similar to: mit-krb5 and heimdal binaries

On Mon, 2023-03-20 at 10:39 +0200, Alexander Bokovoy wrote: > Indeed. For the record, current set of tests not supported by > > --with-system-mitkrb5 build: > > > > ---------------------------------------- > > $ cat selftest/skip_mit_kdc > > # We do not support RODC yet > > .*rodc > > .*RODC > > ^samba4.ntvfs.cifs.ntlm.base.unlink >

Hi! I already asked a similar question before, but it keeps popping up in different contexts and forms, and the more I use samba myself, the more often it comes to me too, especially in context of using various security tokens for auth. And the more I think about all this, the more sane it looks to me. The thing is: mit-krb5 has much better user-level support than heimdal. But samba does not

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But

I have a freshly installed FreeBSD 6.0-BETA1 system, which comes with Heimdal & OpenSSH w/GSSAPI enabled (version 4.1p1 FreeBSD-20050605) Most of the servers I connect to have OpenSSH w/GSSAPI enabled but they use MIT Kerberos (1,3.x and 1.4.x) Now, I can use ticket authentication between all systems where the libraries are all the same (Heimdal or MIT), but trying to use, for example,

I have some problem whit Kerberos. OS: FreeBSD 5.3 Domain: W2k3 native mode. 1)I am Installing Heimdal 0.6.1 over port. Config /etc/krb5.conf %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit: krb5_get_init_creds: Response too big for UDP, retry with TCP 2)Compile and install Heimdal 0.6.4 over source %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit:

My college is kerberized, and so in many situations authentication is both faster and more secure using kerberos tickets. Sadly I have run into a problem. The Heimdal included in FreeBSD seems to be incompatible with my school's servers running MIT kerberos when authenticating over gssapi. For example ssh in verbose mode returns: debug2: we sent a gssapi-with-mic packet, wait for reply

What is the difference between Heimdal and MIT as far usability goes? MIT seems to be the default on major linux distrobutions, but I here a lot about people preferring Heimdal, but I can't find any reasons why. Is one generally more stable/faster/reliable than the other? There is already a blank wiki page at http://wiki.samba.org/index.php/Samba_%26_Kerberos so if anyone has any good

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Has anyone have patches to allow OpenSSH to use Heimdal Kerberos? I suspect the patches <http://www.ics.muni.cz/scb/devel/heimdal.html> against SSH 1.2 could likely be easily adapted for use with OpenSSH. Has anyone already done this? I'm willing to test and may, if time permits, even do the port of the above patches. Kurt

On Fri, 2019-05-31 at 10:46 +0100, Rowland penny via samba wrote: > As far as I am aware 2012 is planned for 4.11 (but as I am sure you are > aware, plans can change), after that I am sure that 2016 will be added > as soon as possible. It depends on what you mean by 2012. We should be able to join and be joined by a 2012 server thanks to the work to upgrade the schema (patches in just

On Thu, 2017-01-05 at 10:45 +0100, Stefan G. Weichinger via samba wrote: > Am 2017-01-05 um 00:28 schrieb Andrew Bartlett: > > > > > > > > > In Debian we re-bundled heimdal.  Samba is only known to work and > > > is > > > only tested with the bundled copy.  The semi-private interfaces > > > we > > > use > > > with the

On Thu, 2017-01-05 at 00:07 +0100, Stefan G. Weichinger via samba wrote: > Am 2017-01-04 um 23:49 schrieb Stefan G. Weichinger via samba: > > > > > on my way to 4.5.3 now > > compiling samba-4.5.3 on gentoo *failed* right now > > seems to be related to heimdal issues .. it's too late here right now > to > go on with that, maybe tomorrow. > >

On Thu, 2017-01-05 at 12:26 +1300, Andrew Bartlett wrote: > On Thu, 2017-01-05 at 00:07 +0100, Stefan G. Weichinger via samba > wrote: > > > > Am 2017-01-04 um 23:49 schrieb Stefan G. Weichinger via samba: > > > > > > > > > > > on my way to 4.5.3 now > > > > compiling samba-4.5.3 on gentoo *failed* right now > > > >

Release Announcements ===================== This is the fourth release candidate of Samba 4.19.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.19 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.19.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.19 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements --------------------- This is the first stable release of the Samba 4.19 release series. Please read the release notes carefully before upgrading. NEW FEATURES/CHANGES ==================== Migrated smbget to use common command line parser ------------------------------------------------- The smbget utility implemented its own command line parsing logic. After discovering

Release Announcements --------------------- This is the first stable release of the Samba 4.19 release series. Please read the release notes carefully before upgrading. NEW FEATURES/CHANGES ==================== Migrated smbget to use common command line parser ------------------------------------------------- The smbget utility implemented its own command line parsing logic. After discovering

On Fri, 2019-05-31 at 11:00 +0100, Rowland penny wrote: > On 31/05/2019 10:55, Andrew Bartlett wrote: > > On Fri, 2019-05-31 at 10:46 +0100, Rowland penny via samba wrote: > > > As far as I am aware 2012 is planned for 4.11 (but as I am sure you are > > > aware, plans can change), after that I am sure that 2016 will be added > > > as soon as possible. > >

Release Announcements --------------------- This is the latest stable release of the Samba 4.16 release series. Changes since 4.16.2 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15099: Using vfs_streams_xattr and deleting a file causes a panic. o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 14986: Add support for bind 9.18. ?? * BUG

Release Announcements --------------------- This is the latest stable release of the Samba 4.16 release series. Changes since 4.16.2 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15099: Using vfs_streams_xattr and deleting a file causes a panic. o? Douglas Bagnall <douglas.bagnall at catalyst.net.nz> ?? * BUG 14986: Add support for bind 9.18. ?? * BUG