search for: pam_krb

Dear All, I was using Samba3 + LDAP central authentication for the pass 5 years. And since need to move to Samba4 AD was wonder if there is a way to do linux central authentication without sssd but using pam_krb I'm asking this because I've removed mit-krb5 on my testing machine as required by samba4 in my gentoo. So without mit-krb5 sssd don't compile. So was wonder if there any other solution and how hard it will be. I've 2 linux gentoo server will dependent on this central authenticat...

I installed Centos3.4-x86_64 and I notice that I get duplicate packages. i.e. I also notice that the duplate packages exist on the cd install as well. [root at bayamo RPMS]# rpm -qa | grep pam_krb pam_krb5-1.73-1 pam_krb5-1.73-1 when I use apt after downloading from Dag's site it complains about duplicate packages after running apt-get update. I am missing something to get my x86_64 system to update with apt the same way i386 system does, Mebbe someone can provide a hint.

...mple for FreeIPA: > > https://freeipa.readthedocs.io/en/latest/designs/adtrust/samba-domain-member.html#domain-member-configuration-overview > > > But as you can see it is more complicated that just joining a Windows > domain. > > I think you should be able to do this with pam_krb and the nss IDMAP > backend. But you will have to setup the keytab of your server etc. Can you suggest how? Remember, the server is a member of the Kerberos realm already (and has been for 15 years), everyone can ssh into it using kerberos keys, you can NFS4 to it with Kerberos keys, and it...

...> >> https://freeipa.readthedocs.io/en/latest/designs/adtrust/samba-domain-member.html#domain-member-configuration-overview >> >> But as you can see it is more complicated that just joining a Windows >> domain. >> >> I think you should be able to do this with pam_krb and the nss IDMAP >> backend. But you will have to setup the keytab of your server etc. > > > Can you suggest how? Remember, the server is a member of the Kerberos > realm already (and has been for 15 years), everyone can ssh into it > using kerberos keys, you can NFS4 to...

Ok after installing libpam-winbind etc I had someone try to connect from a MacOS and they got: [2023/04/13 15:50:50.002773,? 1] ../../source3/auth/auth_generic.c:211(auth3_generate_session_info_pac) ? auth3_generate_session_info_pac: Unexpected PAC for [testuser at OURREALM.REALM] in standalone mode - NT_STATUS_BAD_TOKEN_TYPE [2023/04/13 15:50:50.002891,? 3]