How to use kerboros authentication in nfs sharing on windows

I have windows Nfs server role installed on my 2k12r2 machine(Nfs server) and windows nfs client role installed on my other 2k12r2 machine(Nfs client).
Now I have created a NFS share on my server machine with only krb5 and krb5i authentiacation options selected from the authentication wizard(no server authentication is not selected) and provided readwrite access to all machines.(
New-NfsShare -Name shareName -Path e:\share -Permission Readwrite -Authentication krb5,krb5i -EnableUnmappedAccess $false
I am logged in with domain administrator on both server and client machines.
Now when I try to mount the share from the client using following command
mount -o sec=krb5 \\servername\sharename *
I receive the error "Network Error - 1450".
What I am missing?

Hi puneDev,
Could you please post the full error message ?
I tested it in my lab , it works .
You may try to restart the server and client and try again .
Any further information please feel free to let us know .
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

How to use an authenticated user for a proxy call

Dear all,
I am currently working on a JEE application where the user needs to authenticate (for this I have configured the web.xml).
Now inside this application I need to do a proxy call to a PI webservice.
I would like to use the user credentials of the already logged in user in order to call the proxy.
What I don't want to do is to use a service user for the proxy call.
The code I am trying to call looks something like this:
     private IntegratedConfigurationIn getPort() throws Exception{
          IntegratedConfigurationIn port = null;
          try {
               IntegratedConfigurationInService service = null;
               service = new IntegratedConfigurationInService();
               port = (IntegratedConfigurationIn) service.getIntegratedConfigurationIn_Port();
              BindingProvider bp = (BindingProvider)port;
              bp.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, user);
              bp.getRequestContext().put(BindingProvider.PASSWORD_PROPERTY, password);
              if (url.length() != 0)
                   bp.getRequestContext().put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, url);
          catch (Exception ex){
               ex.printStackTrace();
          return port;
The examples I found to retrieve the userdata pointed to codes similar to this one:
public HttpServletRequest getHttpRequest() throws Exception {
          // Get runtime context
          Properties props = new Properties();
          props.put("domain", "true");
          Context initialContext = new InitialContext(props);
          ApplicationWebServiceContext wsContext = (ApplicationWebServiceContext) initialContext
                    .lookup(" /wsContext/ApplicationWebServiceContext");
          HttpServletRequest req = wsContext.getHttpServletRequest();
          return req;
com.sap.security.api.IUser sapUser = com.sap.security.api.UMFactory.getAuthenticator().getLoggedInUser(getHttpRequest(), null);
          IUser ep5User = com.sapportals.wcm.util.usermanagement.WPUMFactory.getUserFactory().getEP5User(sapUser);
Now I don't know how to bring it togehter and how to use an authenticated user for the BindingProvider.
I would appreciate any hints or ideas.

Peter,
from the first screenshot, what I understood is that, you are calling an inbound PI web service that is intended to create an integrated configuration object (this is used for whole lot of other reason completely) but not actually calling a development web service.
For this, you would have to generate your client classes from the WSDL provided by the PI developer for that particular service. Once you get those client classes generated, you could used the method provided in the other screenshot to extract the user and password and call the intended web service.
Vijay Konam

How to Use a System Repair Disc to Restore Windows 7

Hi ! Please start here!
http://www.dummies.com/how-to/content/how-to-use-a-system-repair-disc-to-restore-windows.html
http://forums.toshiba.com/t5/Computer-Troubleshooting/What-can-I-do-if-my-Windows-7-or-Windows-Vista...
http://forums.toshiba.com/t5/Windows-8-Knowledge-Base/What-can-I-do-if-my-Windows-8-laptop-won-t-sta...
http://pcsupport.about.com/od/toolsofthetrade/ss/windows-7-startup-repair_2.htm
PS Please read all these links and then post back here with your complete model number found on the bottom of your laptop and complete information to what you have tried to get your PC working I would love to spoon feed everyone. It's just not possible.
Dokie!!
PS2 Now read this and see if any thing here helps.
http://forums.toshiba.com/t5/Computer-Troubleshooting/FYI-Recovery-to-Factory-Settings-Toshiba/td-p/...
I Love my Satellite L775D-S7222 Laptop. Some days you're the windshield, Some days you're the bug. The Computer world is crazy. If you have answers to computer problems, pass them forward.
Attachments:
Capture40.JPG ‏238 KB

Hi! I found this on the form!
http://forums.toshiba.com/t5/System-Recovery-and-Recovery/How-To-Understanding-System-Recovery-Optio...
I Love my Satellite L775D-S7222 Laptop. Some days you're the windshield, Some days you're the bug. The Computer world is crazy. If you have answers to computer problems, pass them forward.

