thr3ads.net - samba - [Samba] ads_connect: Program lacks support for encryption type [Jan 2006]

If this information is useful, please help other people find it:
Share via:

Mason, Roberto

2006-Jan-13 16:48 UTC

[Samba] ads_connect: Program lacks support for encryption type

I'm trying to setup here at my school board an ADS domain member to Windows
2000 Server(s). I've setup Samba, configured nsswitch and /etc/krb5.conf.
I'll be including them on this post. When I run << net join ADS
-U<administrative_user>, I'm prompted for the password and I get this
error message:

 

[2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)

  ads_connect: Program lacks support for encryption type

 

I scoured Google, but I've not been able to find the solution. 

 

Is there a service I'm not running?

 

# Samba config file created using SWAT

# from 0.0.0.0 (0.0.0.0)

# Date: 2006/01/11 16:27:02

 

/etc/samba/smb.conf

# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2006/01/11 16:27:02
 
[global]
   workgroup = MYDOMAIN
   realm = MYDOMAIN.QC.CA
        bind interfaces only = Yes
   security = ADS
        username map = /etc/samba/smbusers
        log level = 1
        printcap name = cups
        wins server = xxx.xxx.xxx.xxx 
        ldap ssl = no
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   template shell = /bin/bash
 
   winbind use default domain = no
[homes]
        valid users = %S
        read only = No
        browseable = No
 
#masonr is a local user
[storage2]
        path = /drive
        valid users = masonr
        write list = masonr
        force user = nobody
        force group = nobody
        read only = No

 

etc/nsswitch.conf

 

passwd:     files winbind

shadow:     files

group:      files winbind

 

#hosts:     db files ldap nis dns

hosts:      files winbind dns

 

# Example - obey only what ldap tells us...

#services:  ldap [NOTFOUND=return] files

#networks:  ldap [NOTFOUND=return] files

#protocols: ldap [NOTFOUND=return] files

#rpc:       ldap [NOTFOUND=return] files

#ethers:    ldap [NOTFOUND=return] files

 

bootparams: files

ethers:     files

netmasks:   files

networks:   files dns

protocols:  files

rpc:        files

services:   files

netgroup:   files

publickey:  files

automount:  files

aliases:    files

 

/etc/krb5.conf

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
 
[libdefaults]
default_realm = MYDOMAIN.QC.CA
default_etypes = des-cbc-crc des-cbc-md5
default_etypes_des = des-cbc-crc des-cbc-md5
 
 
[realms]
MYDOMAIN.QC.CA = {
   default_domain = mydomain.qc.ca
   kdc = server1.mydomain.qc.ca:88
   kdc = server2.mydomain.qc.ca:88
   admin_server = server1.mydomain.qc.ca:749
}
 
[domain_realm]
.mydomain.qc.ca = MYDOMAIN.QC.CA
mydomain.qc.ca = MYDOMAIN.QC.CA

 

 

 

 

Roberto Mason

IT Department

Sir Wilfrid Laurier School Board

235 Mont?e Lesage
Rosem?re, Qu?bec,
J7A 4Y6

Barry Smoke

2006-Jan-13 17:12 UTC

head link

[Samba] ads_connect: Program lacks support for encryption type

I had this same problem, 
banged my head against desk for 3 hours...

samba 3.0.21a + rhel4, and I had the same krb5.conf setup.

what was strange was that we could get to it by ip address(so Kerberos + winbind
was working, and wbinfo -u, and wbinfo -g worked), yet when we tried by name, it
wouldn't work, kept prompting for password(and saying the encryption type
error in the logs)...

I thought that our windows 2003 server upgrade got the better of us, even though
I had 4 other servers configured the same way that were still
working...(thinking it was something new when running net ads join command that
wasn't working)...

well, it must have been wins, or something, because about 3 hours later, it
started working properly.  I have no explanation why(and would love one BTW.)

