similar to: FW: net ads join / kinit /.conf syntax

Hi. HELP! I read: :-) http://www.samba.org/samba/docs/man/domain-member.html#domain-member-server (Which notes, "This is a rough guide to setting up Samba-3 with Kerberos authentication against a Windows 200x KDC. A familiarity with Kerberos is assumed." Is there "A guide to familiarity with Kerberos as a primer for Samba configuration" somewhere?) :-) This thread

I accidently replied to the individual instead of the message board when I sent this the first time. Chris Wright Network Specialist Information Technology Outreach Services (ITOS) University of Georgia (706) 542-1976 cwright@itos.uga.edu -----Original Message----- From: Chris Wright Sent: Thursday, May 08, 2003 10:05 AM To: 'John H Terpstra' Subject: RE: [Samba] force group parameter

According to the latest version of the Samba Documentation there are three major steps to add a samba server as member server to an ADS: 1.) Configure samba correctly to use ADS (smb.conf). 2.) Configure Kerberos correctly to work with ADS KDC (krb5.conf). 3.) Join the samba server with "net ads join -U Administrator". Well, all this sounds good, but it definetly doesn't work, you

Samba is built with the recommended heimdal kerberos. Samba version: 4.18.8 OpenSSL version: 3.0.11 The AD was created with samba 4.5.x (?) and updated continuously. I guess I need to update the old rc4 "secrets" somehow.... BR, Tibor Am 02.11.2023 um 16:51 schrieb Michael Tokarev via samba: > 02.11.2023 18:04, MATYAS, Tibor via samba: >> Dear all, >> >> updating

Paul, Your samba does have ACLs support built-in. Please check that your system has the ACLs support libraries. Since you are using kernel 2.4.x you need to have the bestbits acls support libraries installed on your machine. Check the documentation for XFS to see how to mount the XFS file system so it has ACLs support. You should manually be able to set POSIX ACLs using the setfacls utility.

Hi, I have to build Samba 3.0.9 on a customers Sun E3500 with Solaris 2.6. They recently upgraded to Windows 200x domain with AD. When i try to compile with Heimdal or MIT Kerberos i get the following error: Using FLAGS = -I/usr/heimdal/include -I/usr/local/BerkeleyDB.4.2/include -I/usr/local/ssl/include -I/usr/heimdal/include -L/usr/local/BerkeleyDB.4.2/lib -L/usr/local/ssl/lib

I've had the chance to give 2.2.7a a try, with no change in behavior. LabView still takes several minutes to load, and disk utilization shoots way up. Just to see what would happen, I tried Samba 2.2.5 and got the same results. I then dropped back to 2.2.4, and everything works fine. LabView loads in about 12 seconds, disk utilization stays low during the load, no locking errors appear in

I running 3.0.25c on OpenSolaris. I can succesfully do a kinit and see the ticket via klist, but am unable to join the domain. /usr/sfw/sbin/net -d 5 ads join -U user@DOMAIN.LOCAL gives the following error... [2007/08/29 15:49:24, 3] libsmb/clikrb5.c:(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache file found) [2007/08/29 15:49:24, 0] libads/kerberos.c:(228)

On 05/10/2020 21:05, Jason Keltz via samba wrote: > On 10/5/2020 2:52 PM, Rowland penny via samba wrote: > >> On 05/10/2020 19:29, Jason Keltz via samba wrote: >>> >>> On 10/5/2020 12:44 PM, Rowland penny via samba wrote: >>>> On 05/10/2020 17:27, Jason Keltz via samba wrote: >>>>> >>>>> Hi Roland, >>>>>

On 10/5/2020 4:05 PM, Jason Keltz via samba wrote: > On 10/5/2020 2:52 PM, Rowland penny via samba wrote: > >> On 05/10/2020 19:29, Jason Keltz via samba wrote: >>> >>> On 10/5/2020 12:44 PM, Rowland penny via samba wrote: >>>> On 05/10/2020 17:27, Jason Keltz via samba wrote: >>>>> >>>>> Hi Roland, >>>>>

02.11.2023 18:04, MATYAS, Tibor via samba: > Dear all, > > updating openssl from 1.1.x to 3.x on our gentoo systems (recompiled everything against the new openssl!) > breaks kinit: FWIW, most distributions switched to openssl3 quite some time ago. Eg, current libssl in Debian is of version 3.0.11-1~deb12u1. You did not provide any other useful info. Two of the most important

On 05/10/2020 19:29, Jason Keltz via samba wrote: > > On 10/5/2020 12:44 PM, Rowland penny via samba wrote: >> On 05/10/2020 17:27, Jason Keltz via samba wrote: >>> >>> Hi Roland, >>> >>> I'm glad you brought that up.? This is a piece of the puzzle I have >>> been very confused with.? I'm not using the Samba from CentOS/RHEL,

Hello, I have two issues with Kerberos administration using Samba and this results from my lack of familiarity with it. I am hoping someone can point me in the right direction. The first issue is with automatically renewing the Kerberos tickets. The second issue deals with my having to authenticate each time I attempt to join an AD domain. The Samba documentation indicates that I should *not*

Hi, We have been working with samba 3.0.4 and MIT 1.3.6 on SUSE SLES 8 (SP3) for some time. We use security=ads and our samba is joined to the W2K3 domain. We use this with winbind to use the authentication from w2k3 instead of local users (telnet, squid, samba and via smbauth also apache). When preparing a new server with suse SLES 9 and heimdal 0.6.1 RC3 (suses package) we started running

On 10/5/2020 2:52 PM, Rowland penny via samba wrote: > On 05/10/2020 19:29, Jason Keltz via samba wrote: >> >> On 10/5/2020 12:44 PM, Rowland penny via samba wrote: >>> On 05/10/2020 17:27, Jason Keltz via samba wrote: >>>> >>>> Hi Roland, >>>> >>>> I'm glad you brought that up.? This is a piece of the puzzle I have

I am attempting to setup Samba 3.0.10 on a Windows 2000 Active Directory domain. The problem I'm having is getting Samba to configure correctly to get the Kerberos library. I've gone through previous posts and have tried doing what others suggested but I still keep getting the error of: "configure: error: libkrb5 is needed for Active Directory support" The current configure

Hi, -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] > "domain admin group" removed > > Because you now have something much more powerful that provides real NT > Groups to your NT/200x/XP clients. But if I use LDAP for both Samba and system auth. The groups, what I added with base.ldif (idealx) exist in samba and system. for example "getent

Well I spoke a bit to soon. While I was able to get to the stage of doing a make I get the following errors when the make ends, this is using Kerberos 5: libsmb/clikrb5.c: In function `krb5_set_real_time': libsmb/clikrb5.c:49: dereferencing pointer to incomplete type libsmb/clikrb5.c:50: dereferencing pointer to incomplete type libsmb/clikrb5.c: In function

Hello, I'm trying to Compile Samba with ADS support on Solaris 8. I have installed without any problems: /opt/cifs/bdb -> .bdb-4.2.52 /opt/cifs/heimdal -> .heimdal-0.6.3 /opt/cifs/openldap -> .openldap-2.1.25 /opt/cifs/openssl -> .openssl-0.9.7e /opt/cifs/samba -> .samba-3.0.9 and I'm configuring samba with: LDFLAGS="-L/opt/cifs/openldap/lib

from another post today about a different topic, the reply said that nmd has some issue restarting with a service smb restart in redhat 7.3..which seems to answer my question as to why I have to do it twice... thanks > -----Original Message----- > From: Chris McKeever > Sent: Friday, May 16, 2003 10:35 AM > To: 'John H Terpstra'; _Chris McKeever_ > Cc: