similar to: Heimdal Breakage

I have some problem whit Kerberos. OS: FreeBSD 5.3 Domain: W2k3 native mode. 1)I am Installing Heimdal 0.6.1 over port. Config /etc/krb5.conf %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit: krb5_get_init_creds: Response too big for UDP, retry with TCP 2)Compile and install Heimdal 0.6.4 over source %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit:

Hello, (I found a post in the archives titled "link_dest checks perms despite no -p -o or -g" on April 7th, which might be related - not sure...) I'm trying to get a rotating daily backup going with previous days kept as hard links to save on network transfer and disk space. The plan: on day N, rsync to blah/N/, using --link-dest=../<N-1> (modulo 7 or whatever). My test

Hello List, I am (unsuccessfully) trying to automatically get a valid kerberos ticket for my linux box. I have - in a test environment: - a windows 2000 server with Active directory and DNS properly set up. - a suse linux 9.0 router with samba3.0.2.rc.1 and heimdal 0.6.-67. - I am able to join the domain and get a valid ticket through kinit, if I enter the Administrator's password or the

Could somebody please confirm that they are actually using 8.1-R with heimdal as a KDC successfully? A little confirmation would help me greatly. Thanks, Jason C. Wells

> > >> For historical reasons, the administrator is member in lots of groups. As >> a result the ticket size is too big for UDB, so the W2k3-server sends an >> KRB5KRB_ERR_RESPONSE_TOO_BIG (Response too big for UDP, retry with TCP) >> error back to kinit. >> >> Unfortunatly this case is not handled in lib/krb5/get_in_tck.c - >> krb5_get_in_cred().

I've got a working RH7.2 pxelinux setup, however, this new hardware we just aquired has a newer NIC card in it that 7.2 has no drivers for. And these systems come without CD or floppy (rack mounts). So I'm unable to provide a drv floppy. And I don't know how to tell pxelinux.0 config file to look elsewhere on the net for the drvnet.img. So, I'm going to move on up to RH8.0

I wanted to try and incorporate a statically linked driver in my netbooted kernel for the new 1Gig NIC interface that's coming on our latest machines. So I built a new kernel and included support for the e1000 driver. Now how do I turn this vmlinux file into a vmlinuz file? file vmlinux vmlinux: ELF 32-bit LSB executable, Intel 80386, version 1, statically linked, not stripped file vmlinuz

I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. When I select the option "Account is sensitive and cannot be delegated" (in Active Directory Users and Computers under the Account tab) for a user account regardless of its

On 6/1/2018 23:55, Andrew Bartlett wrote: > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: >> I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. >> >> When I select the option "Account is

Hello, can you say me how I can deny in my samba  that some aplication can read my active directory users anonymous. ** Alcatel Onetouch Idol 3 (5.5) ** en 06/01/2018 16:55, Andrew Bartlett via samba <samba at lists.samba.org> escribió: > > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba

On Wed, 2018-01-31 at 16:15 +0000, Antonios Kalkakos wrote: > On 6/1/2018 23:55, Andrew Bartlett wrote: > > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > > > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7

On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. > > When I select the option "Account is sensitive and cannot be delegated" (in Active Directory

Hello, I am trying to join a Samba 3.0.24 server into an ADS domain, which is served by two Windows 2003 servers (let's say srv1.domain.local (192.168.1.1) and srv2.domain.local (192.168.1.4)). I am running Samba on a FreeBSD 6.2 machine and I have established an OpenVPN connection to the ADS network (tunneling). I have this in my resolv.conf:

Trying to follow Chapter 9.3.3 of S3BE to create a SuSE 8.2 Active Directory domain member server. 9.3.3 says heimdal >= .6 is required. I installed the Sernet packages and saw 0.6.2 source is included. Running ./configure after unpacking the heimdal source completes OK, but running make results in the following errors: creating libss.la /usr/bin/sed: can't read

On Mon, Oct 24, 2005 at 03:35:41PM -0400, William Jojo wrote: > > Has anyone been able to get Heimdal 0.7.1 with Samba 3.0.20b to compile successfully without commenting out the __cplusplus stuff in include/includes.h? If I comment it out, it's fine on FC3. The Heimdal people are using "private" as a structure member name, so I know it's a Heimdal problem :-). I think you

I have a freshly installed FreeBSD 6.0-BETA1 system, which comes with Heimdal & OpenSSH w/GSSAPI enabled (version 4.1p1 FreeBSD-20050605) Most of the servers I connect to have OpenSSH w/GSSAPI enabled but they use MIT Kerberos (1,3.x and 1.4.x) Now, I can use ticket authentication between all systems where the libraries are all the same (Heimdal or MIT), but trying to use, for example,

I've had some trouble compiling GSSAPI on SuSE Enterprise 9 using Heimdal. It turns out that this installation has /usr/include/heimdal/gssapi.h rather than gssapi/gssapi.h. krb5-config correctly sets -I/usr/include/heimdal in the CFLAGS. Looking back, there was a similar issue a few months ago:- http://www.dovecot.org/list/dovecot/2006-July/014945.html I'm a complete newbie to

We would like to build a SuSE Professional 8.2 box as a Domain Member Server in a Windows 2000 Active Directory domain, and we are referencing Chapter 9.3.3 of Samba3-By-Example. The version of heimdal supplied with SuSE 8.2 is 0.4e. S3BE references heimdal version 0.6 plus patches. Since SuSE often backports fixes from later versions of products into older versions, the question is: will

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But

Hello is there any support planned for heimdal with samba 3 ? heimdal is a free (BSD sense) kerberos implementation which is used in all *BSD. i have read samba 3 support only mit-kerberos. so in that matter, *BSD can't support Active Directory (and another example, winbind is also not supported on openbsd) Regards Julien