New answers tagged

0

Including more log details here: Pubkey Authentication into Mac - UsePAM = no: OpenSSH_7.1p1, OpenSSL 1.0.2e 3 Dec 2015 debug2: ssh_connect: needpriv 0 debug1: Connecting to 192.168.1.113 [192.168.1.113] port 22. debug1: Connection established. debug1: identity file /home/user/.ssh/id_rsa type 1 debug1: key_load_public: No such file or directory debug1: ...


5

No, this is not possible. WPA2 Enterprise requires successful authentication before any data can be transmitted to/from the client. This obviously precludes serving a web form to the user before they're authenticated to the network.


0

You should be able to authenticate using a second dovecot running as a director. This is the service you created the listener for. Is the Exim second server a new MX? I would consider making this the primary MX server and offload most of the incoming email traffic to it. This should reduce the traffic the current server which can remain your submission ...


0

Instructions below are for how to authenticate to a Samba server using Kerberos from a Windows 7 client. I have not tested for other version of client and server: On the Windows 7 client, "Run As Administrator" cmd.exe. Then enter this command to supply Windows with knowledge of the Kerberos domain controller (KDC) for the kerberos REALM.COM: ksetup ...


0

<Directory "/var/www/html/docroot"> AuthName "Restricted Access" AuthType Basic AuthUserFile /usr/local/.htpasswd Order allow,deny Allow from x.x.x.x Require valid-user Options Indexes FollowSymLinks satisfy any </Directory> This works like a charm for me though I'm on 2.4.10 and don't have an older one ...


0

You can also try the following. Right click on the site and 'Basic Settings...' Click on 'Connect As...' Click on Specific User and give the new credentials. Now it should work.


0

Actually, the package you need is login_krb5. The other package you need is the heimdal package. You will also need to upgrade to 5.7 as heimdal isn't available as a package in 5.6. Once you've done that, copy /usr/local/libexec/auth/login_krb5* to /usr/libexec/auth. You'll need to do this or the login process won't be able to find them. Finally, an ...


0

Do not force Auth-Type for all cases - only for when you want to use Kerberos. Often this could be by configuring "Auth-Type = Kerberos" rather than "Auth-Type := Kerberos" - the former will not force the attribute to be updated if it has already been set by EAP. Alternatively, don't set Auth-Type with the files module, but do it in unlang, e.g. with ...


0

An update to the instructions above as a few things have changed since then. In OpenBSD 5.6, a decision was made to remove Heimdal from the base distribution due to concerns about code quality and nobody being willing to spend the time to audit it. In 5.7 it was made available as a package (For 5.6 you'll need to build from source or figure out how to ...


0

You might be able use ProFTPD's mod_sftp module for this. It allows SFTP but not SSH2 access, and uses ProFTPD's multiple authentication backends (which means your user data can be stored in alternate password files, SQL databases, LDAP directories, etc), and does not necessarily need to use PAM.


0

I think the culprit here is that your ldap.conf file has both LDAPGenerateHomedir and CreateHome: LDAPGenerateHomedir on 0700 CreateHome on 0700 Only one of these directives is needed to actually create home directory. The CreateHome directive is the newer, more recommended path; the howto to which I linked has more examples/descriptions of what you can ...


0

You can configure SSSD using following command: authconfig --enablesssd \ --enablesssdauth \ --enablelocauthorize \ --enableldap \ --enableldapauth \ --ldapserver=ldap://ipaserver.example.com:389 \ --disableldaptls \ --ldapbasedn=dc=example,dc=com \ --enablerfc2307bis \ --enablemkhomedir \ --enablecachecreds \ --update Replace name of ldapserver with you ...


1

This is possible (perhaps in more recent versions of samba): If you are using security = ads in your smb.conf file, to be part of a domain, you can still add users locally (using useradd) and then use smbpasswd -a username to add a password for them (to the default tdb backend, as I hadn't configured this explicitly). You'll need to use SERVERNAME\username ...


0

From man 5 nslcd.conf validnames REGEX This option can be used to specify how user and group names are verified within the system. This pattern is used to check all user and group names that are requested and returned from LDAP. The regular expression should be specified as a POSIX extended regular expression. The expression itself needs to ...



Top 50 recent answers are included