search for: djoin

Hello I don't know if this is normal behavior (does the djoin have the spn?): When a have kerberos method in smb.conf : kerberos method = secrets and keytab Joining with offlinejoin does not work: root at testjoinlinux:/# net offlinejoin requestodj loadfile=/root/djoin =============================================================== INTERNAL ERROR: Signal...

...ComputerName> in unattend.xml?): root at ad49:~# samba-tool computer create cnpc11 Computer 'cnpc11' created successfully root at ad49:~# samba-tool computer list cnpc11$ AD49$ Now I started creating a BLOB in Win10 for offline join with a windows-10-client connected to this ad with: djoin /provision /domain dmiserver.lan /machine cnpc11 /savefile cnpc11.txt didnt work, but /djoin /provision /domain dmiserver.lan /machine cnpc11 /reuse /savefile cnpc11.txt/ /did. Also it worked with a never used machine name (i.e.cnpc31) without /reuse, which simply was generated in the samba ad./...

...keytab dedicated keytab file = FILE:/etc/krb5.keytab With a minimal /etc/samba/smb.conf, net offlinejoin does works. Edit smb.conf : [global] workgroup = DOMAIN security = ADS realm = AD.DOMAIN.LAN Then run offlinejoin : net offlinejoin requestodj loadfile=/root/djoin.blob To get the keytab file, you can then add the "kerberos method" and "dedicated keytab file" mentionned above **AFTER** offlinejoin, and then run : net ads keytab create Now I have a system keytab /etc/krb5.keytab file for SSSD and WAPT. I'll fill a bugzilla en...

...gt; > With a minimal /etc/samba/smb.conf, net offlinejoin does works. Edit > smb.conf : > > [global] > workgroup = DOMAIN > security = ADS > realm = AD.DOMAIN.LAN > > Then run offlinejoin : > > net offlinejoin requestodj loadfile=/root/djoin.blob > > To get the keytab file, you can then add the "kerberos method" and > "dedicated keytab file" mentionned above **AFTER** offlinejoin, and > then run : > > net ads keytab create > > Now I have a system keytab /etc/krb5.keytab file for SSSD...

...`winbind use krb5 enterprise principals` and `winbind scan trusted domains` will be deprecated in one of the next releases. Support for Offline Domain Join (ODJ) ------------------------------------- The net utility is now able to support the offline domain join feature as known from the Windows djoin.exe command for many years. Samba's implementation is accessible via the "net offlinejoin" subcommand. It can provision computers and request offline joining for both Windows and Unix machines. It is also possible to provision computers from Windows (using djoin.exe) and use the gener...

...`winbind use krb5 enterprise principals` and `winbind scan trusted domains` will be deprecated in one of the next releases. Support for Offline Domain Join (ODJ) ------------------------------------- The net utility is now able to support the offline domain join feature as known from the Windows djoin.exe command for many years. Samba's implementation is accessible via the "net offlinejoin" subcommand. It can provision computers and request offline joining for both Windows and Unix machines. It is also possible to provision computers from Windows (using djoin.exe) and use the gener...

...`winbind use krb5 enterprise principals` and `winbind scan trusted domains` will be deprecated in one of the next releases. Support for Offline Domain Join (ODJ) ------------------------------------- The net utility is now able to support the offline domain join feature as known from the Windows djoin.exe command for many years. Samba's implementation is accessible via the "net offlinejoin" subcommand. It can provision computers and request offline joining for both Windows and Unix machines. It is also possible to provision computers from Windows (using djoin.exe) and use the gener...

...`winbind use krb5 enterprise principals` and `winbind scan trusted domains` will be deprecated in one of the next releases. Support for Offline Domain Join (ODJ) ------------------------------------- The net utility is now able to support the offline domain join feature as known from the Windows djoin.exe command for many years. Samba's implementation is accessible via the "net offlinejoin" subcommand. It can provision computers and request offline joining for both Windows and Unix machines. It is also possible to provision computers from Windows (using djoin.exe) and use the gener...

...omain join of a computer to a given machine account with reusing it, not overwriting. For this I think, it is the right way (for a unattend.xml) to use the <machinePassword> described here: https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-unattendedjoin-identification#child-elements in the new feature list of samba 4.9.x is written "The 'samba-tool computer' command allow manipulation of computer accounts including creating a new computer and resetting the password. This allows an 'offline join' of a member server or workstat...

Hi folks, we'd like to provision new Samba servers (file sharing only) with the system keytab. It will precreated by some other process (msktutil) because we don't have direct access to a domain admin account. Is there any degragation in functionality by not using "secrets and keytab" and not doing "net ads join"? This is somewhat similiar to my question from