Barry Smoke
Network Administrator
AR Division of Legislative Audit


-----Original Message-----
From: samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org
[mailto:samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org] On Behalf Of
Mason, Roberto
Sent: Friday, January 13, 2006 10:48 AM
To: samba@lists.samba.org
Subject: [Samba] ads_connect: Program lacks support for encryption type

I'm trying to setup here at my school board an ADS domain member to Windows
2000 Server(s). I've setup Samba, configured nsswitch and /etc/krb5.conf.
I'll be including them on this post. When I run << net join ADS
-U<administrative_user>, I'm prompted for the password and I get this
error message:

 

[2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)

  ads_connect: Program lacks support for encryption type

 

I scoured Google, but I've not been able to find the solution. 

 

Is there a service I'm not running?

 

# Samba config file created using SWAT

# from 0.0.0.0 (0.0.0.0)

# Date: 2006/01/11 16:27:02

 

/etc/samba/smb.conf

# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2006/01/11 16:27:02
 
[global]
   workgroup = MYDOMAIN
   realm = MYDOMAIN.QC.CA
        bind interfaces only = Yes
   security = ADS
        username map = /etc/samba/smbusers
        log level = 1
        printcap name = cups
        wins server = xxx.xxx.xxx.xxx 
        ldap ssl = no
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   template shell = /bin/bash
 
   winbind use default domain = no
[homes]
        valid users = %S
        read only = No
        browseable = No
 
#masonr is a local user
[storage2]
        path = /drive
        valid users = masonr
        write list = masonr
        force user = nobody
        force group = nobody
        read only = No

 

etc/nsswitch.conf

 

passwd:     files winbind

shadow:     files

group:      files winbind

 

#hosts:     db files ldap nis dns

hosts:      files winbind dns

 

# Example - obey only what ldap tells us...

#services:  ldap [NOTFOUND=return] files

#networks:  ldap [NOTFOUND=return] files

#protocols: ldap [NOTFOUND=return] files

#rpc:       ldap [NOTFOUND=return] files

#ethers:    ldap [NOTFOUND=return] files

 

bootparams: files

ethers:     files

netmasks:   files

networks:   files dns

protocols:  files

rpc:        files

services:   files

netgroup:   files

publickey:  files

automount:  files

aliases:    files

 

/etc/krb5.conf

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
 
[libdefaults]
default_realm = MYDOMAIN.QC.CA
default_etypes = des-cbc-crc des-cbc-md5
default_etypes_des = des-cbc-crc des-cbc-md5
 
 
[realms]
MYDOMAIN.QC.CA = {
   default_domain = mydomain.qc.ca
   kdc = server1.mydomain.qc.ca:88
   kdc = server2.mydomain.qc.ca:88
   admin_server = server1.mydomain.qc.ca:749
}
 
[domain_realm]
.mydomain.qc.ca = MYDOMAIN.QC.CA
mydomain.qc.ca = MYDOMAIN.QC.CA

 

 

 

 

Roberto Mason

IT Department

Sir Wilfrid Laurier School Board

235 Mont?e Lesage
Rosem?re, Qu?bec,
J7A 4Y6

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

todd stecher

2006-Jan-13 21:13 UTC

head link

[Samba] ads_connect: Program lacks support for encryption type

On Fri, 2006-01-13 at 11:47 -0500, Mason, Roberto wrote:
> [libdefaults]
> default_realm = MYDOMAIN.QC.CA
> default_etypes = des-cbc-crc des-cbc-md5
> default_etypes_des = des-cbc-crc des-cbc-md5
>  
2 things:

1) You should get a network sniff of the failed operation - that will
conclusively tell you what etype you're having problems with in the
AS_REQ or TGS_REQ.  

Some passwords can't be converted to DES keys, which could lead to these
types of errors.  Your MS DC will also have some system event logs from
the KDC.

2) What distribution of MIT Kerberos are you using?  

Windows doesn't really support des-cbc-crc that well, so you should
probably put des-cbc-md5 first in the default_etypes list.  Optionally,
if you're running newer versions of MIT Kerberos ( > 1.4.xxx), it
supports the RC4-HMAC etype (built-in Windows etype), which may work
better for you.

Later,
Todd Stecher

pfb4212@rit.edu

2006-Jan-14 00:10 UTC

head link

[Samba] RE: ads_connect: Program lacks support for encryption type

Roberto,
  Check your clocks on both your AD server and samba box.  They need to be 
as close to eachother as possible.
Also, check your Kerberos connection using kinit and kpasswd.  That will 
tell you if your Kerberos is setup properly.
Also, what version of samba are you running?
I think that I remember it using DES encryption...  you could also check 
your AD Policy to see if "third-party smb server" is disabled or if 
"secure channel" is enabled.
After that, then try your net join again.     Hope that helps.
 Cheers, Peter.

