February 2006 - Darwin-dev - lists.apple.com

Re: Kerberos authentication with dsDoDirNodeAuth ?
by Paul Nelson 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: AcY8o0MdgXrfQaiWEdqIKgANk8YL5g== Thread-topic: Kerberos authentication with dsDoDirNodeAuth ? User-agent: Microsoft-Entourage/10.1.0.2418 I don't think it is possible to use your TGT to do a dsDoDirNodeAuth with the LDAP plug-in. It sounds like you would need to do this to make it work seamlessly. You might look at the LDAP plug-in source code though to make sure there isn't some special way that it handles dsDoDirNodeAuth. > From: Nigel Kersten <nigel(a)cofa.unsw.edu.au> > Date: Wed, 1 Mar 2006 05:23:43 +1100 > To: Paul Nelson <nelson(a)thursby.com> > Cc: <darwin-dev(a)lists.apple.com> > Subject: Re: Kerberos authentication with dsDoDirNodeAuth ? > > > On 01/03/2006, at 1:19 AM, Paul Nelson wrote: > >> It would help if you can tell us why you are doing the >> dsDoDirNodeAuth. > > Because I want to authenticate to the node? :) > > I'm using in-directory ACLs to allow network account users to edit > their own Contqct info, and would like to take advantage of the fact > that all my users have Kerberos identities. > >> What directory service node are you trying to authenticate with? > > A vanilla Open Directory Master LDAP node. > >> Does the user already have a Kerberos ticket granting ticket in >> their cache? >> You can check for the TGT using 'klist'. > > Yes, I know. Irrespective of whether the user currently has a TGT or > not, I can't work out how to this, or whether it's even possible in > the DirectoryService API. > > Thanks, > > Nigel > > > -- > Nigel Kersten [Senior Technical Officer] > College of Fine Arts, University of NSW, Australia. > CRICOS Provider Code: 00098G > > > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com smime.p7s

1 0

Re: Kerberos authentication with dsDoDirNodeAuth ?
by Nigel Kersten 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On 01/03/2006, at 1:19 AM, Paul Nelson wrote: Because I want to authenticate to the node? :) A vanilla Open Directory Master LDAP node. Thanks, Nigel -- Nigel Kersten [Senior Technical Officer] College of Fine Arts, University of NSW, Australia. CRICOS Provider Code: 00098G _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… It would help if you can tell us why you are doing the dsDoDirNodeAuth. I'm using in-directory ACLs to allow network account users to edit their own Contqct info, and would like to take advantage of the fact that all my users have Kerberos identities. What directory service node are you trying to authenticate with? Does the user already have a Kerberos ticket granting ticket in their cache? You can check for the TGT using 'klist'. Yes, I know. Irrespective of whether the user currently has a TGT or not, I can't work out how to this, or whether it's even possible in the DirectoryService API. This email sent to site_archiver(a)lists.apple.com

1 0

Re: ppc X11 binaries on Macintel
by Graham J Lee 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 1.5 (Macintosh/20051201) BTW: tried x11-users@ yet? :-) -- Graham Lee UNIX Systems Manager, Oxford Physics Practical Course http://users.ox.ac.uk/~wadh1342 _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On 28/2/06 18:00, Jack Howarth wrote: Can anyone answer the following question. I am considering purchasing a Macintel machine and have serious concerns about the compatibility of Rosetta with X11 unix binaries compiled for the ppc. Assuming the binaries are built for the G4, should prepackaged software like Chimera, Sparky, etc. run on a Macintel machine under X11.app? Or will all X11 unix programs have to be rebuilt for Macintel? Oh, if anyone is interested in testing this the software I refer to is available at... I can't speak for *all* software, but I've tried an amount of software including commercial X11 packages and nothing so far hasn't worked, if you see what I mean. As always, the proof of the pudding... This email sent to site_archiver(a)lists.apple.com

