search for: active_directory_integration

...i can kinit and obtain a valid ticket. the only thing i have not done is to join my client which is a headerless openbsd box to samba4, i've searched up and down the web to explain how to join the samba dc the only two pages that comes close is the above and https://wiki.archlinux.org/index.php/Active_Directory_Integration but this for linux, i have found nothing for a non linux server (mail-server) also is it necessary to install samba on the client machines to join the domain? any help would be appreciated or if you can point me to a webpage which gives a clear explanation. shadrock

...39;', scope=ldb.SCOPE_BASE, attrs=['dNSHostName']) _ldb.LdbError: (34, 'NULL Base DN invalid for a base search') My smb.conf is http://pastebin.com/Rp9rQnPm my krb5.conf is http://pastebin.com/vR457pvb the setup instructions i followed were https://wiki.archlinux.org/index.php/Active_Directory_Integration which got me about 90% of the way. let me know what else I can provide, Thanks, -- Shawn Sullivan Shelbydz at gmail.com

...member server and it didn't involve pam. The main difference in the config was the backend which is RID in their case. In the Arch Wiki (which could be outdated) it is explicitely stated that all that is needed for getent to work is a proper nsswitch.conf. https://wiki.archlinux.org/index.php/Active_Directory_Integration Here is a tutorial how to do it on Freebsd 9. The info is based on Samba 3.6 joining a windows dc, though. See http://samba.ninja/2012/05/freebsd-9-samba-ad-member-server/

I am trying to use a keytab for a client machine to authenticate to Samba's own LDAP server. The samba servers (replicated) are ubuntu 16.04 with samba 4.5.2 compiled from source. The client machine is ubuntu 16.04 with stock samba 4.3.11. It has been joined directly to the Samba domain ("net ads join"). I have also extracted a keytab ("net ads keytab create -P")

...erver and it didn't involve pam. The main difference in the config was the backend which is RID in their case. > > In the Arch Wiki (which could be outdated) it is explicitely stated that all that is needed for getent to work is a proper nsswitch.conf. https://wiki.archlinux.org/index.php/Active_Directory_Integration Yes, but it also tells you to install pam-krb5 > > Here is a tutorial how to do it on Freebsd 9. The info is based on Samba 3.6 joining a windows dc, though. See http://samba.ninja/2012/05/freebsd-9-samba-ad-member-server/ The only thing it doesn't mention is PAM, but does freebsd use...

On Thu, 8 Jun 2017 10:41:39 +0100 Alex Matthews via samba <samba at lists.samba.org> wrote: > Rowland - please, don't get in the way of others being constructive to > solving this issue. I do not need to know your opinions. I was being constructive. I will also reply to this and try to be constructive. > > Louis - thanks for your responses. I have just updated to 4.6.4

I finally found it, thanks to a clue from https://wiki.archlinux.org/index.php/Active_Directory_Integration This works: kinit -k -t /etc/krb5.keytab 'WRN-RADTEST$' These don't work: kinit -k -t /etc/krb5.keytab kinit -k -t /etc/krb5.keytab host/wrn-radtest.ad.example.net kinit -k -t /etc/krb5.keytab host/wrn-radtest That is: the keytab contains three different principals: root at wrn-ra...

On 29.10.2015 18:49, Rowland Penny wrote: > On 29/10/15 17:27, Viktor Trojanovic wrote: >> >> >> On 29.10.2015 17:54, Rowland Penny wrote: >>> On 29/10/15 16:21, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 16:16, Rowland Penny wrote: >>>>> On 27/10/15 14:58, Viktor Trojanovic wrote: >>>>>>