search for: cd2bd668e00c7

...ist to show you if I was "online" or "offiline"):* 1. I read the wiki :) - https://wiki.samba.org/index.php/PAM_Offline_Authentication Based on this I found that I can test offline authentication as follows with "switch winbindd to offline mode by hand": *root at cd2bd668e00c7:~# wbinfo -K EXAMPLE.CORP\\faiuser* *Enter EXAMPLE.CORP\faiuser's password: * *plaintext kerberos password authentication for [EXAMPLE.CORP\faiuser] succeeded (requesting cctype: FILE)* *credentials were put in: FILE:/tmp/krb5cc_0* *root at cd2bd668e00c7:~# smbcontrol winbind offline* *root at...

...causing a security problem. Below is my /var/cache/samba folder previously and after changing "lock directory" value as described above. Maybe it is possible one of the samba experts here can tell me if this is a good way to go: Prevously to changing "lock directory": *root at cd2bd668e00c7:~# ls -la /var/cache/samba/* *total 24* *drwxr-xr-x 2 root root 4096 Apr 19 07:45 .* *drwxr-xr-x 12 root root 4096 Apr 19 07:46 ..* *-rw------- 1 root root 12288 Apr 19 07:45 netsamlogon_cache.tdb* *root at cd2bd668e00c7:~#* After changing the "lock directory": *root at cd2bd668e00c7...

...uld I proceed? Create a bug fix (since as proven this does not seem to be a configuration error by me)? If yes where should I create it and against which package? Thanks again for your help and below my test output :) Kind Regards Martin ------------------ SAMBA 4.9.6 ------------------ *root at cd2bd668e00c7:~# cat /etc/samba/smb.conf* *[global]* * realm = EXAMPLE.CORP* * workgroup = EXAMPLE* * dedicated keytab file = /etc/krb5.keytab* * kerberos method = secrets and keytab* * log level = 0* * winbind use default domain = yes* * winbind refresh tickets = yes* * winbind offline logon = yes* * winbind en...

...manpages.debian.org/stretch/sudo-ldap/sudoers.ldap.5.en.html I need to configure /etc/nsswitch.conf. I decided for test to just keep "*sudoers: ldap*" As soon as I change this I recieve the following error (based on my test independently what I define within /etc/sudo-ldap.conf: *user at cd2bd668e00c7:~$ sudo -v* *sudo: no valid sudoers sources found, quitting* *sudo: unable to initialize policy plugin* Thanks for help & hints Martin

On Fri, 19 Apr 2019 07:50:28 +0200 Martin Krämer via samba <samba at lists.samba.org> wrote: > Hi All, > > I tried multiple topics and did some further analyzing regarding this. > I found that described error below only appears if I restart the > device when connecting from "online" to "offline". > If I keep my device running winbind caches the users