similar to: Kerberos Tickets renewal

Hello List, We are having a NAS here with 4 TB (sic!) disc space and a samba server as a file server (or better: as one of the file servers). Now the vendor tells us: with samba you can't share more than 2 TB of that. This is not enough. Is that a restriction of Samba, Linux or of the vendor's system? I never encountered this restriction... Please help! -- Mit freundlichen Gr??en

Hello List, I have successfully integrated samba 3 to ADS Domain, and now i want to allow domain-users to access services on my linux box. For testing i chose /etc/pam.d/login and tried to allow ADS Users access to the console. But i always get the following errors: Mar 12 12:45:59 cuba90 pam_winbind[9011]: user 'r-ermer+mfeilner' granted acces Mar 12 12:45:59 cuba90 login[9011]: User

Hello List, I am (unsuccessfully) trying to automatically get a valid kerberos ticket for my linux box. I have - in a test environment: - a windows 2000 server with Active directory and DNS properly set up. - a suse linux 9.0 router with samba3.0.2.rc.1 and heimdal 0.6.-67. - I am able to join the domain and get a valid ticket through kinit, if I enter the Administrator's password or the

Hello List, I have successfuly brought samba 3.0 on SuSE (8.1,8.2,9.0) to work together with an Active Directory Server. I have (also successfully) enabled squid to use winbind for authentication for internet access. (I need winbind, because only members of a certain AD Group are allowed to access the internet.) Kerberos is running fine. My Problem is: After I add a new user to the AD: With

Hello List, has anybody got pam_winbind get to work under SuSE 9.0? I try to set up a pam.d file to enable users auth'd against winbind to access my mail server. I am testing with console login or ssd files at the moment. I found some docs at samba.org (esp the winbind section), but that didn#t work. I used to manage with older versions, but i can't figure out what went wrong ... al I

Hi list, I am an editor at the German Linux Magazine and I am searching for an author or input on Dovecot, its advantages and especially the recent features. I had organized some authors, but unfortunately they don't have time right now. :-) Nevertheless I heard many positive comments on Dovecot. I can write or help writing the article, but I would love to have some input from an

Hello List, I have a strange problem: I have successfully added my debian system to the local active directory domain. Winbind works and gives me Users, Groups, and relations when I call wbinfo. However, Users cannot connect to a share I prepared. It makes no difference if there is no "valid user = " entry, or if I put an correct entry with my test user. All I get in log.winbindd is:

Hello, I have a samba share (with security=share) and I can access it from every W2K system after entering the username/password. However, when I try to access the share from Windows XP, XP always tries to connect with the guest account. Can anyone point me to the reason for this behaviour? Thank you! -- Mit freundlichen Gr??en Markus Feilner -------------------------- Feilner IT Linux &

I have been having a hard time login into a RH AS 3.0 using my MS AD account and password. I did successfully setup winbind, krb5 and samba w/out any major complications. But when it came to login I investigate as to why I am not able to log into the linux box using my AD account and password. I used the following URL example to setup winbind and samba.

Hello List, I successfully joined a Suse 9.0 Server with Samba 3.0.6 to a W2K3 DC, following the guide from http://www.wlug.org.nz/ActiveDirectorySamba My setup seems to work okay, but whenever I start/restart winbind, I get the following message: [2004/09/24 10:26:54, 1] nsswitch/winbindd.c:main(854) winbindd version 3.0.6-SUSE started. Copyright The Samba Team 2000-2004 [2004/09/24

I'm having a *terrible* time trying to get Samba 3 to communicate with my Windows 2003 Active Directory Server (the primary and only domain on my network). Basically this is what I'm trying to do: create a Linux File Server to replace my old WinNT 4 File Server. I would like it to show up under all my XP clients on network neighborhood just like the old server, with each account on my

Achim, I deleted the keytab file and did the following: $ samba-tool user delete dovecot $ samba-tool user add dovecot # again, that asked for a password and I assigned one. $ samba-tool spn add smpt/mail.hprs.local at HPRS.LOCAL dovecot $ samba-tool spn add imap/mail.hprs.local at HPRS.LOCAL dovecot $ ktutil ktutil: addent -password -p smtp/mail.hprs.local at HPRS.LOCAL -k 1 -e arcfour-hmac

Achim, thanks a lot! A couple of questions on your suggested settings: > 1. Create an user > samba-tool create user dovcot I did this (actually `samba-tool user create dovecot`), but it asked for a password. I entered one. You didn't mention that, so I hope it's OK. > 2. Add the spn > samba-tool spn add smtp/server.domain.local at DOMAIN.LOCAL dovecot > samba-tool spn

Achim - per your instructions ... > Did a few test here "auth_gssapi_hostname = "$ALL"" is no longer > required with dovecot (2.2.13 here). My dovecot is 2.2.15 and the 10-auth.conf (from the template) has the comment: # Host name to use in GSSAPI principal names. The default is to use the # name returned by gethostname(). Use "$ALL" (with quotes) to allow

It's getting abit offtopic for the samba list :-) Look at the testing section in http://wiki2.dovecot.org/Authentication/Kerberos do what is mentioned below "Test that the server can access the keytab". If i run the telnet authenticated test and klist afterwards contains the imap keys. Am 01.07.2016 um 08:21 schrieb Mark Foley: > More info ... > > when I do > >

Am 01.07.2016 um 10:37 schrieb Achim Gottinger: > It's getting abit offtopic for the samba list :-) > > Look at the testing section in > http://wiki2.dovecot.org/Authentication/Kerberos do what is mentioned > below "Test that the server can access the keytab". > > If i run the telnet authenticated test and klist afterwards contains > the imap keys. >

On 22/01/15 12:57, Norbert Heinzelmann wrote: > Am 22.01.2015 um 12:28 schrieb Rowland Penny: >> On 22/01/15 10:53, Norbert Heinzelmann wrote: >>> Hello, >>> >>> I have the problem that the ACLs are ignored when I mount a share >>> via cifs. I have an AD with Samba 4.1.6 Ubuntu 14.04 (but I also >>> tried it with Gentoo and samba 4.1.14). So

On 23/01/15 07:34, Norbert Heinzelmann wrote: > > Am 22.01.2015 um 17:17 schrieb Rowland Penny: >> On 22/01/15 12:57, Norbert Heinzelmann wrote: >>> Am 22.01.2015 um 12:28 schrieb Rowland Penny: >>>> On 22/01/15 10:53, Norbert Heinzelmann wrote: >>>>> Hello, >>>>> >>>>> I have the problem that the ACLs are ignored when I

Am 23.01.2015 um 10:19 schrieb Rowland Penny: > On 23/01/15 07:34, Norbert Heinzelmann wrote: >> >> Am 22.01.2015 um 17:17 schrieb Rowland Penny: >>> On 22/01/15 12:57, Norbert Heinzelmann wrote: >>>> Am 22.01.2015 um 12:28 schrieb Rowland Penny: >>>>> On 22/01/15 10:53, Norbert Heinzelmann wrote: >>>>>> Hello,

I was trying to get authentication via kerberos working but I'm having trouble trying to run ktpass as in step 6 here http://robertan.com/home/2015/01/14/kerberos-auth-with-apachephp/ ktpass -princ HTTP/contoso.com at CONTOSO.COM -mapuser CONTOSO\<USERNAME> -crypto all -ptype KRB5_NT_PRINCIPAL -pass <PASSWORD> -out webpage.HTTP.keytab I'm not sure of the