----- Forwarded by Peter Brunnengr?ber/Bccnetworks on 13.01.2006 18:53 
-----

samba-bounces+pfb4212=rit.edu@lists.samba.org wrote on 13.01.2006 
12:12:37:
> -----Original Message-----
> From: samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org [mailto:
> samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org] On Behalf Of 
> Mason, Roberto
> Sent: Friday, January 13, 2006 10:48 AM
> To: samba@lists.samba.org
> Subject: [Samba] ads_connect: Program lacks support for encryption type
> 
> I'm trying to setup here at my school board an ADS domain member to 
> Windows 2000 Server(s). I've setup Samba, configured nsswitch and 
> /etc/krb5.conf. I'll be including them on this post. When I run
<<
> net join ADS -U<administrative_user>, I'm prompted for the
password
> and I get this error message:
> 
> 
> 
> [2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)
> 
>   ads_connect: Program lacks support for encryption type
> 
> 
> 
> I scoured Google, but I've not been able to find the solution. 
> 
> 
> 
> Is there a service I'm not running?
> 
> 
> 
> # Samba config file created using SWAT
> 
> # from 0.0.0.0 (0.0.0.0)
> 
> # Date: 2006/01/11 16:27:02
> 
> 
> 
> /etc/samba/smb.conf
> 
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2006/01/11 16:27:02
> 
> [global]
>    workgroup = MYDOMAIN
>    realm = MYDOMAIN.QC.CA
>         bind interfaces only = Yes
>    security = ADS
>         username map = /etc/samba/smbusers
>         log level = 1
>         printcap name = cups
>         wins server = xxx.xxx.xxx.xxx 
>         ldap ssl = no
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    template shell = /bin/bash
> 
>    winbind use default domain = no
> [homes]
>         valid users = %S
>         read only = No
>         browseable = No
> 
> #masonr is a local user
> [storage2]
>         path = /drive
>         valid users = masonr
>         write list = masonr
>         force user = nobody
>         force group = nobody
>         read only = No
> 
> 
> 
> etc/nsswitch.conf
> 
> 
> 
> passwd:     files winbind
> 
> shadow:     files
> 
> group:      files winbind
> 
> 
> 
> #hosts:     db files ldap nis dns
> 
> hosts:      files winbind dns
> 
> 
> 
> # Example - obey only what ldap tells us...
> 
> #services:  ldap [NOTFOUND=return] files
> 
> #networks:  ldap [NOTFOUND=return] files
> 
> #protocols: ldap [NOTFOUND=return] files
> 
> #rpc:       ldap [NOTFOUND=return] files
> 
> #ethers:    ldap [NOTFOUND=return] files
> 
> 
> 
> bootparams: files
> 
> ethers:     files
> 
> netmasks:   files
> 
> networks:   files dns
> 
> protocols:  files
> 
> rpc:        files
> 
> services:   files
> 
> netgroup:   files
> 
> publickey:  files
> 
> automount:  files
> 
> aliases:    files
> 
> 
> 
> /etc/krb5.conf
> 
> [logging]
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
> default_realm = MYDOMAIN.QC.CA
> default_etypes = des-cbc-crc des-cbc-md5
> default_etypes_des = des-cbc-crc des-cbc-md5
> 
> 
> [realms]
> MYDOMAIN.QC.CA = {
>    default_domain = mydomain.qc.ca
>    kdc = server1.mydomain.qc.ca:88
>    kdc = server2.mydomain.qc.ca:88
>    admin_server = server1.mydomain.qc.ca:749
> }
> 
> [domain_realm]
> .mydomain.qc.ca = MYDOMAIN.QC.CA
> mydomain.qc.ca = MYDOMAIN.QC.CA
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Roberto Mason
> 
> IT Department
> 
> Sir Wilfrid Laurier School Board
> 
> 235 Mont?e Lesage
> Rosem?re, Qu?bec,
> J7A 4Y6
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

