search for: domaintolocalmapping

...enny at samba.org> wrote: > You may however run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something that requires authentication. Please consider this use case: $ grep -e security -e username\ map /etc/samba/smb.conf username map = /etc/samba/DomainToLocalMapping.txt security = ads $ grep cstankevitz /etc/samba/DomainToLocalMapping.txt cstankevitz = DOMAIN.TLD\cstankevitz DOMAIN\cstankevitz A linux client connects to the samba server and specifies a username of "DOMAIN\cstankevitz" and a password that matches the password stored on a Microsoft W...

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"