search for: winbind_krb5_locator

...Did you create this server on site a and the moved it to site b? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Felix >Matouschek >Verzonden: vrijdag 14 augustus 2015 8:58 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] winbind_krb5_locator usage > >Hello, > >i investigated further and found out that other member servers >do honor their AD sites. > >It is just that one machine that has both KDCs in it's >"/var/cache/samba/smb_krb5 exists/ krb5.conf.INTRANET". > >I'm a bit puzzled... th...

...I have different Sites in my domain and want the different members to use the respective domain controller of their site. I can't get this to work right. I have a member that is in site B but executing "net ads info" outputs the DC of site A as active. I read about enabling "winbind_krb5_locator", but it is already located in "/usr/lib/x86_64-linux-gnu/krb5/plugins/krb5/". Winbind also does not generate a krb5.conf, even with the option "create krb5 conf" explicitly set to yes. I am using SerNet Samba 4.2.3 as DC and Member. Any suggestions? Greetings, Feli...

...the primary kdc? 192.168.122.1 should be primary kdc for that machine. Greetings, Felix -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland Penny Gesendet: Donnerstag, 13. August 2015 12:57 An: samba at lists.samba.org Betreff: Re: [Samba] winbind_krb5_locator usage On 13/08/15 10:47, Felix Matouschek wrote: > Hello, > > I have different Sites in my domain and want the different members to use the respective domain controller of their site. > > I can't get this to work right. I have a member that is in site B but executing &quot...

....x using the source RPM from Sernet. However, I'm not able to upgrade Samba on the CentOS 3.x boxes. Here's the error I get when I run "rpmbuild --rebuild --clean samba-3.2.7-38.src.rpm": + mkdir -p /var/tmp/samba3-3.2.7-build//usr/lib/krb5/plugins/libkrb5 + cp -p source/bin/winbind_krb5_locator.so /var/tmp/samba3-3.2.7-build//usr/lib/krb5/plugins/libkrb5 cp: cannot stat `source/bin/winbind_krb5_locator.so': No such file or directory error: Bad exit status from /var/tmp/rpm-tmp.4484 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.4484 (%install) Has anybody en...

....14~    * Bump build-depends tdb >= 1.3.16~    * Bump build-depends ldb = 1.3.6, samba 4.8 is NOT compatible with 1.4.x.    * Relax debhelper to allow Backport to Debian Jessie    * d/rules changed Winbind krb5 locator, to usr/lib/*/krb5/plugins/winbind    * d/winbind.install changed location of winbind_krb5_locator.so    * d/winbind.install changed winbind_krb5_locator man 7 to man 8     If there are people who are willen to test these a bit also, would be great. Im starting to test these myself now also, please report any finding, im asking because the changes for  krb5 locator was a bit unclear. Should be...

Alex, I've been a victim of this since Day 1. After a lot of reading and emailing, it comes down to this. libkrb5-3 version 1.8x by default disallows DES encryption. /etc/krb5.conf can be changed to allow weak encryption, but as it relates to Samba, is only effective in letting the system join the domain. For it's internal functioning, winbind uses an autogenerated krb5.conf that

...>= 1.3.16~ >    * Bump build-depends ldb = 1.3.6, samba 4.8 is NOT > compatible with 1.4.x. >    * Relax debhelper to allow Backport to Debian Jessie >    * d/rules changed Winbind krb5 locator, to > usr/lib/*/krb5/plugins/winbind >    * d/winbind.install changed location of winbind_krb5_locator.so >    * d/winbind.install changed winbind_krb5_locator man 7 to man 8 >   >   > If there are people who are willen to test these a bit also, > would be great. > Im starting to test these myself now also, please report any > finding, im asking because the changes for  krb5...

...port --with-krb5=/usr/lib/krb5 I felt that this would give the linker/compiler the best chance of finding what it needed. Apparently, this is not the case. When I look in the config.log: configure:55103: checking for Active Directory and krb5 support KRB5CONFIG='' KRB5_LIBS='' WINBIND_KRB5_LOCATOR='' So then, if we do a "make" # less config.h | grep -i krb /* Whether the krb5_address struct has a addrtype property */ /* #undef HAVE_ADDRTYPE_IN_KRB5_ADDRESS */ /* Whether the krb5_address struct has a addr_type property */ /* #undef HAVE_ADDR_TYPE_IN_KRB5_ADDRESS */ /* Whet...

...ar/cvsroot/gentoo-x86/net-fs/samba/samba-3.4.6.ebuild,v 1.1 2010/02/26 20:11:21 patrick Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/samba-3.5.2.ebuild,v 1.2 2010/04/08 10:05:23 patrick Exp $ @@ -60 +60 @@ - use ads && use winbind && SBIN_PROGS="${SBINPROGS} bin/winbind_krb5_locator" + use ads && use winbind && SBINPROGS="${SBINPROGS} bin/winbind_krb5_locator" @@ -150,0 +151 @@ + $(use_with client cifsumount) \ diff -U 0 3.4/lmhosts 3.5/lmhosts --- 3.4/lmhosts 2010-02-26 16:11:18.000000000 -0400 +++ 3.5/lmhosts 2010-03-01 12:...

