search for: kdc1

Hi everybody, I'm using a FreeBSD 6.1 box running Samba-3.0.23c_2,1 from the ports tree, authentification is provided by two MS PDC (kdc1 and kdc2, the domain is called PARIS). Previous versions of Samba (<3.0.23c) used to work perfectly but since I upgraded to 3.0.23c, I have very disturbing timeouts problems affecting winbind. A simple "smbclient -L <myserver> -U testuser" from any client fails with a timeout e...

...enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 des3-hmac-sha1 default_tkt_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 des3-hmac-sha1 # dns_lookup_kdc = true # verify_ap_req_nofail = false clockskew = 300 [realms] DOMAIN.COM = { kdc = kdc1.domain.com kdc = kdc2.domain.com kdc = kdc3.domain.com admin_server = kdc1.domain.com default_domain = domain.com } [domain_realm] .kerberos.server = DOMAIN.COM domain.com = DOMAIN.COM .domain.com = DO...

...ere once the authorization portion is going. So first question is, are sambaLMPassword and sambaNTPassword still needed in LDAP for each user? Here's the output from ksetup /dumpstate: Machine is not configured to log on to an external KDC. Probably a workgroup member EXAMPLE.COM: kdc = <kdc1 server> kdc = <kdc2 server> kpasswd = <kpasswd server> Realm Flags = 0x0 none No user mappings defined. Second, here's what I have in LDAP so far: dn: ou=Samba,dc=example,dc=com objectClass: organizationalUnit ou: Samba dn: sambaDomainName=EXAMPLE.COM,ou=Samba,dc=example,dc...

...eeded in LDAP for each user? >>>> >>>>Here's the output from ksetup /dumpstate: >>>> >>>>Machine is not configured to log on to an external KDC. Probably a >>>>workgroup member >>>>EXAMPLE.COM: >>>> kdc = <kdc1 server> >>>> kdc = <kdc2 server> >>>> kpasswd = <kpasswd server> >>>> Realm Flags = 0x0 none >>>>No user mappings defined. >>> >>>Users must be somewhere to get HKEY_LOCAL* work... and they should be >>&...

...ously the SIDS were not getting mapped to the UID/GID. My smb.conf file is below: [global] workgroup = DOMAIN realm = DOMAIN.EXAMPLE.COM server string = computer1 interfaces = eth0 security = ADS allow trusted domains = No password server = kdc1.example.com log file = /var/log/samba/%m.log max log size = 1024 smb ports = 445 name resolve order = host deadtime = 15 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 preferred master = No local master = No domain...