search for: splittunneling

...eeded? How about, make a "pc" client cert for the VPN. That allows to setup and run the vpn tunnel. And then re-auth agains samba to update the kerberos ticket. Also, in this case it might be usefull to change krb5.conf And here you might want add the realm part. Because, VPN, routing, splittunneling things like that. There a lot of options here, bit hard to tell.. > > > As a first 'countermeasure' we have created a local user to be able to > refresh up the winbind cache, but simply firing up the VPN seems does > not suffices. > > Next week i will be able to p...

IPSec is not recommended solution nowdays. OpenVPN runs top of single udp or tcp port, so it usually works on strictly firewalled places like in hotels and so on. -- Eero 2016-04-04 23:18 GMT+03:00 Gordon Messmer <gordon.messmer at gmail.com>: > On 04/04/2016 10:57 AM, david wrote: > >> I have seen discussions of OpenVPN, OpenSwan, LibreVPN, StrongSwan (and >> probably

I've setup a portable system (ubuntu 16.04) joined to my AD domain, that in their primary network works as expected. But in this 'COVID time', the portable start to roam around, and users say me that, suddenly after some days of use, get incredibly sloooowww... after that users reboot, and cannot get back in, login refused. I've setup a VPN, but clearly if users cannot login