dmagana password: [2004/04/06 09:09:48, 0] libads/kerberos.c:ads_kinit_password(134) kerberos_kinit_password dmagana@GENESIS.LOCAL failed: Cannot contact any KDC for requested realm dmm:/home/dmagana # my domain is genesis.local, but i

Hello all, I've been changing dll load orders and native/builtin as well as using --debugmsg and looking at copious log files. I get the following: Call user32.425: MessageBoxA(00000000,4044481c "Unhandled page fault on read access to 0x0000000c at address 0x1270128f.\nDo you "...,400e8873 "Error",00000014) ret=400ca5a6 fs=008f Before that are some lines like: Call

Trying to update Bug 306 I installed wine-20020411.tar.gz The debugger won't let me "finish". Unhandled exception: stack overflow in 32-bit code (0x406c364c). In 32-bit mode. Symbol h_errno is invalid Symbol __strtol_internal is invalid 0x406c364c (SPY_EnterMessage+0xc [spy.c:2078] in user32.dll.so): call 0x406c3651 (SPY_EnterMessage+0x11 [spy.c:2078] in user32.dll.so) 2078 {