Displaying 20 results from an estimated 1644 matches for "libdefaults".
2015 Dec 09
5
Authentication to Secondary Domain Controller initially fails when PDC is offline
...t: Cannot contact any KDC for realm 'MY.DOMAIN.TLD' while
>>> getting initial credentials"
>>>
>>>
>>> My /etc/krb5.conf looks like this (following your suggestions,
>>> Rowland, as everything else are defaults):
>>>
>>> [libdefaults]
>>> default_realm = MY.DOMAIN.TLD
>>>
>>> And my /etc/resolv.conf is this:
>>>
>>> search my.domain.tld
>>> nameserver IP_of_1st_DC
>>> nameserver IP_of_2nd_DC
>>
>> Any idea why I still get this when trying to log on to a...
2023 Apr 12
5
error trying to authenticate from Linux to AD
...nd and since I'm running
Debian/Bookworm on an AMD64 system. I'm in the section "Configure
Kerberos" which is near the start.
My /etc/krb5.con file (with most comments removed) is:
> # cat /etc/krb5.conf
> [logging]
> ???????Default = FILE:/var/log/krb5.log
>
> [libdefaults]
> ???????default_realm = HOME.RAHIM-DALE.ORG
> ???????ticket_lifetime = 24000
> ???????clock-skew = 300
> # The following libdefaults parameters are only for Heimdal Kerberos.
> ???????fcc-mit-ticketflags = true
> ?????? rdns = false
> [realms]
> ???????HOME.RAHIM-DALE.ORG...
2015 Mar 11
2
net ads join fails
...netbios name = DC2
server role = active directory domain controller
idmap_ldb:use rfc2307 = yes
log level = 5
[netlogon]
path = /var/lib/samba/sysvol/ad.dilken.eu/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
[libdefaults]
dns_lookup_realm = true
dns_lookup_kdc = true
default_realm = AD.DILKEN.EU
smb.conf and krb5.conf on raspberry-pi:
[libdefaults]
default_realm = AD.DILKEN.EU
dns_lookup_realm = true
dns_lookup_kdc = true
[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server...
2015 Dec 09
7
Authentication to Secondary Domain Controller initially fails when PDC is offline
...it' on a member server gives this:
> "kinit: Cannot contact any KDC for realm 'MY.DOMAIN.TLD' while
> getting initial credentials"
>
>
> My /etc/krb5.conf looks like this (following your suggestions,
> Rowland, as everything else are defaults):
>
> [libdefaults]
> default_realm = MY.DOMAIN.TLD
>
> And my /etc/resolv.conf is this:
>
> search my.domain.tld
> nameserver IP_of_1st_DC
> nameserver IP_of_2nd_DC
Any idea why I still get this when trying to log on to a member server
while the first DC is down?
# kinit: Cannot contact any...
2016 Jun 28
2
Looking for GSSAPI config [was: Looking for NTLM config example]
Aki - made your suggested changes, but no joy :(
My /etc/krb5.conf:
------SNIP--------
[libdefaults]
default_realm = HPRS.LOCAL
dns_lookup_realm = false
dns_lookup_kdc = true
[libdefaults]
default_realm = HPRS.LOCAL
dns_lookup_kdc = true
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
fcc-mit-ticketflags = true
[realms]
HPRS.LOCAL = {
default_domai...
2016 Jan 27
6
NT_STATUS_CONNECTION_REFUSED
...g/mailman/options/samba
>
[root at centos7pdc ~]# cat /etc/resolv.conf
search testing.domain.com.au
nameserver 192.168.1.10
[root at centos7member ~]# cat /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
# default_realm = EXAMPLE.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
# EXAMPLE.COM = {
# kdc = kerberos.example.com
# admin_server = kerberos.example.com
# }
[domain_realm...
2024 Apr 05
1
Strange problem with samba-tool dns query ...
So,
I've done some progress.
I've made configuration according this article
https://fedoramagazine.org/samba-as-ad-and-domain-controller/
they use sample kerberos config file from package samba-dc-provision:
sudo cp /usr/share/samba/setup/krb5.conf /etc/krb5.conf.d/samba-dc
[libdefaults]
default_realm = ${REALM}
dns_lookup_realm = false
dns_lookup_kdc = true
[realms]
${REALM} = {
default_domain = ${DNSDOMAIN}
}
[domain_realm]
${HOSTNAME} = ${REALM}
customized file /etc/krb5.conf.d/samba-dc is included in
/etc/krb5.conf by this line
includedir /etc/krb5.conf.d/
but it include...