...on <jra at samba.org> * BUG 8314: Fix smbd crash with unknown user. * BUG 8831: Fix inconsistent (with manpage) command-line switch for "help" in smbtree. * BUG 8882: Fix processing of %U with vfs_full_audit when "force user" is set. * BUG 8897: winbind_krb5_locator only returns one IP address. * BUG 8910: resolve_ads() code can return zero addresses and miss valid DC IP addresses. * BUG 8957: Fix typo in pam_winbindd code. * BUG 8972: Directory group write permission bit is set if unix extensions are enabled. * BUG 8974: Kernel opl...

...on <jra at samba.org> * BUG 8314: Fix smbd crash with unknown user. * BUG 8831: Fix inconsistent (with manpage) command-line switch for "help" in smbtree. * BUG 8882: Fix processing of %U with vfs_full_audit when "force user" is set. * BUG 8897: winbind_krb5_locator only returns one IP address. * BUG 8910: resolve_ads() code can return zero addresses and miss valid DC IP addresses. * BUG 8957: Fix typo in pam_winbindd code. * BUG 8972: Directory group write permission bit is set if unix extensions are enabled. * BUG 8974: Kernel opl...

Hi, I'm trying to build Samba-3.5.9 on RHEL 5.6 and I'm getting several errors similar to the following: Linking bin/winbind_krb5_locator.so bin/libwbclient.a(wbclient.o): In function `wbcLibraryDetails': wbclient.c:(.text+0x101): undefined reference to `talloc_named_const' wbclient.c:(.text+0x123): undefined reference to `talloc_strdup' wbclient.c:(.text+0x150): undefined reference to `_talloc_free' bin/libwbclient.a...

Hello Roland thank for you support Il 06/11/2017 17:31, Rowland Penny via samba ha scritto: >>> There is a bug for this: >>> https://bugzilla.samba.org/show_bug.cgi?id=12164 >> are there some workarounds ? >> > Yes, do not use the DC as a fileserver;-) > If you must, don't run a backup system that relies on IDs > > A DC has no concept of 'NT

...ix interdomain trusts with Win2008R2. * BUG 6868: Support building of cifs.upcall with Heimdal as well with MIT. * BUG 6889: Fix Winbind crashes when queried from nss. * BUG 6929: Fix build with recent Heimdal. * Fix the build of the winbind krb5 locator plugin. * Fix compile of winbind_krb5_locator with recent Heimdal versions. * Fix the build on Mac OS X 10.6.2. o Jeff Layton <jlayton at redhat.com> * BUG 6810: Backport support for finding alternate credcaches. * Use pid value from kernel to determine KRB5CCNAME to use in cifs.upcall. o Volker Lendecke <vl at sam...

...ix interdomain trusts with Win2008R2. * BUG 6868: Support building of cifs.upcall with Heimdal as well with MIT. * BUG 6889: Fix Winbind crashes when queried from nss. * BUG 6929: Fix build with recent Heimdal. * Fix the build of the winbind krb5 locator plugin. * Fix compile of winbind_krb5_locator with recent Heimdal versions. * Fix the build on Mac OS X 10.6.2. o Jeff Layton <jlayton at redhat.com> * BUG 6810: Backport support for finding alternate credcaches. * Use pid value from kernel to determine KRB5CCNAME to use in cifs.upcall. o Volker Lendecke <vl at sam...

...G 8837: Fix crash in smbd when deleting directory and veto files are enabled. * BUG 8857: Setting traverse rights fails to enable directory traversal when acl_xattr in use. * BUG 8882: Broken processing of %U with vfs_full_audit when force user is set. * BUG 8897: Make winbind_krb5_locator not only returning one IP address. * BUG 8910: resolve_ads() code can return zero addresses and miss valid DC IP addresses. * BUG 8922: smbclient's tarmode insists on listing excluded directories. * BUG 8953: Winbind can hang as nbt_getdc() has no timeout. * BUG 8957: Typo...

...G 8837: Fix crash in smbd when deleting directory and veto files are enabled. * BUG 8857: Setting traverse rights fails to enable directory traversal when acl_xattr in use. * BUG 8882: Broken processing of %U with vfs_full_audit when force user is set. * BUG 8897: Make winbind_krb5_locator not only returning one IP address. * BUG 8910: resolve_ads() code can return zero addresses and miss valid DC IP addresses. * BUG 8922: smbclient's tarmode insists on listing excluded directories. * BUG 8953: Winbind can hang as nbt_getdc() has no timeout. * BUG 8957: Typo...

...ed by DNS queries for non-existent names (returning NXDOMAIN) being sent to the samba server: SRV? _kerberos-master._udp.AD.EXAMPLE.NET. (54) SRV? _kerberos-master._tcp.AD.EXAMPLE.NET. (54) SRV? _kerberos-master._udp.AD.EXAMPLE.NET. (54) SRV? _kerberos-master._tcp.AD.EXAMPLE.NET. (54) There is a winbind_krb5_locator plugin present: root at client-ad:~# dpkg-query -L winbind | grep -i locator /usr/lib/x86_64-linux-gnu/plugin/krb5/winbind_krb5_locator.so /usr/share/man/man7/winbind_krb5_locator.7.gz But now I'm stumped. Maybe the DNS lookups are a red herring. I'd quite like to be able to fetch a tick...