Tag Info

Hot answers tagged

5

The machine wants files like this. If you open the certificate you will see that the numbers match the hash provided within the certificate. This is so that the canonical hash of the certificate matches the name of the file. Remember: A certificate may contain multiple hostnames and aliaes, but it has only one hash. 50a694ac.0 5170a0d9.0 But me? I'm a ...


3

re: "The commercial solutions like Centrify and Likewise always worked, but seemed unnecessary, since this capability is baked into the OS." Well I think most of us have been hearing for years that XYZ operating system finally cracks the AD integration puzzle. IMHO the problem is that for the OS vendor, AD integration is a checkbox feature, i.e. they need ...


3

First of all, chroot is not a security feature. Arguably, what you need to implement is a reproducible, auditable method of limiting the ability of the user to perform actions other than the strictly allowed. If you register your users in LDAP, surely you have already deployed the mechanisms to perform LDAP authentication on any machine connected to this ...


2

The Server for Network Information Service (NIS) Tools option of Remote Server Administration Tools (RSAT) is deprecated. This comes as no surprise to me -- NIS is evidence that Sun hated us and wanted us to be miserable. Use native LDAP, Samba Client, Kerberos, or non-Microsoft options. This is good advice. Given the choices I would say "Use ...


2

We generally change the full display name, create a new email address for the same account with the old one as an alias, and leave everything else the way it was. This has been standard among places I've worked. Example: "Mary Jones" gets married and wants everything to say "Mary Smith" now. She logs in as "mjones." We leave her username "mjones," ...


1

Your log entries contain the following curious bit: \xe2\x80\x98LDAPUserLoginRequired\xe2\x80\x99 This generally indicates that you edited your configuration file with an editor that replaces plain single quotes ' and double quotes " with "smart quotes". Indeed, in your configuration file the smart quotes are visible and distinct from the other quotes: ...


1

I noticed in 2013 that using autossh for reverse tunnels that the remote side sshd was not being terminated. I worked around this via script to start/stop/restart my tunnel (which i included with @reboot in crontab to start the tunnel), wherein I would kill the remote end using ssh forced command i.e. when stopping (or restarting) the tunnel.



Only top voted, non community-wiki answers of a minimum length are eligible