f



samba/kerberos compile question on Mac OS X Server 10.2.6

--===============43516580462007148==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="=-FrTx70PVTOATHQqlQ80Z"


--=-FrTx70PVTOATHQqlQ80Z
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

My apologies if this is the wrong forum for this question, but I have been =
asked to=20
relay this question to the kerberos list, having already contacted both the=
 samba and UM macsig lists.
I'm trying to get samba compiled on mac os x server With active directory s=
upport. =20
Samba 3 with active directory will in theory let somebody authenticate thro=
ugh AD,=20
so users on machines connected to a samba 3 PDC could in theory login with=20
their Kerberos credentials.  I am getting several kerberos related errors i=
n=20
getting samba to compile properly.  One of the problems is that I'm not exa=
ctly sure
what version of kerberos is installed on mac os x server, nor if it is poss=
ible to upgrade
it.  Any information you might have on recognizing and/or fixing this error=
 would be appreciated.

I've managed to get samba 3_0 (still in late beta) to compile cleanly as=20
long as I disable AD, by passing the --disable-ads flag to ./configure.=20
While this has allowed me to get samba to act as a PDC that then=20
authenticates to the OpenLDAP server built-in to Mac OS X Server, it=20
doesn't achieve my goal of kerberized logins from windows with samba, and I=
=20
don't want to have to run my own Win{2k,2k3} server.

If anybody's compiled samba 3 on the mac successfully, would you mind=20
letting me know if you've gotten it to work properly, and how?  Have any of=
=20
you tried Panther Server DP?  Does it connect to AD successfully?

The word on the street is that Mac OS X Server Panther will have samba 3=20
installed (well, at least the samba source released with panther server DP=20
is from samba 3.0 alpha 22, but that's probably too early to have sound AD=20
support).

I'm compiling samba SAMBA_3_0 pulled just now from cvs on Mac OS X Server=20
(10.2.6) and I'm getting this error when compiling with ads:

libsmb/clikrb5.c:137: #error UNKNOWN_GET_ENCTYPES_FUNCTIONS
libsmb/clikrb5.c:121: illegal external declaration, missing `;' after
`__ERROR_XX_UNKNOWN_CREATE_KEY_FUNCTIONS'
libsmb/clikrb5.c:186: undefined type, found `krb5_krbhst_handle'
libsmb/clikrb5.c:187: undefined type, found `krb5_krbhst_info'
cpp-precomp: warning: errors during smart preprocessing, retrying in
basic mode
make: *** [libsmb/clikrb5.o] Error 1


Compiling with --disable-ads works fine.  Is there anything I can do to
enable samba with ads on mac os x server?

Here's what I've done with the compilation:

cvs -d :pserver:cvs@pserver.samba.org:/cvsroot login
cvs -z5 -d :pserver:cvs@pserver.samba.org:/cvsroot co -r SAMBA_3_0 samba
cd samba/source

(I've compiled & installed my own version of autoconf > 2.53)
eniac:source {138} /usr/local/bin/autoconf
eniac:source {146} ./configure --with-privatedir=3D"/var/db/samba"
--libdir=3D"/etc" --with-ldapsam --with-acl-support --disable-cups
--with-tdbsam --with-krb5 --with-spinlocks --with-libiconv
--with-winbind  --with-logfilebase=3D"/var/log/samba"

