search for: gmsa

Hello, Samba list. When configuring the gMSA on Samba DC (the domain was provisioned using Samba DC, and this DC is the only one in the forest) and trying to use the created service account on Windows, I get an error: "Error 1069: The service did not start due to a logon failure." If the domain is provisioned from Windows AD DS, a...

...identical to existing module, but using 'ceph_new' instead of 'ceph' for the relevant smb.conf entries. This new module is expected to deprecate and replace the old one in next major release. Group Managed Service Accounts ------------------------------ Samba 4.21 adds support for gMSAs (Group Managed Service Accounts), completing support for Functional Level 2012. The purpose of a gMSA is to allow a single host, or a cluster of hosts, to share access to an automatically rotating password, avoiding the weak static service passwords that are often the entrypoint of attackers to A...

...identical to existing module, but using 'ceph_new' instead of 'ceph' for the relevant smb.conf entries. This new module is expected to deprecate and replace the old one in next major release. Group Managed Service Accounts ------------------------------ Samba 4.21 adds support for gMSAs (Group Managed Service Accounts), completing support for Functional Level 2012. The purpose of a gMSA is to allow a single host, or a cluster of hosts, to share access to an automatically rotating password, avoiding the weak static service passwords that are often the entrypoint of attackers to A...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...

...xisting samba-tool password handling commands, which in the past have only operated against the local sam.ldb have been extended to permit operation against a remote server with authenticated access to "-H ldap://$DCNAME" Supported operations include: ?- reading the current and previous gMSA password via ?? "samba-tool user getpassword" ?- writing a Kerberos Ticket Granting Ticket (TGT) to a local ?? credentials cache with a new command ?? "samba-tool user get-kerberos-ticket" New Windows Search Protocol Client ---------------------------------- Samba now by d...