search for: mykerberos

...have in /etc/smb.conf: [global] workgroup = MYREALM server string = UATest Samba Server Version %v netbios name = myserver log file = /var/log/samba/log.%m max log size = 50 security = ads realm = MYREALM.CA password server = mykerberos.myrealm.ca kerberos method = system keytab log level = 3 passdb:5 auth:10 load printers = no cups options = raw printing = bsd [tmp] comment = Temporary Stuff path = /tmp public = yes writable = yes printable...

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via > samba wrote: >> Do you know any example Samba configuration that authenticate >> to plain - non-AD, e.g. MIT KDC - Kerberos server? > > This a normal and fully supported configuration. It maps to > normal unix users. Thanks! is it mean that the OS

...ing = UATest Samba Server Version %v >          netbios name = myserver >          log file = /var/log/samba/log.%m >          max log size = 50 >          security = ads As I mentioned first up, please set security=user >          realm = MYREALM.CA >          password server = mykerberos.myrealm.ca Don't set this. Samba won't be contacting the KDC, in Kerberos that is the client's job. >          kerberos method = system keytab >          log level = 3 passdb:5 auth:10 > >          load printers = no >          cups options = raw >          print...

...somebody who did it? I need to compare it to the pain of another alternatives I have in the table, like let clients mount files using sshfs. On 2017-04-22, 02:27, Andrew Bartlett via samba wrote: > As I mentioned first up, please set > security=user ... >>          password server = mykerberos.myrealm.ca > > Don't set this. Samba won't be contacting the KDC, in > Kerberos that is the client's job. Turn out when I manage to get it working, neither option matter, I can set it up either way and still works. This is the configuration that works: [global] w...