How to use radioButton(s) and image controls on windows phone 8.1

how to use radioButton(s) and image controls on windows phone 8.1

Hi aspirantme,
>>how to use radioButton(s) and image controls on windows phone 8.1
Which version of your app is? Runtime or Silverlight?
For Runtime version, please see the following articles:
#RadioButton class
https://msdn.microsoft.com/en-us/library/windows/apps/windows.ui.xaml.controls.radiobutton(v=win.10).aspx
#How to add radio buttons (XAML)
https://msdn.microsoft.com/en-us/library/windows/apps/xaml/hh868200.aspx
#Image class
https://msdn.microsoft.com/library/windows/apps/br242752.aspx
For Silverlight version, please refer to the following documents and guidelines:
#RadioButton Class
https://msdn.microsoft.com/en-us/library/windows/apps/system.windows.controls.radiobutton(v=vs.105).aspx
#RadioButton control design guidelines for Windows Phone
https://msdn.microsoft.com/en-us/library/windows/apps/hh202881(v=vs.105).aspx
#Image Class
https://msdn.microsoft.com/en-us/library/windows/apps/system.windows.controls.image(v=vs.105).aspx
#Quickstart: Images for Windows Phone
https://msdn.microsoft.com/en-us/library/windows/apps/jj206957(v=vs.105).aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to Use a System Repair Disc to Restore Windows 7 For Seniors For Dummies

Hi I'm new to this forum and I haven't seen the proper place to post some thing like this. I'm going to post it here and staff can do what they wish with it.
I can't understand why people aren't creating a System Repair Disc to Restore Windows 7. This is the best tool you can have. I have seen a ton of people posting here that can't boot into Windows 7. No mention of a repair Disc. Can you people not read?? This should be one of the first things to do after creating System Recovery Media(Mine requires 5DVD's). What is your thinking not to do these things?
http://www.dummies.com/how-to/content/how-to-use-a-system-repair-disc-to-restore-windows.html
http://windows.microsoft.com/en-US/windows7/Create-a-system-repair-disc
PS I don't have any trouble. I just want people to please do these things and save your self a lot of grief, and make a back up image of your OS on a external drive
Dokie!
I Love my Satellite L775D-S7222 Laptop. Some days you're the windshield, Some days you're the bug. The Computer world is crazy. If you have answers to computer problems, pass them forward.

Hi! I found this on the form!
http://forums.toshiba.com/t5/System-Recovery-and-Recovery/How-To-Understanding-System-Recovery-Optio...
I Love my Satellite L775D-S7222 Laptop. Some days you're the windshield, Some days you're the bug. The Computer world is crazy. If you have answers to computer problems, pass them forward.

How to use Basis Authentication in Sender SOAP Adapter

We implemented one Sender SOAP Adapter and we had to implement the modified WEB.XML method to remove the security specification. We have now asked the developer to correct this situation so we can remove this modification. The Interface developer would like to use Basic Authentication. If you have an automated interface sending in a SOAP Message, how do you do Basic Authentication?
I've tried using:
http://host:port/XISOAPAdapter/MessageServlet?channel=:<Service>:<Channel>&sap-user=xiappluser&sap-password=<Password>&sap-language=EN&sap-client=<Client>
When I do this, I still get the Authentication Pop-Up Window.
How does the Sending Interface either supply the ID and Password on the incoming SOAP Message or respond to the Authentication Pop-Up?
Thanks,
Anne

