Hello, ??? Is the realm parameter case sensitive? For example does 'realm = example.domain.com' differ from 'realm = EXAMPLE.DOMAIN.COM' in smb.conf? Thanks. ??? - James
The exact answer is Yes and no. :-) Not all software use CAPS in REALM, but there is software that expects CAPS. RFC is not really clear on it, so use CAPS for REALM.. then your never wrong. And to keep it even more clear. Its like this: hostname NETBIOSNAME WORKGROUP REALM dnsdomain.tld (source: https://support.microsoft.com/nl-nl/help/909264/naming-conventions-in-active-directory-for-computers-domains-sites-and ) Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > James Atwell via samba > Verzonden: vrijdag 5 juli 2019 15:13 > Aan: samba > Onderwerp: [Samba] smb.conf realm parameter > > Hello, > > ??? Is the realm parameter case sensitive? For example does 'realm = > example.domain.com' differ from 'realm = EXAMPLE.DOMAIN.COM' in > smb.conf? Thanks. > > ??? - James > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
On 05/07/2019 14:13, James Atwell via samba wrote:> Hello, > > ??? Is the realm parameter case sensitive? For example does 'realm = > example.domain.com' differ from 'realm = EXAMPLE.DOMAIN.COM' in > smb.conf? Thanks. > > ??? - James > >No, parameter names are not case sensitive, but you are actually discussing a 'value' ;-) I do not think the value for realm is case sensitive, in fact, if you check 'man smb.conf', the example for 'realm' is: Example: realm = mysambabox.mycompany.com Why do you ask ? Rowland
Rowland, Do you know is samba is changing the smb value here to uppercase in the background. ( see: https://web.mit.edu/kerberos/krb5-1.12/doc/admin/realm_config.html ) Because if not, i really suggest we follow the recommendations here, (uppercase REALM) a mismatch in realm due to upper/lower case is really hard to find.. Just saying.. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: vrijdag 5 juli 2019 15:26 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] smb.conf realm parameter > > On 05/07/2019 14:13, James Atwell via samba wrote: > > Hello, > > > > ??? Is the realm parameter case sensitive? For example does > 'realm = > > example.domain.com' differ from 'realm = EXAMPLE.DOMAIN.COM' in > > smb.conf? Thanks. > > > > ??? - James > > > > > No, parameter names are not case sensitive, but you are actually > discussing a 'value' ;-) > > I do not think the value for realm is case sensitive, in fact, if you > check 'man smb.conf', the example for 'realm' is: > > Example: realm = mysambabox.mycompany.com > > Why do you ask ? > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
On 05/07/2019 14:31, L.P.H. van Belle via samba wrote:> Rowland, > > Do you know is samba is changing the smb value here to uppercase in the background. > ( see: https://web.mit.edu/kerberos/krb5-1.12/doc/admin/realm_config.html ) > > Because if not, i really suggest we follow the recommendations here, (uppercase REALM) > a mismatch in realm due to upper/lower case is really hard to find.. > > Just saying.. > >Yes and worth saying, but I never gave it much thought before, so I changed my realm line to: ??? realm = samdom.example.com testparm produced this amongst the output: ??? realm = SAMDOM.EXAMPLE.COM So it looks like Samba does uppercase the realm, but interestingly (and I have noticed this before) the 'idmap config' lines: ??? idmap config SAMDOM Become: ??? idmap config samdom Rowland
> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: vrijdag 5 juli 2019 15:44 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] smb.conf realm parameter > > On 05/07/2019 14:31, L.P.H. van Belle via samba wrote: > > Rowland, > > > > Do you know is samba is changing the smb value here to > uppercase in the background. > > ( see: > https://web.mit.edu/kerberos/krb5-1.12/doc/admin/realm_config.html ) > > > > Because if not, i really suggest we follow the > recommendations here, (uppercase REALM) > > a mismatch in realm due to upper/lower case is really hard to find.. > > > > Just saying.. > > > > > Yes and worth saying, but I never gave it much thought before, so I > changed my realm line to: > > ??? realm = samdom.example.com > > testparm produced this amongst the output: > > ??? realm = SAMDOM.EXAMPLE.COM > > So it looks like Samba does uppercase the realm, but > interestingly (and > I have noticed this before) the 'idmap config' lines: > > ??? idmap config SAMDOM > > Become: > > ??? idmap config samdom > > Rowland > >Ah, you found a "mini" bug then. ;-) SAMDOM is the WORKGROUP name, which should also be in CAPS. As shown in the naming conventions of MS link. Greetz, Louis
You are correct. I feel silly. :-[ It has always bugged me that one of my DC's I provisioned has it's realm in lowercase while all others are in uppercase. This is since the 4.0 days as all my DC's are in place upgrades. I have read on the list a few times about it's need to be in CAPS as well. I also notice when comparing databases on DC's the difference is usually 'cn' vs 'CN'. - James On 7/5/2019 9:26 AM, Rowland penny via samba wrote:> On 05/07/2019 14:13, James Atwell via samba wrote: >> Hello, >> >> ??? Is the realm parameter case sensitive? For example does 'realm = >> example.domain.com' differ from 'realm = EXAMPLE.DOMAIN.COM' in >> smb.conf? Thanks. >> >> ??? - James >> >> > No, parameter names are not case sensitive, but you are actually > discussing a 'value' ;-) > > I do not think the value for realm is case sensitive, in fact, if you > check 'man smb.conf', the example for 'realm' is: > > Example: realm = mysambabox.mycompany.com > > Why do you ask ? > > Rowland > > >