<snip>
checking for Active Directory and krb5 support... auto
checking for krb5-config... no
checking for working krb5-config... no. Fallback to previous krb5
detection strategy
checking for kerberos 5 install path... /usr
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... no
checking gssapi.h presence... no
checking for gssapi.h... no
checking gssapi/gssapi_generic.h usability... yes
checking gssapi/gssapi_generic.h presence... yes
checking for gssapi/gssapi_generic.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking com_err.h usability... yes
checking com_err.h presence... yes
checking for com_err.h... yes
checking for _et_list in -lcom_err... no
checking for krb5_encrypt_data in -lk5crypto... no
checking for des_set_key in -lcrypto... yes
checking for copy_Authenticator in -lasn1... no
checking for roken_getaddrinfo_hostspec in -lroken... no
checking for gss_display_status in -lgssapi... no
checking for krb5_mk_req_extended in -lkrb5... yes
checking for gss_display_status in -lgssapi_krb5... yes
checking for krb5_set_real_time... no
checking for krb5_set_default_in_tkt_etypes... no
checking for krb5_set_default_tgs_ktypes... no
checking for krb5_principal2salt... no
checking for krb5_use_enctype... yes
checking for krb5_string_to_key... yes
checking for krb5_get_pw_salt... no
checking for krb5_string_to_key_salt... no
checking for krb5_auth_con_setkey... no
checking for krb5_auth_con_setuseruserkey... yes
checking for krb5_locate_kdc... no
checking for krb5_get_permitted_enctypes... no
checking for krb5_get_default_in_tkt_etypes... no
checking for krb5_free_ktypes... no
checking for krb5_principal_get_comp_string... no
checking for addrtype in krb5_address... yes
checking for addr_type in krb5_address... no
checking for enc_part2 in krb5_ticket... yes
checking for keyvalue in krb5_keyblock... no
checking for ENCTYPE_ARCFOUR_HMAC_MD5... no
checking for the krb5_princ_component macro... yes
checking whether Active Directory and krb5 support is used... yes

<snip>
Using libraries:
    LIBS =3D   -liconv
    KRB5_LIBS =3D   -lcrypto -lkrb5 -lgssapi_krb5
    LDAP_LIBS =3D  -llber -lldap

eniac:source {147} make

<snip>

Compiling libsmb/clifile.c
Compiling libsmb/clikrb5.c
libsmb/clikrb5.c:137: #error UNKNOWN_GET_ENCTYPES_FUNCTIONS
libsmb/clikrb5.c:121: illegal external declaration, missing `;' after
`__ERROR_XX_UNKNOWN_CREATE_KEY_FUNCTIONS'
libsmb/clikrb5.c:186: undefined type, found `krb5_krbhst_handle'
libsmb/clikrb5.c:187: undefined type, found `krb5_krbhst_info'
cpp-precomp: warning: errors during smart preprocessing, retrying in
basic mode
make: *** [libsmb/clikrb5.o] Error 1
----

--=-FrTx70PVTOATHQqlQ80Z
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/NVCGmaetye9fVe4RAm03AJ9poK4n552tE8BuxyZltg3m59IZCACgzg5J
XVh7aq8dfYslDSmV598uQGA=
=QkzK
-----END PGP SIGNATURE-----

--=-FrTx70PVTOATHQqlQ80Z--

--===============43516580462007148==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============43516580462007148==--

0
satadru (1)
8/9/2003 8:55:43 PM
comp.protocols.kerberos 5541 articles. 1 followers. jwinius (31) is leader. Post Follow

1 Replies
1686 Views

Similar Articles

[PageSpeed] 45

>Content-Type: multipart/signed; micalg=pgp-sha1;
>	protocol="application/pgp-signature"; boundary="=-XpZY/wF3MBSAA38UaRRv"
>
>I'm attempting to compile kerberos 1.3.1 on a Mac OS X Server system.
>
>I did a clean configure with no special flags, and then did a make.
>
>The compile fails with the following error.  What am I doing wrong?
>
>
>making all in lib/rpc/unit-test...
>gcc -L../../../lib -g -O2 -Wall -Wmissing-prototypes -Wcast-qual
>-Wcast-align -Wconversion -Wshadow -Wno-comment -pedantic  -o client
>client.o rpc_test_clnt.o \
>         -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err
>ld: Undefined symbols:
>_krb5_gss_dbg_client_expcreds
>_gss_mech_krb5
>_gss_mech_krb5_old
>make[3]: *** [client] Error 1
>make[2]: *** [all-recurse] Error 1
>make[1]: *** [all-recurse] Error 1
>make: *** [all-recurse] Error 1

This is not really a problem with the MIT Kerberos build system.  The 
problem is that Apple's ld behaves differently than ld on most other 
Unix platforms.  On Mac OS X, shared libraries are always chosen over 
static libraries even if there is a static library in an earlier 
search path than the shared library.  This causes the Kerberos which 
ships with Mac OS X to interfere with the MIT krb5 build system's use 
of the -l option.

