search for: grenobl

Hi, I'm trying to use wildcard in keytab because i don't want join every computer, client for service NFS krb5. I add a spn like this # samba-tool spn add host/* nfs (I create user nfs before) # samba-tool spn list nfs nfs User CN=nfs,CN=Users,DC=if,DC=ujf-grenoble,DC=fr has the following servicePrincipalName: host/* I export keytab : #samba-tool domain exportkeytab /tmp/wildcardnfs.keytab --principal=host/* ktutil -k /tmp/wildcardnfs.keytab list /tmp/wildcardnfs.keytab: Vno Type Principal Aliases 1 des-cbc...

...ttp/%s at DOMAIN.COM not http/*@DOMAIN.COM Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Service > Informatique IF > Verzonden: donderdag 31 maart 2016 11:04 > Aan: samba at lists.samba.org > CC: ifinfo at ujf-grenoble.fr > Onderwerp: [Samba] NFSv4 / Krb / wildcard in keytab > > Hi, > > I'm trying to use wildcard in keytab because i don't want join every > computer, client for service NFS krb5. > > I add a spn like this > > # samba-tool spn add host/* nfs > > (I c...

...use wildcard in keytab because i don't want join every > computer, client for service NFS krb5. > > I add a spn like this > > # samba-tool spn add host/* nfs > > (I create user nfs before) > > # samba-tool spn list nfs > nfs > User CN=nfs,CN=Users,DC=if,DC=ujf-grenoble,DC=fr has the following > servicePrincipalName: > host/* > > I export keytab : > > #samba-tool domain exportkeytab /tmp/wildcardnfs.keytab > --principal=host/* > > ktutil -k /tmp/wildcardnfs.keytab list > /tmp/wildcardnfs.keytab: > > Vno Type...

...backend 'ntlmssp_resume_ccache' registered GENSEC backend 'http_basic' registered GENSEC backend 'http_ntlm' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered Using binding ncacn_ip_tcp:fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr[,seal] resolve_lmhosts: Attempting lmhosts lookup for name fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr<0x20> resolve_lmhosts: Attempting lmhosts lookup for name fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr<0x20> Wrong username or password: kinit for FICHDC$@NET.LYC-GUILLAUME-FI...

...want join every >> computer, client for service NFS krb5. >> >> I add a spn like this >> >> # samba-tool spn add host/* nfs >> >> (I create user nfs before) >> >> # samba-tool spn list nfs >> nfs >> User CN=nfs,CN=Users,DC=if,DC=ujf-grenoble,DC=fr has the following >> servicePrincipalName: >> host/* >> >> I export keytab : >> >> #samba-tool domain exportkeytab /tmp/wildcardnfs.keytab >> --principal=host/* >> >> ktutil -k /tmp/wildcardnfs.keytab list >> /tmp/wildca...

...'t find any > >> problem in Kerberos : > >> > >> > >> -------------------------------- > >> # kinit -k FICHDC$ > >> # klist > >> Ticket cache: FILE:/tmp/krb5cc_0 > >> Default principal: FICHDC$@NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR > > > > Can you do this against the secrets.keytab in Samba's private/ dir? > > > > You can reset the Samba machine account pw with > > ./source4/scripting/devel/chgtdcpass, but: > > - it wont be packaged so you will have to build Samba and > tell i...

...ask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff > added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 > added interface eth0 ip=172.16.0.20 bcast=172.16.255.255 netmask=255.255.0.0 > resolve_lmhosts: Attempting lmhosts lookup for name > fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr<0x20> > startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No > such file or directory > Socket options: > SO_KEEPALIVE = 0 > SO_REUSEADDR = 0 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > TCP_KEEPCNT = 9 > TCP_KEEPIDLE = 72...

21.06.2017 11:45, L.P.H. van Belle via samba пишет: > I suggest before you upgrade do a very good read here. > > https://wiki.samba.org/index.php/Updating_Samba#Notable_Enhancements_and_Changes > > https://wiki.samba.org/index.php/Samba_Features_added/changed_(by_release) > And a summerize version for with all parameter changes as of upgrade from 4.2 up to 4.6 >

...> HOSTS : Don't take care of "puppet" entry. In use use puppet > to configure all my DCs and all my Linux Clients. But it's > currently disabled during the update. > ~# cat /etc/hosts > 127.0.0.1 localhost > 172.16.0.20 fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr > fichdc > 172.16.0.20 > puppet.net.lyc-guillaume-fichet.ac-grenoble.fr puppet ( better would be, create and CNAME in the dns and point that to the DC name ) For now, i also suggest, you change this to : /etc/hosts 127.0.0.1 localhost 172.16.0.20 fichdc.net.lyc-gu...

