On Sat, 30 Jul 2022, Michael Dinon wrote:
> Is it normal to have a Local Kerberos Realm configured on a brand new
> MacBook?
Wrong mailing list! You must have meant to send the question to
freebsd-questi...@freebsd.org. That is where OS X users congregate.
Cheers,
Predrag
The __automatic table is created by pfctl's ruleset optimiser, probably
from $broken.
I suspect this ilauncher program is tripping either sshguard or your
max-src-conn-rate or max-src-conn rules.
--
Sent from a phone, apologies for poor formatting.
On 6 September 2019 03:57:04 Predrag Punos
On 2019-08-02, Stuart Henderson wrote:
> On 2019-07-29, Predrag Punosevac wrote:
> > Hi Misc,
> >
> > I am using Edgerouter lite as a firewall/DNS cashing resolver for one of
> > our remote location
> >
> > ubnt1# uname -mrsv
> > OpenBSD 6.5 GENERIC.MP#0 octeon
> >
> > The desktops behind the fir
On 2019-07-29, Predrag Punosevac wrote:
> Hi Misc,
>
> I am using Edgerouter lite as a firewall/DNS cashing resolver for one of
> our remote location
>
> ubnt1# uname -mrsv
> OpenBSD 6.5 GENERIC.MP#0 octeon
>
> The desktops behind the firewall have to use Kerberised SSH to perform
> some work on o
Ran into a similar issue on my ERL when I used egress in my pf rules.
Ended up trunking the ethernet ports using aggr(4) and switched to using
that interface in my rules, got failover as a bonus. Still not sure why
egress behaves this way and if its a bug or my own misunderstanding.
Running OpenBS
On 12/09/15 17:45, Friedrich Locke wrote:
> I am a little outdated, but was heimdal removed from the bsd world or it
> was just moved from the base system to the ports collection ?
>
> Thanks.
>
>
Ports
/usr/ports/security/heimdal
On Wed, Dec 09, 2015 at 11:13:40AM -0200, Friedrich Locke wrote:
> What is/are the alternative(ies) for kerberos on openbsd ? (Since is was
> removed from the distribution).
I use kerberos from ports every day with FF. Unfortunatelly
other apps from ports don't have krb flavor so you either
have t
On 09/12/15 15:13, Friedrich Locke wrote:
What is/are the alternative(ies) for kerberos on openbsd ? (Since is was
removed from the distribution).
Thanks.
Don't know if you can compile it, but the commit-remove msg is all time
classic :)
http://marc.info/?l=openbsd-cvs&m=139816103911227&w=2
On Wed, Dec 09, 2015 at 11:13:40AM -0200, Friedrich Locke wrote:
> What is/are the alternative(ies) for kerberos on openbsd ? (Since is was
> removed from the distribution).
It depends on your exact needs, but there's:
ports/security/heimdal
ports/sysutils/login_krb5
--
Antoine
> Kerberos is disabled per default in SSH now?
>
> Any plans to enable it again?
I would also like to know about this (was a nasty surprise when I couldn't log
into work after a snapshot upgrade!).
Are there also plans to remove this from openssh-portable, or is this just
limited to OpenBSD's s
On 2011-05-08, Jason McIntyre wrote:
> On Sat, May 07, 2011 at 09:28:48PM -0500, Markus Peloquin wrote:
>> On Fri, 2011-05-06 at 16:20 +0100, Jason McIntyre wrote:
>> > On Fri, May 06, 2011 at 09:39:48AM -0500, Vijay Sankar wrote:
>> > > man 8 kerberos has the following URL
>> > >
>> > > http://w
On Sun, May 08, 2011 at 08:26:04AM +0100, Jason McIntyre wrote:
> On Sat, May 07, 2011 at 09:28:48PM -0500, Markus Peloquin wrote:
> > On Fri, 2011-05-06 at 16:20 +0100, Jason McIntyre wrote:
> > > On Fri, May 06, 2011 at 09:39:48AM -0500, Vijay Sankar wrote:
> > > > man 8 kerberos has the followi
On Sat, May 07, 2011 at 09:28:48PM -0500, Markus Peloquin wrote:
> On Fri, 2011-05-06 at 16:20 +0100, Jason McIntyre wrote:
> > On Fri, May 06, 2011 at 09:39:48AM -0500, Vijay Sankar wrote:
> > > man 8 kerberos has the following URL
> > >
> > > http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.
