search for: udp_preference_limit

...ill be ?? # denied ?? map to guest = Bad User ?? client ldap sasl wrapping = sign ?? client ntlmv2 auth = no ?? usershare max shares = 10 >>>>> krb5.conf >>>>> [libdefaults] ?default_realm = MYDOMAIN.COM ?default_keytab_name = FILE:/opt/arc/node-config/krb5.keytab ?udp_preference_limit = 50 ?default_tkt_enctypes = rc4-hmac ?default_tgs_enctypes = rc4-hmac [realms] MYDOMAIN.COM = { ? kdc = serv1.mydomain.com ? kpasswd_server = serv1.mydomain.com:464 } [domain_realm] mydomain.com? = MYDOMAIN.COM .mydomain.com = MYDOMAIN.COM [logging] kdc = STDERR

...ude.d/ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = DSDEV.LOCAL dns_lookup_realm = true dns_lookup_kdc = true rdns = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [domain_realm] .dsdev = DSDEV.LOCAL dsdev = DSDEV.LOCAL dsdev.local = DSDEV.LOCAL .dsdev.local = DSDEV.LOCAL /etc/ssh/ssd_config: ChallengeResponseAuthentication no KerberosAuthentication yes KerberosTicketCleanup yes KerberosGetAFSToken yes GSS...

...econd, its local samba is a client of AD(win2k14) And my krb5.conf looks like this: -------------------------- [libdefaults] default_realm = PRIVATE.AAA.PRIVATE.DOM dns_lookup_realm = true dns_lookup_kdc = true rdns = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = yes udp_preference_limit = 0 default_ccache_name = KEYRING:persistent:%{uid} [realms] PRIVATE.AAA.PRIVATE.DOM = { kdc = swir.private.aaa.private.dom:88 master_kdc = swir.private.aaa.private.dom:88 admin_server = swir.private.aaa.private.dom:749 default_domain = private.aaa.private.dom pkinit_anchors = F...

Hi, Are there any way to add options to /var/run/samba/smb_krb5/krb5.conf_DOMAIN? I need to add udp_preference_limit and maybe have a better control on which kdc's are used. Best regards Emil Assarsson Sony Ericsson Mobile Communications AB "The information in this email, and attachment(s) thereto, is strictly confidential and may be legally privileged. It is intended solely for the named recipient(s)...

...> kdc = FILE:/var/log/krb5kdc.log > admin_server = FILE:/var/log/kadmind.log > [libdefaults] > default_realm = DSDEV.LOCAL > dns_lookup_realm = true > dns_lookup_kdc = true > rdns = false > ticket_lifetime = 24h > renew_lifetime = 7d > forwardable = true > udp_preference_limit = 0 > default_ccache_name = KEYRING:persistent:%{uid} > [domain_realm] > .dsdev = DSDEV.LOCAL > dsdev = DSDEV.LOCAL > dsdev.local = DSDEV.LOCAL > .dsdev.local = DSDEV.LOCAL > > /etc/ssh/ssd_config: > ChallengeResponseAuthentication no > KerberosAuthentication yes &gt...

..._realm = false ?dns_lookup_kdc = false ?ticket_lifetime = 10h ?renew_lifetime = 7d ?forwardable = true ?allow_weak_crypto = true ?default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5 ?default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5 udp_preference_limit = 0 [realms] ?EXAMPLE.OEG = { ?? default_domain = EXAMPLE.ORG ?? master_kdc= DC1.EXAMPLE.ORG ?? kdc=DC1.EXAMPLE.ORG ?? kdc=DC2.EXAMPLE.ORG ?? admin_server=DC1.EXAMPLE.ORG ?} [domain_realm] ?EXAMPLE.ORG = EXAMPLE.ORG ?.ALT.ORG = EXAMPLE.ORG ?ALT.ORG = EXAMPLE.ORG ?.EXAMPLE.ORG = EXAMPLE...

On Tue, 9 Jul 2024 11:31:04 -0400 Luc Lalonde via samba <samba at lists.samba.org> wrote: > Hello, > > This problem has come back for me and I can't seem to get around it. > > When I try to access a share, I get this error: > > session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN > > Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): >

...dc.log >> admin_server = FILE:/var/log/kadmind.log >> [libdefaults] >> default_realm = DSDEV.LOCAL >> dns_lookup_realm = true >> dns_lookup_kdc = true >> rdns = false >> ticket_lifetime = 24h >> renew_lifetime = 7d >> forwardable = true >> udp_preference_limit = 0 >> default_ccache_name = KEYRING:persistent:%{uid} >> [domain_realm] >> .dsdev = DSDEV.LOCAL >> dsdev = DSDEV.LOCAL >> dsdev.local = DSDEV.LOCAL >> .dsdev.local = DSDEV.LOCAL >> >> /etc/ssh/ssd_config: >> ChallengeResponseAuthentication no...

Hi, I'm trying to set up NFSv4 on two boxes (centos 5.5) and have it authenticate against our Windows 2008R2 AD server acting as the KDC. (samba/winbind is running ok with "idmap config MYCOMPANY: backend = rid" so we have identical ids across the servers.) I can mount my test directory fine via NFSv4 *without* the sec=krb5 option. However, once I put the sec=krb5 option in,