similar to: samba, pam, kerberos

Hello I decided to test password migration (on Solaris 8 box with SUNWspro C) and built samba with pam_smbpass module : CC=cc ./configure --prefix=/opt/local/samba --with-acl-support --with-pam --with-pam_smbpass Then installed bin/pam_smbpass.so in /usr/lib/security : # ls -al /usr/lib/security/pam_smbpass.so -rwxr-xr-x 1 root sys 2091380 Oct 23 11:01

Hello What is sequence for "auth methods" running in ADS mode ? How I can find this ? With best regards Martynas

Hello I have Samba running as AD member. In addition there is a support of quest user connections to shares, that allow guest connections to shares, where access is restricted on IP addresses base. Problem is, that Administrator is not mapped to guest, because Administrator in AD domain is locked. Samba gets respond NT_STATUS_ACCOUNT_LOCKED_OUT and denies connection. While computers, that are

Hello I have Samba that joined Windows 2003 based ADS. At least "net ads testjoin" and "net rpc testjoin" gives that "Join is OK". Alas clients can't connect to Samba server. In a log I see following messages : [2005/04/08 14:51:41, 0] tdb/tdbutil.c:(725) tdb(/web/opt/etc/smbprivate//secrets.tdb): tdb_lock failed on list 2 ltype=2 (Resource temporarily

Hello I see, that "enable asu support = no: is available and I can point ADMIN$ wherever I want. I just want ask if this setting will not have any other impact to my current services (Samba installation is ADS membership). Can you provide more detailed explanation of "enable asu support = no" impact ? Thank you ! With best regards Martynas -----Original Message----- From:

Hello I have samba 3.0.13 running in ADS mode. For some specific reason I want to disable winbindd authentication while I want winbindd keep running. If I understood right - option "auth methods" would help to do that. But I am not sure if this will not break existing services : auth methods = guest sam All users that authenticate are created locally in /etc/passwd file. Can anybody

Since I now have something which at least pretends to work, I suppose an announcement is in order. Those among you who track samba development are probably aware that samba 1.9.18p4 includes support for synchronising a unix database when changing an SMB password. I'm currently working on a PAM module which will provide similar functionality for all applications compiled with PAM support:

Hello Is it possible to get information when next official Samba release (> 3.0.14a) will be published ? Thank you very much for information. With best regards Martynas

Hello Is it possible to make ADMIN$ share (Samba 3.0.14a) world writeable and pointing to specific directory ? I am interested in building some sort of honey pot that would allow virus to transfer files to ADMIN$ under putting mode logging around. Any other solutions with samba ? Martynas

Hello I need some advice from gurus. I identified several Windows NT computers, that are persistently trying to access my samba server. They are connecting to IPC$ with NULL information both in password and username fields. Below you will find excerpt from samba log file. My questions would be following. What is SPOOLSS_ADDPRINTEREX ? Can it be some kind of worm ? If yes, how I can catch it

Hello Sorry for disturbing again. It looks like I must pass lot of compilation issues to force pam_smbpass working. And I don't believe, that nobody faced same problems as I do, because I am using quite trivial configuration without success, so maybes somebody can share experience with pam_smbpass under Solaris or help me identify what's wrong with it ? So finally I wrote my own pam

Hi I'm attempting to compile samba 222 on Solaris 2.8 using Sun Forte 6 C compiler but I'm getting error messages. I used the following sequence of commands: setenv CC cc ./configure --prefix=/usr/local/samba.22 --with-acl-support --with-pam --with-pam_smbpass --with-syslog make See messages below: ================================================================ ..........

I am using PAM and pam_smbpass.so with Samba 2.999 (Debian sid package). If, in /etc/pam.d/samba, I set session required pam_smbpass.so then login fails, and the log says: [2002/08/04 15:43:26, 0] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: session setup failed : Module is unknown [2002/08/04 15:43:26, 1] smbd/session.c:session_claim(103) pam_session

On 08 Dec 2019, at 05:58, @lbutlr <kremels at kreme.com> wrote: > On 06 Dec 2019, at 16:28, Martynas Bendorius <martynas at martynas.it> wrote: >> when zlib compression is enabled in dovecot, old emails remain untouched > > I?ve been considering doing this, or at least looking into how much space we?d save (answer so far, less than you might think), but I am hesitant to

Hello, I would like to change my courier to dovecot. When I try to setup ldap auth, I get error: dovecot-auth: ldap(martynas): Unknown password scheme SHA So, how enable SHA scheme on dovecot? regards, Martynas

Hi Everybody, maybe we are just too stupid, but for me it seems that there is some problem with holding passwords completely sync between *NIX-world and WIN-world when I use LDAP & Samba. If a user changes a password under Windows, with "passwd chat" the *NIX-Password (attribute: userPassword) can be changend very well besides the both Samba-LDAP-attributes lmPassword and

Hello, Maildirlock seems to panic on locking: [root at centos7 home]# /usr/libexec/dovecot/maildirlock "/home/user/imap/domain.com/email/Maildir" 10 Panic: BUG: No IOs or timeouts set. Not waiting for infinity. Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xd90ee) [0x7f5bf02f10ee] -> /usr/lib/dovecot/libdovecot.so.0(+0xd9131) [0x7f5bf02f1131] ->

Hello all, I currently have the following setup working nicely: A Samba PDC, with LDAP-SAM, syncs passwords between LDAP and Samba (and /etc/shadow when appropriate) correctly - either when changing them through Samba (samba has PAM support enabled and working) or through normal Unix mechanisms (/usr/bin/passwd, using pam_smbpass, pam_ldap, etc.). Several other Linux machines, running Samba,

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1257186 This bug has a long history since 4.1.6 and I can confirm with 4.2.1 I've isolated to the line: auth optional pam_smbpass.so migrate Configured in /etc/pam.d/common-auth That line is added by libpam-smbpass package installation and also by using pam-auth-update to enable SMB Password Synchronization For 4.2.1

Hello, Aki created this patch a while ago: http://files1.directadmin.com/services/custombuild/patches/maildirlock-crash.patch It works perfectly to fix the issue :) Regarding dsync - I don't think it's a good replacement in all the cases, is it? We use maildirlock extensively for compression of email folders (when zlib compression is enabled in dovecot, old emails remain untouched). --