There are two workarounds:

1) When running configure, pass the option: 
"LDFLAGS=-Wl,-search_paths_first"  This option turns on the more 
common library search order for Mac OS X's ld and is only supported 
in Panther.

2) Move the following symlinks out of the way (to another directory), 
build, and then move them back.  This works on both Jaguar and 
Panther.

/usr/lib/libcom_err.dylib
/usr/lib/libdes425.dylib
/usr/lib/libgssapi_krb5.dylib
/usr/lib/libk5crypto.dylib
/usr/lib/libkrb4.dylib
/usr/lib/libkrb5.dylib
/usr/lib/libkrb524.dylib

Note that a stock krb5-1.3 build will not be able to share 
credentials with the Kerberos that ships with Mac OS X (KfM) because 
it does not support the in-memory credentials cache used by the Mac 
and Windows MIT Kerberos releases.


Hope this helps,

--lxs
-- 
-----------------------------------------------------------------------------
Alexandra Ellwood                                               <lxs@mit.edu>
MIT Information Systems                               http://mit.edu/lxs/www/
-----------------------------------------------------------------------------
--
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

0
lxs (19)
8/11/2003 9:01:30 PM
Reply:

Similar Artilces:

Mac OS X Kerberos Extras updated for Mac OS X 10.3
-----BEGIN PGP SIGNED MESSAGE----- Just a reminder to coincide with today's release of Mac OS X 10.3 ("Panther"), the MIT Kerberos team has released an updated version of the Mac OS X Kerberos Extras that work with both Mac OS X 10.2 (Jaguar) and Mac OS X 10.3 (Panther). The Mac OS X Kerberos Extras allow CFM-based applications, such as Eudora and Fetch, to work with OS X's built-in Kerberos. Older releases of the OS X Kerberos Extras will not work with Mac OS X 10.3. You must have the latest release (which was released back in June) for it to work with Panther. However, this new release is backwards compatible with Mac OS X 10.2 as well as supporting 10.3. For further information and to download the updated Mac OS X Kerberos Extras, go to: <http://web.mit.edu/macdev/www/osx-kerberos-extras.html> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (SunOS) Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard <http://www.gnupg.org/> iQCVAwUBP5l9LabDgE/zdoE9AQFqVAP/cQQ/zxvdAG3zxk5MpGCPgRlWbkWfD2Gl KrDXE96oLW8BrCE/aWiFPPoYoaGM5j8Eu3YcDf4TKiTQcXOCTh6+MCE6dsigzLcb GoA3iqq18yufxD8ohA0vlghN/tChFWWLA1+rqbvs6D2mCHoZKjEMznHkL5lWszbK XVEfL/szqa8= =rAbI -----END PGP SIGNATURE----- _______________________________________________ kerberos-announce mailing list kerberos-announce@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos-announce ________________________________________________ Kerberos mailing list Kerberos@mit.edu http...

OS X 10.6.2 / Eudora 6.2.4
Hi, I have never done this before and I am just about desperate to get eudora functioning again. I have used eudora for @15 years and it suits my needs perfectly. Although I have had issues in the past something occurred in mid-November which I have not been able to resolve and, in the process, messed up some settings. No one that I know knows how to correct this so I am hoping one of you might. So, around mid-November I suddenly was not able to send an e-mail using eudora. One of the error messages I keep getting is "Server not responding. 706". Another is "...

