similar to: Help with Linux offline cached credentials on a Windows domain

Hallo, I wonder if cached credentials local logins are expected to work with samba. I have users with notebooks that I want to be domain members. If the notebook is in the wild I want the users to use their profiles (either local or roaming) stored on the notebooks. But once disconnected from the network the users can't login. I found a thread:

Hello all, I am having some difficulties after migrating the PDC from one server to another cached credentials no longer work. Users used to be able to take their laptops home and then logon using their cached domain credentials. Now when this is attempted now they get the error that the GAUACA domain is not available. All of the group policy settings are set to allow cached logons and

Hi, this is actually more a pam question I believe, but I guess you'll know enought about it to answer my question. I would like to enable domain logins on some linux laptops, like I do on the desktops. This works great when the domain is online, but when users are off site login still has to work of course. Is there a way to enable winbind login, but do a fallback on a cached password when

If I set winbind offline logon = yes in my smb.conf file and I have my Linux box authenticating directly against an AD controller, where, and how, does samba store the user's credentials? And are the credentials encrypted? If yes, use what scheme? I could read more on this, too, but for how long are they cached? Thanks. Scott

My win2000 laptop caches the domain credentials so I can log into the computer when disconnected from the network. However, Windows XP SP2 laptops cannot. I get a "domain unavailable error" even though the local security profile on the laptop is set to allow domain credential caching. My other client, with XP laptops and a Windows 2000 server, has no problem. Is this a Samba 3.0.8

I'm having a randomly occurring problem with some of the laptops that we maintain. They are joined to our Samba domain (samba-3.0.14a-1). Every once in a while when they are disconnected from the local network they will drop their cached domain passwords and will not allow the user to log back into the computer. It will return a domain unavailable error until it is plugged back into the

I am running Samba 3.5.5 on Solaris 10. I have one machine as a PDC, one as a BDC. If I logon to the domain from a Windows 7 Pro (64-bit) laptop, hibernate the machine, unplug the network cable and wake the machine, I can not unlock the screen. I will get the message "There are currently no logon servers available to service the logon request." Other users have reported this.

Hi we are using a recent samba server in an AD W2003 domain. The AD DC's are located at the main location. The samba member servers (file-servers) are located at the outside locations. A User is able to logon to his Workstation, even if the Domaincontroller is not available, if he has already logged on to this workstation earlier (the clients caches the credentials). But the client is

My setup uses sssd on the clients for offline logon, so it's not the same thing you're looking for. I think what you need is for your Samba member server to be an AD DC so it contains it's own credential store. You should check the Samba wiki to figure out how to set your server up as a DC and a file server. That's how mine are setup, so it can be done, but there are some

On Thu, Jun 01, 2017 at 03:11:53PM +0200, Gionatan Danti wrote: > Il 01-06-2017 14:45 Data Control Systems - Mike Elkevizth ha scritto: > >I've had issues with cached credentials with the Ubuntu packages that > >are currently at version 4.3.11. They are a little old, but I haven't > >seen any change logs for the newer versions specifically regarding > >this

Il 01-06-2017 14:45 Data Control Systems - Mike Elkevizth ha scritto: > I've had issues with cached credentials with the Ubuntu packages that > are currently at version 4.3.11. They are a little old, but I haven't > seen any change logs for the newer versions specifically regarding > this issue. Maybe I've missed it, but it's the main reason I continue > using

I have a Windows 200x AD Server and have a Linux box as a client connected to the Windows domain having modified the native Kerberos, smb.conf, and other files (not using Likewise). It logs in to the domain fine and everything is happy. There are NO local accounts in /etc/passwd except for the defaults out of the box. Authentication relies on the accounts of the Windows server. I have no

I have a CentOS 5 box that is joined to a genuine Windows domain controller and users can easily log into that box with their AD credentials. I configured the Linux box' native config files (smb.conf, krb conf files, etc) instead of using a third-party app. Logins work fine. I visit the smb.conf file to try and create an smb share of a mounted volume, and I get prompted for credentials.

On 06/01/2017 08:42 PM, Jeremy Allison wrote: > On Thu, Jun 01, 2017 at 03:11:53PM +0200, Gionatan Danti wrote: >> Il 01-06-2017 14:45 Data Control Systems - Mike Elkevizth ha scritto: >>> I've had issues with cached credentials with the Ubuntu packages that >>> are currently at version 4.3.11. They are a little old, but I haven't >>> seen any change

Ok, I updated resolv.conf as you said. Then I restarted the network service on this member server and afterwords suspended the 1st DC. Now, kinit gives me again: "Cannot contact any KDC for realm 'BPN.TU-BERLIN.DE' while getting initial credentials" Ole Am 05.01.2016 um 13:41 schrieb L.P.H. van Belle: > For the member servers, to reduce timeouts etc when one DC is down.

You have a CentOS (for example) workstation that is a member of a Windows AD domain courtesy of modified smb.conf and krb5.conf files. There are, thus, no local user accounts on the linux workstation. There is a network application that benefits most (maybe even requires) the user's numerical portion of their employee ID as their linux workstation id. Thus, if I log in, my domain username

Il 01-06-2017 19:42 Jeremy Allison ha scritto: > On Thu, Jun 01, 2017 at 03:11:53PM +0200, Gionatan Danti wrote: >> However, *no* user authentication is possible on samba shares when >> the VPN tunnel is down? >> >> Do you have any suggestions? > > I think Uri and Volker did the work on this. Uri, can you > give an update on where we stand with offline auth

Yes, it does for me, too. What is an mx record? Am 07.01.2016 um 09:45 schrieb L.P.H. van Belle: > Hai Ole, > > What does this give you as output? > host bpn.tu-berlin.de > > I assum you dnsdomain name is the same as your REALM_NAME ? > > For me it show the 2 ipadresses of my DC's. > And my MX record. > > Greetz, > > Louis > >>

Sorry, I don't think you're going to be able to accomplish what you want with any standard packages from CentOS. As far as I know, even the current CentOS 7 packages don't have AD DC functionality. If you don't want to change your current server over to an AD DC, you could try creating a virtual machine to act as your AD DC instead. I've only tried this method for testing

We have our linux servers setup to authenticate against Windows AD using idmap config DOMAIN: backend = RID When a domain user logins to the system, all works fine, if its their first time loggin in then their home directory is created, and by using RID backend, all UIDs are consistent across all Linux servers. If we stop winbind, processes running under the username no longer show username, but