Displaying 9 results from an estimated 9 matches for "aes256_cts_hmac_sha1_96".
2019 Jan 10
1
Realm trust between Samba AD and MIT kerberos realm
...AD] DNS[ad.domain]
SID[S-1-5-21-611510720-3146064378-2947260547]
TrustedDomain:
NetbiosName: KRB.REALM
SID: None
Type: 0x3 (MIT)
Direction: 0x2 (OUTBOUND)
Attributes: 0x1 (NON_TRANSITIVE)
PosixOffset: 0x00000000 (0)
kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
However I have already noticed one thing that is broken... if I restart
samba on the Samba DC after creating the realm trust, winbind
immediately dies with the following (and I can't see a workaround -
meaning this isn't a viable deployment even if the trust would otherwise
continue t...
2019 Feb 27
4
status on samba trusts
....company.com
>> SID: S-1-5-21-2509583006-2398556320-3264531554
>> Type: 0x2 (UPLEVEL)
>> Direction: 0x3 (BOTH)
>> Attributes: 0x4 (QUARANTINED_DOMAIN)
>> PosixOffset: 0x00000000 (0)
>> kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
>> root at testad2dc:/var/log/samba# wbinfo --online-status
>> BUILTIN : active connection
>> TESTAD2 : active connection
>> TESTAD1 : active connection
>
>> root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTAD1
>
>> root at testad2dc:/var/log/sam...
2019 Feb 21
2
status on samba trusts
Hi,
Having read the release notes on the status of trusts within samba, we
see for 4.9
> "improved support for trusted domains"
but we also always see these messages:
> "Both sides of the trust need to fully trust each other!"
and
> "DCs of domain A can grant domain admin rights in domain B"
What we would like to achieve is a one-way incoming trust
2019 Feb 26
0
status on samba trusts
...DnsName: testad1.company.com
> SID: S-1-5-21-2509583006-2398556320-3264531554
> Type: 0x2 (UPLEVEL)
> Direction: 0x3 (BOTH)
> Attributes: 0x4 (QUARANTINED_DOMAIN)
> PosixOffset: 0x00000000 (0)
> kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
> root at testad2dc:/var/log/samba# wbinfo --online-status
> BUILTIN : active connection
> TESTAD2 : active connection
> TESTAD1 : active connection
> root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTAD1
> root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTAD2
>...
2019 Feb 28
2
status on samba trusts
...3264531554
>>>>> Type: 0x2 (UPLEVEL)
>>>>> Direction: 0x3 (BOTH)
>>>>> Attributes: 0x4 (QUARANTINED_DOMAIN)
>>>>> PosixOffset: 0x00000000 (0)
>>>>> kerb_EncTypes: 0x18
>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
>>>>> root at testad2dc:/var/log/samba# wbinfo --online-status
>>>>> BUILTIN : active connection
>>>>> TESTAD2 : active connection
>>>>> TESTAD1 : active connection
>>>>
>>>>> root at testad2dc:/var/log/samba# w...
2019 Feb 28
0
status on samba trusts
...; SID: S-1-5-21-2509583006-2398556320-3264531554
>>> Type: 0x2 (UPLEVEL)
>>> Direction: 0x3 (BOTH)
>>> Attributes: 0x4 (QUARANTINED_DOMAIN)
>>> PosixOffset: 0x00000000 (0)
>>> kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
>>> root at testad2dc:/var/log/samba# wbinfo --online-status
>>> BUILTIN : active connection
>>> TESTAD2 : active connection
>>> TESTAD1 : active connection
>>
>>> root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTAD1
>>
>>>...
2019 Feb 28
0
status on samba trusts
...583006-2398556320-3264531554
> >>> Type: 0x2 (UPLEVEL)
> >>> Direction: 0x3 (BOTH)
> >>> Attributes: 0x4 (QUARANTINED_DOMAIN)
> >>> PosixOffset: 0x00000000 (0)
> >>> kerb_EncTypes: 0x18
> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
> >>> root at testad2dc:/var/log/samba# wbinfo --online-status
> >>> BUILTIN : active connection
> >>> TESTAD2 : active connection
> >>> TESTAD1 : active connection
> >>
> >>> root at testad2dc:/var/log/samba# wbinfo -u --domain=...
2019 Feb 28
2
status on samba trusts
...2398556320-3264531554
>>>> Type: 0x2 (UPLEVEL)
>>>> Direction: 0x3 (BOTH)
>>>> Attributes: 0x4 (QUARANTINED_DOMAIN)
>>>> PosixOffset: 0x00000000 (0)
>>>> kerb_EncTypes: 0x18
>>>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
>>>> root at testad2dc:/var/log/samba# wbinfo --online-status
>>>> BUILTIN : active connection
>>>> TESTAD2 : active connection
>>>> TESTAD1 : active connection
>>>
>>>> root at testad2dc:/var/log/samba# wbinfo -u --domain=TESTA...
2019 Mar 05
0
status on samba trusts
...gt;>> Type: 0x2 (UPLEVEL)
>>>>>> Direction: 0x3 (BOTH)
>>>>>> Attributes: 0x4 (QUARANTINED_DOMAIN)
>>>>>> PosixOffset: 0x00000000 (0)
>>>>>> kerb_EncTypes: 0x18
>>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96)
>>>>>> root at testad2dc:/var/log/samba# wbinfo --online-status
>>>>>> BUILTIN : active connection
>>>>>> TESTAD2 : active connection
>>>>>> TESTAD1 : active connection
>>>>>
>>>>>> root at tes...