search for: cstankevitz

...r run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something that requires authentication. Please consider this use case: $ grep -e security -e username\ map /etc/samba/smb.conf username map = /etc/samba/DomainToLocalMapping.txt security = ads $ grep cstankevitz /etc/samba/DomainToLocalMapping.txt cstankevitz = DOMAIN.TLD\cstankevitz DOMAIN\cstankevitz A linux client connects to the samba server and specifies a username of "DOMAIN\cstankevitz" and a password that matches the password stored on a Microsoft Windows AD Server. 12. Does the use ca...

Hello, I am using AD authentication. When I setup samba on my new server, users could not access shares. However, the following command "fixed" the problem: net join -U XXXXX\\cstankevitz The command returned what appears to be an error: kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client not found in Kerberos database Failed to join domain: failed to connect to AD: Client not found in Kerberos database ADS join did not work, falling back to RPC... Unable to fin...

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"

...worked well (generally spews some kind of >> complaint) but things still work. > > Never had problems to join a Samba host yet. Examples? I wish I had a setup that was not working right now to dissect (and learn from) but I do not. However, in the past I have had: net join -U XXXXX\\cstankevitz The command returned what appears to be an error: kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client not found in Kerberos database Failed to join domain: failed to connect to AD: Client not found in Kerberos database ADS join did not work, falling back to RPC... Unable to fin...

...ly spews some kind of >>> complaint) but things still work. >> Never had problems to join a Samba host yet. Examples? > I wish I had a setup that was not working right now to dissect (and > learn from) but I do not. However, in the past I have had: > > net join -U XXXXX\\cstankevitz > > The command returned what appears to be an error: > > kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client > not found in Kerberos database > Failed to join domain: failed to connect to AD: Client not found in > Kerberos database > ADS join did not work...

Hello, Please consider a scenario in which samba is sharing files and users provide their Active Directory usernames and passwords to log into to samba. 1. Must "net join" be used? 2. Under what circumstances will samba (and family) require an explicit "net join"? 3. What technically is happening when samba/computer "joins" the domain? 3a. Is a file added to the