2015 Jul 13
2
Member Server with problems
I'm a issue with my File Server as a Member Server. I followed many
tutorials, but my authentication in Member Server doesn't work. I think
the issue is in my krb5.conf or nssswitch.conf
Follow is my /etc/krb5.conf in a Member Server:
[libdefaults]
default_realm = MEUDOMINIO.COM
MEUDOMINIO.COM = {
kdc = 10.133.84.25
admin_server = 10.133.84.25
default_domain = MEUDOMINIO.COM
}
MEUDOMINIO.COM = {
kdc = 10.133.84.25
admin_server = 10.133.84.25:88
}
[domain_realm]
.meudo...
2004 Jan 27
3
Solution -- can connect via IP but not by name
...error Bad encryption type
~ ads_verify_ticket: krb5_rd_req with auth failed (Bad
~ encryption type)
~ Failed to verify incoming ticket!
The only way I have been able to reproduce this locally
using MIT 1.3.1 is by setting a list of permitted_enctypes
in /etc/krb5.conf. For example,
~ [libdefaults]
~ dns_lookup_kdc = true
~ default_tgs_enctypes = des-cbc-md5
~ default_tkt_enctypes = des-cbc-md5
~ permitted_enctypes = des-cbc-md5 des-cbc-crc
Commenting out the last line solved things in my tests. Usually
I have a very minimal krb5.conf which works correctly.
~ [libdefaults]
~...
2016 Jan 27
2
NT_STATUS_CONNECTION_REFUSED
On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> wrote:
> Hi,
>
> Samba DC generates a krb5.conf into private directory, where the database
> is hold.
>
> Its content should be that:
> [libdefaults]
> default_realm = SAMBA.DOMAIN.TLD
> dns_lookup_realm = false
> dns_lookup_kdc = true
>
> Should only as I get it from a forgotten test platform where I set
> dns_lookup_realm = true
>
> Cheers,
>
> mathias
>
Hi Mathias, this is a member se...
2024 Apr 05
1
Strange problem with samba-tool dns query ...
...e differences in /etc/krb5.conf
> and it seams to be possible root cause.
>
> I will write summary after further testing.
>
Ah, yes, I should have remembered that you are running 'experimental'
DCs on Fedora and they do strange things to the krb5.conf. All you need
is this:
[libdefaults]
default_realm = DNS.DOMAIN.IN.CAPITALS
dns_lookup_realm = false
dns_lookup_kdc = true
[realms]
DNS.DOMAIN.IN.CAPITALS = {
default_domain = dns.domain.in.lowercase
}
[domain_realm]
SHORT_HOSTNAME_IN_CAPITALS = DNS.DOMAIN.IN.CAPITALS
Rowland
2023 Apr 12
1
error trying to authenticate from Linux to AD
...in the section "Configure
>> Kerberos" which is near the start.
>>
>> My /etc/krb5.con file (with most comments removed) is:
>>
>>> # cat /etc/krb5.conf
>>> [logging]
>>> ???????Default = FILE:/var/log/krb5.log
>>>
>>> [libdefaults]
>>> ???????default_realm = HOME.RAHIM-DALE.ORG
>>> ???????ticket_lifetime = 24000
>>> ???????clock-skew = 300
>>> # The following libdefaults parameters are only for Heimdal Kerberos.
>>> ???????fcc-mit-ticketflags = true
>>> ?????? rdns = fals...
2018 Jun 27
2
Login to AD Member Fail
On 27.06.2018 15:17, Rowland Penny via samba wrote:
> What is in /etc/krb5.conf ?
>
> Rowland
>
I think there is a Problem with krb5.conf
Fileserver1
root at srv-031:~# cat /etc/krb5.conf
[libdefaults]
default_realm = DOM.EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = true
root at srv-031:~#
Fileserver with login Error
root at srv-007:/var/log/samba# cat /etc/krb5.conf
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind...
2019 Feb 05
5
Unable to join to a SAMBA4 domain
...om
/etc/resolv.conf
domain example.com
search example.com
nameserver 192.168.34.4
/etc/krb5.conf
includedir /etc/krb5.conf.d/
includedir /var/lib/sss/pubconf/krb5.include.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_ccache_name = KEYRING:persistent:%{uid}
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
}
[domain_realm]
example.com = EXAMPLE.COM
.example.com = EXAMPLE.COM
smb.conf
[globa...