Mex yprime.c compile failed matlab r2010a mac os x 10.6.6 xcode 4 gcc v4.2.1
Dear all, I am new to this topic. I just wanted to follow the steps to build a mex file from my mac. I am using a matlab r2010a on a mac with os x 10.6.6. I have the xcode4 installed. After typed in mex -setup in the matlab prompt, the output are as follows, Options files control which compiler to use, the compiler and link command options, and the runtime libraries to link against. Using the 'mex -setup' command selects an options file that is placed in ~/.matlab/R2010a and used by default for 'mex'. An options file in the current working directory or spe...

Cannot compile CVS current on Mac OS X 10.2.6
Attached is compilation error messages of current CVS: gcc -traditional-cpp -O2 -Wall -Wmissing-prototypes -Wmissing-declarations -I../../../src/include -c -o pqcomm.o pqcomm.c pqcomm.c: In function `StreamServerPort': pqcomm.c:280: parse error before '<<' token pqcomm.c:291: case label not within a switch statement pqcomm.c:296: case label not within a switch statement pqcomm.c:300: `default' label not within a switch statement pqcomm.c:309: parse error before '>>' token pqcomm.c:208: warning: unused variable `err' pqcomm.c:209: warning: un...

Cursor in Mac OS X 10.5.6 w/X11 2.2.3 and 2.3.2
Hi, I know this problem has come up before, but I was unable to find a solution that worked in the group. The problem: cursor,x,y,/down or any variation results in a dead terminal and X-window. Using ctrl- c at the terminal and then clicking on the terminal works: IDL> cursor,x,y,/down,/device % Interrupted at: $MAIN$ IDL> print,x,y 522 105 Using "defaults write com.apple.x11 wm_click_through -bool true" has no effect. Installing the latest version of IDL (7.0.6) also had no effect. The error occurs both with IDL run remotely and locally. I've tried bo...

Are Mac OS X 10.5.8's iLife programs safe to use in Mac OS X 10.7.x and 10.8.x?
Hi. Someone told me that Mac OS X 10.7.x and 10.8.x do not come with iLife like the older Mac OS X versions (e.g., 10.5.x). I did not know this! Since my client uses iPhoto that came preinstalled on his old 2008 MacBook Pro's Mac OS X 10.5.x (10.5.8 right now), can he use the old one from 10.5.8? Or will he need a third party replacement (needs to import/copy the old image files) or buy a new iPhoto version for his photo(graph)s? I recalled he did not like iPhoto and wonder if the new one is any better. Thank you in advance. :) -- Quote of the Week: "Every ruler...

Kerberos failing pthreads assert when running in php+Apache2? (Mac OS X 10.4.5) #2
Hello, I've been using a port of phpkrb5 (PHP3/4) to PHP5 (http:// homepages.nyu.edu/~jcw9/phpkrb5php5.tar.gz ~12 K, run `phpize` to make all the Makefiles, etc.). This is *REALLY SIMPLE* code. One of Apple's most recent updates to Tiger seems to have caused Kerberos within the Apache2 context to fail a pthreads assertation. (However, applications using mod_auth_kerberos for HTTP Authentication are working fine still.) error.log: [Tue Mar 14 17:49:06 2006] [notice] child pid 24389 exit signal Abort trap (6) .../../../include/fake-addrinfo.h:687: failed assertion `pthread_equal((&(&krb5int_fac.lock)->os)->owner, pthread_self())' Apache is and has been using the prefork mpm, not the pthreads one. Disabling threads support in kerberos5 yields a different error message: ../../include/k5-thread.h:667: failed assertion `(&m->os)->initialized == K5_MUTEX_DEBUG_PARTLY_INITIALIZED' [Tue Mar 14 18:54:24 2006] [notice] child pid 8617 exit signal Abort trap (6) However, the same code executed within the standalone CLI PHP binary works fine. Perhaps the update broke pthreads? It worked before(tm). Is there someway I can change the source of phpkrb5 to work better within Apache2? -- Jonathan C. Williams Web Programmer Steinhardt School of Education jonathan.williams@nyu.edu :: 212-998-5308 ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/list...

