search for: dcadmin

...up: filter = "(objectClasse=group)" group: membership_filter = "(member:1.2.840.113556.1.4.1941:=%{control:Ldap-UserDn})" start_tls = yes ca_file = /etc/ssl/certs/ca-certificates.crt ``` ### 4.4 Configure EAP - add root.ca and services.ca to certificate store ```bash cp /home/dcadmin/root.ca.crt /usr/local/share/ca-certificates/ cp /home/dcadmin/service.ca.crt /usr/local/share/ca-certificates/ update-ca-certificates ``` - add radius cert and key ```bash cp /home/dcadmin/service.radius.key /etc/freeradius/3.0/certs/service.radius.key cp /home/dcadmin/service.radius.crt /etc/fr...

...roup: membership_filter = "(member:1.2.840.113556.1.4.1941:=%{control:Ldap-UserDn})" > start_tls = yes > ca_file = /etc/ssl/certs/ca-certificates.crt > ``` > > ### 4.4 Configure EAP > > - add root.ca and services.ca to certificate store > > ```bash > cp /home/dcadmin/root.ca.crt /usr/local/share/ca-certificates/ > cp /home/dcadmin/service.ca.crt /usr/local/share/ca-certificates/ > update-ca-certificates > ``` > > - add radius cert and key > > ```bash > cp /home/dcadmin/service.radius.key /etc/freeradius/3.0/certs/service.radius.key >...

...ontrol:Ldap-UserDn})" >> start_tls = yes >> ca_file = /etc/ssl/certs/ca-certificates.crt >> ``` >> >> ### 4.4 Configure EAP >> >> - add root.ca and services.ca to certificate store >> >> ```bash >> cp /home/dcadmin/root.ca.crt /usr/local/share/ca-certificates/ >> cp /home/dcadmin/service.ca.crt /usr/local/share/ca-certificates/ >> update-ca-certificates >> ``` >> >> - add radius cert and key >> >> ```bash >> cp /home/dcadmin/service.radiu...

...3556.1.4.1941:=%{control:Ldap-UserDn})" > > start_tls = yes > > ca_file = /etc/ssl/certs/ca-certificates.crt > > ``` > > > > ### 4.4 Configure EAP > > > > - add root.ca and services.ca to certificate store > > > > ```bash > > cp /home/dcadmin/root.ca.crt /usr/local/share/ca-certificates/ > > cp /home/dcadmin/service.ca.crt /usr/local/share/ca-certificates/ > > update-ca-certificates > > ``` > > > > - add radius cert and key > > > > ```bash > > cp /home/dcadmin/service.radius.key /etc/freer...

Hello Tim, Hello samba-people, is there an uptodate guide for authenticating via freeradius somewhere? I have some Ubiquiti APs plus a Cloud Key and I want to authenticate WLAN clients via WPA2-Enterprise instead of a (shared) PSK. It seems like https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory is missing some steps (basic setup of freeradius). Can you

..._uid = 100 #user_global_gid = 100 ####################################################################### The following is the error when we check using [root]#telnet mymailserverip 110 Trying 192.168.129.248 Connected to testmail.mydomain.com (192.168.129.248) Escape character is '^]`. user dcadmin pass mypass ERR-Authentication Failure The following is the log output of /var/log/maillog ######################################################################### Jun 8 13:09:16 testmail dovecot-auth: ldap(dcadmin): No password in reply Jun 8 13:10:16 testmail pop3-login: Disconnected: Inactivit...

On 16/08/2019 12:05, L.P.H. van Belle via samba wrote: > It's windows that is not allowing samba to join. > > This should make thing more clear in my opinion. > > samba-tool fsmo show -H ldap://$(hostname -d) > And > samba-tool fsmo show -H ldap://10.88.80.88 -U Administrator > > These both work agains my Samba AD-DC's (ldap://$(hostname -d)) > And my windows

...1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=KA-H9-DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com 15.?samba-tool fsmo show -H?ldap://10.88.80.88?-U dcadmin SchemaMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com InfrastructureMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com RidAllocationMasterRole ow...

...N=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=KA-H9-DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > > 15.?samba-tool fsmo show -H?ldap://10.88.80.88?-U dcadmin > > SchemaMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > InfrastructureMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > RidAllo...

...ult-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=KA-H9-DC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > > 15.?samba-tool fsmo show -H?ldap://10.88.80.88?-U dcadmin > > SchemaMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com > InfrastructureMasterRole owner: CN=NTDS Settings,CN=VMDC-AZURE-01,CN=Servers,CN=Azure,CN=Sites,CN=Configuration,DC=samdom,DC=example,DC=com >...