similar to: 8.1 Heimdal KDC

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Trying to follow Chapter 9.3.3 of S3BE to create a SuSE 8.2 Active Directory domain member server. 9.3.3 says heimdal >= .6 is required. I installed the Sernet packages and saw 0.6.2 source is included. Running ./configure after unpacking the heimdal source completes OK, but running make results in the following errors: creating libss.la /usr/bin/sed: can't read

After installing 6.4-RELEASE on my secondary KDC I decided to test the secondary KDC. When trying kinit I get this error: jcw@w17 ~ $ kinit jcw@STRADAMOTORSPORTS.COM's Password: kinit: krb5_get_init_creds: Key size is incompatible with encryption type One post on the net says that Heimdal changed the key format to add some padding or somesuch. I haven't gone about fixing the problem

On Mon, Oct 24, 2005 at 03:35:41PM -0400, William Jojo wrote: > > Has anyone been able to get Heimdal 0.7.1 with Samba 3.0.20b to compile successfully without commenting out the __cplusplus stuff in include/includes.h? If I comment it out, it's fine on FC3. The Heimdal people are using "private" as a structure member name, so I know it's a Heimdal problem :-). I think you

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everybodey, i can't compile 3.0.20 the following message occurs : Compiling dynconfig.c In file included from include/includes.h:452, ~ from dynconfig.c:21: /usr/local/heimdal-0.7/include/krb5.h:660: error: syntax error at '#' token /usr/local/heimdal-0.7/include/krb5.h:660: warning: no semicolon at end of struct or

I have a freshly installed FreeBSD 6.0-BETA1 system, which comes with Heimdal & OpenSSH w/GSSAPI enabled (version 4.1p1 FreeBSD-20050605) Most of the servers I connect to have OpenSSH w/GSSAPI enabled but they use MIT Kerberos (1,3.x and 1.4.x) Now, I can use ticket authentication between all systems where the libraries are all the same (Heimdal or MIT), but trying to use, for example,

Hi List, I do my best to ask my question in english. ;-) Samba4 integrated heimdal kerberos to do the kerberos work for Active Directory. Some Linux Distributions like fedora/RedHat and openSUSE/SUSE don't accept heimdal even if it is shipped inside samba. Their argument is that heimdal isn't maintained since 2012. Compiling samba against MIT krb5 results in Samba-Packages without

On Thu, 2017-01-05 at 12:26 +1300, Andrew Bartlett wrote: > On Thu, 2017-01-05 at 00:07 +0100, Stefan G. Weichinger via samba > wrote: > > > > Am 2017-01-04 um 23:49 schrieb Stefan G. Weichinger via samba: > > > > > > > > > > > on my way to 4.5.3 now > > > > compiling samba-4.5.3 on gentoo *failed* right now > > > >

I have some problem whit Kerberos. OS: FreeBSD 5.3 Domain: W2k3 native mode. 1)I am Installing Heimdal 0.6.1 over port. Config /etc/krb5.conf %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit: krb5_get_init_creds: Response too big for UDP, retry with TCP 2)Compile and install Heimdal 0.6.4 over source %/usr/local/bin/kinit ivan ivan@NKMK.RU's Password: kinit:

I'm trying to compile sasl from source on my Samba4 AD/DC. It needs the location of the kerberos library and headers. Where are these located, or at least, what is the library name? I can't seem to locate them via find using any of the search terms I can think of. I'm running Samba 4.4.16 Thanks, --Mark

I am attempting to setup Samba 3.0.10 on a Windows 2000 Active Directory domain. The problem I'm having is getting Samba to configure correctly to get the Kerberos library. I've gone through previous posts and have tried doing what others suggested but I still keep getting the error of: "configure: error: libkrb5 is needed for Active Directory support" The current configure

What is the difference between Heimdal and MIT as far usability goes? MIT seems to be the default on major linux distrobutions, but I here a lot about people preferring Heimdal, but I can't find any reasons why. Is one generally more stable/faster/reliable than the other? There is already a blank wiki page at http://wiki.samba.org/index.php/Samba_%26_Kerberos so if anyone has any good

We would like to build a SuSE Professional 8.2 box as a Domain Member Server in a Windows 2000 Active Directory domain, and we are referencing Chapter 9.3.3 of Samba3-By-Example. The version of heimdal supplied with SuSE 8.2 is 0.4e. S3BE references heimdal version 0.6 plus patches. Since SuSE often backports fixes from later versions of products into older versions, the question is: will

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But

Hello is there any support planned for heimdal with samba 3 ? heimdal is a free (BSD sense) kerberos implementation which is used in all *BSD. i have read samba 3 support only mit-kerberos. so in that matter, *BSD can't support Active Directory (and another example, winbind is also not supported on openbsd) Regards Julien

Hi, i'm looking for this how-to, often referenced but no more available: https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba and OpenLdap? Thank you in advance Marcello

I have FreeBSD-6.1 and it appears the default installation has a full complement of Kerberos5. But, /usr/src/kerberos5/README states: This subtree is world-exportable, as it does not contain any cryptographic code. At the time of writing, it did not even contain source code, only Makefiles and headers. Please maintain this "exportable" status quo. Thanks!

My college is kerberized, and so in many situations authentication is both faster and more secure using kerberos tickets. Sadly I have run into a problem. The Heimdal included in FreeBSD seems to be incompatible with my school's servers running MIT kerberos when authenticating over gssapi. For example ssh in verbose mode returns: debug2: we sent a gssapi-with-mic packet, wait for reply

Hi! I already asked a similar question before, but it keeps popping up in different contexts and forms, and the more I use samba myself, the more often it comes to me too, especially in context of using various security tokens for auth. And the more I think about all this, the more sane it looks to me. The thing is: mit-krb5 has much better user-level support than heimdal. But samba does not

I've had some trouble compiling GSSAPI on SuSE Enterprise 9 using Heimdal. It turns out that this installation has /usr/include/heimdal/gssapi.h rather than gssapi/gssapi.h. krb5-config correctly sets -I/usr/include/heimdal in the CFLAGS. Looking back, there was a similar issue a few months ago:- http://www.dovecot.org/list/dovecot/2006-July/014945.html I'm a complete newbie to