similar to: Cross-Realm Krb5 Patch

I've written a GSSAPI cross-realm auth patch for people not lucky enough to have the __gss_userok function, though it should apply pretty cleanly with that patch in place as well. The patch is available at: http://zinux.cynicbytrade.com/svn/servers/dovecot/cross-realm.diff.bz2 It works for me on MIT-kerb, and I tested compilation against heimdal, but I don't have a cross-realm setup

I'm new to this list, and I apologize if this is an already answered question, but my Google-fu was not strong enough to find the answer if it was. I'm having a problem with DTMF on incoming IAX calls. For the first few seconds of the call (between maybe 1 and 15, it varies from call to call) everything works fine. After that I continue get DTMF_E messages from the remote IAX server

It took me a while to track this down. I am using MIT Kerberos 1.4.3 and libgssapi-0.7. With some patches that came with Suse 10, but that doesn't appear to be relevant. I have been using openssh-4.2p1 (with Simon's patches) and openssh-4p3p2 out of the box. I see the same problem no matter which version of openssh I am using. I am using two Suse Linux x86 boxes as a test

Hello, I going to use ssh with Kerberos V5 support along with support for AFS. I don't want to use Kerberos V4 or AFS token passing. The only thing I need from AFS is creating an AFS token (using appropriate function from krb5 API) after user's authentication. It seems to me that such scenario is not much supported by the current code. Rather it is assumed only Kerberos 4 will be used

Has anyone here been able to view Netflix movies on CentOS? (It requires Internet Explorer, and I'm wondering what the workaround is for Firefox) -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080502/6ace912b/attachment.html>

Hi, attached a patch that provides the ability to set / unset autoplaying from the domain the flash come from within the plugin menu. This patch does not touch the actual logic of setting autoplay automatically on play start. Hope this is acceptable for inclusion. There is only a nitpick, the checkbox of the autoplaying is not updated once the playing is toggled. I've tried to tackle that

Hi all, I was hoping to setup a realm trust between a Samba AD domain and a kerberos realm running mit-krb5, however it looks like that isn't currently supported. Is that correct, or am I missing something (I'm running Samba 4.9.4)? Having noticed that "samba-tool domain trust" only seems to cater for trusts involving other AD domains, I tried to workaround that (in the

Try change your resolv.conf from : >nameserver 127.0.0.1 >domain intranet.mayweg.net to nameserver 192.168.11.250 search intranet.mayweg.net >The only thing I was unsure about, was which hostname to enter >for Kerberos >Server and Kerberos admin server when asked during the >installation of the >packages.. Try these defealt settings for kerberos.. You didnt have to

can you run these commands and tell us the output. ( copy past it. ) SETFQDN=`hostname -f` SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SETSERVERIP=`hostname -i` echo "==========Test DNS Records ===============================" echo "Testing : dns entries" if [ -z "`host -t SRV _ldap._tcp.${SETDNSDOMAIN}. | grep 'not found'`" ]; then echo

Hi all, I have setup two multipath route tables on my system for doing failover routing, What I want it''s that if GW at route1 of the MP is dead, traffic goes by route2, for doing that I have created the multipath routes as follows: ip route add table mail.traffic proto static nexthop via ${GW1} dev eth1 weight 1 nexthop via ${GW2} dev eth1 weight 250 But it does not run as I

Good morning! First of all thanks Rowland for the fast answer yesterday! I realized that samba-technical might have been the wrong mailing list and switched it to the normal samba users list (hopefully it worked, as it does get a bit confusing with spamgourmets addresses!). Unfortunately the problem with samba_dnsupdate remains after the changes. I did changed the smb.conf, krb5.conf, and hosts

I am in the process of trying to setup a Samba 4.0.6 AD DC on Fedora 18, but dnsupdate is not updating the DNS records since I changed the addresses that I have assigned to my NICs. At first I thought the internal server didn't want to work, so I tried getting things setup with Bind (which is working just not with Samba yet). I am wanting to replace our Windows Server 2003 with RHEL 7 (or

Hi all! I want create a large IMAP server setup where dovecot is listening on multiple interfaces and needs a different default realm on each interface. I'm using dovecot 2.0.5 on FreeBSD9 and authenticate against a LDAP database. I found an old mail thread from 2007 that said I'm basically screwed. Has that change since than? Is there any way to use different default realms per listener?

Hi, SAMBA users, If I try to access the shares by \\samdom.asta.lan I get an "element not found" error but if I access it with the samba servers ip address, everything works just fine! I'm using samba4 4.0.0-1 Greets Flo

Hi all, Trying to find where i got wrong in my config.... Is the "realm" parameter in sip.conf only used for possible autentication? The thing is, i got my box more-or-less working as i wanted, but i can only reach internal functions (like echo-test and so on) and other sip-clients if i dial "1234 at fqdn", while i was expected to be able to just dial "1234" I

Hi Guys, i've a problem joining a samba 3.0.7-1.3E.1 in a w2k domain: [root@proxynode2 squid]# net ads join -U myuser myuser's password: [2004/11/18 13:29:32, 0] utils/net_ads.c:ads_startup(183) ads_connect: Program lacks support for encryption type I've also changed the Administrator's password for key generation... what can i check? I have a similar server in the same net

Here is our scenario. We have a Windows 2008 domain I'll call CORP and an MIT realm I'll call REALM. There is a one-way trust (AES enabled) such that users in the CORP domain can access REALM resources. If I log into a CORP workstation, I can access REALM resources as expected (including samba). We have a third Windows 2008 domain I'll call LAB. If I log into a LAB workstation

This is a follow-on to the "SQL field format for digest-md5?" thread. After some additional debugging, I've found the problem is a mismatch in what Dovecot expects and Postfix uses for the user and realm. For a username "user at example.com" and password "sekret", Dovecot expects: username = "user" realm = "example.com" but Postfix sends

This one has been puzzling me for quite a while now. I have been able to set up Samba 3 as an NT4 DC replacement, using the passdb backend. For other applications, I have run Samba and Winbind alongside a Windows Server 2003 Domain Controller and used distributed authentication across the two platforms. What I would like to do now is to use Samba in what is effectively a BDC-type role. I

I'm setting up a windows server 2003 ADS Realm with a few samba servers associating to it, however i've found that the accounts on the DC that i use to associate samba with need to be in the administrator group otherwise the association fails. ("ads_join_realm: Insufficient access") I'm just curious what the absolute minimum privileges are on the Windows Server 2003 DC