2020 Jul 03
2
dns_tkey_gssnegotiate: TKEY is unacceptable
On 7/3/2020 9:50 AM, Rowland penny via samba wrote:
> I thought I explained that, but lets try again ;-)
>
> Originally, Samba used /var/lib/samba/private for the dns.keytab and
> other dns files. This was then found to be possibly insecure, so it
> was decided to use /var/lib/samba/bind-dns instead. When you upgrade
> the Samba packages, the old files are not removed, but the
2017 Nov 13
2
Winbind error "Could not fetch our SID - did we join?"
...ostname:villach-file
/etc/hosts:# The following lines are desirable for IPv6 capable hosts
/etc/hosts:::1 localhost ip6-localhost ip6-loopback
/etc/hosts:ff02::1 ip6-allnodes
/etc/hosts:ff02::2 ip6-allrouters
/etc/hosts:127.0.0.1 localhost
/etc/hosts:192.168.16.214 villach-file
/etc/krb5.conf:[libdefaults]
/etc/krb5.conf: default_realm = AD.TAO.AT
/etc/krb5.conf: dns_lookup_realm = true
/etc/krb5.conf: dns_lookup_kdc = true
/etc/krb5.conf: default_keytab_name = FILE:/etc/krb5.keytab
/etc/krb5.conf:[domain_realm]
/etc/krb5.conf: .ad.tao.at = AD.TAO.AT
/etc/krb5.conf: ad.tao.at = AD.TAO.AT
/etc/krb5.c...
2016 Jun 29
2
Looking for GSSAPI config [was: Looking for NTLM config example]
...ample]
>>
>>> On June 28, 2016 at 5:17 PM Mark Foley <mfoley at ohprs.org> wrote:
>>>
>>>
>>> Aki - made your suggested changes, but no joy :(
>>>
>>> My /etc/krb5.conf:
>>>
>>> ------SNIP--------
>>> [libdefaults]
>>> default_realm = HPRS.LOCAL
>>> dns_lookup_realm = false
>>> dns_lookup_kdc = true
>>>
>>> [libdefaults]
>>> default_realm = HPRS.LOCAL
>>> dns_lookup_kdc = true
>>> kdc_timesync = 1
>>> ccache_type = 4
>...
2016 Jun 29
3
Looking for GSSAPI config [was: Looking for NTLM config example]
...[was: Looking for NTLM config example]
>
> > On June 28, 2016 at 5:17 PM Mark Foley <mfoley at ohprs.org> wrote:
> >
> >
> > Aki - made your suggested changes, but no joy :(
> >
> > My /etc/krb5.conf:
> >
> > ------SNIP--------
> > [libdefaults]
> > default_realm = HPRS.LOCAL
> > dns_lookup_realm = false
> > dns_lookup_kdc = true
> >
> > [libdefaults]
> > default_realm = HPRS.LOCAL
> > dns_lookup_kdc = true
> > kdc_timesync = 1
> > ccache_type = 4
> > forwardable...
2019 Nov 29
2
security = ads parameter not working in samba 4.9.5
...ing the script again.
bash samba-collect-debug-info.sh > samba-output
kinit: Client's credentials have been revoked while getting initial
credentials
cat samba-output
Please wait, collecting debug info.
Wrong password or kerberos REALM problems, exiting now.
Below is my /etc/krb5.conf
[libdefaults]
default_realm = EMEA.MEDIA.GLOBAL.LOC
# The following krb5.conf variables are only for MIT Kerberos.
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
# The following encryption type specification will be used by MIT Kerberos
# if uncomm...
2008 Feb 27
1
krb5.conf file in /var/lib/samba/smb_krb5; Samba 3.0.27a
...winbind is
restarted and it also uses the DC that is configured as primary DC in Sites
and Services in the Active Directory.
Can anyone shed a light how this work?
Thnx,
Alex.
Some info:
/etc/samba/smb.conf
=======
password server = adm02.test.com, adm03.test.com
/etc/krb5.conf
==========
[libdefaults]
default_realm = TEST.COM
[realms]
TEST.COM = {
kdc = adm02.test.com:88
kdc = adm03.test.com:88
kdc = adm01.test.com:88
/etc/hosts
========
192.168.100.100 adm01.test.com
10.0.0.100 adm02.test.com
192.168.100.110 nhadm03.test.com
/var/lib/samba/smb_krb5/krb5.conf.TEST
==========...