similar to: Very Complex Master Password Challenge

This would make my life a lot easier in migrating to Dovecot. And it should be really easy to implement. Here's how linuxconf does it: Password files are placed in the /etc/vmail directory as follows: /etc/vmail/passwd.domain1 /etc/vmail/shadow.domain1 /etc/vmail/passwd.domain2 /etc/vmail/shadow.domain2 The password and shadow files are exactly the same format as the /etc/password and

OK - here's whay I need to make it work for my Linuxconf compatible authentication system. First - a question: Will this work? I can find docs on "virtualfile. auth virtualfile { mechanisms = plain digest-md5 userdb = passwd-file /etc/vmail/passwd.%d passdb = passwd-file /etc/vmail/shadow.%d user = root } Then - since the dmain name selects the passwd file, if there were a

Hello list, I have a little question. When I do smbclient -L //server, what does the following table mean? Workgroup Master --------- ------- ADMINISTRACION ADM003 AEYT AEYT4 TRABAJO ESTEEQUIPO WORKGROUP JUKEBOX I'm asking because I have 5 samba domains and when I do

OK - I want to do something very tricky with master users and if I get it to work I'm adding it to the wiki for everyone to use. So far I have a MySQL database that servers multiple domains. I can set a flag making someone a domain owner that allows that person to become master of that domain. Here's the query for that. password_query = SELECT user_name, domain_name, password FROM

Am 14.09.2016 um 18:23 schrieb Michael A Weber: > >> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba >> <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >> >> >> >> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >>> Experts— >>> >>> I’m attempting to export a keytab for a created

> On Sep 14, 2016, at 12:57 PM, Achim Gottinger <achim at ag-web.biz> wrote: > > > > Am 14.09.2016 um 18:23 schrieb Michael A Weber: >> >>> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >>> >>> >>> >>> Am 14.09.2016 um 05:53

Can I have a master users list for each virtual domain? I'm not sure from what I read on the page: http://wiki.dovecot.org/Authentication/MasterUsers auth default { mechanisms = plain login CRAM-MD5 passdb passwd-file { args = /var/mail/vhosts/%d/passwd.masterusers master = yes pass = yes } passdb passwd-file { args = username_format=%n

Hi, Why modifying a working conf when you can build your DC on others systems (VM)? That could be really nice to learn but you add a lot of complexity in your process, I think. Why not using DLZ to access your AD zones? I expect Bind to be able to mix its behaviour: flat file for some zone, DLZ for others... Now regarding: update-policy { grant AD.DOMAIN2.SUBDOMAIN.TLD ms-self *

On 27/05/16 14:37, Jeff Sadowski wrote: > I had left my config alone for now and dhcp still writes to > DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able > to write to bind in its zone. > > [2016/05/27 07:30:06.738434, 0] > ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) > ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - >

Hi, I have been trying to use Winbindd in SLES 11 SP3 (Samba version 3.6.3-17.25.1) to fetch AD (Windows 2008 R2) identities into the Linux box and currently running into some problem w.r.t domain local groups and thought I could get some help here.. I have a two domain setup, in which DOMAIN1 is the parent domain and DOMAIN2 is the child domain. I have 2 users DOMAIN1\user1, DOMAIN2\user2 and

Consider this topology domain1-server1 domain2-server2 | | laptop - domain1-server1 ---- domain2-server1 Laptop has two ssh identities, domain1 and domain2. I don't wish to store identity locally in any of the servers. As far as I understand, there isn't any way to limit ssh-agent to allow only signing

On 27/05/16 17:11, Jeff Sadowski wrote: > https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped > me find that I needed to add > > options { > [...] > tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; > [...] > }; > That seems to have fixed my errors with DNS > > On Fri, May 27, 2016 at 9:26 AM, Rowland

On Fri, May 27, 2016 at 10:23 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 17:11, Jeff Sadowski wrote: > >> https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD >> helped me find that I needed to add >> >> options { >> [...] >> tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; >>

> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > > Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >> Experts— >> >> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error: >> >> ERROR(runtime): uncaught exception - Key table entry not

I had left my config alone for now and dhcp still writes to DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able to write to bind in its zone. [2016/05/27 07:30:06.738434, 0] ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - NT_STATUS_UNSUCCESSFUL If you are right about it using kerberos I think I am

So I had dhcp, radvd and bind working together nicely and now I threw in a wrench of setting up an AD DC I want to change my dhcp server setting to put client's into the new AD Domain but am a little hesitant as it is all working so nicely with DDNS I'm starting to think all I need to do is edit just my dhcpd.conf and change occurrences of DOMAIN1.SUBDOMAIN.TLD to

Hi, On Fri, 2 Jun 2017, Sandbox wrote: I have two LDAP domains, which has some equal users, eg: > > abc at domain1.com > abc at domain2.com > > This works fine except one thing: i cant set up the ldap query to choose > the correct maildir if the user names are equal. > | Well the most problem is that you have two LDAP servers with different content. Unfortunately i cant

https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped me find that I needed to add options { [...] tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; [...] }; That seems to have fixed my errors with DNS On Fri, May 27, 2016 at 9:26 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 14:37, Jeff Sadowski wrote: >

Hello all, we have a samba server on a SLES9 linux box. It is connected to an active directory with multiple trusted domains. With this server, we have strange problems with users/groups in others domains. The users/groups listed in smb.conf that are part of trusted domains are not take in account to access the shares. We cannot as well set ACL correctly on filesystem. This is not an

Hi. I'm trying to use checkpassword for simple auth and masteruser auth. I have two programs, one called checkpassword-master (for masteruser lookup) and another called checkpassword for normal passdb and userdb lookup). All works fine for non-masteruser authentication (in this case dovecot makes a single call to checkpassword binary). But if a master-user authenticates, dovecot execute