...o ip=::1 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 added interface eth0 ip=172.16.0.20 bcast=172.16.255.255 netmask=255.255.0.0 resolve_lmhosts: Attempting lmhosts lookup for name fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr<0x20> startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such file or directory Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY...

...ba logs more closely. I'am very worried. I have three DC (fichdc, fichds01, fichds02) but here I talk just about fichdc's logs. -> Almost every times, "AS-REQ" fail for the 3 DCs with something like this : ---------------- Kerberos: AS-REQ FICHDC$@NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR from ipv4:172.16.0.20:59818 for krbtgt/NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR at NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR Kerberos: Client sent patypes: encrypted-timestamp Kerberos: Looking for PKINIT pa-data -- FICHDC$@NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR Kerberos: Looking for ENC-TS...

On Tue, 20 Jun 2017 22:31:02 +1200 Andrew Bartlett via samba <samba at lists.samba.org> wrote: > On Tue, 2017-06-20 at 11:13 +0200, L.P.H. van Belle via samba wrote: > > Now choose, of > > dedicated keytab file = /etc/krb5.keytab > > To be clear, this parameter is not used in the AD DC. > > Thanks, > > Andrew Bartlett > Shouldn't that be

...ot; command that make > bind9 fail. (Full log in attachment). > > ------------------- > starting BIND 9.10.3-P4-Debian <id:ebd72b3> -f -u bind > ... > Loading 'AD DNS Zone' using driver dlopen > samba_dlz: started for DN > DC=lan,DC=lyc-guillaume-fichet,DC=ac-grenoble,DC=fr > samba_dlz: starting configure > samba_dlz: configured writeable zone > 'lan.lyc-guillaume-fichet.ac-grenoble.fr' > samba_dlz: configured writeable zone '16.172.in-addr.arpa' > samba_dlz: configured writeable zone > '_msdcs.lan.lyc-guillaume-fichet.ac-...

Hi samba team ! I'm face with a new problem on a new Samba PDC install (Debian 9). I don't know why, but systemd run multiples "rndc reconfig" commands during the init script. So the bind9 log file show : -> A successful start -> A failed reconfig (samba_dlz Ignoring duplicate zone) at each boot/reboot. So I need to restart bind9 each time manually. I created a wrapper

...l cluster (400 cores). All the servers are running CentOS 7, the cluster is running CentOS6. Time to time on the server I get: ?kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with incorrect client ID And the client xxx.xxx.xxx.xxx freeze whith: ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, still trying ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, still trying ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK There is a discussion on RedHat7 support about this but only o...

...nother VLAN. No idea about this problem. On the server kareline (client is most8pc25), tcpdump says: tcpdump: listening on p5p1, link-type EN10MB (Ethernet), capture size 65535 bytes 18:17:25.844816 IP (tos 0x0, ttl 64, id 19021, offset 0, flags [DF], proto TCP (6), length 60) ??? most8pc25.legi.grenoble-inp.fr.36414 > kareline.legi.grenoble-inp.fr.ssh: Flags [S], cksum 0xfff1 (correct), seq 3060883003, win 26880, options [mss 8960,sackOK,TS val 2888822 ecr 0,nop,wscale 7], length 0 18:17:25.844927 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52) ??? kareline.legi.gren...

research engineer, 3 years, CEA, Grenoble, France Computer Science/Electrical Engineering Contact: Damien Couroussé (damien.courousse at cea.fr) A 3-year research engineer position is available at CEA Grenoble. The topic is related to cybersecurity in mobile applications. Further details and requirements are as follows: We are inviting...

...ing CentOS6. >> >> Time to time on the server I get: >> >> ????? kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with >> ???? incorrect client ID >> >> And the client xxx.xxx.xxx.xxx freeze whith: >> >> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >> ???? still trying >> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK >> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >> ???? still trying >> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK >> >...

...get: >>>> >>>> ????? ?kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with >>>> ????? incorrect client ID >>>> >>>> And the client xxx.xxx.xxx.xxx freeze whith: >>>> >>>> ????? ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >>>> ????? still trying >>>> ????? ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK >>>> ????? ?kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >>>> ????? still trying >>>> ????? ?kernel: nfs: serve...

...r I get: >>>> >>>> ????? kernel: NFSD: client xxx.xxx.xxx.xxx testing state ID with >>>> ???? incorrect client ID >>>> >>>> And the client xxx.xxx.xxx.xxx freeze whith: >>>> >>>> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >>>> ???? still trying >>>> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr OK >>>> ????? kernel: nfs: server xxxxx.legi.grenoble-inp.fr not responding, >>>> ???? still trying >>>> ????? kernel: nfs: server xxx...