search for: sahari

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via > samba wrote: >> Do you know any example Samba configuration that authenticate >> to plain - non-AD, e.g. MIT KDC - Kerberos server? > > This a normal and fully supported configuration. It maps to > normal unix users. Thanks! is it mean that the OS (Linux) h...

On 2017-04-16, 19:06, S P Arif Sahari Wibowo via samba wrote: > I was looking into samba wiki pages and cannot find > documentation for this. Generally most the documentation pages > either discussing samba as AD member or standalone. So still looking at this. So this is the state currently: kerberos setup (krb5.conf and...

Hi! Do you know any example Samba configuration that authenticate to plain - non-AD, e.g. MIT KDC - Kerberos server? Would you mind point me to that configuration? What will be the issue of this kind of configuration? Thank you. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On Sun, 2017-04-16 at 19:06 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba > > wrote: > > > Do you know any example Samba configuration that  > > > authenticate to plain - non-AD, e.g. MIT...

...system. In the old days (Samba 3), it can use LDAP for login but doing that by storing password in LDAP field using unsecure encryption, and I cannot do that now. I thought now with Samba 4 it will be possible to do with Kerberos. Thank you. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On Thu, 20 Apr 2017 07:32:16 -0600 (MDT) S P Arif Sahari Wibowo via samba <samba at lists.samba.org> wrote: > On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > > I think you really want to move to Samba as an AD DC. > > In that case, how can I setup a Samba AD DC which has its > authentication came from another non-AD Ke...

...obey pam restrictions = no load printers = no cups options = raw printing = bsd [tmp] comment = Temporary Stuff path = /tmp public = yes writable = yes printable = no -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On Wed, 2017-04-19 at 10:09 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-19, 01:22, Stefan Just via samba wrote: > > There is a tutorial how to make a Kerberos server to be a  > > samba server too. > > I don't have option to do changes in the Kerberos server, at  > least not now. Is that the only way to h...

...thread to specifically asking question about setting up Samba AD DC / ADS with external Kerberos server. Sorry the title a bit confusin, I fixed it a little bit. So presumably the client can login as if login to normal AD DC / ADS. Thank you! -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

...enLDAP & Kerberos server will definitely stay and most services will still use it. I need to get a way for MS Windows to mount shares from my server using credentials from existing OpenLDAP & Kerberos authentication system. Thank you. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba wrote: > > Do you know any example Samba configuration that > > authenticate to plain - non-AD, e.g. MIT KDC - Kerberos > > server? > > This a normal and fully supported configuration. It maps to > normal unix users. Thanks! is it mean that the OS (L...

Am 19.04.2017 um 14:37 schrieb Rowland Penny via samba: > On Wed, 19 Apr 2017 09:22:47 +0200 > Stefan Just via samba <samba at lists.samba.org> wrote: > >> >> There is a tutorial how to make a Kerberos server to be a samba >> server too. >> >> It is available at: >> http://www.danbishop.org/2015/01/30/ubuntu-14-04-ultimate-server-guide/8/

...-AD Kerberos. > provided you change 'localhost' to the domain members short > hostname. No change: # smbclient -k -U mykerbuser -L myserver session setup failed: NT_STATUS_IO_TIMEOUT I already remove any firewall blocking, BTW. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On Thu, 2017-04-20 at 07:25 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-16, 19:06, S P Arif Sahari Wibowo via samba wrote: > > I was looking into samba wiki pages and cannot find  > > documentation for this. Generally most the documentation pages  > > either discussing samba as AD member or standalone. > &gt...

...ission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS list which does not end with fully working configuration: https://lists.openafs.org/pipermail/openafs-info/2014-August/thread.html#40892 Thanks! -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

...the --delete option). The old file only delete mechanism will reduce the possibily of a new file just added accidentally removed by the next rsync with --delete. Maybe something to add to rsync itself? :-) I use rsync-2.4.4 in RH linux 7.0 Thanks! -- S P Arif Sahari Wibowo _____ _____ _____ _____ /____ /____/ /____/ /____ arifsaha@yahoo.com _____/ / / / _____/ http://www.arifsaha.com/

Am 18.04.2017 um 20:36 schrieb S P Arif Sahari Wibowo via samba: > On 2017-04-17, 15:23, Andrew Bartlett via samba wrote: >> No, but your clients will need to get a ticket somehow. That is >> presumably already happening otherwise you wouldn't be asking for this. > > No, the situation is that currently I only have Ker...

...have the old solution where AD user passwords are stored separately in LDAP field. In general I cannot use solution where AD user passwords are stored separately from and need to be synchronized with LDAP / Kerberos user passwords. Thank you! -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

.... > just what do you need to get to work with AD, The LDAP/Kerberos is already established - extensively used and secured - so it won't go anywhere. I want to use Samba but it has to be integrated into existing authentication mechanism. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On Tue, 2017-04-25 at 15:23 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > > Not windows clients without much pain.  In theory Windows can  > > join a non-AD KDC, but it is incredibly rarely done. > > Would you mind to give clearer picture how much pain we are  > ta...