search for: enable_gnutls

Hi. Following this document: https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC I have a Centos 7.x with samba4.4.4 with openldap 2.4.40. If I run the command: smbd -b | grep "ENABLE_GNUTLS" I don't get any answer, this mean that samba doesn't have ssl support? Thanks for your time. -- LIving the dream...

Hi, I'm trying to convert my LDAP server into a LDAPS server to secure the users logins, but I don't know what's the procedure to do it. Someone knows any guide to do it? For now: - I've created a CA cert on the server - I've created the cert and key for the domain pdc - I've signed that cert with CA cert. - I've followed the post in samba wiki about

...9FEB87C960EAD56BC842FC82B78675E5 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1434468171 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- Of course, the samba build have GNUTLS: smbd -b | grep "ENABLE_GNUTLS" ENABLE_GNUTLS What i've doing wrong?. Thanks!!

...the tls negotiation with an unrecognized CA message. The windows domain uses self signed certificates, and I have copies of the CA cert and the individual client certs in pem format. Using these I can connect to the domain controllers with gnutls-cli using start tls on port 389. smbd -b |grep ENABLE_GNUTLS shows that I do in fact have GNUTLS support. I've tried multiple variations of tls keyfile tls certfile and also added the certs in openldap/ldap.conf but I've not been able to get samba to connect to AD ldap over tls. I can't seem to convince it to trust the AD machines certificat...

...; https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_ > (LDAPS)_on_a_Samba_AD_DC > > > > I have a Centos 7.x with samba4.4.4 with openldap 2.4.40. > > You don't have an AD DC! > > > > > If I run the command: > > > > smbd -b | grep "ENABLE_GNUTLS" > > > > I don't get any answer, this mean that samba doesn't have ssl > > support? > > Probably, not that it matters, did I mention that you do not have an AD > DC. > > Rowland > > -- LIving the dream...

...gnized CA message. > > The windows domain uses self signed certificates, and I have copies of > the CA cert and the individual client certs in pem format. Using these I > can connect to the domain controllers with gnutls-cli using start tls on > port 389. > > smbd -b |grep ENABLE_GNUTLS > shows that I do in fact have GNUTLS support. > > I've tried multiple variations of > tls keyfile > tls certfile > > and also added the certs in openldap/ldap.conf > > but I've not been able to get samba to connect to AD ldap over tls. I > can't seem...

...> >> The windows domain uses self signed certificates, and I have copies of >> the CA cert and the individual client certs in pem format. Using these I >> can connect to the domain controllers with gnutls-cli using start tls on >> port 389. >> >> smbd -b |grep ENABLE_GNUTLS >> shows that I do in fact have GNUTLS support. >> >> I've tried multiple variations of >> tls keyfile >> tls certfile >> >> and also added the certs in openldap/ldap.conf >> >> but I've not been able to get samba to connect to AD ldap...

...AVAHI_SUPPORT ?? WITH_DNS_UPDATES ?? WITH_PTHREADPOOL ?? WITH_QUOTAS ?? WITH_SYSLOG ?? WITH_WINBIND Build Options: ?? AD_DC_BUILD_IS_ENABLED ?? BROKEN_NISPLUS_INCLUDE_FILES ?? CHECK_BUNDLED_SYSTEM_Z ?? COMPILER_SUPPORTS_LL ?? CONFIG_H_IS_FROM_SAMBA ?? DEFAULT_DOS_CHARSET ?? DEFAULT_UNIX_CHARSET ?? ENABLE_GNUTLS ?? ENABLE_GPGME ?? GETCWD_TAKES_NULL ?? INLINE_MACRO ?? KRB5_CREDS_OPT_FREE_REQUIRES_CONTEXT ?? KRB5_PRINC_REALM_RETURNS_REALM ?? LDAP_DEPRECATED ?? LDAP_SET_REBIND_PROC_ARGS ?? LIBREPLACE_NETWORK_CHECKS ?? LINUX ?? LINUX_SENDFILE_API ?? PACKAGE ?? REALPATH_TAKES_NULL ?? RETSIGTYPE ?? SAMBA4_USES_H...