search for: bassotti

...cess \\oldsamba\sharename the logs report the absence of the kerberos ticket, to overcome this I have to re-import the oldsamba keytab with ktutil. ciao. Il giorno mer 9 ott 2019 alle ore 09:16 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 09/10/2019 04:34, banda bassotti via samba wrote: > > Rowland, it is not a problem of mount but of kerberso ticket: > > > > [2019/10/08 10:58:09.626059, 1] > > ../../auth/gensec/spnego.c:1218(gensec_spnego_server_negTokenInit_step) > > gensec_spnego_server_negTokenInit_step: gse_krb5: parsing >...

...the problem seems to be related to this bug: https://bugzilla.samba.org/show_bug.cgi?id=6750 I try therefore to set machine password timeout = 0 Il giorno mar 29 ott 2019 alle ore 11:11 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 29/10/2019 10:04, banda bassotti wrote: > > I had already done it: > > > > # samba-tool spn list newsamba\$ > > newsamba$ > > User CN=newsamba,CN=Computers,DC=domain,DC=corp has the following > > servicePrincipalName: > > HOST/NEWSAMBA > > HOST/newsamba.domain.corp...

hello, today the following problem occurred: [2019/10/08 09: 57: 23.568282, 1] ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token) gss_accept_sec_context failed with [Miscellaneous failure (see text): Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab MEMORY: cifs_srv_keytab (arcfour-hmac-md5)] in my smb.conf I have the lines: kerberos method = dedicated keytab

...with ldap backend, so I was wondering if it was possible to do a ldbsearch from the old one and import a possible ldif on the new one. thnx. Il giorno mar 29 ott 2019 alle ore 18:49 Emmanuel Florac < eflorac at intellique.com> ha scritto: > Le Tue, 29 Oct 2019 18:26:09 +0100 > banda bassotti via samba <samba at lists.samba.org> ?crivait: > > > hello, I need to extract user passwords from a samba 4.7.x and import > > them into new samba 4.10.x, any suggestions? thanks in advance. > > What is the passdb backend you're using? If it's the standard tdb, &g...

...t it seems to me that we are going around the problem :) I will do tests, in the next few days I will make up for it unless there are some hints. thanks. Il giorno mer 10 giu 2020 alle ore 20:46 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 10/06/2020 19:25, banda bassotti via samba wrote: > > Hi Rowland, yes I'm configuring apache kafka / zookeeper, I need Kerberos > > authentication for the test environment and I don't have AD :) > How can you be using samba-tool and not have AD ? > > > > I'v two environment, the first (produc...

...4:07 06/11/2020 06:14:07 krbtgt/PRO.LAN at PRO.LAN renew until 06/11/2020 20:14:07 the second one, test environment samba 4.11.9, doesn't. Il giorno mer 10 giu 2020 alle ore 19:06 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 10/06/2020 17:48, banda bassotti via samba wrote: > > Hello again, after obtaining the keytab file I tried to use kinit > > keytab.file followed by the spn > > > > $ samba-tool spn list z1 > > z1 > > User CN=z1,CN=Users,DC=home,DC=lan has the following > servicePrincipalName: > >...

Hi, I have installed a new dc: - debian buster - samba 4.13.2 from apt.van-belle.nl with the following configuration: [global] dns forwarder = 192.168.1.3 netbios name = MARTE realm = DOM.LAN server role = active directory domain controller workgroup = DOM interfaces = 192.168.1.2,127.0.0.1 bind interfaces only = Yes log level = 4 max log size = 50000 guest account =

No, cut&paste! ucs# samba -V Version 4.10.1-Univention fs# samba -V Version 4.10.8-Debian Il giorno gio 26 set 2019 alle ore 16:26 Rowland penny <rpenny at samba.org> ha scritto: > On 26/09/2019 15:19, banda bassotti wrote: > > Hi, below the required files: > > > > smb.conf of ucs master: > > > > [global] > > logging = file > > max log size = 0 > > netbios name = ucs > > server role = active directory domain...

...ba service rm /etc/krb5.keytab .. ( a backupfile is made if you followed above ) mv /etc/krb5.keytab2 /etc/krb5.keytab That "should" do the trick.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > banda bassotti via samba > Verzonden: dinsdag 5 november 2019 9:49 > Aan: Rowland penny > CC: sambalist > Onderwerp: Re: [Samba] Failed to find cifs/fs-share at dom.corp > (kvno 109) in keytab > > hi, nothing to do, despite having set winbind not to change > the machine > password th...

