similar to: openindiana GSSAPI failure to samba 4.6.6

OK I found an account with RID 500 but it has another username. I inherited this AD from 15+ years ago. Everything looks fine, all the computer management stuff works and I can manipulate permissions and security BUT running robocopy still gives "Error 1314 Copying N TFS Security to destination Directory ********* A required privilege is not held by the client". I just noticed it does

On 2016-10-11 10:00, Aki Tuomi wrote: > On 11.10.2016 10:43, Juha Koho wrote: >> >> On 2016-10-11 09:18, Aki Tuomi wrote: >>> On 11.10.2016 10:13, Juha Koho wrote: >>>> Hello, >>>> >>>> I have a Dovecot 2.2.25 set up with OpenLDAP back end. I was trying >>>> to >>>> set up a GSSAPI Kerberos authentication with

On Mon, 2016-04-18 at 08:59 +0300, aki.tuomi at dovecot.fi wrote: > > > > On April 18, 2016 at 8:13 AM Braden McDaniel <braden at endoframe.com> > > wrote: > > > > > > On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi wrote: > > > > > > > > > > > > > > > Did you check your setup against > >

Just a heads-up, because this bug took me absolutely ages to chase down, and I want to save others the same pain. Samba is perhaps the most prominent reason why you might find a user in more than 16 groups on a Unix system, and so this bug may at first appear to be a 'Samba issue' (that certainly is why it found it's way to my attention :-) https://www.illumos.org/issues/3691 In

On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi wrote: > > > > Did you check your setup against > http://wiki2.dovecot.org/Authentication/Kerberos I did. ?Of course, it's possible I've still managed to overlook something.? > Also can you provide klist -k on server? I assume you mean the kerberos server: [ root at knock ~]# klist -k Keytab

Administrator is a built in account in the AD. When you provisioned the domain with a password , that was Administrators password. LP On 29 Oct 2023 at 21:36 +0100, Greg Dickie via samba <samba at lists.samba.org>, wrote: > Hey Rowland, > > Sorry, I'm thick. I understand why you would not want to create a linux > user called Administrator but then where will the credentials

On 2016-10-11 11:03, Aki Tuomi wrote: > On 11.10.2016 11:56, Juha Koho wrote: >> >> On 2016-10-11 10:00, Aki Tuomi wrote: >>> On 11.10.2016 10:43, Juha Koho wrote: >>>> >>>> On 2016-10-11 09:18, Aki Tuomi wrote: >>>>> On 11.10.2016 10:13, Juha Koho wrote: >>>>>> Hello, >>>>>>

These are my notes. I?d rather use xattr and configure shares from windows. http://samba.bigbird.es/doku.php?id=samba:configuring-shares Also, have you assigned privileges ? http://samba.bigbird.es/doku.php?id=samba:server-privileges Using autorid as the idmap backend has some limitations. I recommend using rid. Regards. On 27 Oct 2023 at 20:08 +0100, Greg Dickie via samba <samba at

On 27/02/15 18:15, G?nter Kukkukk wrote: > Am 27.02.2015 um 17:55 schrieb Greg Dickie: >> Hi, >> >> I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I?m trying to get it to play nice with samba internal DNS but I?m having some issues. >> >> 1) I?m using on commit, etc triggers in the dhcpd config to call a script that calls

After a nearly 2-year struggle to get Dovecot to do either NTLM or GSSAPI authentication with Samba4 AD/DC, I believe I've finally got it! Infinite thanks to Achim Gottinger for his patience in working this through with me. Although my purpose was for Dovecot to authenticate mail clients, the configuration settings needed were on the Samba side. I hope these instructions can eventually make

Hi, ? I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I?m trying to get it to play nice with samba internal DNS but I?m having some issues. 1) I?m using on commit, etc triggers in the dhcpd config to call a script that calls samba-tool to add, delete or update DNS. This script works fine when I call it from the command line as the dhcpd user but when called

Hi Rowland, Your DHCP is updating bind DLZ directly right. Are you scripted with on commit, etc or just using ddns-update-style? Thanks, Greg On Fri, 2015-02-27 at 17:08 +0000, Rowland Penny wrote: > On 27/02/15 16:55, Greg Dickie wrote: > > Hi, > > > > I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I?m trying to get it to play

Client: Windows XP pro, in an AD 2003 domain, running SecureCRT 4.1.11. I've also got MIT Kerberos for Windows installed on the client, and Leash shows that my tickets ARE forwardable. Server: Solaris 8 Sparc server, with MIT Kerberos (krb5-1.4.1), and OpenSSH 4.0p1. I've created two AD accounts, and extracted keys mapped to "host/hostname.domainname.com at REALM.COM" and

> To: samba at lists.samba.org > From: Achim Gottinger <achim at ag-web.biz> > Date: Mon, 4 Jul 2016 09:29:02 +0200 > Subject: Re: [Samba] How to GSSAPI/Kerberos authenticate with Dovecot > > Am 04.07.2016 um 01:34 schrieb Mark Foley: > > After a nearly 2-year struggle to get Dovecot to do either NTLM or GSSAPI authentication with > > Samba4 AD/DC, I believe

Aki - made your suggested changes, but no joy :( My /etc/krb5.conf: ------SNIP-------- [libdefaults] default_realm = HPRS.LOCAL dns_lookup_realm = false dns_lookup_kdc = true [libdefaults] default_realm = HPRS.LOCAL dns_lookup_kdc = true kdc_timesync = 1 ccache_type = 4 forwardable = true proxiable = true fcc-mit-ticketflags = true [realms] HPRS.LOCAL = {

On Fri, 2015-02-27 at 17:08 +0000, Rowland Penny wrote: > On 27/02/15 16:55, Greg Dickie wrote: > > Hi, > > > > I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I?m trying to get it to play nice with samba internal DNS but I?m having some issues. > > > > 1) I?m using on commit, etc triggers in the dhcpd config to call a

Hi, I am doing some kerberos testing with samba4 using ssh. I have setup samba4 using the howto at http://wiki.samba.org/index.php/Samba4/HOWTO and active directory seems to be working both with Windows and Linux clients. ssh unfortunately is not kerberos authenticating via GSSAPI. The client krb5.conf contains this: ===================================================== [libdefaults]

On 07/04/2016 03:30 AM, Mark Foley wrote: > Actually, I see that you used host.domain.name further down. That's a good substitute for mail.hprs.local. > > Also, not to be a literary critic, but it might not hurt to show an example keytab beneath your > "Make sure your keytab has entry for ...". Just in case people don't exactly know how to "make sure: > > $

My server and client are running Ubuntu Lucid, libvirt-bin 0.7.5-5ubuntu27, qemu-kvm-0.12.3+noroms-0ubuntu9 and I'm using virt-viewer-0.0.3-6ubuntu7.xul19 or virt-manager-0.8.2-2ubuntu8 to connect. I configured SASL2 to use GSSAPI for libvirt following the instructions in the libvirt docs, created a keytab with libvirt/my.fully.qualified.domain at MY-REALM.COM (has a dash fwiw) and pointed

I don't think you are going to have much luck getting 4.17 working on CentOS 7. We recently moved from CentOS 7 (4.13) to Rocky Linux 8 (4.16) and the install process was much easier. On Wed, Jan 18, 2023 at 12:03 PM Greg Dickie via samba < samba at lists.samba.org> wrote: > Ok now, but did 4.10.16? I was just trying to rebuild their source RPM. > > Trying 4.17 on the command