Displaying 2 results from an estimated 2 matches for "systemkeytab".
2017 Oct 11
2
Using GPO to mount shares on Linux
...a1-96 rc4-hmac des-cbc-crc des-cbc-md5
default_tkt_enctypes = aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
permitted_enctypes = aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
2) make use of kerberos, add cifs/FQDN to the systemkeytab file.
2a) optional, make use of idmap.conf, something like this.
/etc/idmapd.conf
[General]
Verbosity = 0
Pipefs-Directory = /run/rpc_pipefs
# set your own domain here, if id differs from FQDN minus hostname
# Domain = localdomain
Domain = internal.dnsdomain.tld
Local-Realm = REALM
[Mapping]...
2017 Oct 11
0
Using GPO to mount shares on Linux
...-crc des-cbc-md5
> default_tkt_enctypes = aes128-cts-hmac-sha1-96
> aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
> permitted_enctypes = aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96
> rc4-hmac des-cbc-crc des-cbc-md5
>
> 2) make use of kerberos, add cifs/FQDN to the systemkeytab file.
> 2a) optional, make use of idmap.conf, something like this.
> /etc/idmapd.conf
> [General]
>
> Verbosity = 0
> Pipefs-Directory = /run/rpc_pipefs
>
> # set your own domain here, if id differs from FQDN minus hostname
> # Domain = localdomain
> Domain = inte...