Displaying 4 results from an estimated 4 matches for "authentiks".
Did you mean:
authentik
2024 May 14
1
Samba with external SSO
Hi!
My goal is to connect Authentik to Samba (running on Ubuntu).
What I tried (with no success):
- Samba directly to the LDAP outpost (as Authentik can expose it's internal DB like that): this would/will work but Authentik can't use the Samba scheme at the moment.
- Samba -> PAM -> sssd -> LDAP outpost: in theory this worked a long time ago (SMBv1?) but as the password is not
2024 May 14
1
Samba with external SSO
...ires
some of the Samba packages to function.
>
> ...and this is where I got stuck.
>
> What would I need to connect Authentik and Samba together without AD
> being the central place where I store users? (As two-way sync isn't
> in Authentik atm. with AD)
There is your (and Authentiks) problem, AD is the source of truth, it
is where users, groups and computers etc are stored, it is where
passwords are stored (in an unreadable unicode hash). In other words,
AD must be in charge. This is not to say that you could not setup an
external ldap server and sync users & passwords bet...
2024 May 14
1
Samba with external SSO
...ing that up!
>>
>> ...and this is where I got stuck.
>>
>> What would I need to connect Authentik and Samba together without AD
>> being the central place where I store users? (As two-way sync isn't
>> in Authentik atm. with AD)
>
>There is your (and Authentiks) problem, AD is the source of truth, it
>is where users, groups and computers etc are stored, it is where
>passwords are stored (in an unreadable unicode hash). In other words,
>AD must be in charge. This is not to say that you could not setup an
>external ldap server and sync users &am...
2007 Jun 18
3
decode_pw_buffer: incorrect password length
Hello list
I have a problem that i am confronting for long time and i dont get a result.
We use samba 3.0.24 (also tried other versions) with openldap and the
smbldap-tools on Suse Linux SLES9.
We use openldap for user authentikation for samba (objectClass:
sambaSamAccount) and other application like email, apache, squid
(objectClass: shadowAccount and objectClass: posixAccount).
My scope