similar to: [Bug 11151] New: rsync transfers entire source file even when unable to create destination

On Tue, 2 Jun 2020 at 18:48, Brian Candler <b.candler at pobox.com> wrote: [about ssh -Q ssh_config_keyword] > There is also "-Q key-sig" in recent versions (not sure exactly how recent, but 7.6 doesn't have it) Added in the same commit (Feb this year), first released in 8.3: https://github.com/openssh/openssh-portable/commit/d4d9e1d40514e2746f9e05335d646512ea1020c6 --

I don't see a problem, my MTU is at the default value = 1500, but when I look at the trace from libssh2, packet type 4 received, => SSH_MSG_DEBUG packet type 91 received, => SSH_MSG_CHANNEL_OPEN_CONFIRMATION packet type 93 received, => SSH_MSG_CHANNEL_WINDOW_ADJUST packet type 99 received, => SSH_MSG_CHANNEL_SUCCESS packet type 98 received, => SSH_MSG_CHANNEL_REQUEST packet

On 12/11/2016 8:59 AM, Brian Candler via samba wrote: > On 10/12/2016 16:25, Brian Candler wrote: >> I think there's plenty of emphasis now, but I think there is a part >> which is misleading: >> >> > To enable Samba to retrieve user and group information from Active >> Directory (AD): >> > >> > * Users must have at least the uidNumber

On 30/01/2020 12:53, Michael Str?der wrote: > On 1/30/20 1:27 PM, Brian Candler wrote: >> I am trying to work out the best way to issue SSH certificates in such >> way that they only allow access to specific usernames*and* only to >> specific groups of host. > I also thought about this for a while. The only idea I came up with is > to have separate CAs used as trust

On 06/12/2016 16:06, Brian Candler wrote: > Ah OK... I've just seen Rowland's reply, "Just don't use ZFS". That's > clear enough :-) FYI, I rebuilt the system using btrfs but initially I got the same issue [^1] It turns out this came from running inside an unprivileged lxd container. After setting "security.privileged true" it was happy. So I guess

On Thu, Jan 30, 2020 at 7:11 AM Christian, Mark <mark.christian at intel.com> wrote: > > On Thu, 2020-01-30 at 12:27 +0000, Brian Candler wrote: > > As a concrete example: I want Alice to be able to login as "alice" > > and > > "www" to machines in group "webserver" (only). Also, I want Bob to > > be > > able to login as

On Tue, 20 Dec 2016 13:50:40 +0000 Brian Candler via samba <samba at lists.samba.org> wrote: > Rowland Perry wrote: > > >/imdap config AD : backend = rid /> >/ > /> How did you 'fix' > > >this, on face value, there is nothing wrong with that line. > > > "imdap" is not "idmap" > > (so now you understand why I

On Mon, 10 Apr 2023 at 07:07, Peter Stuge <peter at stuge.se> wrote: > > Brian Candler wrote: > > > What's odd is that the length is *always* 1231976033 (which is > > > 0x496E7661 or "Inva" in ASCII). One thing that can cause this is if the libc writes to stderr (ie fd 2) on some classes of error. This is something libc should probably not do, since

On 30/01/2020 15:02, Christian, Mark wrote: > On Thu, 2020-01-30 at 12:27 +0000, Brian Candler wrote: >> As a concrete example: I want Alice to be able to login as "alice" >> and >> "www" to machines in group "webserver" (only). Also, I want Bob to >> be >> able to login as "bob" and "www" to machines in group

Brian Candler wrote: > > What's odd is that the length is *always* 1231976033 (which is > > 0x496E7661 or "Inva" in ASCII). > > Could you get a tcpdump when this happens? Or debug output from at least the client (run ssh with -vvv) or preferably the server (run sshd with -ddd). //Peter

Hi, I'm running OpenSSH-1.2.2p1 under RH Linux 6.1. One of my machines is a laptop, and its IP address tends to change as I move it around. I have set its kernel hostname to "vaio.linnet.org", and have the following in /etc/hosts to ensure this name is always usable: 127.0.0.1 localhost.localdomain localhost vaio.linnet.org Now, the problem is with X forwarding. If I ssh into

Am 20.12.2016 um 14:50 schrieb Brian Candler via samba: > (2) Can "net ads keytab create" be told to extract just a single named > principal? That would simplify things. But I can't see how to. > > As usual... clues gratefully received. samba-tool domain exportkeytab [keytabfile] --principal=[SPN or UPN] In your case samba-tool domain exportkeytab /etc/krb5.keytab

On Tue, 13 Dec 2016 14:57:59 -0500 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 12/12/2016 3:27 PM, lingpanda101 wrote: > > On 12/11/2016 8:59 AM, Brian Candler via samba wrote: > >> On 10/12/2016 16:25, Brian Candler wrote: > >>> I think there's plenty of emphasis now, but I think there is a > >>> part which is misleading: >

Brian Candler wrote: > Chris Green wrote: > > ... redundant ones are because I have a mixed population of > > Raspberry Pis and such on my LAN and they get rebuilt fairly > > frequently and thus, each time, get a new entry in known_hosts. > ...many useful tips... > To disable host key checking altogether for certain domains and/or networks, > you can put this in

Hello I submitted an email with the title: Locked Files issue on the 23/06/14 at 17:31 but it has not posted in the mailing list. Is it in some kind of queue or did it violate any rules? Thank you ** -------- Original Message -------- Subject: samba Digest, Vol 138, Issue 33 Date: Tue, 24 Jun 2014 12:00:02 -0600 From: samba-request at lists.samba.org Reply-To: samba at lists.samba.org

On 1/30/20 5:48 PM, Christian, Mark wrote: > On Thu, 2020-01-30 at 16:37 +0000, Brian Candler wrote: >> I was hoping to avoid the dependency on configuration management by >> carrying the authorization in the certs themselves - if that is in >> the spirit of the SSH cert mechanism. > > Sign alice and bob's ssh cert with principal's alice,www and bob,www >

Hi, When samba is joined to a 2k3 domain, UPN authentication does not work. It works using smbclient, but not from a workstation that is not part of the domain. I can reproduce this easily and provide logs and tcpdump's if necessary. The same problem does not occur when samba is joined to 2k8 or 2k12 domains. Is this by design? Am I missing something? - John -------------- next part

Hi I'm getting Jun 11 13:12:46 "Fatal: Can't open configuration file /home/dovecot/dovecot-pgsql.conf: Permission denied this file have fulle permissions and has belonged to dovecot and root but still no joy what am i missing must be something stupid on this side Thanks for the previos comments about scripting I am swithcing to postgress for the mail env and will look at mysql

On 17/02/16 17:27, Ian wrote: > > On 2/17/2016 5:00 AM, Rowland penny wrote: >> On 17/02/16 00:03, Ian wrote: >>> I've recently attempted to migrate some windows server files over to >>> samba 4 hosted on a FreeNAS server. >>> >>> Using robocopy with the /copyall switch, I expected everything, >>> including ACL's and ownership

Hello, I am unable to change ownership of Samba shares on Windows. It makes no difference if Samba is a PDC or if it is a member server in an Active Directory. I am running Samba 4.1.9 on FreeBSD 9.2 with ZFS. I can easily change ownership locally on the FreeBSD box, however, when trying to do it from Windows it errors out with access is denied. I've attempted to use net rpc rights grant