search for: authet

Hi, I have found a general way to configure hostbased authentication using OpenSSH on several , ( I created a howto about it at http://www.omega.telia.net/vici/openssh ) but there is one remaining problem which I still could not solve. I would like to make hostbased authetication work without DNS resolving available both on the server and client side. First I added the IP addresses to the appropriate config files on the server side and if the DNS service does not work on the servers side, the hosbased authentication works fine. But when I disable DNS service only...

...l replication. The AD Database is comming from an classic upgrade and i have "idmap_ldb:use rfc2307 = yes" in my smb.conf. Some groups like for example "Domain Guests" did not exist in my old db so they got there uid from winbind. Same goes for the internal groups like "Autheticated Users". The assigned UID's from winbind differ between the four servers. On the main site GPO's applied just fine an test on an client with "gpupdate /force" reported no errors. However on the other sites the GPO's did not apply and gpupdate /force mentioned no re...

hi all, is there any way to force all sip peers to re-authenticate themselves? thanks, Paradise Dove

Does anyone have experience setting up a [homes] share that can be automounted for users logging in to clients using winbind authentication?

Hi to all, I just installed samba-4.0.0alpha1 on RedHat ES 4 in hope it will solve my problem to authenticate users against Active Directory 2003. But the problem is smb.conf for this type of scenario. Does anyone have smb.conf only to authenticate users against Active Directory. q1. do I need still have kerberos server? q2. how to start samba as deamon (smb -D) or is there any document how

Hi:) I try to make an ubuntu with samba to authenticate users from AD. samba, krb5 installed. smb.conf - no errors krb5.conf - no errors it's workig: kinit klist i can see the shares from AD I added the linux samba server in domain: kinit gabriel@MYDOMAIN.LOCAL net ads join -U gabriel%password after that i've got a message: Using short domain name -- MYDOMAIN Disabled account

Hello list... I have samba 4.1.17 installed and in the same server, I have l2tp. Samba it configurated as active directory domain controller. I am trying authetication against samba with winbind. I want to know how to restrict authentication for certain group. I put this line in the end of l2tp conf file: ntlm_auth-helper '/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 --require-membership-of="domain\\VPN"' But I get this in the log...

Hello again list! I'm attempting to use the following command in a startup batch file: net use U: \\mail\%U however when win9* runs this file on logging in, it tries to map \\mail\u Why isn't samba preprocessing this directive? (\\mail is NOT the name of the samba server doing the login authetication!) Please respond to mblinn@peopleplaces.org -- my mail client may be configured screwy with its reply-to address. Thanks! Michael Blinn People Places, Inc.

...just one more problem, namely homedirs. I want every user to have a homedir to store for example his profile. This has to exist, and it would be nice if I could use pam_mkhomedir to create it, but (without testing) I figure that samba has to authenticate against pam, am I right? But if I let samba autheticate against pam, do I still have all the information available, when autenticating against ldap? What I planned is this: User log onto pdc -> authentication against pam -> pam autheticates against ldap | -> if homedir exists everything is fine...

Hi, I just got a comment from one of my IBM support engineeres that there is a problem with auth-passwd.c only calling authenticate() once. He claims it should potentially be called several times, in case several authetication methods are defined in /etc/security/user. F.ex.: SYSTEM = "NIS and DCE" Suggested (untested) patch should look like: ----------------- cut -------------------- % diff -u auth-passwd.c-original auth-passwd.c --- auth-passwd.c-original 2002-08-12 18:43:25.000000000 +0200...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We have a samba 3.0.14a server connected via NT4 to an ADS domain, and after a few hours of access, winbind stops autheticating, and gives errors like this: [2005/07/29 09:32:33, 1] nsswitch/winbindd_group.c:fill_grent_mem(133) ~ could not lookup membership for group rid S-1-5-21-1957994488-1409082233-725345543-512 in domain MERCYHOME (error: NT_STATUS_INSUFFICIENT_RESOURCES) [2005/07/29 09:32:33, 1] nsswitch/winbi...

For quite some time I am trying to get samba 3.0.0 woring with an LDAP backend. The latest problem I have is that user authenticaltion doe not work. The passwords are right, added them with the ldaptools from the samba source, I can browse the ldap server, samba aslo can successfully search (see logfile level 10 below), but just no successfull password verification. I aslo attached my smb.conf,

...mba.org> : > > > Am 30.08.2016 um 15:05 schrieb Gilberto Nunes via samba: > >> Hello list... >> >> I have samba 4.1.17 installed and in the same server, I have l2tp. >> Samba it configurated as active directory domain controller. >> >> I am trying authetication against samba with winbind. >> I want to know how to restrict authentication for certain group. >> I put this line in the end of l2tp conf file: >> >> ntlm_auth-helper '/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 >> --require-membership-of="domai...

...uch more fundamental question... how come here is > difference between (rsync over ssh) vs (rsync to rsyncd)??! > > MJ > Looks like on DC4 3000300 is mapped to an computer account for "proxmox". On DC2/DC32 3000009 should map to S-1-5-18 (Local System) and 3000300 S-1-5-11 (Autheticated Users). These are both Security groups which do not resolv via winbindd so they can not be mapped. (you may add manual mapping via the --groupmap on your rsync commandline). I assume you can delete the mapping for 3000300 on dc4 and change the mapping for S-1-5-11 to 3000300 (and S-1-5-1...

...my setup . Now what i want is I want to know if there is any method that i can setup in dovecot to lookup for a user locally first and then go for a remote search for the user( ie in mysql database) So that we get the user searched locally before querying the mysql database Local + mysql database authetication i want to be in parallel with each other. Please show some light on this . Thanks and Regards Parth Monga

Hi all, I get some problems using scp (ssh1) with authentication via the authetication agent mechanism on HP-UX 11. I have to distribute some files step by step from one machine to several others. 1. After approximately 10 scp processes the conncetion to the authetication agent breaks and the socket doesn't work for this session anymore. That means I have to log off and...

Dear All, I have searched the email archive but i didn't find a clear answer(maybe I miss it) ^^ 1. Does rsync run on TCP/IP? 2. Without ssh, then rsync will be transferred in plain text? 3. Does rsync support Samba? Am I true to say that rsync, which is mainly on user authetication, is transparent to the storage like ftp? Any help to any questions will be appreciated! Thank You! Regards, Fred

...ar, @foobar > force user = foobar > force group = foobar > create mode = 771 So I'd still have to know in advance which users I want to allow (andy, bert, charly...)? I think I tried force user at one point to try and ignore the username that win95 sent over, but samba seemed to autheticate based on their username anyway. -Yanek.

...using samba since many years in our Solaris environment. I have got a question concerning the authentication: We are building up new branch offices. Every branch office is connected thru a vpn link to our main company. The people in the branch offices have got a samba file server to work with. The authetication is realised with Microsoft Active Directory, which is installed in our main office (server). How can I make sure that the authentication is still working if the VPN Link is down (authentication has to made on the solaris samba server directly) ????? Is there kind of failover function in samb...

Hi Still trying to use a Samba server as a PDC for our Netapp filers , I'm searching the good configuration to put in smb.conf to let samba use UNICODE during authetication process, what do I have to write in smb.conf file to do so ? ( using 3.0 Alpha 21 ) Thanks a lot -- Frank Bonnet