By Defualt the web service exposed by you will use Basic Authentication mode only.
But the way you do Basic Authentication in the web client is platfrom dependent.
This is not the way to do Basic authentication
http://host:port/XISOAPAdapter/MessageServlet?channel=:<Service>:<Channel>&sap-user=xiappluser&sap-password=<Password>&sap-language=EN&sap-client=<Client>
I am providing you a code snippet on how to Basic Authentication in Java when making the Web Service Call.
If the client is on some other platform just look for the corresponding api.
Please award points if you find this answer useful.
Code Snippet
URL url = new URL(URL);
URLConnection connection = url.openConnection();
if( connection instanceof HttpURLConnection )
((HttpURLConnection)connection).setRequestMethod("POST");
     //connection.setRequestProperty("Content-Length",Integer.toString(content.length()) );
     connection.setRequestProperty("Content-Type","text/xml");
     connection.setDoOutput(true);
     String password = User + ":" + Password ;
      //Where con is a URLConnection
     connection.setRequestProperty ("Authorization", "Basic " + encode(User + ":"+ Password));
     connection.connect();
Encode Method
public static String encode (String source) {
BASE64Encoder enc = new sun.misc.BASE64Encoder();
return(enc.encode(source.getBytes()));

I want to use iChat video and file sharing with Windows users

Nowadays, iChat is compatible with AOL/AIM, Google Talk, Jabber, Mac.com and MobileMe instant messaging services. I know that Yahoo Messenger support will be available soon in Mac OS X Lion.
I tried using AOL/AIM and Google Talk natively in iChat in order to talk with Windows users which were using Google Talk application or web chatting (Me from: Google Talk - My friends from: Google Talk, and Me from: AOL/AIM - My friends from: Google Talk), but videoconference and file sharing were not available.
I also tried Windows Live Messenger in iChat via Jabber intermediate, but it is not efficient and doesn't work for videoconference and file sharing.
So, which IM service combination I should use to chat with Windows users in order to be able to use videoconference and file sharing using such a great app like iChat?
Thanks you.

Hi,
A lapsed Trial or lapsed Paid for MobileMe account will not work in any fashion, as a Screen Name in iChat/AIM apps or as a Email. (Of course it is no longer an Valid Apple ID either).
Given that Google is a Jabber server iChat will Video (or Audio Only) Chat Jabber to Jabber.
With a Valid AIM name (AIM, MobileMe or @mac.com) then it is supposed to work to AIM on a PC
This tends to vary from person to person as to success.
From AIM version 6.5 AIM introduced a Send as Typing feature called "Real Time"
It does not work to iChat and in fact also has to be turned Off in the Buddy List at the AIM end for Video or Audio chats to work.
The AIM app also has to be allowed through the Windows Firewall as an Exception, preferably with UPnP enabled as well and UPnP enabled in their Router.
Trillian is a paid for App for PCs that provide an alternative.
Recently theri site offered 3 windows versions
The Pro version of verion 3.2 (known to work), a version 4 and a version 5 in beta. The version 3.2 used to have a free Text chat version and only the Pro version was needed to Video.
Until the site was reorganised the 3.2 version was "On Sale" at a reduced price.
It seems version 5 is now out of beta
They are still separating out a Pro version.
It is a multi-service client
There is also a Mac version although I have not tried it.
I am not sure what you mean by "Manage" your MSN Contacts.
How about using a MobileMe expired account screen name for using iChat with Windows-Google Talk users? Should I expect the same incompatibilities?
I have already addressed part of this. The fact the name will not work full stop.
However one way of reading this is that you are thing of linking AIM and Jabber (Google) Buddies in one Buddy List
Directly in iChat this cannot be done - unless you are the one with the Jabber Account and an AIM Transport set up.
You would be subject to the same Text Chat only restrictions.
It is a bit like the fact your phone line can be used for Fax, Telephone and DSL broadband. (in fact mine does TV as well)
You granny would not be able to talk to your Fax machine if that happened to answer the call.
Her Fax machine might be able to communicate with your computer if you had an active Fax app on there, and a dail-up modem active to answer.
10:06 PM Tuesday; May 24, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.7)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

NFS Sharing with Windows

I'm having trouble connecting to my NFS share through Windows XP. I've installed Microsoft's services for Unix and have it working properly, I can connect to a Debian server running NFS without trouble. Whenever I try to connect to my Arch box it keeps requesting a username and password. I can connect to this server from the same machine when I boot into my Arch partition and I have no problems there. Before anyone asks my IP is static through my MAC Address. It sound like a user authentication error to me but I wasn't aware that NFS only allowed certain users to connect. I've been beating my head over this for a few weeks now, so any help would be appreciated.

