search for: hohnstaedt

Hi All, This Samba release changelog (https://wiki.samba.org/index.php/Updating_Samba#Incorrect_TLS_File_Permissions) specifically mentions a security issue and that that the multiple *.pem files needed for LDAP via TLS all need "special permissions" - and mentions to delete old files without the required permissions to force file renewal. Yet in the official Samba documentation

Hi folks, Does anybody have experience using ADCS in conjunction with Samba? I would like to create certificates using ADCS as a CA to create certificates to be deployed to servers running web applications. It would be very convenient to have joined Windows computers automatically trust certificates issued my own CA instead of having to import certificates manually on every browser on every

...generated certs. Which is in a AD-DC, in my personal opinion, not good, yes it works fine, if you use only 1 DC. With mutliple DC's, you should really think of seting up your own CA. So here you go, a "possible" setup for your sslcert if you use your own CA. A handy tool https://hohnstaedt.de/xca/ , which i personly use. Difficult, naah.. See : https://hohnstaedt.de/xca/index.php/documentation/ Or create the CA yourself with openssl. Or tinyCa , etc lots of options here. My current layout. ls -al /etc/ssl/ total 84 drwxr-xr-x 9 root root 4096 Mar 14 16:15 . drwxr-xr-x 11...

...search.. > > Am I correct in understanding that the certificates and keys in > private/tls/ are only meant to enable StartTLS/LDAPS connections? For samba yes, but if you add the RootCA to you computers then you can do with with what you want. Small tip of you want own certs. https://hohnstaedt.de/xca/ but you can use anything you like to generate certs. If you search good in the list, you wil find some user that make lets encrypt work also with dehydrated. > > > Pietro Greetz, Louis

Hi everyone, I have a basic SAMBA setup with a main AD DC ad1 and a backup AD DC ad2, running on Samba 4.5.16-Debian on Raspbian. I would now like to enable LDAPS so my users can authenticate in other non Samba services using Active Directory. From reading the documentation here: https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC I understand that for the most

Okay, it's done. Here is the file Le mar. 6 ao?t 2019 ? 10:55, Rowland penny via samba <samba at lists.samba.org> a ?crit : > On 06/08/2019 09:36, Guillaume Couvreur wrote: > > it doesn't work, here is the log file > > Nothing there, can you try raising the log level ? > > start by adding: > > log level = 4 > > to smb.conf and restart Samba and

I am currently NOT using SSL on my Samba domain. While reading "Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC" and thinking about implementing. I'm having trouble "getting my head" around what certificates go where. Simply put, I am not clear as to generating certificates on the clients and then copy which files to to the server or vice versa? What happens when

...> Christian Eggers <christian.eggers@kathrein.de> Christian Ehrhardt <ehrhardt@linux.vnet.ibm.com> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...> Christian Eggers <christian.eggers@kathrein.de> Christian Ehrhardt <ehrhardt@linux.vnet.ibm.com> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...> Christian Eggers <christian.eggers@kathrein.de> Christian Ehrhardt <ehrhardt@linux.vnet.ibm.com> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...stian Ehrhardt <ehrhardt@linux.vnet.ibm.com> Christian Engelmayer <christian.engelmayer@frequentis.com> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...stian Ehrhardt <ehrhardt@linux.vnet.ibm.com> Christian Engelmayer <christian.engelmayer@frequentis.com> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...istian Engelmayer <christian.engelmayer@frequentis.com> Christian Gieseler <christiangieseler@yahoo.de> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...istian Engelmayer <christian.engelmayer@frequentis.com> Christian Gieseler <christiangieseler@yahoo.de> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...@frequentis.com> Christian Gieseler <christiangieseler@yahoo.de> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Hemp <c.hemp@phytec.de> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...

...@frequentis.com> Christian Gieseler <christiangieseler@yahoo.de> Christian Gmeiner <christian.gmeiner@gmail.com> Christian Hemp <c.hemp@phytec.de> Christian Herzig <christian.herzig@keymile.com> Christian Hildner <christian.hildner@siemens.com> Christian Hohnstaedt <chohnstaedt@innominate.com> Christian Koenig <christian.koenig@amd.com> Christian Kujau <lists@nerdbynature.de> Christian König <christian.koenig@amd.com> Christian König <deathsimple@vodafone.de> Christian Lamparter <chunkeey@googlemail.com> Christi...