search for: kerberose

Samba is trying to be a member server in an AD in native mode, using winbind, nss, and kerberose. There are 3 kdc's (2 are Win2003, 1 is Win2000), samba server is RH-AS3 + Samba version 3.0.9 (from samba.org) + krb5 1.3.1-6 (from Fedora Core). I thought I had things working (join succeeded, could access shares, modify files), and then it stopped working. After clearing out the host acco...

Hi, We want to setup a Samba4. What is the best distribution to start from CentOS 6.4 or Ubuntu 12.04LTS? I would choose CentOS because it is an enterprise OS. But the kernel of CentOS is a version 2.x and Ubuntu server 12.04 kernel is 3.x. Are there any down sides on the older kernel version for Samba4 / smb / nfs. Thanks for your answer. Kr, Joeri VGP wins Pro Carton/ECMA Award of the Year

After 2 weeks of trying to configure samba as a member server in a native AD domain, with winbind+nss+kerberose following the Samba Collection and (Samba-3 By Exmaple) docuentation, with RedHat AS3, samba 3.0.9, krb5 1.3.1, where 2 KDC's are Windows 2003 and one is Windows 2000, and smb-signing has been turned off,... when a user tries to access a share, they are prompted for a password, and no password...

...d to make it work reliably. Finally there are a couple of patches to the rijandel code that don't seem related? I am right in thinking that the basic change that is required is to conditionally remove auth_krb5_password (or just make it a stub that does nothing useful) if built against old MIT Kerberoses? Cheers, Simon.

...to the samba server . I get access denied error. when i check the samba logs, i could find the samba sam authentication succeded but when the pam authentication takes place , It says authentication failed , User rejected etc., I could not find any information about samba server contacting in the kerberose server logs. SAMBA server is not contacting the KERBEROS server for authentication. Please any suggestions is appreciated. I could send the configuration of samba and pam and kerberos if the information is not sufficient. eccsamba __________________________________ Do you Yahoo!? Yahoo! Small...

...ffset: 0 net ads join -Ujohns%passwd # Joined the domain net ads testjoin # Shows join is ok wbinfo -a johns%password # Test if winbind can authenticate plaintext password authentication succeeded challenge/response password authentication succeeded kinit johns # Test kerberose authentication Password for johns@MS.STILEN.COM: <ends without any response> smbclient -L localhost -U ms\\johns%password # list shares using passwd Configuration: Samba 3.0.14a-1 (on debian 3.1) + winbind 3.0.14a-1 + krb5-user 1.3.6-2 Ran winbind in debug mode during a ssh attempt...

...lish 3-way handshake iptables -A INPUT -s $ANY -p tcp --dport 445 -j ACCEPT # Kerberos V5 communication <2K Packets iptables -A INPUT -p udp -m udp --dport 88 -j ACCEPT # Kerberos V5 communication >2K Packets iptables -A INPUT -p tcp -m tcp --dport 88 -j ACCEPT # NTP communication, for Kerberose V5 tickets? iptables -A INPUT -s $ANY -p udp --dport 123 -j ACCEPT Note: Limiting the OUTPUT rules kills communications to KDC, so I left it open. -- ._____________________. | \0/ John Stile | | UniX Administration | | / \ 510-305-3800 | | john@stilen.com | .--------------------...

We currently have a samba install on Solaris 8 providing a front-end to a Rational ClearCase system. Because of some recent changes, we are having Kerberose issues in validating files (too many open files). After some research, I found that the best way to resolve these is to re-compile samba as a 64bit application to increase the open file restrictions on a Solaris 32 bit app. The problem I am having is this: I cannot get the 64bit compile to work p...

Hi, I have a samba share on centos5 that uses AD authentication. I can do wbinfo -u and it returns the AD users.. but getent only returns the local centos users. Any pointers on where i have gone wrong? I am trying to chown to an AD user/group, but it is now working.. is the format chown domain\user:domain\group path/to/file ? Thanks..

I've been copying old passwd/shadow/group files from system to system for ages across different distributions/updates and would like to get them back in sync with each other so the system tools will work. Now they hang like: #userdel irose hangs forever, syslog says: Jul 12 11:19:32 newftp userdel[30335]: delete user `irose' Jul 12 11:19:32 newftp userdel[30335]: delete `irose'

https://bugzilla.mindrot.org/show_bug.cgi?id=2775 Bug ID: 2775 Summary: Improve kerberos credential forwarding support Product: Portable OpenSSH Version: 7.5p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Kerberos support Assignee:

I''d like to hear some suggestions about securely administering a system remotely. Here''s the application: a project is going to scatter some server machines around the US. The server machines will be running Linux, with the only network servers being a custom application. Ignoring the separate question of physical security, how can I remotely check the system''s