search for: faiuser

...t; or "offiline"):* 1. I read the wiki :) - https://wiki.samba.org/index.php/PAM_Offline_Authentication Based on this I found that I can test offline authentication as follows with "switch winbindd to offline mode by hand": *root at cd2bd668e00c7:~# wbinfo -K EXAMPLE.CORP\\faiuser* *Enter EXAMPLE.CORP\faiuser's password: * *plaintext kerberos password authentication for [EXAMPLE.CORP\faiuser] succeeded (requesting cctype: FILE)* *credentials were put in: FILE:/tmp/krb5cc_0* *root at cd2bd668e00c7:~# smbcontrol winbind offline* *root at cd2bd668e00c7:~# wbinfo -K EXAMPLE....

...> 1. I read the wiki :) - > https://wiki.samba.org/index.php/PAM_Offline_Authentication > Based on this I found that I can test offline authentication as > follows with "switch winbindd to offline mode by hand": > > *root at cd2bd668e00c7:~# wbinfo -K EXAMPLE.CORP\\faiuser* > *Enter EXAMPLE.CORP\faiuser's password: * > *plaintext kerberos password authentication for [EXAMPLE.CORP\faiuser] > succeeded (requesting cctype: FILE)* > *credentials were put in: FILE:/tmp/krb5cc_0* > *root at cd2bd668e00c7:~# smbcontrol winbind offline* > *root at cd2bd...

...; Have a look at LAM, (LDAP Account Manager) > > > > Looks absolutely interesting. > But I am able to get that resolved as follows on the DC without > uidNumber attribute set (or am I misinterpreting something here?): > > root at location-000001:~# wbinfo --name-to-sid faiuser > S-1-5-21-2380976951-3081962821-3908499780-1138 SID_USER (1) > root at location-000001:~# wbinfo --sid-to-uid > S-1-5-21-2380976951-3081962821-3908499780-1138 > 3000020 AH, I thought we were talking just about Unix domain members ;-) Samba DC's have yet another way doing things,...

Am Sa., 6. Apr. 2019 um 18:01 Uhr schrieb Rowland Penny via samba < samba at lists.samba.org>: > On Sat, 6 Apr 2019 17:21:26 +0200 > Martin Krämer <mk.maddin at gmail.com> wrote: > > > Hello Rowland, > > > > thanks for your help. > > Below my comments > > > > See here: > > > > > > http://apt.van-belle.nl/ > > >