The Packets, Life and everything
[sourcecode] ! interface FastEthernet3 description WAN to VDSL-Modem switchport mode trunk ! interface Vlan7 description VLAN fuer VDSL no ip address pppoe enable group global pppoe-client dial-pool-number 1 ! interface Dialer0 ip address negotiated ip mtu 1452 ip nat outside ip virtual-reassembly encapsulation ppp ip route-cache policy ip route-cache flow dialer pool 1 dialer idle-timeout …
Continue reading "VDSL mit Cisco Routern"
[sourcecode] ! interface FastEthernet3 description WAN to VDSL-Modem switchport mode trunk ! interface Vlan7 description VLAN fuer VDSL no ip address pppoe enable group global pppoe-client dial-pool-number 1 ! interface Dialer0 ip address negotiated ip mtu 1452 ip nat outside ip virtual-reassembly encapsulation ppp ip route-cache policy ip route-cache flow dialer pool 1 dialer idle-timeout …
Achtung kann üble Probleme machen. [sourcecode] ksetup /SetRealm PATRICK-PREUSS.DE ksetup /AddKdc 10.0.12.32 ksetup /AddKpasswd PATRICK-PREUSS.DE 10.0.12.32 ksetup /SetComputerPassword somethingverysecret ksetup /MapUser rt01@PATRICK-PREUSS.DE rt01 [/sourcecode] [sourcecode] C:\Documents and Settings\rt01> ksetup default realm = PATRICK-PREUSS.DE (external) 10.0.12.32: (no kdc entries for this realm) Realm Flags = 0x0 none PATRICK-PREUSS.DE: (no kdc entries for this realm) kpasswd = …
--- snip /etc/ldap/slapd.conf --- # ppolicy schema include /etc/ldap/schema/ppolicy.schema moduleload ppolicy.la overlay ppolicy ppolicy_default "cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de" ppolicy_use_lockout --- snip /etc/ldap/slapd.conf --- --- snip default.ldif --- dn: cn=default,ou=PasswordPolicy,dc=patrick-preuss,dc=de objectClass: device objectClass: pwdPolicy objectClass: top cn: default pwdAttribute: userPassword pwdAllowUserChange: TRUE pwdCheckQuality: 1 pwdExpireWarning: 432000 pwdFailureCountInterval: 0 pwdGraceAuthNLimit: 0 pwdInHistory: 0 pwdLockout: FALSE pwdLockoutDuration: 1920 pwdMaxAge: 7516800 pwdMaxFailure: …
http://www.ibm.com/developerworks/db2/library/techarticle/dm-0809govindarajan/ kadmin.local: modpol -maxlife 180days -minlife 1hours -minlength 6 -minclasses 2 -history 10 default http://www.ncsa.uiuc.edu/UserInfo/Resources/Software/kerberos/multiple_principals.html
kadmin.local -q 'cpw -pw somethingsecert rt01krb5'
Zur Zeit schein der slapd noch keine API zu avahi zu haben. Also doch ein wenig Handarbeit:-) Mein Docu.
Normalerweise werden die Kerberos Attribute unter "cn=Kerberos,..." gespeichert. Es ist möglich diese unter der "ou=People,...." in einem Account zu speichern.
Cisco IOS 12.2 Configuring Kerberos Cisco IOS 12.4 Configuring Kerberos Cisco IOS 12.4T Configuring Kerberos moria# kadmin.local -q 'addprinc -randkey host/ws-c2940-8tt-s.patrick-preuss.de' moria# kadmin.local -q 'ktadd -e DES-CBC-CRC:NORMAL -k /var/www/ios.keytab host/ws-c2940-8tt-s.patrick-preuss.de@PATRICK-PREUSS.DE' --- Cisco IOS 121-22.EA11 --- aaa authentication login default krb5-telnet local krb5 aaa authentication login console-override local aaa authorization exec default local krb5-instance kerberos local-realm …
MIT Kerberos 1.6.3 The Rough Guide to configuring a Solaris KDC to use a LDAP DS for the KDB # rm /etc/krb5kdc/kdc.conf # ln -s /etc/krb5.conf /etc/krb5kdc/kdc.conf --- /etc/krb5.conf --- [kdcdefaults] kdc_ports = 750,88 [libdefaults] default_realm = PATRICK-PREUSS.DE default_tgs_enctypes = des-cbc-crc default_tkt_enctypes = des-cbc-crc [realms] PATRICK-PREUSS.DE = { kdc = moria admin_server = moria acl_file …
Zur Docu.