search for: singlesignon

...hat samba4 has a single sign on solution for Windows platforms and it seems to work well too, but I am wondering is it possible to do the same for a Linux environment? I have been studying how to implement single sign on using the Ubuntu way through this document: https://help.ubuntu.com/community/SingleSignOn and I am wondering if I can do the same with samba4 where the samba4 just replaces openldap and the kerberos server components. On a windows client, you can login as a user though active directory even though that user is not defined locally on the client. Can you do the same in a Linux environme...

...nes which are supposed to connect to linux fileservers. If I understand correctly, I can use sssd on the samba ad domain controller to "glue" the authentication between samba and the POSIX system. I used principally the ubuntu single sssd configuration ( https://help.ubuntu.com/community/SingleSignOn) but tried many many other configurations. I also tried winbind to no avail. If I create a user in the local samba database I can access shares via smbclient: smbclient //server/netlogon -Uusername -c 'ls' A few questiosn: 1) is it actually possible to authenticate a user with the linux...

...o implement single-sign-on for our coming-soon Linux workstations. All web documentation I've so far found on this references OpenLDAP as the server and describes server-side commands such as kadmin and slapd-config to get things set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) which don't exist on the Samba4 AD/DC. Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean everything should "just work" with LDAP clients and I need do no further server-side configuration? Or does it mean, "sorry, you can't do LDAP Authenti...

...noticed that you can export a principal into a keytab file using "samba-tool domain exportkeytab" but how do you add the principal to the domain? Will adding the missing principal using "samba-tool spn" solve problems like these? According to https://help.ubuntu.com/community/SingleSignOn , you add a host to the kerberos realm by doing these two commands on the kerberos server: kadmin: addprinc -randkey host/client.example.com @ EXAMPLE.COM kadmin: ktadd -k ~/client.keytab host/client.example.com @ EXAMPLE.COM I am guessing that "kadmin: ktadd -k ~/client.keytab host/client.e...

On Thu, 27 Aug 2015 23:03:39 -0400 Robert Moskowitz <rgm at htt-consult.com> wrote: > > On 08/27/2015 08:45 PM, Jim Seymour wrote: > > On Thu, 27 Aug 2015 17:00:28 -0400 > > Robert Moskowitz <rgm at htt-consult.com> wrote: > > > >> Ah, LDAP is included within Samba, I find. Don't install provided > >> one... [snip] > > >

...t what you require from single-sign-on ? Rowland > All web documentation I've so far found on this references OpenLDAP as the server > and describes server-side commands such as kadmin and slapd-config to get things > set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) > which don't exist on the Samba4 AD/DC. > > Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean > everything should "just work" with LDAP clients and I need do no further > server-side configuration? Or does it mean, "sorry, you ca...

...ed to connect to linux fileservers. If I > understand correctly, I can use sssd on the samba ad domain controller to "glue" > the authentication between samba and the POSIX system. I used principally the > ubuntu single sssd configuration ( > https://help.ubuntu.com/community/SingleSignOn) but tried many many other > configurations. I also tried winbind to no avail. If I create a user in the > local samba database I can access shares via smbclient: > > smbclient //server/netlogon -Uusername -c 'ls' > > A few questiosn: > > 1) is it actually possible t...

We have a crm aplication running on windows desktops and we want to migrate it to linux desktop. For this issue we run the apps with wine but the problem is the aplicaction validate login users automaticaly with our windows domain controlers. Because this fail to start... My question is: Running this apps using WINE could interact with SAMBA for windows authentication too (challenge/response)?

moin *, sorry for the cross-post; follow-ups should go to xdg@ (the only one of those lists i'm subscribed to). i'm pondering with the idea to implement SingleSignOn based on an authentication agent like the ones employed by ssh and gnupg. the system would consist of the two main components: - fdo-keyagent, certainly a d-bus service - pam_keyagent. a PAM module that would authenticate users by unlocking their key(s) (which one(s), has to be preconfigured some...

...gle-sign-on ? > > Rowland > > > All web documentation I've so far found on this references OpenLDAP as the server > > and describes server-side commands such as kadmin and slapd-config to get things > > set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) > > which don't exist on the Samba4 AD/DC. > > > > Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean > > everything should "just work" with LDAP clients and I need do no further > > server-side configuration? Or does it...

...gt; >> > >>> All web documentation I've so far found on this references OpenLDAP as the server > >>> and describes server-side commands such as kadmin and slapd-config to get things > >>> set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) > >>> which don't exist on the Samba4 AD/DC. > >>> > >>> Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean > >>> everything should "just work" with LDAP clients and I need do no further > >>&gt...

...I > > understand correctly, I can use sssd on the samba ad domain controller to > > "glue" > > the authentication between samba and the POSIX system. I used principally > > the > > ubuntu single sssd configuration ( > > https://help.ubuntu.com/community/SingleSignOn) but tried many many other > > configurations. I also tried winbind to no avail. If I create a user in the > > local samba database I can access shares via smbclient: > > > > smbclient //server/netlogon -Uusername -c 'ls' > > > > A few questiosn: > &gt...

...; >> Rowland >> >>> All web documentation I've so far found on this references OpenLDAP as the server >>> and describes server-side commands such as kadmin and slapd-config to get things >>> set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) >>> which don't exist on the Samba4 AD/DC. >>> >>> Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean >>> everything should "just work" with LDAP clients and I need do no further >>> server-side configurati...

...gt; >>>>> All web documentation I've so far found on this references OpenLDAP as the server >>>>> and describes server-side commands such as kadmin and slapd-config to get things >>>>> set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) >>>>> which don't exist on the Samba4 AD/DC. >>>>> >>>>> Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean >>>>> everything should "just work" with LDAP clients and I need do no further >...

...t;>>> All web documentation I've so far found on this references OpenLDAP as the server > >>>>> and describes server-side commands such as kadmin and slapd-config to get things > >>>>> set up on the server-side (e.g. https://help.ubuntu.com/community/SingleSignOn) > >>>>> which don't exist on the Samba4 AD/DC. > >>>>> > >>>>> Samaba4 apparently has it's own LDAP (Heimdal?) implementation. Does this mean > >>>>> everything should "just work" with LDAP clients and I nee...