similar to: Samba 3 PDC and ADS member server

Hi, I am trying to decide if it is worth the time to test the Kerberos support in a port I am working on of Openssh 3.5p1. Does using Kerb5 with SSH1 solve the security problems inherent in protocol 1 and bring it up to par with the security level of SSH2 or are there other issues that Kerb5 authentication won't help for SSH1? Thanks, Greg Lambert --------------------------------- Do

It looks as if 2-way trusts are working between Samba and PCNL and between Samba/NT4. The one exception seems to be logging in as Samba/myname on the ENT4 PDC. I had created a ENT4/myname account. I had forgotten to add SAMBA/myname to the local users group on the ENT4 PDC before trying to the ENT4 PDC as SAMBA/myname. If I log in as SAMBA/anothername it is OK. This isn't real show

I am trying to establish a domain trust between a Samba 3.024 domain and a PC Netlink 2.0 domain. Currently, we are using PC Netlink as our primary Windows file server and "NT4" domain controller. (Lets say that the domain is called LEGACY and the domain controller LX1) Windows 2003 servers are unable to join a PC Netlink domain (even with the SignOrSeal option disabled.) For

Hey, I just subscribed to this list, so apologies in advance if this has been asked already (although I haven't found mention in the archives after a cursory search). I notice that there's no Kerb5 support in 2.3.0p1. Is anyone working on getting support in there for v1 and v2 connections, or is this something I'm going to have to do myself? Also, I've just

Except that everything isn't fine, because I can't login to the samba domain as a PCNL/NT4 user or vice versa. -------- Forwarded Message -------- > From: Volker Lendecke <Volker.Lendecke@SerNet.DE> > Reply-To: Volker.Lendecke@SerNet.DE > To: Damian Lock (SSCI) <Damian.Lock@ssci.com> > Cc: samba@lists.samba.org > Subject: Re: [Samba] Samba 3.x and PCNetLink

I found part of the prob may have been that I didn't join the samba PDC to its own domain. # net join samba -U root Joined domain SAMBA Now, commands like "wbinfo -t" and "wbinfo -m" indicate that the domains are trusted. Also, I can run "net rpc samdump" to dump the NT4 domain info (but not the PCNL domain.) If I try to log in to the NT4 server as a

Krb5-authentication and Kerb5-TGT-passing is working well with openssh-2.3.0p1. Question: Is there a solution using rdist -P "/usr/local/bin/ssh" without the need for RhostRSAAuthentication, RSAAuthentication or using the Kerberos r-command set? The objective is to do away with ".rhosts/.shost" and private-key authentication when Kerberos authentication is already in

A couple questions about how authentication works in Samba: -Is there a way to authenticate to a Samba PDC that does not require machine and (domain) user accounts to be in the /etc/passwd file (- a way other then LDAP or NIS)? -A follow up to that - is what is the purpose of requiring machines/users in both the /etc/passwd file and the smbpasswd file? - i read something about needing to

Hi all, I'm reposting because there was no response from the list. I'd be glad if anybody could comment... I'm planning a migration from Sun Microsystems' PCNetLink CIFS service to Samba and have a problem I cannot solve: Is there a possibility to map Windows ACLs to reflect the following: We have user groups with their own group directories. We need to provide some users in

Looking for a poniter in the right direction My current configuration is NT4 PDC (Solaris PCnetlink) Samba Member server (Solaris 9 Samba ver 3.0.20b)for file and print sharing WinXp Pro Clients SP2 My problem is with the Domain Users. I am able to share out file systems to the XP clients from my Samba server OK. I am also able to modify the permissions for the files in the share in Solaris

Sun PCNetlink is a NT4.0 PDC emulator. I'm running samba-3.0.13, joined to an ADS server that has a trust with a PCNetlink domain. My samba can authenticate fine against ADS accounts, but refuses to authenticate against the PCNetlink domain. I can do getent passwd "ADSDOM\user" and get an ADS user printed out, but if I use getent passwd "NT4DOM\user" nothing

I have NT4 domain on samba-3.x integrated with LDAP. I need to use domain users in the shares permissions On the domain member server I have the following smb.conf [global] workgroup = W3 server string = File server netbios name = FS1 security = domain load printers = no show add printer wizard = no printcap name = /dev/null disable spoolss = yes log file =

Okay, if anyone can help me, I put all my config and log on http://www.arzurproduction.com/temp/ I cannot join the domain on my Windows XP (Access Deny) So I try : 1- An Administrator user create by smbldap-populate, I have root = Administrator on my /etc/samba/smbusers Error : [2005/03/21 10:09:03, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user

Hi all! I'm very close to have a fully functional samba and openldap. Thanks to idealx.org. I just need to understand how it works. Everything works accept one thing. When I change TLSVerifyClient allow to TLSVerifyClient demand in slapd.conf and do: ldapsearch -x -ZZ -b 'dc=yourdomain,dc=com' '(objectclass=*)' -d 127 in the end I get: ldap_chkResponseList for msgid=2, all=1

Hi, We are facing problems while configuring SAMBA ADS on Sun Solaris system. After installation and configuration we found that there is no ADS support on the version samba-3.0.21a-1-noads-sunos5.9-sparc.pkg.gz. Do you have any ADS support package for Sun Solaris 9. Kind Regards Venu Gopal Sr. Systems Engineer SSA Global Technologies India (Pvt) Ltd Hyderabad,India Tel : +91 40 23100525

All, I want to be able to disconnect a user from a samba share. I'm using Samba 2.2.8a on Solaris 8. If I'm reading OReilly correctly, I should be able to use smbcontrol with the SMBD process id of the user who has the share mounted. Here's an example: ascmdev nguyenal tcmsdev 5654 orton (158.184.58.145) Tue Dec 9 14:14:10 2003 burkharr burkharr other 26688

Hi everyone, I am trying to setup a PDC using Samba and OpenLDAP. For some reason, I've used both the examples provided in the Official Howto and also the smbldap-tools howto developed by IDEALX. I am able to get the directory up and running. I am able to get the following working: 1. LDAP Directory server and successful Queries through Samba 2. Add user and machine accounts. 3.

http://bugzilla.mindrot.org/show_bug.cgi?id=568 ------- Additional Comments From michael.houle at atcoitek.com 2004-04-06 06:04 ------- Can someone please enlighten me on whether this kind of code is going to be included in the main development ? I thought this would be handled automatically by the krb5 libraries, so I was suprised to find that password changing doesn't work in the SSH

Hi there Could you also join your krb5.conf and your pam.d/login files ? I also have the same kind of problem, and I just would like to see differences between our configurations ... Thanks for reading ! Bertram >From: Markus Klimke <m.klimke@tu-harburg.de> >To: samba@lists.samba.org >Subject: [Samba] User problem (samba, w2k3) >Date: Thu, 29 Apr 2004 13:00:53 +0200 >

Hi there, I have a a smaba 3 Domain with and openldap backend + pamldap+nssldap. Everything works well except after an xp client logs on the client hangs for about 2 minutes and then caries on and everything is fine. This problem occurs after log on before the user's desktop loads. Seems to just timeout for a while. This is well before the log on script runs. I've disabled "auto