Tag Info

Hot answers tagged

1

To put it short, you can't use Kerberos for subsites with different delegated pricipals. Kerberos SPN has no provisions beyond [service]/[name]:[port/service] . Your options are: Run subsites at different ports and create SPN with Delegation for each service user with different ports. Use NTLM Use same Application Pool account for all subsites


1

Your /etc/hosts is ok (the fully qualified name is the first one). Check if the hostname in the machine is the short or the fully qualified name. Just execute hostname and check the response. If the name is the short one, try to change the hostname name to the fully qualified name: hostname servername.testdomain.local I think there is a -t option to set ...


1

Avalance, I am the author of the blog entry you are referencing. The problem you comment it is usually because the kerberos implementation uses the first name obtained by the system (usually the first entry in the /etc/hosts file). What it is happening is that you have the keytab with the fully qualified name and the first host entry is the name without ...


1

I had a very similar problem on RHEL 6. I was already connected to the domain, but I kept seeing the error kinit-succeeded-but-ads_sasl_spnego_krb5_bind-failed in my logs. This was the resolution for me, and I thought that it could be beneficial to you as well. When I was looking in /var/log/samba I noticed two log.wb-* files. In my environment we ...


1

I had such an issue, I was trying to connect to a shared SAMBA server in my network and I was able to do it only by \\IP address, not by the \\SERVERNAME. Solved it by removing additional IP addresses that I've added in the advanced section for Properties for Internet Protocol Version 4 (IPV4) Properties (the window with title Advanced TCP/IP Settings). ...


1

The X86 answer is make sure your VM doesn't trap RdRand or RdSeed. You trust your VM for many things, this is one of them. A sufficiently recent RNGd on a post Snady Bridge CPU, will (or can be told to) use RdRand or RdSeed, and an untrapped RdRand or RdSeed gets entropy into the VM. /dev/random then works with a real (not a virtual) source of entropy. ...



Only top voted, non community-wiki answers of a minimum length are eligible