Reputation
6,579
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 19 48
Newest
 Caucus
Impact
~290k people reached

1d
comment Can I create a system wide custom signature in Office 365?
This might be a better fit for webapps.stackexchange.com ?
Jul
16
comment kerberos cross realm authentication
AD Domains by default will have a realm of them same name configured. Making another is unlike to achieve much beyond frustration. Why do you need another AD domain or an MIT realm?
Jul
12
comment Is there a security risk to disclosing your SSH known_hosts file?
@Lekensteyn You're admonishing? me for something that both appears in the accepted answer and also don't work on all of the systems I manage. Additionally, "calculating" may misinterpret the use case. I think "reading" might be a better choice of word. Offending ECDSA key in /home/username/.ssh/known_hosts:63
Jul
11
comment Why is LDAP using servers other than those specified?
How is your linux system configured? nss-pam-ldapd sssd samba?
Jul
10
comment LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )
Let me try this again. ldapi is ldap over inodes i.e. unix sockets. ldapi does not use tcp. Unix sockets are not tcp sockets. TCP sockets have ports e.g. 389. Unix sockets have (path)names e.g. /var/run/ldapi. If you'd rather use ss instead of netstat then the proper command would be ss -lp | grep slapd.
Jul
9
comment OpenLDAP - possible to search without specifying base?
Yes. In some environments setting a default search base is not desirable. If this were the case in yours, you would know.
Jul
6
comment OpenLDAP proxy : caching credentials in case Active Directory master unreachable
@Jérôme Perhaps what you're missing is that AD provides LDAP all by itself?
Jul
6
comment Install windows 2012 R2 over KVM-virtualizaton
The installation media seems okay to me. My equivalent is SW_DVD5_Windows_Svr_Std_and_DataCtr_2012_R2_64Bit_English_Core_MLF_X19-05182.IS‌​O.
Jul
4
comment LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )
Unix sockets don't have portnumbers. netstat -lxp | grep slapd
Jun
29
comment how to create two dits in rts openldap server
@ashok It is definitely that. You should not have two databases trying to store data in the same place. (Your question had two different locations.)
Jun
25
comment Define a group leader in a LDAP posixgroup
What functionally differentiation is this member to have from the other members?
Jun
25
comment Define a group leader in a LDAP posixgroup
The groupOfNames/owner method is the one that I use. However, it requires converting from nis.schema to RFC2307bis.schema.
Jun
24
comment OpenLDAP doesn't return DN
What you seem to be describing is highly unlikely. Please show an example of the output you are receiving.
Jun
17
comment Postfix connection lost after AUTH
The unknown hostname was/is not the issue. lost connection after AUTH was/is.
May
14
comment 0x19 KDC_ERR_PREAUTH_REQUIRED in my event log
This answer, while it will solve the problem, is liable to cause far more harm than good. Preauthentication exists to prevent brute force attacks against ticket granting tickets. Disabling it will open the principal up to exactly this attack.
May
13
comment LDAP authentication fails
@AndrewB You are correct. I missed that.
May
1
comment Insufficient access to edit OpenLDAP cn=config with external SASL authentication
Who is the rootDN on cn=config? grep olcRootDN: /etc/ldap/slapd.d/cn\=config/olcDatabase\=\{0\}config.ldif
Apr
23
comment Correct usage of lftp mirror --older-than
If you question remains closed here, I'd recommend taking it over to linux.stackexchange.com .
Apr
22
comment Scanning Monitor Models in my office
This will depend on your environment. If it's homogeneous enough this might be answerable. However, you haven't provided enough detail for anyone to know if that's actually the case.
Apr
21
comment Should I use link-local addresses where a non-routable, internal IP address is required?
@YLearn You are correct, it is a violation of the specification. However, the other option involving these addresses is a clear violation. I feel it's better to take the murkier wrong choice.