search for: uf_trusted_for_deleg

I ran samba-tool delegation show administrator and got this: athena:~# samba-tool delegation show administrator Account-DN: CN=Administrator,CN=Users,DC=edm-inc,DC=com UF_TRUSTED_FOR_DELEGATION: False UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION: False Is this legit?? Shouldn't the domain administrator be true for these? -- Bob Wooldridge EDM Incorporated

...is domain realm is domain.net.pl Adding CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl Join failed - cleaning up ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in userAccountControl is not permitted without the SeEnableDelegationPrivilege> <> File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib64/python2.6/site-...

...is domain.net.pl > Adding CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl > Join failed - cleaning up > ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in userAccountControl is not permitted without the SeEnableDelegationPrivilege> <> > File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib...

...g looked fine. Server vanished from controllers and DNS. Unfortunately the joining process has failed: Join failed - cleaning up ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=BACKUP1,OU=Domain Controllers,DC=luxmed,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py", line 661, in run machinepass=machinepass, use_...

...is domain.net.pl > Adding CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl > Join failed - cleaning up > ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in userAccountControl is not permitted without the SeEnableDelegationPrivilege> <> > File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run > return self.run(*args, **kwargs) > File "/usr/local/samba/lib...

Hello, I try to setup Dovecot with Kerberos/GSSAPI and use this howto: https://wiki.samba.org/index.php/Authenticating_Dovecot_against_Active_Directory#Create_the_Dovecot_user_and_keytab I also try https://wiki.dovecot.org/Authentication/Kerberos I can login as windows user on win7 and access shares. When I open Thunderbird I get the message: "kerberos/gssapi ticket was not accepted"

...et.pl >> Adding CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl >> Join failed - cleaning up >> ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in userAccountControl is not permitted without the SeEnableDelegationPrivilege> <> >> File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run >> return self.run(*args, **kwargs) >> File "/usr/...

...rzonden: woensdag 12 december 2018 16:02 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GSSAPI/Kerberos authenticate with Dovecot > > I have try. > > root at dc1:~# samba-tool delegation show dovecot\$ > Account-DN: CN=DOVECOT,CN=Computers,DC=MY,DC=FQDN,DC=COM > UF_TRUSTED_FOR_DELEGATION: True > UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION: False > root at dc1:~# > > The error is the same. > > On 12.12.18 15:51, L.P.H. van Belle via samba wrote: > > Whats set for the server in its delegation? > > > > sudo samba-tool delegation show dovecot\...

...> controllers and DNS. Unfortunately the joining process has failed: > > Join failed - cleaning up > ERROR(ldb): uncaught exception - LDAP error 50 > LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=BACKUP1,OU=Domain > Controllers,DC=luxmed,DC=net,DC=pl: Updating the > UF_TRUSTED_FOR_DELEGATION > bit in > File > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/_ > _init__.py", > line 176, in _run > return self.run(*args, **kwargs) > File > "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/d > omain.py", &gt...

...et.pl >> Adding CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl >> Join failed - cleaning up >> ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <Failed to add CN=KONC-SERWER,OU=Domain Controllers,DC=domain,DC=net,DC=pl: Updating the UF_TRUSTED_FOR_DELEGATION bit in userAccountControl is not permitted without the SeEnableDelegationPrivilege> <> >> File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 176, in _run >> return self.run(*args, **kwargs) >> File "/usr/...