search for: programnet

On 1/11/24 04:06, Programnet via samba wrote: > I just want to make sure that Samba LDAP does not support ntlmsspNegotiate authentication and I will have to switch to > Windows Server? That sounds like an inaccurate conclusion. ntlmssp is not new. If you are looking at the conversation in Wireshark, you could tell us w...

On 6/11/24 02:24, Programnet wrote: > In log I find: > > [2024/11/05 14:19:11.121983,? 3] lib/ldb-samba/ > ldb_wrap.c:340(ldb_wrap_connect) > ? ldb_wrap open of secrets.ldb > [2024/11/05 14:19:11.122344,? 3] lib/ldb-samba/ > ldb_wrap.c:340(ldb_wrap_connect) > ? ldb_wrap open of secrets.ldb > [20...

pcap is? on my google drive https://drive.google.com/file/d/1GW-vSGratvQ2dOE-iGVPfj5w72ZBaUUR/view?usp=sharing W dniu 1.11.2024 o?01:48, Douglas Bagnall pisze: > On 1/11/24 04:06, Programnet via samba wrote: >> I just want to make sure that Samba LDAP does not support ntlmsspNegotiate authentication and I will have to switch to >> Windows Server? > That sounds like an inaccurate conclusion. ntlmssp is not new. > > If you are looking at the conversation in Wireshark...

...recv() - NT_STATUS_CONNECTION_RESET' [2024/11/05 14:19:11.124440,? 3] source4/samba/service_stream.c:67(stream_terminate_connection) ? stream_terminate_connection: Terminating connection - 'LDAP_PROTOCOL_ERROR' W dniu 4.11.2024 o?00:27, Douglas Bagnall pisze: > On 2/11/24 21:54, Programnet wrote: >> pcap is? on my google drive > > That looks innocuous enough. > > What do you see in the logs if you have > > log level = auth:6 > > in smb.conf? > > Douglas >

...log/samba/auth.log ??????? log file = /var/log/samba/%m.log [sysvol] ??????? path = /var/lib/samba/sysvol ??????? read only = No [netlogon] ??????? path = /var/lib/samba/sysvol/wenus.local/scripts ??????? read only = No W dniu 1.11.2024 o?01:48, Douglas Bagnall pisze: > On 1/11/24 04:06, Programnet via samba wrote: >> I just want to make sure that Samba LDAP does not support ntlmsspNegotiate authentication and I will have to switch to >> Windows Server? > That sounds like an inaccurate conclusion. ntlmssp is not new. > > If you are looking at the conversation in Wireshark...

On 2/11/24 21:54, Programnet wrote: > pcap is? on my google drive That looks innocuous enough. What do you see in the logs if you have log level = auth:6 in smb.conf? Douglas

On Tue, 5 Nov 2024 14:40:01 +0100 Programnet via samba <samba at lists.samba.org> wrote: > > W dniu 2.11.2024 o?11:19, Rowland Penny via samba pisze: > > > > If your TLD is '.local', then I take it you missed that it is > > reserved for Bonjour and Avahi, so if Avahi is running on the DC, > > you...

On Sat, 2 Nov 2024 09:46:20 +0100 Programnet via samba <samba at lists.samba.org> wrote: > In attach pcap > > My samba config > [global] > ??????? netbios name = DC1 > ??????? realm = XXXX.LOCAL > ??????? server role = active directory domain controller > ??????? server services = s3fs, rpc, nbt, wrepl, lda...

W dniu 2.11.2024 o?11:19, Rowland Penny via samba pisze: > > If your TLD is '.local', then I take it you missed that it is reserved > for Bonjour and Avahi, so if Avahi is running on the DC, you should > turn it off (and everywhere else in your domain). I am aware of this. The domain was set up almost 20 years ago, at that time some guides advised not to do anything on the

Hello Everyone I am using samba 4.20.5 with debian backport. I have FortiClientEMS tool which connects to LDAP to get data. FortiClientEMS version 7.0.x worked with Samba without any problem. Unfortunately newer version 7.2.x no longer works. I noticed while examining Wireshark traffic that version 7.0.x connects using authentication: sasl (3). New version 7.2.x authentication: