similar to: Samba 3.0.1-rc2 ADS security mode problems

(refers to posting "Samba 3.0 + ADS, winbind problem" from August, 28th) Setup: client: SuSE8.2 professional (kernel 2.4.20-4GB) with openldap2 2.1.12 and heimdal kerberos 0.4e from the SuSE CDs and Samba 3.0.0RC3 compiled from source with flags "--with-ads --with-pam --with-acl-support". server: Windows 2003 Server as Active Directory Controller (configured as pure

Ok, this one has me stumped... I am implementing 3.0.1 on a new machine - Slackware 9 based. Got everything compiled (OpenLDAP, Kerberos 5) and installed Kerberos pulls the ticket without problem. The samba machine joins the domain without any difficulties. Here is where it gets weird. From the Win2k3 DC, I can not browse the samba machine - won't recognize passwords. However, from

Hi, I'm about an article: This is a bug in Win2k3. See knowledgebase KB833708. The KB article itself isn't correct, because it states that if you request des-cbc-crc you'll get des-cbc-md5 tickets, but in reality you get rc4-hmac tickets. The KB article points you to a hotfix or a registry setting. I have the problem with W2003+samba, tried even that patch, but nothing

I am able to get a kerberos ticket with kinit. When I try to net ads join, it seems to loop. In running net ads join in -d 10, I found that it tries enctypes 18,17,16,and 2 and then repeats, over and over. It does not seem to work on any of these. I'm trying to get it to join a win2k3 domain. Below is the bottom part of the log from net ads join, as well as some of my krb5.conf. Any

Hey all. I'm running Samba 3.0.1 as a domain member in a Win2k3 ADS domain. I'm attempting to view shares on the samba server via a Win2000 client. I've been getting the following messages from the smbd logs and I'm wondering why. I can connect to the Samba server (using the IP only) to view which shares are available, but when I double click the share to access it, I get a

Hi All, I am using Samba 3.2.4 compiled from source on AIX 5.3 TL8 and using "security = SERVER" in the smb.conf works fine, however I am having some issues when using "security = ADS" .. I have followed numerous HOWTOs and newsgroup listings and seem to be going round in circles .. I think I can authenticate ok against the domain win2k3 server, but then Samba bombs out with

Here's a followup. I also get these errors in the smbd logs. The thing is, the share directory has full permissions (0777) and the smb.conf is set to be fully readable, writeable and okay for guests. [2003/12/19 15:21:23, 0] smbd/service.c:make_connection_snum(677) '/home/bspiegel/test/' does not exist or is not a directory, when connecting to [test] [2003/12/19 15:21:23, 3]

I am running Samba 3.0.9/KRB5 1.4 on Centos 3.4 on x86 with security = ADS in a Win2k3 domain. I have successfully used kinit to authenticate, joined the domain, and wbinfo -g/-u/-t return the expected results. However, when I try and access the samba shares from a Win2k3 box, it fails telling me I don't have permissions to access the share. Needless to say I am thoroughly perplexed. I have

Hi Jim, I did what the doc says but the problem is the same. Does anybody saw this work ? I mean, is the Samba 3.0.2a+Kerberos MIT 1.3.3 able to be accessed by a WXP, W2K or W2K3 machine, using Kerberos tickets generated in a Windows 2003 KDC (W2K3 AD) ? Thanks -----Mensagem original----- De: Jim McDonough [mailto:jmcd@us.ibm.com] Enviada em: segunda-feira, 19 de abril de 2004 17:07 Para:

Hi Samba Bods, Sorry for re-posting this one but I got no response to my last post except for a level 10 logs request which I uploaded last week. I have been looking at numerous howtos and newsgroup postings and I cannot spot what the issue is. I am sure its a simple config issue, but I am lost .. I am using Samba 3.2.4 compiled from source on AIX 5.3 TL8 and using "security =

I'm a bit of a newbie to Samba, and am having some trouble getting it running with my Windows Server 2003 Active Directory. I've followed the procedures in the HOWTO-Collection.pdf, with no luck. "kinit administrator" works fine, and stores a ticket in the cache: [root@firewall root]# klist -5 Default principal: administrator@HOME.EXAMPLE.COM Valid starting Expires Service

I've been trying to setup Samba to authenticate users against accounts existing on a Windows 2003 Server without any backwards capability. Ideally, this needs to be done without any changes to the Windows 2003 Server. Users will not be logging into the Samba shares at all. This is merely for authentication. I'm running FreeBSD 4.10-Relase #4 with Samba 3.0.8. This is my smb.conf file:

Hi, I rarely deal with kerberos but everytime I do it's painful... I have a Windows Server 2016 VM at foo-ad.foo.com. It has the AD role and it owns the FOO.COM domain. I added a *AD* account FOO\aaptel%aaptel. PS C:\share> get-aduser aaptel DistinguishedName : CN=aaptel,CN=Users,DC=foo,DC=com Enabled : True GivenName : Name :

Hi all, we are having some troubles with the integration of some Solaris 9 Sparc servers on a Windows 2003 Server Active Directory domain. When we made the tests on a Solaris 9 Intel server, everything run successfully. After that we run some group membership tests, just changing users from one to another group on the W2K3 Server. We've seen on those tests that winbind was caching the

Hi, I've got some problems with winbind and ADS Domain Membership stuff. I've joined the domain without problems with "kinit admin@MY.DOMAIN" and "net ads join", i can see the machine account in AD with ldapbrowser. Klist give me three tickets, as say in the documentation, OK. I created the idmap entry in my openldap (with samba3 schema), OK. I've set the ldap

This is release 1.0-rc2 of Wine, a free implementation of Windows on Unix. What's new in this release (see below for details): - Bug fixes only, we are in code freeze. Because of lags created by using mirrors, this message may reach you before the release is available at the public sites. The sources will be available from the following locations:

Hi I'm having problems with samba-3.0.21b and Windows Server 2003 domain controllers. When I try to access the samba server from a client (\\sambasrv) I only get a login prompt, no username/password combination works. Accessing the samba server through its IP-number instead of using the netbios name works. This together with the log message "Failed to verify incoming ticket!"

Hello Mailinglist, I have created a local user "localuser" who is in the local group "localgroup" $ id uid=1001(localuser) gid=1001(localgroup) groups=1001(localgroup) My machine authenticates against Active Directory - works The AD-User "aduser" belongs to a domain group "adgroup" $ id uid=6161(aduser) gid=5513(dom?nen-benutzer)

Fantastic! On Monday I'll give it a try! -----Original Message----- From: Tim Jordan [mailto:timothy_jordan@labor.state.ak.us] Sent: Fri 12/12/2003 20:56 To: Tom Dickson; m.c.hudson@open.ac.uk; admina@labor.ak.us Cc: fernandor@sescam.jccm.es; jerry@samba.org; samba@samba.org Subject: Re: [Samba] Windows 2000 and krb5 tickets...SOLVED Browsing is working from my W2K and XP

Hello, I am having trouble joining Samba to my ADS domain. I am using Samba 3 and krb5. I have configured and tested krb5 and know that it is functioning as it should be. I can successfully authenticate users using kinit. I've also configured winbindd. When I exicute net ads joing -U <admin username> and enter the proper password samba generates the following aborting the process at the