Mac OS X 10.6.6 and MacPyhton 2.6 idle doesn't work
I've installed MacPython 2.6 under mac os x 2.6 and the IDLE doesn't work. I post error log. Suggestions? Thanks a lot. Luca 23/06/11 19.18.01 Apple80211 framework[211] ACInterfaceGetPower called with NULL interface 23/06/11 19.18.01 [0x0-0x1f61f6].org.python.IDLE[2470] Traceback (most recent call last): 23/06/11 19.18.01 [0x0-0x1f61f6].org.python.IDLE[2470] File "/ Applications/Python 2.6/IDLE.app/Contents/Resources/idlemain.py", line 30, in <module> 23/06/11 19.18.01 [0x0-0x1f61f6].org.python.IDLE[2470] main() 23/06/11 19.18.01 [...

Ann: ActiveDeveloper 2.16 released for Mac OS X 10.3 10.2 #2
ActiveDeveloper 2.16 released for MacOS X 10.3 and 10.2 Our "Develop & Continue" Objective-C & C IDE and Debugger Your companion for Cocoa, WebKit, and QuickTime. With its "Develop & Continue" ActiveDeveloper takes an Object and Development oriented approach to merging Objective-C Development and Debugging into ONE single combined activity - as opposed to the more Debugging and C stack level oriented approach taken in Xcode. ActiveDeveloper version 2.16 is integrated with the new Xcode IDE similar to how it has worked in concert with Projec...

Kerberos in Mac OS X 10.4?
I just upgraded to Mac OS X 10.4, and have been having problems with its implementation of Kerberos. In OS 10.3, I could access my mail on MIT's POP server using Kerberized POP. Now, in 10.4, whenever I try to access it, I get an error in the Console: "krb_sendauth() failed: error code 255". When I run the Kerberos app hidden in the System directory, I see that while on 10.3 my tickets were listed as "v4/v5", in 10.4 I only see "v5". Could this be why my email isn't working? If so, how do I convince 10.4's Kerberos to get v4 tickets? If not, any idea what the problem actually is? I have a support request in with Apple about this, but I doubt they'll get to it for a while. Also, I'm not on this list, so if you could include me in your replies, I'd appreciate it. Thanks, Alex Valys ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

can't compile bdb 0.6.5 on Mac OS X Snow Leopard (10.6.1)
I'm trying to use Ruby-WordNet on my recently-Snow-Leopard-upgraded Mac, and I'm getting an error saying that it can't find the bdb library: /Library/Ruby/Site/1.8/rubygems/custom_require.rb:31:in `gem_original_require': no such file to load -- bdb (LoadError) from /Library/Ruby/Site/1.8/rubygems/custom_require.rb:31:in `require' /Library/Ruby/Gems/1.8/gems/wordnet-0.0.5/lib/wordnet/lexicon.rb:34 [snip] Predictably, line 34 of lexicon.rb says: 34 require 'bdb' I used porticus to install the macports package for rb-bdb, and it says I have 0.6.5_0 installed: ...

2.10 compile error on OS X 10.8.2
(Sort of) first-time (Al)pine user here. (I tried to use Alpine when I was younger but never used it after.) I seem to be having some trouble with compiling 2.10 under OS X 10.8.2: Undefined symbols for architecture x86_64: "_sk_OPENSSL_STRING_num", referenced from: _get_x509_subject_email in libpith.a(smkeys.o) "_sk_OPENSSL_STRING_value", referenced from: _get_x509_subject_email in libpith.a(smkeys.o) ld: symbol(s) not found for architecture x86_64 collect2: ld returned 1 exit status make[4]: *** [alpine] Error 1 make[3]: *** [all-recursive] Error 1 make[2]: *** [all] Error 2 make[1]: *** [all-recursive] Error 1 make: *** [all] Error 2 From what I gather, it's a problem that is related with openSSL. When I use the `file` command on the openssl binary, it says that it has both i386 (x86) and x86_64 architectures. Do I need to install a newer version of openSSL? I use Homebrew. Thanks. -- Mark Seymour Le 26 f�vrier 2013, mark.seymour.ns@gmail.com a �crit : > Undefined symbols for architecture x86_64: > "_sk_OPENSSL_STRING_num", referenced from: > _get_x509_subject_email in libpith.a(smkeys.o) > "_sk_OPENSSL_STRING_value", referenced from: > _get_x509_subject_email in libpith.a(smkeys.o) > ld: symbol(s) not found for architecture x86_64 > collect2: ld returned 1 exit status > make[4]: *** [alpine] Error 1 > make[3]: *** [all-recursive] Error 1...