1 0

ppc X11 binaries on Macintel
by howarth＠bromo.msbb.uc.edu 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Can anyone answer the following question. I am considering purchasing a Macintel machine and have serious concerns about the compatibility of Rosetta with X11 unix binaries compiled for the ppc. Assuming the binaries are built for the G4, should prepackaged software like Chimera, Sparky, etc. run on a Macintel machine under X11.app? Or will all X11 unix programs have to be rebuilt for Macintel? Oh, if anyone is interested in testing this the software I refer to is available at... http://www.cgl.ucsf.edu/chimera/ http://www.cgl.ucsf.edu/home/sparky/ Thanks in advance for any information on this issue. Jack _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Why no work on rsync?
by Rob Braun 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Mutt/1.4.1i On Tue, Feb 28, 2006 at 08:31:09PM +0700, Robert Nicholson wrote: > Why is rsync in 10.4.5 darwin still based on 2.6.3? Usually, the open source components are considered very low priority within Apple and do not justify destabilizing the system just prior to GM'ing a release. So, most of the open source components are updated months prior to a release shipping. It is not at all unusual for open source components to be pretty stale by the time a release hits the customers. Building on the low priority of open source components idea, they are rarely updated in software updates. Typically the only reason open source bits are ever updated in an SU is because of a PR problem, which basically amounts to highly publicized security issues. I would expect rsync in particular to be more stale than most, given the extent to which it has deviated from the upstream sources. This would make it more difficult to update, and something they won't want to do as often as something that takes less time. Low priority also means they get relatively little engineering resources compared to other, more exciting Apple developed and user visible features. Rob _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: usefulness of source
by Garth Cummings 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Kerberos authentication with dsDoDirNodeAuth ?
by Paul Nelson 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: AcY8cezkK6gH1ahlEdqIKgANk8YL5g== Thread-topic: Kerberos authentication with dsDoDirNodeAuth ? User-agent: Microsoft-Entourage/10.1.0.2418 It would help if you can tell us why you are doing the dsDoDirNodeAuth. What directory service node are you trying to authenticate with? Does the user already have a Kerberos ticket granting ticket in their cache? You can check for the TGT using 'klist'. Paul Nelson Thursby Software Systems, Inc. > From: Nigel Kersten <nigel(a)cofa.unsw.edu.au> > Date: Tue, 28 Feb 2006 08:24:49 +1100 > To: <darwin-dev(a)lists.apple.com> > Subject: Kerberos authentication with dsDoDirNodeAuth ? > > I'm working on something at the moment where I'd like to be able to > authenticate via Kerberos to a DirectoryService node. > > I'm ok with the Kerberos Login API, and can happily do > dsDoDirNodeAuth with usernames and passwords, but I'm just wondering > if anyone knows whether it's possible to do Kerberos authentication > with the DirectoryServices API? > > I can get the kerberos principal for a given username with > kDSStdAuthGetKerberosPrincipal, so is the idea that I should be > grabbing an authorization ref from somewhere and using that to auth > to the node? A search of the archives seemed to suggest that NetInfo > is the only plugin that actually supports such an authentication > method at the moment. > > I'm starting to get the impression that I'll have to use the lower > level ldap_kerberos_bind_s() rather than DirectoryServices if I want > to do Kerberos authentication? Does anyone know if this is right? > > > -- > Nigel Kersten [Senior Technical Officer] > College of Fine Arts, University of NSW, Australia. > CRICOS Provider Code: 00098G > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/nelson%40thursby.com > > This email sent to nelson(a)thursby.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com smime.p7s

1 0

Why no work on rsync?
by Robert Nicholson 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Backing a machine using local rsync continues to be problematic. Why is rsync in 10.4.5 darwin still based on 2.6.3? I'm seeing the protocol corruption error that this post http://archive.netbsd.se/? ml=rsync&a=2005-09&t=1344997 suggests is fixed in 2.6.6 Apparently this it the bug that is apparently worked around if you turn off spotlight on the source (not dest as you should already have it off on the dest drive) drive. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: build/2091: gdb and mac-os tiger
by Nick Strauss 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com I installed XTOOLS from the Tiger install CD (gdb) run Starting program: /Users/nicholasstrauss/gnuchess-5.07/src/gnuchess Reading symbols for shared libraries . done GNU Chess 5.07 Adjusting HashSize to 1024 slots Transposition table: Entries=1K Size=48K Pawn hash table: Entries=0K Size=28K White (1) : e4 1. e4 black KQkq e3 r n b q k b n r p p p p p p p p . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . P P P P . P P P R N B Q K B N R Thinking... On Feb 28, 2006, at 3:49 AM, Martin Costabel wrote: Nick Strauss wrote: [] GNU gdb 6.1-20040303 (Apple version gdb-437) -- Martin _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… [Nicholas-Strausss-Computer:~/gnuchess-5.07/src] nicholas% gcc --version powerpc-apple-darwin8-gcc-4.0.0 (GCC) 4.0.0 (Apple Computer, Inc. build 5026) Copyright (C) 2005 Free Software Foundation, Inc. [Nicholas-Strausss-Computer:~/gnuchess-5.07/src] nicholas% gdb --version GNU gdb 6.1-20040303 (Apple version gdb-413) (Wed May 18 10:17:02 GMT 2005) Copyright 2004 Free Software Foundation, Inc. Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_PROTECTION_FAILURE at address: 0x966e75e8 0xffff862c in ___bzero () at /System/Library/Frameworks/ System.framework/PrivateHeaders/ppc/cpu_capabilities.h:187 187 /System/Library/Frameworks/System.framework/PrivateHeaders/ ppc/cpu_capabilities.h: No such file or directory. in /System/Library/Frameworks/System.framework/ PrivateHeaders/ppc/cpu_capabilities.h (gdb) http://sourceware.org/cgi-bin/gnatsweb.pl?cmd=view%20audit- trail&database=gdb&pr=2091 Looks like you are trying to run 4 years old developer tools on your Tiger. Contemporary tools give you This email sent to site_archiver(a)lists.apple.com

1 0

Re: Fwd: build/2091: gdb and mac-os tiger
by Martin Costabel 28 Feb '06

28 Feb '06

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com User-agent: Thunderbird 1.5 (Macintosh/20051201) Nick Strauss wrote: [] GNU gdb 6.1-20040303 (Apple version gdb-437) -- Martin _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… http://sourceware.org/cgi-bin/gnatsweb.pl?cmd=view%20audit-trail&database=g… Looks like you are trying to run 4 years old developer tools on your Tiger. Contemporary tools give you This email sent to site_archiver(a)lists.apple.com

1 0