search for: kereberos

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just curious but what is so great about Kereberos authentication? Would my LDAP PDC arrangement benefit? Jim C. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCdlqCB4AhF6wVFMERAvA2AJ9ZLZlQp8cWSHWdJRu7C3ZZO9+9KwCgmZKT /2QLrrhjgisoJerB0RrOpmw= =SnGr -----END...

...t;> looks like kerberos does not renew the ticket :(? >> OLIVER WERNER >> Systemadministrator >> > > failing after 10hrs is very probably kerberos related, you should have > a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ? > Did you have the kereberos lines in smb.conf when you joined the > machine ? > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba>

G'Day, I've been looking at our minimum python version for the AD DC. We have some patches currently being proposed to help us become compatible with the modern Python3, and one aspect (PyCapsule) would be easier to do if we restricted Samba to requiring Python 2.7 as a minimum. The wrinkle comes from our good friends at Red Hat, which found itself caught with Python 2.6 on RHEL6.

I am trying to configure samba on a Sunfire V125 with Solaris 9 using: - openldap-2.3.22 - libiconv-1.9.1 - samba-3.0.23a - krb5-1.6.3 (the previous build used krb5-1.5.1 Kereberos, openldap and libiconv are all installed but the samba build generates an error. The following works: ./configure --prefix=/usr/local/samba \ --with-ldap \ --with-ads \ --with-krb5 \ --with-pam \ --with-winbind I then set LD...

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting

...oes not renew the ticket :(? >>> OLIVER WERNER >>> Systemadministrator >>> >> >> failing after 10hrs is very probably kerberos related, you should have >> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ? >> Did you have the kereberos lines in smb.conf when you joined the >> machine ? >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/sa...

...build in Fedora is using MIT Kerberos > implementation in order to allow system-wide interoperability between > both desktop and server applications running on the same machine. > > At the moment the Samba Active Directory Domain Controller > implementation is not available with MIT Kereberos. FreeIPA and Samba > Team members are currently working on Samba MIT Kerberos support as > this is a requirement for a GNU/Linux distribution integration of > Samba AD DC features. > > We have just finished migrating the file server and all client > utilities to MIT Kerberos.  Th...

...c > > /usr/share/doc/samba-dc/README.dc > > [lesca at dodo ~]$ cat /usr/share/doc/samba-dc/README.dc > > MIT Kerberos 5 Support > > ======================= > > At the moment the Samba Active Directory Domain Controller > > implementation is not available with MIT Kereberos. FreeIPA and > > Samba Team members are currently working on Samba MIT Kerberos > > support as this is a requirement for a GNU/Linux distribution > > integration of Samba AD DC features. The last part of that statement is plainly not correct, the 'GNU/Linux' part that is....

...gt; >>>> Systemadministrator > >>>> > >>> > >>> failing after 10hrs is very probably kerberos related, you should have > >>> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist > ? > >>> Did you have the kereberos lines in smb.conf when you joined the > >>> machine ? > >>> > >>> Rowland > >>> > >>> -- > >>> To unsubscribe from this list go to the following URL and read the > >>> instructions: https://lists.samba.org/mailman/...

Hi, I have set up Samba 3.0.23d on Linux Suse NLD9 with AD idmap backend with security = ads and rfc2307. At every login there is a log message in log.wb-MYDOMAIN : [2006/12/14 17:46:51, 1] nsswitch/winbindd_pam.c:winbindd_raw_kerberos_login(510) winbindd_raw_kerberos_login: kinit failed for 'myuser@MYDOMAIN.COM' with: Invalid argument (22) with debug level 10:

...only one kerberos cache file in /tmp right now. looks like kerberos does not renew the ticket :(? OLIVER WERNER Systemadministrator failing after 10hrs is very probably kerberos related, you should have a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist ? Did you have the kereberos lines in smb.conf when you joined the machine ? Rowland -- To unsubscribe from this list go to the following URL and read the instructions:  https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> <https://lists.samba.org/mailman/options/samba <h...

...Systemadministrator >>>>>> >>>>> >>>>> failing after 10hrs is very probably kerberos related, you should have >>>>> a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist >> ? >>>>> Did you have the kereberos lines in smb.conf when you joined the >>>>> machine ? >>>>> >>>>> Rowland >>>>> >>>>> -- >>>>> To unsubscribe from this list go to the following URL and read the >>>>> instructions: https://l...

On Tue, 13 Dec 2016 22:09:22 +0100 Reindl Harald via samba <samba at lists.samba.org> wrote: > > > Am 13.12.2016 um 21:58 schrieb Kris Lou via samba: > > "python-crypto" looks like it's also in EPEL. > > > > http://rpms.famillecollet.com/rpmphp/zoom.php?rpm=python-crypto > > looks so, "yum" is just too dumb to find it when the

Hi Guys, I have a samba 4.0.3 running in a CentOS 6.4 and I want to install samba 4.1 in a new CentOS 7 server. Should I use the samba-4.1 rpm provided by CentOS or download, compile and install it from samba repositories? Which is better and why? Finally, How can I migrate domain and users data files from samba 4.0.3 to 4.1 ? Thanks, Edison

...kerberos does not renew the ticket :(? > OLIVER WERNER > Systemadministrator > > > failing after 10hrs is very probably kerberos related, you should have > a kerberos cache in /tmp for the machine. Does /etc/krb5.keytab exist > > ? > > > > Did you have the kereberos lines in smb.conf when you joined the > machine ? > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba <https://lists.samba.org/mailman/options/samba> > > <https:...

...os > > implementation in order to allow system-wide interoperability > > between > > both desktop and server applications running on the same machine. > > > > At the moment the Samba Active Directory Domain Controller > > implementation is not available with MIT Kereberos. FreeIPA and > > Samba > > Team members are currently working on Samba MIT Kerberos support as > > this is a requirement for a GNU/Linux distribution integration of > > Samba AD DC features. > > > > We have just finished migrating the file server and all client...