Hi Rowland, Also change on DCs to [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ? I was used wiki article and there was listed for DC. the config i have post was only für vl0227 (my Master DC) all other Maschines have the config you prefer. OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Please consider the environment and only print this if required.> Am 11.03.2016 um 09:54 schrieb Rowland penny <rpenny at samba.org>: > > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true-------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 842 bytes Desc: Message signed with OpenPGP using GPGMail URL: <http://lists.samba.org/pipermail/samba/attachments/20160311/dfdc756a/signature.sig>
On 11/03/16 09:04, Oliver Werner wrote:> Hi Rowland, > > Also change on DCs to > > [libdefaults] > default_realm = HQ.KONTRAST > dns_lookup_realm = false > dns_lookup_kdc = true > > ?Yes, this is the default, created by the provision.> > I was used wiki article and there was listed for DC.What Samba wiki page did you find this on ?> > the config i have post was only für vl0227 (my Master DC) > > all other Maschines have the config you prefer. >Where did you find the 'kdc' lines: kdc:service ticket lifetime = 1 kdc:user ticket lifetime = 24 kdc:renewal lifetime = 120 Rowland
Ok so maybe i have misunderstood the part with krb5.conf So i will test that one. the kdc lines i have found here: https://wiki.samba.org/index.php/Samba_KDC_Settings <https://wiki.samba.org/index.php/Samba_KDC_Settings> OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de <http://www.kontrast.de/> Amtsgericht Düsseldorf: HRB 26934 Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der Vlist <https://www.facebook.com/kontrast.communication> <https://twitter.com/KONTRAST_de> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh> <http://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Please consider the environment and only print this if required.> Am 11.03.2016 um 10:12 schrieb Rowland penny <rpenny at samba.org>: > > On 11/03/16 09:04, Oliver Werner wrote: >> Hi Rowland, >> >> Also change on DCs to >> >> [libdefaults] >> default_realm = HQ.KONTRAST >> dns_lookup_realm = false >> dns_lookup_kdc = true >> >> ? > > Yes, this is the default, created by the provision. > >> >> I was used wiki article and there was listed for DC. > > What Samba wiki page did you find this on ? > >> >> the config i have post was only für vl0227 (my Master DC) >> >> all other Maschines have the config you prefer. >> > > Where did you find the 'kdc' lines: > > kdc:service ticket lifetime = 1 > kdc:user ticket lifetime = 24 > kdc:renewal lifetime = 120 > > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 842 bytes Desc: Message signed with OpenPGP using GPGMail URL: <http://lists.samba.org/pipermail/samba/attachments/20160311/1b0cccc6/signature.sig>
Ah.. So every 5 days this happens, correct ? Solution, reboot your pc every 4.99999999 days. This way its gets a new ticket and isnt the old reused. As it stats on the site,. " tickets can be renewed for a maximum of 5 days from the date of original issue." Greetz, Louis> -----Oorspronkelijk bericht-----> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner> Verzonden: vrijdag 11 maart 2016 10:22> Aan: Rowland penny> CC: samba at lists.samba.org> Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients>> Ok so maybe i have misunderstood the part with krb5.conf>> So i will test that one.>> the kdc lines i have found here:>> https://wiki.samba.org/index.php/Samba_KDC_Settings> <https://wiki.samba.org/index.php/Samba_KDC_Settings>>>> OLIVER WERNER> System-Administrator>>>>>> Kontrast Communication Services GmbH> Grafenberger Allee 100, 40237 Düsseldorf, Germany>> Fon +49-211-91505-500> Fax +49-211-91505-530> www.kontrast.de <http://www.kontrast.de/>>> Amtsgericht Düsseldorf: HRB 26934> Geschäftsführer: Joachim Fischer, Anja Grote-Lutter, Leontine van der> Vlist>> <https://www.facebook.com/kontrast.communication>> <https://twitter.com/KONTRAST_de>> <http://www.xing.com/companies/kontrastcommunicationservicesgmbh>> <http://www.linkedin.com/company/kontrast-communication-services-gmbh>> <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de>>> Note: The information contained in this message may be privileged and> confidential and protected from disclosure. If the reader of this message> is not the intended recipient, or an employee or agent responsible for> delivering this message to the intended recipient, you are hereby notified> that any dissemination, distribution or copying of this communication is> strictly prohibited. If you have received this communication in error,> please notify us immediately by replying to the message and deleting it> from your computer.>> Please consider the environment and only print this if required.>>> > Am 11.03.2016 um 10:12 schrieb Rowland penny <rpenny at samba.org>:> >> > On 11/03/16 09:04, Oliver Werner wrote:> >> Hi Rowland,> >>> >> Also change on DCs to> >>> >> [libdefaults]> >> default_realm = HQ.KONTRAST> >> dns_lookup_realm = false> >> dns_lookup_kdc = true> >>> >> ?> >> > Yes, this is the default, created by the provision.> >> >>> >> I was used wiki article and there was listed for DC.> >> > What Samba wiki page did you find this on ?> >> >>> >> the config i have post was only für vl0227 (my Master DC)> >>> >> all other Maschines have the config you prefer.> >>> >> > Where did you find the 'kdc' lines:> >> > kdc:service ticket lifetime = 1> > kdc:user ticket lifetime = 24> > kdc:renewal lifetime = 120> >> >> > Rowland> >> > --> > To unsubscribe from this list go to the following URL and read the> > instructions: https://lists.samba.org/mailman/options/samba>> --> To unsubscribe from this list go to the following URL and read the> instructions: https://lists.samba.org/mailman/options/samba