Displaying 3 results from an estimated 3 matches for "path_to_samba_tls".
2016 Dec 30
0
ADS domain member: winbind fails
...allow
Now, this part i didnt test, but should work since losts of users are missing the correct TLS settings/certificates.
This is a DEBIAN ( or Ubuntu ) setup.
apt-get install ca-certificates
echo “TLS_REQCERT allow” > /etc/ldap/ldap.conf
Locate you SAMBA CA root.
ln -s path_to_samba_TLS-CA-ROOT /usr/local/share/ca-certificates/samba-ca.crt
update-ca-certificates
done, thats it.
Do that on the debian server, reboot it and after reboot type wbinfo –u
And post /etc/hosts /etc/resolv.conf /etc/samba/smb.conf of that server.
Greetz,
Louis
> -----Oors...
2016 Dec 30
2
ADS domain member: winbind fails
...pcoming member server / fileserver
>
> Did you add in /etc/ldap/ldap.conf
>
> TLS_REQCERT allow
on the member?
Did that right now.
> apt-get install ca-certificates
> echo “TLS_REQCERT allow” > /etc/ldap/ldap.conf
>
>
>
> Locate you SAMBA CA root.
>
> ln -s path_to_samba_TLS-CA-ROOT /usr/local/share/ca-certificates/samba-ca.crt
will dig that up on gentoo now ...
> Do that on the debian server, reboot it and after reboot type wbinfo –u
> And post /etc/hosts /etc/resolv.conf /etc/samba/smb.conf of that server.
you speak of the member server?
main samba # cat...
2016 Dec 30
7
ADS domain member: winbind fails
On Fri, 30 Dec 2016 13:54:42 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:
> Am 2016-12-30 um 13:20 schrieb L.P.H. van Belle via samba:
> > And in addition to Rowlands comments..
> >
> > Correct you hosts file to
> > /etc/hosts
> > 127.0.0.1 localhost
> > # The following lines are desirable for IPv6 capable