search for: pam_krb5_migrate

Maybe its.. authconfig --enablewinbindkrb5 --update Requirements to achieve this: - A valid /etc/krb5.conf - A valid system keytab /etc/krb5.keytab - A valid /etc/samba/smb.conf -> will be modified by authconfig ( found on internet worked in centos7 ) But better read.. https://sssd.io/docs/users/pam_krb5_migration.html Greetz, Louis > -----Oorspronkelijk bericht----- >

Hi Louis, I had already done that at one point. My pam_winbind is already working.? I can SSH to the system, and I get a proper ticket.? My only issue is that it doesn't refresh the ticket before expiry when I ssh to a system.? I think I can script around that and just not rely on winbind to do it. Jason. On 10/2/2020 8:16 AM, L.P.H. van Belle via samba wrote: > Maybe its.. > >

in samba v.3 there is a smb.conf directive - ldap passwd sync this provides several ldap passwd sync options on the fly including updating the ldap, nt, and lm passwords or just the ldap password. to accomplish this you can use the options: yes, no, or only Im not sure if this is the place to ask, but what if the ldap server is using kerberos5 as a backend to store passwords? .. maybe we could

On 01/10/2020 21:46, Rowland penny via samba wrote: > On 01/10/2020 21:23, Jason Keltz via samba wrote: >> >> >> Okay - I guess the failure of kdc: lines in smb.conf is a bug. >> >> Let's wait and see what happens with your ticket after 10 hours. >> Maybe there's a bug there as well. > It will be in the middle of the night here, so I will report