RE: Subject: Building ACE 5.3.1 on Mac OS X (Tiger) 10.4.2 was [ace-users] Building ACE on Mac OSX 10.4 #2
Hi Jason, > > >> ACE VERSION: 5.3.1 > > > > This version of ACE is ANCIENT. The forthcoming ACE 5.4.8 > beta should > > work "out of the box" for Mac OS X Tiger. If you want a preview, > > please download the version in our CVS repo at > > I know it isn't the most recent version available, but this > version is used > extensively across the corporation. Changing the version of > ACE all these > products used will cause the architect's heads to explode ;) ;-) Right - this is where the value of commercial support providers comes into play. DOC's research efforts continue to march on as they should, while commercial product efforts are best served by sticking with a version of ACE over time. Companies such as Riverace can make a 5.3-base version work on Mac OS X Tiger, for instance, as well as make sure that when your product is ready for an upgrade, the new version of ACE won't surprise you. I'd be happy to discuss further how we can help you and your architects - we don't want any heads to explode :-) -Steve -- Steve Huston, Riverace Corporation Helping you succeed with ACE See http://www.riverace.com/support.htm ...

Re: Subject: Building ACE 5.3.1 on Mac OS X (Tiger) 10.4.2 was [ace-users] Building ACE on Mac OSX 10.4 #2
Hi Jason, >> I know it isn't the most recent version available, but this version >> is used extensively across the corporation. Changing the version of >> ACE all these products used will cause the architect's heads to >> explode ;) >> >> Is it your opinion that 5.3.1 is hopeless cause on Tiger? It'll take some work, but companies like Riverace, Remedy, and OCI can help out with this stuff if staying with 5.3.1 is essential. Please see http://www.cs.wustl.edu/~schmidt/commercial-support.html for help with this stuff. >> > http://cvs.doc.wustl.edu/ >> I will try it out, and let you know how it works. Great - if there are any problems please let us know quickly so that we can get the fixes into the x.4.8 beta. Thanks, Doug -- Dr. Douglas C. Schmidt Professor and Associate Chair Electrical Engineering and Computer Science TEL: (615) 343-8197 Institute for Software Integrated Systems WEB: www.dre.vanderbilt.edu/~schmidt Vanderbilt University, Nashville TN, 37203 NET: d.schmidt@vanderbilt.edu ...

Compiling plan9port under Mac OS X 10.6
Has anyone had success with compiling plan9port under Mac OS X 10.6 (Snow Leopard)? I've submitted an issue report at http://code.swtch.com/plan9port/issue/27/compiling-under-snow-leopard that provides the error messages I received. I then tried adding CC9=gcc -m32 to a $PLAN9/LOCAL.config file, but when running ./install I ended up with a variety of the following errors: >>> /Users/--/plan9/config: line 1: -m32: command not found Does anyone have any suggestions? Thanks. On Thu, Sep 3, 2009 at 2:53 AM, plus 852<plus852@gmail.com> wrote: > Has anyone had success with ...

OS X 10.3.3 SERVER AND KERBEROS
Is anyone having problems making AFP work with Open Directory and Kerberos? ...

