search for: hemidal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, After a bit of research and sniffing about, I am curious as to what it would take to run Samba3 with kerberos (MIT or Hemidal) as the password backend http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/ref-guide/s1-samba-servers.html Shows how you can use share mode ADS, with krb5 auth. Is it possible to use any KDC as the "password server = linux.kdc" , and if so, is there a way to generate the needed...

I went back and re-installed on a clean VM of Ubuntu Server 16.04.3 and built Samba 4.7.4 with default configuration and it works just fine to change expired passwords at login. I should have tested this default configuration a while back. I was trying to use MIT Kerberos instead of Hemidal and had followed all the directions on this link: https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC In order to make all the builds work for MIT Kerberos and Samba 4.7.4 on Ubuntu Server 16.04.3, I had to install a lot of other related dependencies and customize inst...

...and re-installed on a clean VM of Ubuntu Server 16.04.3 and > >built Samba 4.7.4 with default configuration and it works just fine to >change expired passwords at login. I should have tested this default >configuration a while back. > >I was trying to use MIT Kerberos instead of Hemidal and had followed >all >the directions on this link: > >https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC > >In order to make all the builds work for MIT Kerberos and Samba 4.7.4 >on >Ubuntu Server 16.04.3, I had to install a lot of other related...

Ok, so I tried all the suggestions without success. Unless I hear back from someone saying it is NOT possible for a user to change an expired password during login from a Domain account on a Samba 4.7.4 AD domain (only 1 DC, and I also tried latest dev release), then I will proceed with more in-depth troubleshooting, log file debugging, and mock-up VM's in order to determine what is

Hello. I currently have Samba running on AIX and joined to an NT4 domain. I need to change this membership to new Active Directory domain. Yes, it is running in Native Mode. I understand that Kerberos is *the* requirement to make this work. Are there any special Kerberos versions, configuration options, etc. that are required? The Official Samba-3 HOWTO and Reference Guide (Terpstra and Vernooij)

...|> |>Kerberos 4 ticket cache: /tmp/tkt0 |> | Notice I'm getting "DES cbc mode with RSA-MD5". | | This did not solve the underlying problem of being able to view the samba shares from a w2k or xp client. | | How would I be able to tell if I'm using MIT or Hemidal kerberos? | | I did get this working on a Gentoo system, so I know it works. | | Who knows encryption on the list that can advise....anyone? | | Tim | | On Fri, 2003-12-12 at 05:18, Fernando Ruza wrote: | |>/Same problem. I have been with it for weeks. I can connect using IP...