All these files are set up the same. To simplify this process I commented everything out in both of the hosts.deny files, so everything should be going through without a problem. My exports file only has one line, same options on both systems. Again, I've set the IP to allow connections from all to simplify things for now, the line is as follows.
/media *(rw,sync,insecure,subtree_check)
Each time my system asks for a username & password, I put it in then it just asks for it again.
Last edited by luciferin (2007-05-16 03:18:31)

How to use linphone - open sip VoIP library in Windows desktop application.?

I want to develop an VoIP .net application in C# lang for windows desktop. Does anyone know any open sip VoIP library to use.? I know about Linphone. but it is available for Android, iOS and Windows(app developed using GTK- UI builder). If anyone knows how
to use Linphone for windows then ans also will be appreciated.
I am using MS visual studio for application development. Tell me its compiling steps as well. How to use that in WPF or WinForms.?
Thanks in advance.

Hello,
The VoIP seems not MS product and can you clarify it? Basically, if it is third party product, you will need to ask for the API writer for details. For example, find a forum here:
http://www.linphone.org/
Regards,
Barry Wang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to use external table - creating NFS mount -the details involved

Hi,
We are using Oracle 10.2.0.3 on Solaris 10. I want to use external tables to load huge csv data into the database. This concept was tested and also found to be working fine. But my doubt that : since ours is a J2EE application, the csv files have to come from the front end- from the app server. So in this case how to move them to the db server?
For my testing I just used putty to transfer the file to db server, than ran the dos2unix command to strip off the control character at the end of file. but since this is to be done from the app server, putty can not be used. In this case how can this be done? Are there any risks or security issues involved in this process?
Regards

orausern wrote:
For my testing I just used putty to transfer the file to db server, than ran the dos2unix command to strip off the control character at the end of file. but since this is to be done from the app server, putty can not be used. In this case how can this be done? Are there any risks or security issues involved in this process? Not sure why "putty" cannot be used. This s/w uses the standard telnet and ssh protocols. Why would it not work?
As for getting the files from the app server to the db server. There are a number of options.
You can look at it from an o/s replication level. The command rdist is common on most (if not all) Unix/Linux flavours and used for remote distribution and sync'ing of files and directories. It also supports scp as the underlying protocol (instead of the older rcp protocol).
You can use file sharing - the typical Unix approach would be to use NFS. Samba is also an option if NTLM (Windows) is already used in the organisation and you want to hook this into your existing security infrastructure (e.g. using Microsoft's Active Directory).
You can use a cluster file system - a file system that resides on shared storage and can be used by by both app and db servers as a mounted/cooked file system. Cluster file systems like ACFS, OCFS2 and GFS exist for Linux.
You can go for a pull method - where the db server on client instruction (that provides the file details), connects to the app server (using scp/sftp/ftp), copy that file from the app server, and then proceed to load it. You can even add a compression feature to this - so that the db server copies a zipped file from the app server and then unzip it for loading.
Security issues. Well, if the internals is not exposed then security will not be a problem. For example, defining a trusted connection between app server ad db server - so the client instruction does not have to contain any authentication data. Letting the client instruction only specify the filename and have the internal code use a standard and fixed directory structure. That way the client cannot instruct something like +/etc/shadow+ be copied from the app server and loaded into the db sever as a data file. Etc.

How to use LDAP authentication in Oracle Linux

Hi All,
In Oracle Linux 2.6.18-194 el5, goes to system->Administration->Authentication, enabled LDAP in both User Information and Authentication, tried to use network user account information to log in the linux machine but it did not work.
The login screen waits over 10 minutes after enter username and password each and then says usename and password is not corrent.
LDAP Settings only asked two information LDAP Search Base on and LDAP Server. We have another application which uses same LDAP server works fine.
How to make Oracle linux server as LDAP client for user longin?
Tanks in advance for yur help.

