similar to: winbind offline logon = yes - stored credentials questions

Hi, I have a question about Winbinds offline logon capabilities. We are working on integration of laptops with winbind in to our Linux Workstation Managment System, but have some difficulties to verify the desired functionality. For that we are running the latest samba (currently 3.0.25rc1) . Authentication is setup against Windows AD 2003 with R2 extensions (rfc2703bis) . Smb.conf:

Il 15/02/19 13:01, Marco Gaiarin via samba ha scritto: > [...] > The same configuration happen on Debian stretch (at least). I've > effectively test offline logon in the past, but with a sub-5 minutes delay > from latest connected logon. ...but in my experience cached credentials doesn't works even in 5 minutes after a successfully logon: the mistery of winbind cached

I have modified the native config files both Ubuntu and CentOS systems (laptops) to allow them to be added to a genuine Windows Active Directory domain. When on the network logins work fine. ? Take the systems off the network, and the user, even though their credentials are cached, cannot log in. There are several documented bugs on this for both Ubuntu and RedHat. Some people have posted

Mandi! Piviul via samba In chel di` si favelave... > [¹] https://bugzilla.samba.org/show_bug.cgi?id=10455 Very, very interesting thing. The same configuration happen on Debian stretch (at least). I've effectively test offline logon in the past, but with a sub-5 minutes delay from latest connected logon. A note: the manpage for pam_winbind and pam_winbind.conf area bit different; the

Samba 4.7.6-ubuntu Using Ubuntu 18.04.1 LTS logging in, in AD Domain Hi, would like to know where or how i can define the TTL for the cached winbind offline logon. Actually it´s around a day, afterwards i can´t login in my AD-User when i´m still offline but would like to extend the time. Thanks. My smb.conf looks like this: [global] winbind enum users = yes winbind enum groups = yes winbind

Having issues adapting our 3.4 configuration that worked very well using idmap rid in 3.3. It seems like winbind does not cache the credentials despite all of the settings being present. I can set winbind offline via smbcontrol and have it work, but if I reboot the machine (important for my laptops) off the network winbind complains that it can't find the logon server. When disconnected and

Hi all, I have a problem in libpam-winbind: offline logon doesn't seems to work. The first version of samba in which I have found the problem is 4.1 and the last is 4.7 but I fear that newer version are affected too. Hopefully there is a workaround: you have to remove krb5_ccache_type=FILE from /etc/pam.d/common-auth I have opened a bug report[¹] where you can find more details. Any one

I am running Samba 3.5.5 on Solaris 10. I have one machine as a PDC, one as a BDC. If I logon to the domain from a Windows 7 Pro (64-bit) laptop, hibernate the machine, unplug the network cable and wake the machine, I can not unlock the screen. I will get the message "There are currently no logon servers available to service the logon request." Other users have reported this.

Sent with Proton Mail secure email. On Thursday, December 28th, 2023 at 15:59, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 28 Dec 2023 18:18:22 +0000 > bd730c5053df9efb via samba samba at lists.samba.org wrote: > > > Hi all! > > > > As a die hard slackware user and as a part of my learning pam process > > I installed debian

My setup uses sssd on the clients for offline logon, so it's not the same thing you're looking for. I think what you need is for your Samba member server to be an AD DC so it contains it's own credential store. You should check the Samba wiki to figure out how to set your server up as a DC and a file server. That's how mine are setup, so it can be done, but there are some

On Thu, Jun 01, 2017 at 03:11:53PM +0200, Gionatan Danti wrote: > Il 01-06-2017 14:45 Data Control Systems - Mike Elkevizth ha scritto: > >I've had issues with cached credentials with the Ubuntu packages that > >are currently at version 4.3.11. They are a little old, but I haven't > >seen any change logs for the newer versions specifically regarding > >this

On Thu, 14 Feb 2019 09:30:00 +0100 Piviul via samba <samba at lists.samba.org> wrote: > Hi all, I have a problem in libpam-winbind: offline logon doesn't > seems to work. The first version of samba in which I have found the > problem is 4.1 and the last is 4.7 but I fear that newer version are > affected too. Hopefully there is a workaround: you have to remove >

On Thu, 28 Dec 2023 18:18:22 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > Hi all! > > As a die hard slackware user and as a part of my learning pam process > I installed debian bookworm (12.4.0) in a vm and setup a domain > member server per the instructions in the wiki trying to figure out > how debian does it so I can correct some issues I have

On Thu, 28 Dec 2023 19:08:45 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > > > > > > # here are the per-package modules (the "Primary" block) > > > auth [success=2 default=ignore] pam_unix.so nullok > > > auth [success=1 default=ignore] pam_winbind.so cached_login > > > krb5_auth krb5_ccache_type=FILE

Hi All, I tried multiple topics and did some further analyzing regarding this. I found that described error below only appears if I restart the device when connecting from "online" to "offline". If I keep my device running winbind caches the users correctly. Based this I found the following bug report: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1165461 There the

Hi, I have a samba4 AD setup with 2 DCs and one samba4 server with fileshares. If both my DCs are offline i can't login to any of the shares on the samba4 fileshare server with smbclient, but wbinfo -K works fine and ntlm_auth also works fine with offline cached credentials. ??san???root???~???smbcontrol winbind offline ???san???root???~???smbcontrol winbind onlinestatus PID 292952:

Hello, I'd like to have more information about the winbind offline logon. Could I for example use pam_winbind on a linux system (domain member) for ssh, this works fine (the PDC is samba also). What I understood is that if I stop my PDC, I should still be able to connect with ssh as it uses pam_winbind. But that doesn't work :( thx fred

Hi all! As a die hard slackware user and as a part of my learning pam process I installed debian bookworm (12.4.0) in a vm and setup a domain member server per the instructions in the wiki trying to figure out how debian does it so I can correct some issues I have with how it's done in slackware. Everything seems to be working fine except for the winbind offline logons, what I tried was to

Hi there, we have a few SuSE Linux Enterprise Desktop 11 SP1 machines with Samba 3.4.3 joined to Windows Server 2003 domain. The domain has some strict password policies, like limited password tries before account is locked for a few minutes. It works fine when doing online authentication against the domain controllers. The problem rises with cached offline logon. Offline logon works,

Hai Pivial, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Piviul via samba > Verzonden: dinsdag 19 februari 2019 14:58 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind offline logon > > Il 19/02/19 12:02, L.P.H. van Belle via samba ha scritto: > > [...] > > Everything, you can do in NTDOM,