Mason, Roberto

2006-Jan-18 20:12 UTC

head link

[Samba] RE: ads_connect: Program lacks support for encryption type

My Clock is synchronizing with the server here. I have just one entry in
/etc/ntp.conf. When I do Klist, I don't get any tickets. What I get for
server principal though is krbtgt/SWLAURIERSB.QC.CA@SWLAURIERSB.QC.CA. I'm
not familiar with Kerberos, but to me this looks wrong, or maybe not. I ran
kinit. It completed with no message of any kind. I presume that's normal.
When I ran kpasswd masonr@SWLAURIERSB.QC.CA, it asked for my passwd, which I
entered, and then it asked me for a new password, so it seems to be working.

I'm running samba 3.0.21a.

Roberto Mason
IT Department
Sir Wilfrid Laurier School Board
235 Mont?e Lesage
Rosem?re, Qu?bec,
J7A 4Y6


-----Original Message-----
From: samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org
[mailto:samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org] On Behalf Of
pfb4212@rit.edu
Sent: Friday, January 13, 2006 7:09 PM
To: samba@lists.samba.org
Subject: [Samba] RE: ads_connect: Program lacks support for encryption type

Roberto,
  Check your clocks on both your AD server and samba box.  They need to be 
as close to eachother as possible.
Also, check your Kerberos connection using kinit and kpasswd.  That will 
tell you if your Kerberos is setup properly.
Also, what version of samba are you running?
I think that I remember it using DES encryption...  you could also check 
your AD Policy to see if "third-party smb server" is disabled or if 
"secure channel" is enabled.
After that, then try your net join again.     Hope that helps.
 Cheers, Peter.

----- Forwarded by Peter Brunnengr?ber/Bccnetworks on 13.01.2006 18:53 
-----

samba-bounces+pfb4212=rit.edu@lists.samba.org wrote on 13.01.2006 
12:12:37:
> -----Original Message-----
> From: samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org [mailto:
> samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org] On Behalf Of 
> Mason, Roberto
> Sent: Friday, January 13, 2006 10:48 AM
> To: samba@lists.samba.org
> Subject: [Samba] ads_connect: Program lacks support for encryption type
> 
> I'm trying to setup here at my school board an ADS domain member to 
> Windows 2000 Server(s). I've setup Samba, configured nsswitch and 
> /etc/krb5.conf. I'll be including them on this post. When I run
<<
> net join ADS -U<administrative_user>, I'm prompted for the
password
> and I get this error message:
> 
> 
> 
> [2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)
> 
>   ads_connect: Program lacks support for encryption type
> 
> 
> 
> I scoured Google, but I've not been able to find the solution. 
> 
> 
> 
> Is there a service I'm not running?
> 
> 
> 
> # Samba config file created using SWAT
> 
> # from 0.0.0.0 (0.0.0.0)
> 
> # Date: 2006/01/11 16:27:02
> 
> 
> 
> /etc/samba/smb.conf
> 
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2006/01/11 16:27:02
> 
> [global]
>    workgroup = MYDOMAIN
>    realm = MYDOMAIN.QC.CA
>         bind interfaces only = Yes
>    security = ADS
>         username map = /etc/samba/smbusers
>         log level = 1
>         printcap name = cups
>         wins server = xxx.xxx.xxx.xxx 
>         ldap ssl = no
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    template shell = /bin/bash
> 
>    winbind use default domain = no
> [homes]
>         valid users = %S
>         read only = No
>         browseable = No
> 
> #masonr is a local user
> [storage2]
>         path = /drive
>         valid users = masonr
>         write list = masonr
>         force user = nobody
>         force group = nobody
>         read only = No
> 
> 
> 
> etc/nsswitch.conf
> 
> 
> 
> passwd:     files winbind
> 
> shadow:     files
> 
> group:      files winbind
> 
> 
> 
> #hosts:     db files ldap nis dns
> 
> hosts:      files winbind dns
> 
> 
> 
> # Example - obey only what ldap tells us...
> 
> #services:  ldap [NOTFOUND=return] files
> 
> #networks:  ldap [NOTFOUND=return] files
> 
> #protocols: ldap [NOTFOUND=return] files
> 
> #rpc:       ldap [NOTFOUND=return] files
> 
> #ethers:    ldap [NOTFOUND=return] files
> 
> 
> 
> bootparams: files
> 
> ethers:     files
> 
> netmasks:   files
> 
> networks:   files dns
> 
> protocols:  files
> 
> rpc:        files
> 
> services:   files
> 
> netgroup:   files
> 
> publickey:  files
> 
> automount:  files
> 
> aliases:    files
> 
> 
> 
> /etc/krb5.conf
> 
> [logging]
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
> default_realm = MYDOMAIN.QC.CA
> default_etypes = des-cbc-crc des-cbc-md5
> default_etypes_des = des-cbc-crc des-cbc-md5
> 
> 
> [realms]
> MYDOMAIN.QC.CA = {
>    default_domain = mydomain.qc.ca
>    kdc = server1.mydomain.qc.ca:88
>    kdc = server2.mydomain.qc.ca:88
>    admin_server = server1.mydomain.qc.ca:749
> }
> 
> [domain_realm]
> .mydomain.qc.ca = MYDOMAIN.QC.CA
> mydomain.qc.ca = MYDOMAIN.QC.CA
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Roberto Mason
> 
> IT Department
> 
> Sir Wilfrid Laurier School Board
> 
> 235 Mont?e Lesage
> Rosem?re, Qu?bec,
> J7A 4Y6
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Mason, Roberto