I have no idea, but you might find it helpful to read Redhat's documentation concerning this subject:
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/ch-ldap.html

How to use NT authentication

I try to use validation of NT authentication every time a user log on to our NT intranet system. That means all of users in our intranet will use same database user name and password to start our forms.
Can someone tell me how to get value from NT authentication?
Thanks

Pierre Abramovici <[email protected]> wrote in message news:<3be85bad$[email protected]>...
to be able to seamlessly log onto our Intranet (on PS 3.5) without having to provide their credentials (loginand password). Has anyone acheived this?I thought this is SSO. From my readings, with IIS, if you were to
setup your system to use NTLM or Integrated Windows Authentication
instead of basic, your IE browser (not Netscape) can do the job for
you for free.
If however if you are using Weblogic, then you are in the same boat as
I am currently (still trying to find a better solution - I have
thought of an unsecure solution :-().
Good luck,
drit
Freelance Java developer/Code Inspector - No job too small or
difficult!
http://www.geocities.com/doc_i_t/resume2001.html

How to use tacacs+ authentication to assign a group policy at login in Cisco ASA

Hi everyone
As title, anyone knows how it works?
I only found it can work with LDAP authentication, but not in TACACS+
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98634-asa-ldap-group-pol.html#noaccessgp
please give me a hand, thanks.

Hi Karten,
I have the similar requirement and I used the ACS and configure Auth profile and map the RADIUS class (25) value as ASA group-policy name (even tried with tunnel-group name), but it does not work. It allows whatever vpn group that user select regardless of the user groups he belongs to.
I use two ACS local users and put them in two different groups and maped those two groups with two different Access rules in the ACS and pointed to correct Auth profile etc.
I am not sure what could be the issue and appreciate if you can advise.
thanks in advance.

WLS 10.3.4: How to use OS authentication for JDBC Data Source

Hello all,
As a preface, I've tried searching the forum/Google for "OS authentication" and reading the WLS JDBC doc to no avail - if it's documented somewhere, a RTFM link would be much appreciated.
I'm trying to set up a JDBC data source on WLS that leverages the OS Authentication capability of the Oracle database. If it would help, I can go into the reasoning behind why I want to do this, but basically, it's to simplify the config/deployment of a COTS application. What I have in the database is an "identified externally" user that corresponds to the OS user that is running the WebLogic Server. Normally, in tools such as SQL*Plus, I would use "/@db" as the username/password (in other words, no username and no password specified), and I would be logged in as the "idenfitied externally" user. I want to configure the same thing for a WebLogic Data Source, but if I leave the username/password blank, testing the connection in the WLS console gives me "invalid username/password, login denied" I've also tried using "/" as the username, as was documented in a quite old WLS faq, but that gives me the same result.
Is there some magic switch I need to flip?
Thanks,
John

Hi John, there's no way to do that with connection pools, which is how WLS datasources get their
connections, or middleware in general. WebLogic would have no way of knowing which if any of the
pooled connections was appropriate for the current 'user', which is not the application user, but
instead is the OS identity of the person who started the WebLogic server! If you start up your
WebLogic server, and people start pointing their browsers to it, doing various stuff, the OS knows
you started WebLogic, and maybe with the help of OCI, Oracle's JDBC might know it was you who
started WebLogic's OS process, but what does the OS know about any user that may be running
a browser or application elsewhere (even if on this same machine), when that browser or application
connects to your WebLogic server process?
HTH,
Joe

How to use one I-tunes library with multiple windows users (family) on 1 pc

On our family pc we log in with different accounts. We want to use I-Tunes but all have the same library. I tried to create a library not in the users directory, but in the All Users folder that is accessible for everyone. However, when I import the music in the library for one user and set the same location for another user, I-tunes does not recognize the library. So everyone has to create it's own library.
What are the best practices to overcome this?

Keep in mind that what you have done now is you have multiple iTunes libraries accessing the same media folder. Meaning, that each account can have their own ratings, playlists, etc. but more importantly, each account does NOT know what the other account does, so if your daughter adds a CD to her account, it will go into the shared folder, but it will NOT automatically go into your wife's iTunes library. She would have to add it manually. Likewise, if one account deletes music from their library and tells iTunes to remove it to the trash, the other accounts will not know and iTunes will still try to access the file from the shared location even though the file is now trashed.
Each account has their own database files (.itl files in the iTunes folder) which stores this stuff.
If you want to have everyone use the exact same library which means the same ratings, playlists, etc. then you need to move the database files into that same location and set each iTunes account to read the same data.
How to open an alternate iTunes Library file or create a new one
http://docs.info.apple.com/article.html?artnum=304447
Patrick

How to use kerboros authentication in nfs sharing on windows

Similar Messages

Maybe you are looking for