On Fri, 2011-05-06 at 16:20 +0100, Jason McIntyre wrote:
> On Fri, May 06, 2011 at 09:39:48AM -0500, Vijay Sankar wrote:
> > man 8 kerberos has the following URL
> >
> > http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html
> >
> > It should be http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerb
On Fri, May 06, 2011 at 09:39:48AM -0500, Vijay Sankar wrote:
> man 8 kerberos has the following URL
>
> http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html
>
> It should be http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html
>
kerberos docs are maintained by the kerberos (heimd
On Mon, 4 Oct 2010, Clint Pachl wrote:
> In the KDC log file, I get the following errors:
>
> 2010-10-04T02:40:11 TGS-REQ pa...@mokaz.com from IPv4:10.0.9.15 for
> afs/ualberta...@mokaz.com
> 2010-10-04T02:40:11 Server not found in database: afs/ualberta...@mokaz.com:
> No such entry in the datab
On Mon, 2008-04-07 at 20:48 -0700, Clint Pachl wrote:
> Is the ~/.k5user file supported in OpenBSD's Heimdal implementation? I'm
...
> BTW, what is /root/.klogin? Is it for kerberos 4? It doesn't have a man
Yes, it is (was) for krb4.
[demime 1.01d removed an attachment of type application/pgp-s
My previous message was probably a bit dense, so I'll try my best to get right
to the point.
kerberos kinit was failing, giving me the error "incorrect net address"
The kdc.log file indicated that the request was coming from ::1 (the IPv6
loopback,
is that right?)
After much looking, I found tha
On Tue, 03 Jul 2007 03:39:51 +
"Douglas Maus" <[EMAIL PROTECTED]> wrote:
> Could someone help me understand IP addresses, DNS, and
> Kerberos on OpenBSD?
>
> I was getting "incorrect net address" when trying to kinit,
> and I found that switching 2 lines in /etc/hosts
> putting first
> 10.0.1
From: [EMAIL PROTECTED]
> you may have to fish online for some of the option
> descriptions since stuff like
> correct_des3_mic aren't in the manpage for krb5.conf. is
> there any plan to
> update the manpage with these missing options?
Nope. gssapi(3) has that and more.
DS
Original message
>Date: Sat, 15 Jul 2006 23:18:53 -0300
>From: "Gustavo Rios" <[EMAIL PROTECTED]>
>Subject: Kerberos
>To: misc@openbsd.org
>
>Well, here i am again.
>
>I was expecting that the granted ticket always hold the address to
>which it is valid. After obtaining a ticket by me
From: [EMAIL PROTECTED]
> >Assuming this works for you, I'd be interested in knowing
> what the exact
> >nature of the problem is, I hate fixing something blindly
> without knowing
> >why it's fixed.
>
> this has fixed most of the problems, except i can't ssh out
> from the KDC using
> kerberos
>I ran into similar failures between versions of OpenBSD (KDC running current
>and older releases on clients) that I was able to debug down to the level of
>detecting an error related to "MIC failures". I think I had to bump up
>debugging on sshd to get that.
>
DS,
yah, this appeared in /var/log/
From: [EMAIL PROTECTED]
> the KDC is the only machine on the network that is running
> current (snap
> upgraded last night), the rest are on 3.9 release. here are
> the debugging outputs:
> debug1: Next authentication method: gssapi-with-mic
> debug2: we sent a gssapi-with-mic packet, wait for r
On Sun, 2006-07-09 at 18:58 -0500, Jacob Yocom-Piatt wrote:
> any advice would be appreciated. i suspect that this is some issue related to
> the KDC runnning current and the other machines being on 3.9 release.
this shouldn't matter as the language heimdal speaks is the same,
for the most part as
25 matches
Mail list logo
