Hello,
I'm trying to setup my Solaris 10 servers to authenticate from a OpenLDAP server. I can get the Linux servers to authenticate from a OpenLDAP server, but not server the Solaris servers. Below I have posted some output so you can see my issue.
There are no errors in the /var/openldap/slapd.log.
I think I need help with the ldapclient command and setting the profile. I feel that i'm really close.
I will post any file you want, please point me in the right direction.
Last edited by bitlord; 09-28-2011 at 02:14 PM..
Reason: Code tags...
Hi all,
I have a problem not really dramatic but realyl annoying:
i've got a groups of users who logon a sunos 2.3 box via a windows telnet client (KEAI, but this is not the problem).
they login as perso1 and password.
It takes a very very very long time to get in.
If i log on the same box... (2 Replies)
Guys ..
I got my user ID created in a production system of my organisation.
the problem I got is my HOME directory in environment has been mis-spelt.
Like:
I should be logging into unix using ID: freakegs
My home directory should be : /users/freakygs
and echo $HOME should also... (1 Reply)
Hi,
I am not able to login in the system as user.It is showing problem
login as: User1
User1@10.xxx.xx.xx's password:
Could not chdir to home directory /home/User1: No such file or directory
Sun Microsystems Inc. SunOS 5.9 Generic May 2002
$
I have created the User1 and Its... (8 Replies)
Hi,
I have reset the account on solaris 5.6. After resetting, User unable to login and putty gets closed once enter the password. Please suggest ASAP.....
Thanks in Advance (6 Replies)
Hi,
I have created one normal login id . When they have try to login then, They got error msg the permission denied.
Please advice on this.
Thanks,
Mani (3 Replies)
I logged in through ssh, but can't re-login as root.
sudo login
Arch login: root
Password:
Login incorrect
Arch login:
But I am sure my password is right. Why?
But on local tty1, this works. (2 Replies)
Hi All,
I am facing issue in setting up passwordless login through ssh on two Solaris-10 boxes. user-id ravrwa from server tsapiq04-zrwdq01 should be able to login to server tsbrit03 as cpsuserq, which is not happening. I am not sure where is the problem, while keys are already all set. Here is... (14 Replies)
Hello,
I'm trying to build a script which logins to an application and logout, where the user would input URL, credentials, no. of users, iterations etc. The objective is to test max no. of sessions our reverse proxy apache can handle.
I'm trying to handle the application login and logout... (1 Reply)
Dear all,
When ever i login to linux box through putty , it is taking a long time to log in .....approx 2 min
Kindly let me know any reason behind this.... (3 Replies)
Dear All ,
recently i have configured sftp for a user for which i have done chroot.
but after this , sftp is working fine . but ssh is not working when we connect to the server.
When we try to ssh <user>@<server ip> , the below is the error message that we get and not able to login.
... (2 Replies)
Discussion started by: jegaraman
2 Replies
LEARN ABOUT DEBIAN
nfssec
nfssec(5)nfssec(5)NAME
nfssec - overview of NFS security modes
The mount_nfs(1M) and share_nfs(1M) commands each provide a way to specify the security mode to be used on an NFS file system through the
sec=mode option. mode can be sys, dh, krb5, krb5i, krb5p, or none. These security modes can also be added to the automount maps. Note that
mount_nfs(1M) and automount(1M) do not support sec=none at this time. mount_nfs(1M) allows you to specify a single security mode;
share_nfs(1M) allows you to specify multiple modes (or none). With multiple modes, an NFS client can choose any of the modes in the list.
The sec=mode option on the share_nfs(1M) command line establishes the security mode of NFS servers. If the NFS connection uses the NFS Ver-
sion 3 protocol, the NFS clients must query the server for the appropriate mode to use. If the NFS connection uses the NFS Version 2 proto-
col, then the NFS client uses the default security mode, which is currently sys. NFS clients may force the use of a specific security mode
by specifying the sec=mode option on the command line. However, if the file system on the server is not shared with that security mode, the
client may be denied access.
If the NFS client wants to authenticate the NFS server using a particular (stronger) security mode, the client wants to specify the secu-
rity mode to be used, even if the connection uses the NFS Version 3 protocol. This guarantees that an attacker masquerading as the server
does not compromise the client.
The NFS security modes are described below. Of these, the krb5, krb5i, krb5p modes use the Kerberos V5 protocol for authenticating and pro-
tecting the shared filesystems. Before these can be used, the system must be configured to be part of a Kerberos realm. See SEAM(5).
sys Use AUTH_SYS authentication. The user's UNIX user-id and group-ids are passed in the clear on the network, unauthenticated by the
NFS server. This is the simplest security method and requires no additional administration. It is the default used by Solaris NFS
Version 2 clients and Solaris NFS servers.
dh Use a Diffie-Hellman public key system (AUTH_DES, which is referred to as AUTH_DH in the forthcoming Internet RFC).
krb5 Use Kerberos V5 protocol to authenticate users before granting access to the shared filesystem.
krb5i Use Kerberos V5 authentication with integrity checking (checksums) to verify that the data has not been tampered with.
krb5p User Kerberos V5 authentication, integrity checksums, and privacy protection (encryption) on the shared filesystem. This provides
the most secure filesystem sharing, as all traffic is encrypted. It should be noted that performance might suffer on some systems
when using krb5p, depending on the computational intensity of the encryption algorithm and the amount of data being transferred.
none Use null authentication (AUTH_NONE). NFS clients using AUTH_NONE have no identity and are mapped to the anonymous user nobody by
NFS servers. A client using a security mode other than the one with which a Solaris NFS server shares the file system has its
security mode mapped to AUTH_NONE. In this case, if the file system is shared with sec=none, users from the client are mapped to
the anonymous user. The NFS security mode none is supported by share_nfs(1M), but not by mount_nfs(1M) or automount(1M).
/etc/nfssec.conf NFS security service configuration file
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|Availability |SUNWnfscr |
+-----------------------------+-----------------------------+
automount(1M), mount_nfs(1M), share_nfs(1M), rpc_clnt_auth(3NSL), secure_rpc(3NSL), nfssec.conf(4), attributes(5)
/etc/nfssec.conf lists the NFS security services. Do not edit this file. It is not intended to be user-configurable.
13 Apr 2005 nfssec(5)