Re: Why isn't PAM_smb available for FreeBSD?

2002-02-16 Thread Terry Lambert

Hiten Pandya wrote:
 According to the pam_smb webpage, it states that it works cleanly
 with FreeBSD 3.x onwards, so I will have to try it out anyway. BTW,
 what is NSS?

Network Security Services; supposedly it's required, according
to the web page where you grab pam_smb from, but that
could just be because of the WINS name services.  I don't
run a large enough Windows network to see the problem
(I don't run a WINS server at all, nor a domain controller/
master browser).

FWIW, I was under the impression that it was needed to find
the domain controller to find out where to get the SMB
passwords validated.

There are actually better Samba people on these lists; I
personally would have asked in -questions.

There appear to be FreeBSD-stable ports for both pam_smb
and nss, FWIW, if you are willing to run -stable.

-- Terry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-16 Thread Max Khon

hi, there!

On Sat, Feb 16, 2002 at 01:14:11AM -0800, Terry Lambert wrote:

  According to the pam_smb webpage, it states that it works cleanly
  with FreeBSD 3.x onwards, so I will have to try it out anyway. BTW,
  what is NSS?
 
 Network Security Services; supposedly it's required, according

Name Service Switch

 to the web page where you grab pam_smb from, but that
 could just be because of the WINS name services.  I don't
 run a large enough Windows network to see the problem
 (I don't run a WINS server at all, nor a domain controller/
 master browser).

/fjoe

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-16 Thread Terry Lambert

Max Khon wrote:
   According to the pam_smb webpage, it states that it works cleanly
   with FreeBSD 3.x onwards, so I will have to try it out anyway. BTW,
   what is NSS?
 
  Network Security Services; supposedly it's required, according
 
 Name Service Switch

Uh... This is not what the FreeBSD NSS port claims in the
package description file:

http://mirrors.sunsite.dk/freebsd/FreeBSD-stable/ports/security/nss/pkg-descr
] Network Security Services (NSS) is a set of libraries designed to support
] cross-platform development of security-enabled server applications.
] Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7,
] PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security
] standards.
] 
] WWW: http://www.mozilla.org/projects/security/pki/nss/

8-).

Yes, UNIX suffers from acronym overload... if someone had
said NSS in the context of something else, I would have
immediatly thought it was referring to the same thing you
did, FWIW...

-- Terry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-16 Thread Szilveszter Adam

 ] WWW: http://www.mozilla.org/projects/security/pki/nss/

So, just to clarify for the sake of the archives, the two NSS have not a
lot in common. The NSS thing allegedly needed for Samba is only in
-CURRENT AFAIK and has no ports. Some people already said earlier that
FreeBSD's NSS implementation (see /etc/nsswitch.conf and its man page)
leave things to be desired. Look under the archives with nsswitch.conf
as your keyword.

The other NSS that is the port quoted above, is actually the crypto
services library from the Mozilla project (as the www.mozilla.org
reference could have made it blindingly obvious:-) which builds on top
of NSPR (also in the ports:-) and provides security services to the PSM
module of Mozilla/NS6 (the above two acronyms stand for Netscape
Portable Runtime and Personal Security Manager, respectively). It could
also be used for your own programs, however, provided that the licensing
suits you.

And yes, acronym overload is rampant:-) probably because namespace
pollution is a common problem in programming:-)

-- 
Regards:

Szilveszter ADAM
Szombathely Hungary

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Hiten Pandya

hi all,

I was wondering, after seeing that Linux has pam_smb, why can't
FreeBSD have it too.  I can get the pam_smb compiling under FreeBSD,
from http://www.samba.org, so I was wondering why it isn't in our
CVS tree.

Thanks,
Regards,

  -- Hiten Pandya
  -- [EMAIL PROTECTED]

__
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Joseph Scott


On Fri, 15 Feb 2002, Hiten Pandya wrote:

# hi all,
# 
# I was wondering, after seeing that Linux has pam_smb, why can't
# FreeBSD have it too.  I can get the pam_smb compiling under FreeBSD,
# from http://www.samba.org, so I was wondering why it isn't in our
# CVS tree.

This probably belongs to -questions more than -current.  At any
rate, we do have one in the ports collection: security/pam_smb

-Joseph



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Chris Faulhaber

On Fri, Feb 15, 2002 at 04:26:20PM -0800, Hiten Pandya wrote:
 hi all,
 
 I was wondering, after seeing that Linux has pam_smb, why can't
 FreeBSD have it too.  I can get the pam_smb compiling under FreeBSD,
 from http://www.samba.org, so I was wondering why it isn't in our
 CVS tree.
 

See ports/security/pam_smb

-- 
Chris D. Faulhaber - [EMAIL PROTECTED] - [EMAIL PROTECTED]

FreeBSD: The Power To Serve   -   http://www.FreeBSD.org



msg34783/pgp0.pgp
Description: PGP signature


Re: Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Hiten Pandya

--- Chris Faulhaber [EMAIL PROTECTED] wrote:
 See ports/security/pam_smb

--- Joseph Scott [EMAIL PROTECTED] wrote:
 This probably belongs to -questions more than -current.  At any
 rate, we do have one in the ports collection: security/pam_smb

Hi,

Thanks for that. :)
Regards,

  -- Hiten

__
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Terry Lambert

Hiten Pandya wrote:
 I was wondering, after seeing that Linux has pam_smb, why can't
 FreeBSD have it too.  I can get the pam_smb compiling under FreeBSD,
 from http://www.samba.org, so I was wondering why it isn't in our
 CVS tree.

Works fine in FreeBSD, but to have a FreeBSD with the NSS,
which is required for pam_smb, you have to run -current,
since NSS is not supported in -stable or -release.

The are NSS patches listed ina PR against 4.4 which should
apply cleanly to 4.5, if you wanted to use it in 4.5-release.

Didn't you ask this question the other day on -hackers?

-- Terry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: Why isn't PAM_smb available for FreeBSD?

2002-02-15 Thread Hiten Pandya

--- Terry Lambert [EMAIL PROTECTED] wrote:
 Works fine in FreeBSD, but to have a FreeBSD with the NSS,
 which is required for pam_smb, you have to run -current,
 since NSS is not supported in -stable or -release.

Hi Terry,

According to the pam_smb webpage, it states that it works cleanly
with FreeBSD 3.x onwards, so I will have to try it out anyway. BTW,
what is NSS?

 The are NSS patches listed ina PR against 4.4 which should
 apply cleanly to 4.5, if you wanted to use it in 4.5-release.

Cool!, Thanks for the tip. :)

 Didn't you ask this question the other day on -hackers?

hmm, nop. :)

Regards,

  -- Hiten
  -- [EMAIL PROTECTED]

__
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message