2006-Jan-19 21:28 UTC

head link

[Samba] RE: ads_connect: Program lacks support for encryption type

Sorry, I do have a ticket. It's the Kerberos 4 Ticket I don't have, so
that is not the problem.

Here's the klist


[root@secretary ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: support@SWLAURIERSB.QC.CA

Valid starting     Expires            Service principal
01/19/06 14:34:41  01/20/06 00:34:44  krbtgt/SWLAURIERSB.QC.CA@SWLAURIERSB.QC.CA
        renew until 01/20/06 14:34:41


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

Roberto Mason
IT Department
Sir Wilfrid Laurier School Board
235 Mont?e Lesage
Rosem?re, Qu?bec,
J7A 4Y6


-----Original Message-----
From: samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org
[mailto:samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org] On Behalf Of
Mason, Roberto
Sent: Wednesday, January 18, 2006 3:12 PM
To: samba@lists.samba.org
Subject: RE: [Samba] RE: ads_connect: Program lacks support for encryption type

My Clock is synchronizing with the server here. I have just one entry in
/etc/ntp.conf. When I do Klist, I don't get any tickets. What I get for
server principal though is krbtgt/SWLAURIERSB.QC.CA@SWLAURIERSB.QC.CA. I'm
not familiar with Kerberos, but to me this looks wrong, or maybe not. I ran
kinit. It completed with no message of any kind. I presume that's normal.
When I ran kpasswd masonr@SWLAURIERSB.QC.CA, it asked for my passwd, which I
entered, and then it asked me for a new password, so it seems to be working.

I'm running samba 3.0.21a.

Roberto Mason
IT Department
Sir Wilfrid Laurier School Board
235 Mont?e Lesage
Rosem?re, Qu?bec,
J7A 4Y6


-----Original Message-----
From: samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org
[mailto:samba-bounces+masonr=swlauriersb.qc.ca@lists.samba.org] On Behalf Of
pfb4212@rit.edu
Sent: Friday, January 13, 2006 7:09 PM
To: samba@lists.samba.org
Subject: [Samba] RE: ads_connect: Program lacks support for encryption type

Roberto,
  Check your clocks on both your AD server and samba box.  They need to be 
as close to eachother as possible.
Also, check your Kerberos connection using kinit and kpasswd.  That will 
tell you if your Kerberos is setup properly.
Also, what version of samba are you running?
I think that I remember it using DES encryption...  you could also check 
your AD Policy to see if "third-party smb server" is disabled or if 
"secure channel" is enabled.
After that, then try your net join again.     Hope that helps.
 Cheers, Peter.

