similar to: samba4 as authorisation service + openldap users mapping on FreeBSD

I am looking into the best way to integrate active directory user authentication and authorisation in to Apache. So far I have a working LDAP solution that requires the username/password to be entered and a Kerberos setup that is transparent to the user but with no authorisation. Searching the net seems to only find commercial offerings which offer true password less integration between AD &

I have problem (as you noticed ;] ). I have to make unified authorisation system for large, unsecure network connected to a two Polish skelete networks. As you see I need to do it right to avoid big problems. The goal is to have windows and linux computers authorized by one Linux mashine. I can do it by installing samba as a windows domain controller. It would work for windows. Linuxes can

Hi, Just wondering what the most popular approach is for authentication and authorisation in a rails application that is deployed and fronted by apache? Also when there are say a couple of rails apps being hosted. Authentication ============== [1] Options would seem to include: * Do it within rails/your app? Use of a "before_filter" per the Rails Recipes book * Use of Apache to

I''ve got salted login working but when i follow the rails receipe to add role based authorisation I get this error: NoMethodError in Admin#new You have a nil object when you didn''t expect it! The error occured while evaluating nil.roles -- Posted via http://www.ruby-forum.com/.

hello, I am in test time about my Asterisk server.when my server is running, the client bob can't connect to it. the server say : "chan_iax2.c:3865 register_verify: No registration for peer 'bob'" "chan_iax2.c:5390 socket_read: Rejected connect attempt from 192.168.0.204" How can I resolve this problem ? I joined my configuration files there : EXTENSIONS.CONF :

Hello all, At my current job the time has come to unify our LDAP infrastructure into one tree (preferably). The basics are working but we are not sure how to restrict which users can log into which machines. What we would like is for everyone in the (for example) "infra" group to log into all machines while people in the "development" group can only log into development

Hi List, I am trying to set up dovecot on my mail server and am having some difficulties? I want to use virtual mailboxes and so have set up a passwd-file for userdb and passdb and created entries for a user but they don?t seem to be working? I have included the relevant lines from all three files below? Dovecot.conf? auth_userdb = passwd-file /etc/dovecot/users auth_passdb =

On Sat, 2018-01-06 at 14:05 +0530, Anantha Raghava wrote: > Hello Andrew, > > Thanks for quick response. > > The requirement here is, we are deploying a Smokescreen IllusionBLACK appliance for cyber security(Deception technology, unfortunately this appliance is built on Windows), and Active Directory Decoys are created. A task is created in the appliance that can read the AD

Hi, I have a working installation of Samba 2.2.8a on Mandrake 9.2 connected to a Win NT 4.0 sp6 via winbind. Everything works fine except that I cannot give the NT user "administrator" administrative rights on samba and users cannot change samba file permissions from Win2k/WinXP Here follows my smb.conf # Samba config file created using SWAT # from 0.0.0.0 (0.0.0.0) #

Hi, Can we export the samba audit logs (Authentication & Authorisation Logs) to Windows Event Viewer? I am trying to export the authentication & authorisation logs to a Windows Server to be shown in Windows Event Viewer. I read the link - https://wiki.samba.org/index.php/Event_Logging. But couldn't follow much. Can someone throw more light on the procedure, if it is possible? --

I have configured samba 3.0.4 as follows: ./configure --with-krb5=/usr/local --with-automount --with-pam --with-utmp --with-winbind --with-libsmbclient --with-netlib='-lresolv' ran make and make install. When I run ./smbclient \\<hostname>\<useraccount> I get the following: session setup failed: NT_STATUS_LOGON_FAILURE Logfile looks like this: [2004/06/03 15:41:56, 1]

My authentication (signup/login) is up and running in my app, now I need to implement an authorisation system. Its not going to be a complex one. One admin (me) and then normal members and premium members. Any tutorials or tips on a simple way to get this running? Thanks. -- Posted via http://www.ruby-forum.com/.

I want my web app to have a signup/login generator but have 2 tiers of users - normal and premium. There seems to be lots of login generator and engines with scattered tutorials about extensible authorisation and Im lost as which is the ''best'' or most ''easy to use'' solution. Anyone had success in this area? -- Posted via http://www.ruby-forum.com/.

Hello, Currently I am working on a app, so far I have User (with devise) which are able to create projects. So, if user1 creates project A and project B I want him, to be able to assign user2 with role admin on project A, and user2 with moderator role on project B. I was thinking in creating a UserRoleProject link table, is it a good idea? Or if not please help me with some pointers. The action

Hello all. We have a CentOS 7 system integrated with Active Directory. Achieved using realmd, SSSD and krb5-workstation together with a ktpass-generated keytab. Apache's mod_auth_kerb allows users to authenticate via their AD accounts, and authorise with "require user" directive. But so far we fail to authorise via AD group membership. i.e. adding AuthLDAPUrl and "require

Hi everyone, I''ve been working on a module for bacula, and I''m having a problem requiring resources I''ve defined in other modules. At the moment, I have the following (simplified): /etc/puppet/modules/bacula/manifests/init.pp: class bacula { ... define configure ( $gui="true", $db_password ) { ... postgresql::create_db {

Hi, I am running a Samba 2.2.7a on Redhat 7.3 in a NT domain. For authentication I am using the domainusers.This is done by Winbind 2.2.7a which verifies the existens of the users on the PDC. So I dont't have to create local users (/etc/passwd) for users who want to connect to the shares in the smb.conf. I authorise them by adding valid users = domain+domainuser to the smb.conf. This works

Hello, We're starting to use FreeIPA in house (which is awesome btw) which means that Kerberos and TLS client certificate authentication is suddenly quite easy. Im looking for a list of common Linux services with data on how one can Authenticate/Authorise for these services. * httpd support TLS client certificate authentication and Kerberos * rabbitmq supports TLS client certificate

Hello to all, I have installed Samba 3.0.0 PDC + OpenLDAP 2.1. Additionally, I use "wbinfo -c" to create users and winbindd + libnss_winbind.so to resolve these users in Unix (SID <-> Unix id mapping). But I have found that users' data, created by "wbinfo -c" command, is not completely stored in LDAP backed. The "sambaUnixIdPool" objectclass is stored in

Hi. I ask your assistence to get kind of sorted in my head... We do have a openLDAP-Server running. There is also a smbd running at a different box as file server. I did all the configuration and managed it to have samba asking the ldap-Server for authentification. I can see in the logs that this is happening. I did a smbpasswd -a user (which is not a local user at the box) and the DIT-entry