RE: MIT Kerberos and Solaris 10 Kerberos
> possibly 'su' with pam_krb5 for the authentication. Its not quite > the same as 'ksu', though. Douglas says the same. The su man page indicates something about this, but not a lot of details there. I'll look into this further. As far as a co-worker is concerned (and in our environment, I can see his point), this would be a show stopper. We use ksu for all sorts of things, including giving DBA's access to Oracle ID's. Thanks again for all of the help. I'll go through the su and pam.conf man pages, and see if I can figure it out. Rainer ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos Heilke, Rainer wrote: >>possibly 'su' with pam_krb5 for the authentication. Its not quite >>the same as 'ksu', though. > > > Douglas says the same. The su man page indicates something about this, > but not a lot of details there. I'll look into this further. As far as a > co-worker is concerned (and in our environment, I can see his point), > this would be a show stopper. We use ksu for all sorts of things, > including giving DBA's access to Oracle ID's. > > Thanks again for all of the help. I'll go through the su and pam.conf > man pages, and see if I can figure it out. Make sure you have a root window open before testing PAM. I stumbled on this when I tried to su and my t...

Mac OS X & Mac OS X Server
Hi, I'm currently using a 9i developer release on Mac OS X (10.3) which has proved very stable so far. My understanding of the various Oracle press releases is that 10G will be released for Mac OS X, are there any beta testers out there wiling to comment on availabilitu/quality/performance issues for 10G on Mac OS X? Another question is whether tools such as the OEM will be available in 10G for Mac OS X, does anybody know? Yours in anticipation! Steve Steve <steve@nospam.com> wrote in message news:<2004013008345616807%steve@nospamcom>... > releases is that 10G wil...

Ann: ActiveDeveloper 2.16 released for Mac OS X 10.3 10.2
ActiveDeveloper 2.16 released for MacOS X 10.3 and 10.2 Our "Develop & Continue" Objective-C & C IDE and Debugger Your companion for Cocoa, WebKit, and QuickTime. With its "Develop & Continue" ActiveDeveloper takes an Object and Development oriented approach to merging Objective-C Development and Debugging into ONE single combined activity - as opposed to the more Debugging and C stack level oriented approach taken in Xcode. ActiveDeveloper version 2.16 is integrated with the new Xcode IDE similar to how it has worked in concert with Projec...

Mac OS X Server 10.6.8 and SMB
I am trying to get SMB server to work in Server Admin on Snow Leopard Server. The AFP server works. No problem. However, I have SMB turned on and yet, every time I try to connect from another Mac, I get: There was a problem connecting to the server "myserver.domain" You do not have permission to access this server. If I then change the URL in "Connect to Server ..." from smb:// to afp:// I have no problem mounting the specific volume. In Server Admin, I have the Role defined as "Standalone Server" because I don't need it for anything such as being a Primary Domain Controller. I can use the same share point as I have defined for AFP, right? I clicked on "Share Points" in the tool bar, clicked the share point desired to share and then dragged the users desired for this to the window under the Permissions tab. Is there anywhere on the web that explains this setup simply and clearly? Thanks. In article <6e725f78-ec34-4944-b37f-93d5e9860561@googlegroups.com>, Jack Shown <jackshown@gmail.com> wrote: > I am trying to get SMB server to work in Server Admin on Snow Leopard Server. > The AFP server works. No problem. However, I have SMB turned on and yet, > every time I try to connect from another Mac, I get: > > There was a problem connecting to the server "myserver.domain" > You do not have permission to access this server. > > If I then cha...

SLIME question for Mac OS X 10.6.4
I've run slime successfully with sbcl on OS X for several years now, but since I upgraded to an Intel Core 2 Duo, I had to recompile sbcl and slime and re-install both. As of last friday, sbcl no longer plays well with slime. I compiled sbcl 1.0.43 from source and installed it in /usr/local/bin. It works fine from the command line. But when invoking sbcl from within slime in emacs, I get the following compilation error: BEGIN ERROR ; file: /opt/local/share/emacs/site-lisp/slime/swank-sbcl.lisp ; in: EVAL-WHEN (:COMPILE-TOPLEVEL :LOAD-TOPLEVEL :EXECUTE) ; (REQUIRE...

