search for: kaminot

> I am not that experiences about it^^ > I think that one first step would be to strip the registration (key > trust on my side), and once that would have been done submit the results > to the samba team and see if it is worth funding/implementing. > As I am not part of the samba team I cannot say more. > It sounds like you're suggesting that you're going to strictly

Please forgive me, I'm not sure what terminology to use here so this question may sound wrong. I have built two servers samba servers with a new domain. They replicate happily and I can seem to do everything I could ever want on them. DC01 holds all the FSMO roles and, as the first one built, acts as the "master" for DNS. Nothing works well on either server if DC01 is not at the

Hi Peter, noop just transfering the fsmo roles and you would be good just remember to demote the old DC afterwards just remember you do not have concept of master in AD just fsmo holder Best On 9/5/20 6:54 PM, Peter Pollock via samba wrote: > Please forgive me, I'm not sure what terminology to use here so this > question may sound wrong. > > I have built two servers samba

Hi all, I want to extend the samba schema for freeradius, they unfortunately do not provide the schema in ldif format anymore. Do you know if samba does accept OpenLDAP formatted schema or if I have to convert it? Best regards -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital

Hi Mason, I am not that experiences about it^^ I think that one first step would be to strip the registration (key trust on my side), and once that would have been done submit the results to the samba team and see if it is worth funding/implementing. As I am not part of the samba team I cannot say more. Vincent On 9/29/20 6:59 PM, Mason Schmitt wrote: > Hi Vincent, > > it does

I setup a test environment comporting of a windows 2016 evaluation server and a windows 10 eval too so you can tag along. Concerning the provisioning for key trust it looks like the Enterprise Device Registration Service is the one doing most of the work, since there are litte if no documentation about it, I prefer on my side to focus on the day to day auth flow. It looks like the easiest to

Hi, just out of curiosity why? Is it a personal challenge? On 9/22/20 1:37 PM, Andrea Cucciarre' via samba wrote: > Hello, > > I have successfully (hopefully) configured samba to run in Kubernetes > pods, basically I have a pod (i.e. container) that run winbindd and join > the Windows AD, and a pod (i.e. container) that run smbd. > I have used socat to allow the unix

Hi Mason, On 9/26/20 9:34 AM, Mason Schmitt via samba wrote: > Hi Andrew, > > I'm very interested in using Windows Hello for Business in small business > environments, with Samba as the AD DC. > good luck I got it kind of working with :1 samba DC, 1 windows 2012 DC, 1 windows 2016 ADFS > > I'm sorry that I don't have great news. The schema upgrade is the easy

Hi, thank you for your answer :) ohhh that is new I thought that samba 4 was to this day incompatible with a schema update >= v67 (it is I think somewhere it is written in the documentation that the reason why windows > 2016 can't be used as domain controller is partly due to the schema that is what bothered me)) I already have set up an ADFS (win 2016) (works with heimdal krb

Hi all, I would like to set up windows Hello (in the sense user and management are pressuring me) but for both option the schema would need to be at least 87 (windows 2016). I looked on the roadmap, bugzilla but couldn't find anything regarding this topic. Would you know when this version would be available and what is needed in order to achieve so? As a separate question, do you know good