...p at DOM.CORP(kvno 109) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] before 10:00 it used kvno (kerberos version number) 108 after 10:00 kvno 109. Il giorno mar 8 ott 2019 alle ore 22:26 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 08/10/2019 21:11, banda bassotti wrote: > > none of this :) access to the share by windows clients and yes, I can > > read, I only reported the log output nothing more, > > If you are not mounting anything, then you do not need the keytab. > > Also, I never said you couldn't read, I just pointed out tha...

yes nothing # ps ax | grep '[n]mdb' # Il giorno gio 26 set 2019 alle ore 17:27 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 26/09/2019 15:47, banda bassotti wrote: > > No, cut&paste! > > > > ucs# samba -V > > Version 4.10.1-Univention > > > > fs# samba -V > > Version 4.10.8-Debian > > > > > I guess Univention didn't get the memo about not using a DC as a > fileserver ;-) > > can...

hello, I need to extract user passwords from a samba 4.7.x and import them into new samba 4.10.x, any suggestions? thanks in advance.

:) yes from samba ad dc to a new samba ad dc, using samba-tool should I wait for users to change passwords or can I do it at any time? Il giorno mar 29 ott 2019 alle ore 19:54 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 29/10/2019 18:44, banda bassotti via samba wrote: > > you are right, I was not exhaustive in my request, sorry: from samba > 4.7.x > > with ldap backend to samba 4.10.x with ldap backend, so I was wondering > if > > it was possible to do a ldbsearch from the old one and import a possible > > ldif on t...

hello, i'm off topic so I apologize in advance, I would just like to know what is the correct place to do the "feature request": have smbclient output in json format.

On Tue, 2023-10-17 at 13:08 +0200, banda bassotti via samba wrote: > hello, has anyone managed to compile static smbclient? it's a > question that > is asked from time to time but there are never comprehensive answers: > if yes > how, no, too complex :) > > thnx a lot. It may or may not be possible, but if it is then the...

On 05/11/2019 12:17, banda bassotti via samba wrote: > Luis, ok I'v removed everything, step 1: > > KRB5_KTNAME=FILE:/etc/krb5.keytab2 net ads keytab CREATE -P I have said this once already, but, I will try again ;-) You are creating a keytab, which may or may not be called /etc/krb5.keytab2 > step2: > # KRB5_K...

...d DNS. > First DNS then ADDB and I only focused on DNS.. :-/ while the XXXX/spn > entries are in COMPUTERNAME$ in ADDB.. > > One to remember... and yes, this should be found quicker. > > > Greetz, > > Louis > > > ------------------------------ > *Van:* banda bassotti [mailto:bandabasotti at gmail.com] > *Verzonden:* dinsdag 5 november 2019 16:56 > *Aan:* L.P.H. van Belle > *CC:* samba at lists.samba.org > *Onderwerp:* Re: [Samba] Failed to find cifs/fs-share at dom.corp (kvno 109) > in keytab > > Luis, Rowland I'v found the problem, I f...

...= yes winbind enum users = yes template homedir = /home/%U usershare allow guests = yes usershare path = username map = /etc/samba/user.map Il giorno gio 26 set 2019 alle ore 13:05 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 26/09/2019 11:44, banda bassotti wrote: > > Hi, no it doesn't work: > > > > [2019/09/26 12:06:18.715651, 1] > > ../../source3/librpc/crypto/gse.c:660(gse_get_server_auth_token) > > gss_accept_sec_context failed with [ Miscellaneous failure (see > > text): Failed to find cifs/oldsamba at l...

...od = dedicated keytab dedicated keytab file = /etc/samba/fs.keytab and the spn for the old machine authentication works correctly. thanks for support. Il giorno gio 26 set 2019 alle ore 20:07 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 26/09/2019 17:51, banda bassotti wrote: > > yes nothing > > > > # ps ax | grep '[n]mdb' > > # > > Hmm, I expected you to get a result. > > So, why are there these lines in the DC smb.conf: > > server services = -dns -smb +s3fs -nbt > > server role check:inhi...

...om.corp at DOM.CORP (aes256-cts-hmac-sha1-96) 7 host/fs-a.dom.corp at DOM.CORP (arcfour-hmac) 7 host/fs-a.dom.corp at DOM.CORP (des-cbc-crc) 7 host/fs-a.dom.corp at DOM.CORP (des-cbc-md5) So try again. ;-) Greetz, Louis ________________________________ Van: banda bassotti [mailto:bandabasotti at gmail.com] Verzonden: dinsdag 5 november 2019 12:06 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab Luis, thank you very much, I followed the procedure step by step (which I had...