Ann: ActiveDeveloper 2.14 released on Mac OS X 10.2/10.1
ActiveDeveloper 2.14 released for MacOS X 10.2 and 10.1 Our Incremental Objective-C & C IDE, JIT compiler and Debugger Your companion for Cocoa and now also QuickTime Along with Cocoa, ActiveDeveloper v2.14 now also work with QuickTime applications in Objective-C. There is a new QTMovie example implementing a simple QuickTime Movie Player - to show you how it works. ActiveDeveloper v2.14 also has the 3. release of the "ActiveDeveloper User Guide" incorporating most of the user feedback we have had so far and giving a new Sample 3 of Activating the QTMovie player...

Ann: ActiveDeveloper 2.17 released for Mac OS X 10.3 and 10.2
ActiveDeveloper 2.17 released for MacOS X 10.3 and 10.2 Our "Develop & Continue" Objective-C & C IDE and Debugger Your companion for Cocoa, WebKit, and QuickTime. With its "Develop & Continue" ActiveDeveloper takes an Object and Development oriented approach to merging Objective-C Development and Debugging into ONE single combined activity - as opposed to the more Debugging and C stack level oriented approach taken in Xcode. ActiveDeveloper version 2.17 improves integration into the Xcode build system, and allows you to work in concert with...

Problem with Installation on Mac OS X 10.6.2
Hi! Lately I tried to install Matlab from my dowloaded ISO (net-install or the like didn't work) and everytime the installation program starts to unpack the archives (after entering where the license.dat ist) I get following error message: "There was an error extracting the archives for MATLAB. This is usually caused by a lack of disk space, or a permissions error (there may be a pre-existing installation of MATLAB for a different user). Check that you have enough disk space and fix any permissions problems, then re-run the installer." Well, there is enough disk space, ...

Web resources about - samba/kerberos compile question on Mac OS X Server 10.2.6 - comp.protocols.kerberos

Kerberos (protocol) - Wikipedia, the free encyclopedia
MIT developed Kerberos to protect network services provided by Project Athena . The protocol is based on the earlier Needham-Schroeder Symmetric ...

Trekkies miss out after push to name Pluto moon 'Vulcan' fails; Kerberos and Styx chosen instead
BAD news, 'Star Trek' fans: Pluto's fourth and fifth moons have been named Kerberos and Styx, despite 'Vulcan' being the top suggestion.

Meet Pluto's smallest moons: Kerberos and Styx
Pluto's two smallest known moons have been officially named after characters associated with the underworld of Greek and Roman mythology.

Pluto's moons named Styx and Kerberos, despite vote for Vulcan
... Astronomical Union vetoed a public vote to name one of Pluto's two most recently discovered moons Vulcan and named the moons Styx and Kerberos. ...

Meet Styx and Kerberos, Pluto's newly named moons
... of new moons orbiting Pluto (at SETI's behest), it decided to do some planetoid naming, too. Today, SETI announced those names: Styx and Kerberos. ...

Microsoft Issues Emergency Patch for Kerberos Bug
The vulnerability could enable an attacker to elevate privileges. Microsoft recommends that organizations consider rebuilding their Windows domains. ...

Kerberos Productions Offers Expertise to President on the Weaponization of Outer Space
... game violence to the President and Vice-President of the United States, Sword of the Stars 1 & 2, Fort Zombie, and NorthStar developer Kerberos ...

The fourth and fifth moons of Pluto have officially been named Kerberos and Styx, respectively.
The fourth and fifth moons of Pluto have officially been named Kerberos and Styx , respectively. The Earth's moon is still named fucking "Aiden." ...

Poll For Pluto's Moons Closes, Vulcan and Kerberos Win - Geekosystem
First the SETI Institute put it up for vote, then the geeks and nerds swarmed the Internet, and now it's as certain as it can be before the International ...

Kerberos unleashed at last: Pluto’s dog-bone moon poses another mystery
NASA’s New Horizons probe has finally filled out its family portrait of Pluto and its moons – and Kerberos, the last moon to get its closeup, ...

Resources last updated: 3/10/2016 11:21:29 PM