----- Forwarded by Peter Brunnengr?ber/Bccnetworks on 13.01.2006 18:53 
-----

samba-bounces+pfb4212=rit.edu@lists.samba.org wrote on 13.01.2006 
12:12:37:
> -----Original Message-----
> From: samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org [mailto:
> samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org] On Behalf Of 
> Mason, Roberto
> Sent: Friday, January 13, 2006 10:48 AM
> To: samba@lists.samba.org
> Subject: [Samba] ads_connect: Program lacks support for encryption type
> 
> I'm trying to setup here at my school board an ADS domain member to 
> Windows 2000 Server(s). I've setup Samba, configured nsswitch and 
> /etc/krb5.conf. I'll be including them on this post. When I run
<<
> net join ADS -U<administrative_user>, I'm prompted for the
password
> and I get this error message:
> 
> 
> 
> [2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)
> 
>   ads_connect: Program lacks support for encryption type
> 
> 
> 
> I scoured Google, but I've not been able to find the solution. 
> 
> 
> 
> Is there a service I'm not running?
> 
> 
> 
> # Samba config file created using SWAT
> 
> # from 0.0.0.0 (0.0.0.0)
> 
> # Date: 2006/01/11 16:27:02
> 
> 
> 
> /etc/samba/smb.conf
> 
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2006/01/11 16:27:02
> 
> [global]
>    workgroup = MYDOMAIN
>    realm = MYDOMAIN.QC.CA
>         bind interfaces only = Yes
>    security = ADS
>         username map = /etc/samba/smbusers
>         log level = 1
>         printcap name = cups
>         wins server = xxx.xxx.xxx.xxx 
>         ldap ssl = no
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    template shell = /bin/bash
> 
>    winbind use default domain = no
> [homes]
>         valid users = %S
>         read only = No
>         browseable = No
> 
> #masonr is a local user
> [storage2]
>         path = /drive
>         valid users = masonr
>         write list = masonr
>         force user = nobody
>         force group = nobody
>         read only = No
> 
> 
> 
> etc/nsswitch.conf
> 
> 
> 
> passwd:     files winbind
> 
> shadow:     files
> 
> group:      files winbind
> 
> 
> 
> #hosts:     db files ldap nis dns
> 
> hosts:      files winbind dns
> 
> 
> 
> # Example - obey only what ldap tells us...
> 
> #services:  ldap [NOTFOUND=return] files
> 
> #networks:  ldap [NOTFOUND=return] files
> 
> #protocols: ldap [NOTFOUND=return] files
> 
> #rpc:       ldap [NOTFOUND=return] files
> 
> #ethers:    ldap [NOTFOUND=return] files
> 
> 
> 
> bootparams: files
> 
> ethers:     files
> 
> netmasks:   files
> 
> networks:   files dns
> 
> protocols:  files
> 
> rpc:        files
> 
> services:   files
> 
> netgroup:   files
> 
> publickey:  files
> 
> automount:  files
> 
> aliases:    files
> 
> 
> 
> /etc/krb5.conf
> 
> [logging]
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
> default_realm = MYDOMAIN.QC.CA
> default_etypes = des-cbc-crc des-cbc-md5
> default_etypes_des = des-cbc-crc des-cbc-md5
> 
> 
> [realms]
> MYDOMAIN.QC.CA = {
>    default_domain = mydomain.qc.ca
>    kdc = server1.mydomain.qc.ca:88
>    kdc = server2.mydomain.qc.ca:88
>    admin_server = server1.mydomain.qc.ca:749
> }
> 
> [domain_realm]
> .mydomain.qc.ca = MYDOMAIN.QC.CA
> mydomain.qc.ca = MYDOMAIN.QC.CA
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Roberto Mason
> 
> IT Department
> 
> Sir Wilfrid Laurier School Board
> 
> 235 Mont?e Lesage
> Rosem?re, Qu?bec,
> J7A 4Y6
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reasonably Related Threads

Search for more seemingly similar threads

samba - Jan 2006 - ads_connect: Program lacks support for encryption type

[Samba] ads_connect: Program lacks support for encryption type

[Samba] ads_connect: Program lacks support for encryption type

[Samba] ads_connect: Program lacks support for encryption type

[Samba] RE: ads_connect: Program lacks support for encryption type

[Samba] RE: ads_connect: Program lacks support for encryption type

[Samba] RE: ads_connect: Program lacks support for encryption type

Reasonably Related Threads