search for: samba_kdc_settings

...CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients > > Ok so maybe i have misunderstood the part with krb5.conf > > So i will test that one. > > the kdc lines i have found here: > > https://wiki.samba.org/index.php/Samba_KDC_Settings > <https://wiki.samba.org/index.php/Samba_KDC_Settings> > > > OLIVER WERNER > System-Administrator > > > > > > Kontrast Communication Services GmbH > Grafenberger Allee 100, 40237 Düsseldorf, Germany > > Fon  +49-211-91505-500 &...

...bs on our compute servers. $HOME and other data should be mounted via CIFS or NFS4. Because such a job can run for more than a week, I would like to increase the Kerberos ticket lifetime or better the Kerberos ticket maximum renewable lifetime. I found this guide: https://wiki.samba.org/index.php/Samba_KDC_Settings Unfortunately, only settings that are smaller than the following have an effect: kdc:user ticket lifetime = 24 kdc:renewal lifetime = 24 There appears to be an upper limit of 24 hours that none of these settings can exceed. Thanks in advance Am 02.07.20 um 18:55 schrieb Rowland penny via samba...

Hi Rowland, Also change on DCs to [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true ? I was used wiki article and there was listed for DC. the config i have post was only für vl0227 (my Master DC) all other Maschines have the config you prefer. OLIVER WERNER System-Administrator Kontrast Communication Services GmbH Grafenberger Allee 100,

On 01/10/2020 00:23, Jason Keltz via samba wrote: > > Remy, > > On the domain controller (samba-ad-dc), I have in the config: kdc:user > ticket lifetime = 24 I do not recognise that smb.conf option, could this be another freebsd change that was never sent upstream or, if it was, it was rejected ? > > When I login to the client (which is using pam_winbind module), I have

..."ticket_lifetime=24h" on the AD server /etc/krb5.conf, or the client /etc.krb5.conf, it doesn't seem to make a difference. When I log out and back in to the client? (that is using pam_winbind), I still get a 10 hour ticket time.? I found this page: https://wiki.samba.org/index.php/Samba_KDC_Settings and tried setting "kdc:user ticket lifetime = 24" on the DC even though this doesn't even appear in smb.conf man page but didn't seem to have any effect either.? Would someone please clarify? Also, it's not clear whether it is even necessary for me to adjust the ticket_li...

...>> >> On the domain controller (samba-ad-dc), I have in the config: kdc:user ticket lifetime = 24 > I do not recognise that smb.conf option, could this be another freebsd change that was never sent upstream or, if it was, it was rejected ? Uh, no? https://wiki.samba.org/index.php/Samba_KDC_Settings <https://wiki.samba.org/index.php/Samba_KDC_Settings> So the question is, is that info on the Wiki (still) valid and if so, why isn't it documented in the smb.conf man page? >> >> When I login to the client (which is using pam_winbind module), I have 10 hour ticket life....

...c), I have in the config: >>> kdc:user ticket lifetime = 24 >> I do not recognise that smb.conf option, could this be another >> freebsd change that was never sent upstream or, if it was, it was >> rejected ? > > Uh, no? > > https://wiki.samba.org/index.php/Samba_KDC_Settings > > So the question is, is that info on the Wiki (still) valid and if so, > why isn't it documented in the smb.conf man page? Well, you learn something new everyday :-) A quick search in 'man smb.conf' on 'kdc', turns this up: gpo update command (G) This option set...

...rver /etc/krb5.conf, or the client >> /etc.krb5.conf, it doesn't seem to make a difference. When I log out >> and back in to the client? (that is using pam_winbind), I still get a >> 10 hour ticket time.? I found this page: >> >> https://wiki.samba.org/index.php/Samba_KDC_Settings >> >> and tried setting "kdc:user ticket lifetime = 24" on the DC even >> though this doesn't even appear in smb.conf man page but didn't seem >> to have any effect either.? Would someone please clarify? >> >> Also, it's not clear whether...

...Winbind and Windows Clients > >> > >> Ok so maybe i have misunderstood the part with krb5.conf > >> > >> So i will test that one. > >> > >> the kdc lines i have found here: > >> > >> https://wiki.samba.org/index.php/Samba_KDC_Settings > >> <https://wiki.samba.org/index.php/Samba_KDC_Settings> > >> > >> > >> OLIVER WERNER > >> System-Administrator > >> > >> > >> > >> > >> > >> Kontrast Communication Services...

...CC: samba at lists.samba.org Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients   Ok so maybe i have misunderstood the part with krb5.conf   So i will test that one.   the kdc lines i have found here:   https://wiki.samba.org/index.php/Samba_KDC_Settings <https://wiki.samba.org/index.php/Samba_KDC_Settings>     OLIVER WERNER System-Administrator           Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany   Fon  +49-211-91505-500 Fax...

...nted via CIFS or >> NFS4. Because such a job can run for more than a week, I would like to >> increase the Kerberos ticket lifetime or better the Kerberos ticket >> maximum renewable lifetime. >> >> I found this guide: >> >> https://wiki.samba.org/index.php/Samba_KDC_Settings >> >> Unfortunately, only settings that are smaller than the following have an >> effect: >> >> kdc:user ticket lifetime = 24 >> kdc:renewal lifetime = 24 >> >> There appears to be an upper limit of 24 hours that none of these >> settings can ex...

I would like to set the renewable lifetime to 90 days. What is the best way to set the Kerberos ticket maximum renewable lifetime. ~# smbd --version Version 4.12.2-Ubuntu ~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at MYDOM Valid starting Expires Service principal 07/02/20 18:08:16 07/03/20 04:08:16 krbtgt/MYDOM at MYDOM renew until 07/03/20

...h" on the AD server /etc/krb5.conf, or the client > /etc.krb5.conf, it doesn't seem to make a difference. When I log out > and back in to the client? (that is using pam_winbind), I still get a > 10 hour ticket time.? I found this page: > > https://wiki.samba.org/index.php/Samba_KDC_Settings > > and tried setting "kdc:user ticket lifetime = 24" on the DC even > though this doesn't even appear in smb.conf man page but didn't seem > to have any effect either.? Would someone please clarify? > > Also, it's not clear whether it is even necessary for...

...4h" on the AD server /etc/krb5.conf, or the client /etc.krb5.conf, it doesn't seem to make a difference. When I log out and back in to the client (that is using pam_winbind), I still get a 10 hour ticket time. I found this page: >>> >>> https://wiki.samba.org/index.php/Samba_KDC_Settings >>> >>> and tried setting "kdc:user ticket lifetime = 24" on the DC even though this doesn't even appear in smb.conf man page but didn't seem to have any effect either. Would someone please clarify? >>> >>> Also, it's not clear whether it...

Hallo again, I would like to ask if there exists any possibility to have a Samba mount point with multiuser and with a credentials file or something similar. After a couple weeks testing I just find that my shares get disconnected after one week, which is not acceptable: I have stored some large project files on the Samba share which is opened in some calculation software, and simulations take up