S P Arif Sahari Wibowo
2017-Apr-13 01:17 UTC
[Samba] Samba authentication using non-AD Kerberos?
Hi!
Do you know any example Samba configuration that authenticate to
plain - non-AD, e.g. MIT KDC - Kerberos server? Would you mind
point me to that configuration? What will be the issue of this
kind of configuration?
Thank you.
--
____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo
/___ /___/ /___/ /___ http://www.arifsaha.com/
____/ / / / ____/
On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba wrote:> Hi! > > Do you know any example Samba configuration that authenticate to > plain - non-AD, e.g. MIT KDC - Kerberos server?This a normal and fully supported configuration. It maps to normal unix users.> Would you mind > point me to that configuration? What will be the issue of this > kind of configuration?>From memory:security=user use kerberos keytab = system keytab Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
S P Arif Sahari Wibowo
2017-Apr-13 12:35 UTC
[Samba] Samba authentication using non-AD Kerberos?
On 2017-04-13, 01:58, Andrew Bartlett via samba wrote:> On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via > samba wrote: >> Do you know any example Samba configuration that authenticate >> to plain - non-AD, e.g. MIT KDC - Kerberos server? > > This a normal and fully supported configuration. It maps to > normal unix users.Thanks! is it mean that the OS (Linux) have to setup for login using Kerberos as well? I was looking into samba wiki pages and cannot find documentation for this. Generally most the documentation pages either discussing samba as AD member or standalone.> From memory: > > security=user > > use kerberos keytab = system keytabThanks! Obviously there is no "net ads join" command, so anything to be done instead of that? Thank you. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/