search for: sesman

...nter jas's password: plaintext kerberos password authentication for [jas] succeeded (requesting cctype: KEYRING) brayden 305 % klist klist: Credentials cache keyring 'persistent:1004:1004' not found I also enabled extended debugging and during login: > Jul 29 09:33:53 brayden xrdp-sesman[1652]: > pam_winbind(xrdp-sesman:auth): [pamh: 0xb4cac0] ENTER: > pam_sm_authenticate (flags: 0x0000) > Jul 29 09:33:53 brayden xrdp-sesman[1652]: > pam_winbind(xrdp-sesman:auth): [pamh: 0xb4cac0] STATE: > ITEM(PAM_SERVICE) = "xrdp-sesman" (0xb471c0) > Jul 29 09:33:5...

I'm experimenting with smb + winbind. My host is joined to AD and I can login to my host fine using my AD credentials via SSH.?? The only issue is that I don't get a Kerberos ticket generated. In /etc/security/pam_winbind.conf I have: krb5_auth = yes krb5_ccache_type = KEYRING In /etc/krb5.conf, I also have: default_ccache_name = KEYRING:persistent:%{uid} Using wbinfo -K jas, then

..._be: canonuserfunc error -7 Jul 23 21:04:44 epo sssd_be: _sasl_plugin_load failed on sasl_canonuser_init for plugin: ldapdb Jul 23 21:04:44 epo sssd_be: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Server not found in Kerberos database) Jul 23 21:04:47 epo xrdp-sesman: pam_unix(xrdp-sesman:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=heupink Jul 23 21:04:47 epo xrdp-sesman: pam_sss(xrdp-sesman:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=heupink Jul 23 21:04:47 epo xrdp-sesman: pam_sss(xrdp-sesm...

Hello, I have a machine with Centos7, Plasma desktop and XRDP. Many people log in the machine, and then press 'X' of the rdp window, instead of logging off. Is there a way to automatically log off their sessions, similar to MS Windows setting? Thanks,

Dne 4.1.2019 v 1:32 Gordon Messmer napsal(a): > On 1/3/19 6:09 AM, Miroslav Geisselreiter wrote: >> Yes, I add this host with command: >> net rpc join MEMBER -S NT4LIKEDOMAINSERVER -U root > > > I don't have any NT4-style domains handy to test with, so I can't be > very specific.? Your logs seem to indicate that Samba believes itself > to be the best DC for

...======== This is my sssd configuration: ========================================= [sssd] domains = example.localnet config_file_version = 2 services = nss, pam [domain/example.localnet] krb5_ccname_template=FILE:%d/krb5cc_%U ad_gpo_access_control = enforcing ad_gpo_map_remote_interactive = +xrdp-sesman default_shell = /bin/bash krb5_store_password_if_offline = True cache_credentials = True krb5_realm = EXAMPLE.LOCALNET realmd_tags = manages-system joined-with-adcli id_provider = ad fallback_homedir = /home/%u ad_domain = example.localnet use_fully_qualified_names = False ldap_id_mapping = True ac...