similar to: Can't authenticate any more, KVNO mismatch? (alpha 17-19)

Hello all, I've run into the issue described here: http://lists.samba.org/archive/samba-technical/2010-September/073075.html To sum it up, I installed samba4 from git on a debian wheezy system. Initially, I was able to join Windows 7 clients to the AD controller. However, trying to get freenas 8 to join has been failing. In the end, trying to get it to work I changed administrator's

Hello everybody I'm struggling against what seems a really serious trouble: sometimes mail get lost I did all the possible checks, but they seems really lost - I know is absurd, but it seems so it has been noticed by two users on my server: intially I tought that was their mistake (mail deleted, mail into spam, ecc), but it wasn't I deeply checked mail logs, and it seems that

On 2015-10-30 09:07, Davor Vusir wrote: > On 2015-10-29 21:32, Rowland Penny wrote: >> On 29/10/15 19:38, Davor Vusir wrote: >>> >>> >>> mathias dufresne skrev den 2015-10-29 14:31: >>>> I'm thick :D >>>> I don't really understand more :( >>>> >>> >>> No. I'm having trouble explaining. Maybe these

Dear Friends, I am using HTB version 0.85 in CENTOS 4.4 and I configurated to limit bandwidth port 80 (hhtp) and 25 (smtp), but HTB don't work. Below , show files. [root at srv001 htb]# ls -la total 36 drwxrwxrwx 2 root root 4096 Set 11 21:46 . drwxr-xr-x 11 root root 4096 Set 11 00:11 .. -rw-r--r-- 1 root root 19 Fev 12 2002 eth0 -rw-r--r-- 1 root root 89 Set 11 01:01

On 2015-10-29 21:32, Rowland Penny wrote: > On 29/10/15 19:38, Davor Vusir wrote: >> >> >> mathias dufresne skrev den 2015-10-29 14:31: >>> I'm thick :D >>> I don't really understand more :( >>> >> >> No. I'm having trouble explaining. Maybe these threads are more >> enlightning: >>

Hello, I have a question regarding to access permissions. Recently I have upgraded my DC from version 41.12 to 4.1.21. This weekend I have decided to upgrade to 4.3.3. I have noticed that my users weren't able to access the sysvol share after the upgraded to 4.3.3. As a test I have created a new user "test" and I was able to open the sysvol share without any issues. Next I have

Hi On 5 October 2012 21:25, <X-Dimension at gmx.net> wrote: > > -------- Original-Nachricht -------- >> Datum: Thu, 4 Oct 2012 12:22:54 +0200 >> Von: Michael Wood <esiotrot at gmail.com> >> An: Julian Timm <X-Dimension at gmx.net> >> CC: samba at lists.samba.org >> Betreff: Re: [Samba] Samba-tool dbcheck shows "incorrect GUID" after

On 23/06/15 15:02, Luke Bigum wrote: > Hello, > > I am trying to join a third domain controller to an existing Samba 4 domain (sernet samba 4.2.1-17.el6.x86_64) and we're hitting a problem that looks like some bad replication data on certain objects. We get part way through replicating the tree and then it dies on a Sudo Rule object: > > [root at dc03 ~]# /usr/bin/samba-tool

Hi! I have a samba4 domain with two r/w directory controllers. DNS is set up so that domain.com name adresses both servers for redundancy. But workstaions can't contact second server with address \\domain.com becuse the kvno is different that first servers kvno and when using \\domain.com address the kvno seems to be always first servers kvno. Can I somehow increase the second servers kvno

Hello I'm using Samba 4.0.1 also to authenticate users via Kerberos. Once in a while however I have to regenerate a keytab, because for reasons unknown to me, the KVNO is increased by one. I'm not doing anything with an account the SPN is bound to. The KVNO seems to change automagically after few days and service cannot talk to the KDC unless I create a new keytab. What can cause the

I was going to explore the infinite possibilites offered by PAM, winbind, NIS, and alpha17, but it never got past the build stage. Sigh. Note that 2.2.3a built just fine with this same machine, same compiler (GCC 3.0.4), and same OpenSSL (0.9.6b). Not just the same versions, but the files themselves haven't moved. 27% pwd /tmp/pedwards/samba-3.0-alpha17/source 28% make Using FLAGS

Hello, Some time ago I asked about updating from 4.5 -> 4.7 for DC's. I've done it "the long way" and - maybe not the safest. What worries me is this: I added those DC with same names they were previously (basically dc1 -> demote ->  install fresh samba -> dc1 join again as DC with some editing inbetween) the secrets.keytab was created anew, but right now it has

Rowland, it is not a problem of mount but of kerberso ticket: [2019/10/08 10:58:09.626059, 1] ../../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step) gensec_spnego_server_negTokenInit_step: gse_krb5: parsing NEG_TOKEN_INIT content failed (next[(null)]): NT_STATUS_LOGON_FAILURE [2019/10/08 10:58:09.634532, 1] ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token)

Hi, I'm working in an educational environment so I've some obligations that complicate my work. For example in all rooms of practical class all the workstations are in dual boot (Win7 + XUbuntu 14.04). I've tried 2 solutions : 1- Setting the same hostname to both OS, joigning Win7 to AD and using the created (by joining) keytab on linux side for sssd. 2-

Hi All, This is my first post, and I'm new to Samba... I'm working on a Squid project running on RHEL5.3. Samba v 3.4.5-42 x86 and have run into a problem. I use Kerberos authentication on my Squid box. After configuring Squid I joined my RH to my AD domain and then used Samba to generate a Keytab and add an HTTP SPN to it: - export KRB5_KTNAME=FILE:/etc/squid/HTTP.keytab - net ads

In my small home network I have the following setup: main site at home: - AD-DC and - one file (member) server - one windows client and and - one Debian box - one backup server - router as VPN server during week near working place connected by VPN: - AD-DC (set up as VPN client) and - one file server - one windows client All the AD-DCs and the file servers run Samba 4.2-rc2, replication

?:-) best answer ever..? just using samba-tool.. i like that response :-)? ? ? So next time we should also do an check, and that can be can simply with samba-tool :-) Thanks for the reply Banda, most welkom. ? ? Greetz, ? Louis? ? ------------------------- ? Van: banda bassotti [mailto:bandabasotti at gmail.com] Verzonden: dinsdag 5 november 2019 17:10 Aan: L.P.H. van Belle CC: samba at

On 05/11/2019 12:17, banda bassotti via samba wrote: > Luis, ok I'v removed everything, step 1: > > KRB5_KTNAME=FILE:/etc/krb5.keytab2 net ads keytab CREATE -P I have said this once already, but, I will try again ;-) You are creating a keytab, which may or may not be called /etc/krb5.keytab2 > step2: > # KRB5_KTNAME=FILE:/etc/krb5.keytab2 net ads keytab ADD >

Yes, I am planning on upgrading the FreeNAS which will include a newer version of samba. However, I'm quite confident that this is not a duplicate of #12262. To be clear: I'm offering to leave my production system in a degraded state to help myself and the Samba developers understand exactly what's going on here, to determine if this is a new bug, or an existing one. I'm worried

Hello everyone, I have a FreeNAS server (9.10 running samba 4.3.11-GIT-UNKNOWN) that's recently started emitting this error: gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/nas01 at EXAMPLE.COM(kvno 4) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] I've looked at bug 12262 [1], which is why I've cc'd Stefan Metzmacher. I don't