Displaying 5 results from an estimated 5 matches for "samba_ticketcache".
2019 Jan 11
5
samba-tool auth in scripts
Am 10.01.19 um 14:09 schrieb Rowland Penny via samba:
> You don't ;-)
> You do what the script should have done (I feel version 0.8.10 will
> soon make an appearance), export the cache to use <export
> KRB5CCNAME="/tmp/dhcp-dyndns.cc"> and then use '$KRB5CCNAME' wherever
> '/tmp/dhcp-dyndns.cc' appears, except for:
> [...]
Yes, that worked.
2019 Jan 14
4
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...$(hostname -d)
SAMBA_DNSDOMAIN=your.dnsdomain
SAMBA_REALMDOMAIN=${SAMBA_DNSDOMAIN^^}
# your Samba-AD-DNS server, usually $(hostname -f)
SAMBA_DNSSERVER=dc.${SAMBA_DNSDOMAIN}
# User principal name.
SAMBA_PRINCIPAL=dehydrated-service@${SAMBA_REALMDOMAIN}
> > And tip,
> >
> > SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
> > Create that one on ramdisk.
>
> Why? I delete it directly afterwards, is that a problem?
Less io, and much faster then over normal disk.
And almost any server these days already have a ramdisk available.
Check with : mount | grep tmp
Greetz...
2019 Jan 14
0
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...primary.dnsdomain.tld
SAMBA_DNSSERVER=dc.${SAMBA_DOMAIN}
Since its running on the DC your updateing.
You should be able to use :
SAMBA_DOMAIN=$(hostname -d)
SAMBA_DNSSERVER=$(hostname -f)
Keep REALM always in CAPS. Show the difference between the primary.dnsdomain.tld and REALMs.
And tip,
SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
Create that one on ramdisk.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Jakob Lenfers via samba
> Verzonden: maandag 14 januari 2019 9:49
> Aan: Rowland Penny; samba at lis...
2019 Jan 14
0
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...AD-DNS server, usually $(hostname -f)
> > SAMBA_DNSSERVER=dc.${SAMBA_DNSDOMAIN}
> >
> > # User principal name.
> > SAMBA_PRINCIPAL=dehydrated-service@${SAMBA_REALMDOMAIN}
> >
> >
> >
> > > > And tip,
> > > >
> > > > SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
> > > > Create that one on ramdisk.
> > >
> > > Why? I delete it directly afterwards, is that a problem?
> > Less io, and much faster then over normal disk.
> >
> > And almost any server these days already have...
2019 Jan 14
2
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...AIN}
>
> Since its running on the DC your updateing.
> You should be able to use :
> SAMBA_DOMAIN=$(hostname -d)
> SAMBA_DNSSERVER=$(hostname -f)
>
>
> Keep REALM always in CAPS. Show the difference between the
> primary.dnsdomain.tld and REALMs. And tip,
>
> SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
> Create that one on ramdisk.
If you do as Louis suggests, you could actually remove samba.sh.conf
and move into the main script.
I take it this is for Windows clients securely updating their records
in AD ?
Rowland