5,306 reputation
11130
bio website
location PST8PDT
age
visits member for 3 years, 5 months
seen yesterday

Sep
4
comment Can nginx be an mail proxy for a backend server that does not accept cleartext logins?
This will work. However, it does require setting up an entry for each different backend server. It also requires minor additions to the auth script so as to return the local port, rather than the remote one.
Aug
29
comment How does quota usage for ZFS on Linux work?
There are no mounts on top of any part of the filesystem, but the -o is handy.
Aug
14
comment Kerberos & signle-sign-on for website
[domain_realm] mapping can/should also be done via dns e.g. _kerberos.example.com IN TXT "EXAMPLE.COM".
Jun
25
comment restrict ssh access to host using sssd and LDAP
@mr.zog Then update your question accordingly. The config you provided had it commented out.
Jun
23
comment ldapsearch and SRV RRs
@MathiasR.Jessen It does. Write that as an answer and I'll accept it.
Jun
20
comment Ubuntu File Server - Multiple Users
Do you currently have any form of central user or computer management?
Jun
20
comment Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox
@SoukaProgrammer I think you've misunderstood. I've edited in an attempt to clarify.
Jun
17
comment Issues setting up a backup OpenLDAP server
How did you "transfer" the database?
May
15
comment Postfix and OpenSSL: “Unable to get local issuer certificate”
@schaiba 465 (smtps) is a depreciated SSL/TLS wrapped port for MUA->MSA communication, as such it won't help for general MTA->MTA communication. However, postfix doesn't treat the certificates any differently. 995 (pop3s) is not something postfix handles.
Dec
4
comment starting Standalone LDAP Daemon, slapd
What's wrong with the openldap-servers package?
Nov
20
comment Display a TLS icon for messages that are TLS secured (Outlook)
Unless you're talking about S/MIME "TLS Secured" messages aren't really a thing.
Nov
11
comment Is there a way to have tortisesvn use Windows 7 kerberos tickets to auth against an apache svn server?
@jmp242 There are two parts to this, the client and the server. The client seems alright, but you haven't provided any details about the server.
Nov
1
comment Configure postfix to temporary reject all incoming email with a 451
I'm not sure that's an optimal solution to any problem. Why are you trying to do this? meta.stackexchange.com/a/66378
Nov
1
comment How does one remove an encryption type from a kerberos principal?
It's actually slightly more complicated than that. The krbPrincipalKey attribute contains all the keys for a principal and their associated meta-data encrypted by the MKey, not as one might hope one key per attribute entry.
Nov
1
comment Domain clients can't reach website with same name as domain
@Moses It mostly has to due with running two different master name servers. The least ugly kludge is to import the zone information from your public NS's SOA, into AD, which is still quite an ugly kludge esp. as there's no standard mechanism for it.
Nov
1
comment Domain clients can't reach website with same name as domain
@Moses Yes. You have to apply the appropriate mapping via group policy. (If you've got an existing Kerberos REALM, you'll also need to setup a trust.)
Oct
31
comment OpenLDAP recover data without config file
Restore the configuration from your configuration control or a backup.
Oct
31
comment email server redelivers emails on NFS remount
It sounds like they are using POP3. IMAP doesn't have this problem.
Oct
23
comment How can I make ls and xargs combined omit path
@DennisWilliamson Fair point about the lack of space, fixed. Not sure that the newline matters, but it's easy enough to && echo.
Oct
22
comment How can I make ls and xargs combined omit path
I like your answer more than mine.