similar to: authenticating against windows server 2003

Hi, I am new to samba and Kerberos so please be gentle! I have built a samba AD DC (v4.3.5) on Centos Linux from source and am trying to add a service principal and generate a keytab containing the principal. However the principal entry does not appear in the keytab. Here's what I did: [root at bones ~]# samba-tool spn add GEMSTONE64/bunk.gemtalksystems.com at

So I did a very dumb move and deleted the krbtgt user from my working samba4 installation. Now of course, this broke the installation... trying to fix things, I recreated the user (and made it member of the administrator group) which let me start samba4 again but now, whenever I try to log in a user on a workstation, in the logs it gives me the error "Kerberos: Principal may not act as

-----Original Message----- From: Wayne Rasmussen Sent: Friday, June 01, 2007 11:01 AM To: 'Gerald (Jerry) Carter' Subject: RE: [Samba] Followup Restricting to a subset of the domain controllers on a site Noticed a couple of changes with Samba-3.0.25 and wondered if I am doing something wrong or if it is a side-effect. attached three files: smb.conf, samba-3.0.10.log, samba-3.0.25.log

hi, all, I'm using MIT-krb5 and it seems it's not quite stable. Everything seemed fine and krb5, samba daemon started as well unless I tried to use "ad\xxx" to login a windows7 machine. Here is part coredump log, :Sep 25 15:08:54 pdc.ad.pthl.hk samba[2579]: /usr/sbin/krb5kdc: krb5k= dc: starting... :Sep 25 15:11:56 pdc.ad.pthl.hk samba[2579]: /usr/sbin/krb5kdc:

I'm having a problem with kadmin not doing what klist says should work. klist will show my keytab file (with minus k), but when I try and use a principal in that keytab with kinit, I get an error: kinit(v5): Client not found in Kerberos database while getting initial credentials I setup both the Windows server and the Linux client, so I've made a mistake somewhere. What have I done

Dear all, I downloaded samba3.0-alpha21 and followed each step in "ADS-HOWTO.txt". But mapping a network directory from a Windows client failed (step 4: Test your server setup). (Succeeded in other steps.... Including step 5) Only local users in the samba server can access the share folder. (Please refer to the smb.conf listed below...) And "#kadmin -p administrator" fails

# iptables -t mangle -A POSTROUTING -m mark --mark ! 0 -j ACCEPT iptables v1.3.3: Bad MARK value `!'' I''m puzzled, what''s wrong with this syntax? kernel is 2.6.15.7-ubuntu1 Thanks Francesco

Since a bit more than a year I run a Samba4 AD server on a Debian testing box. During that period I did update and dist-update the box about twice a week, and also did update and recompile Sambe, i.e. Samba and Debian Jessie are on their latest stage. I use Bind 9.9.3 as name server, which works absolutely smooth. But two days ago something got broken, and I am totally clueless, what went

hi, ? i have recently installed a samba 4 in a DC role. The distribution is a debian jessie/sid, the version of samba is 4.1.7. The server is globally working but there is some litle trouble. on the server itself, i can do a kinit without probleme but if i try a kpasswsd, i obtain the following ? root at station:/var/log/samba# kinit Password for administrator at TOTO.FR: root at

On Fri, Sep 04, 2015 at 12:05:56PM +1200, Andrew Bartlett wrote: > On Wed, 2015-08-12 at 06:18 -0700, John Hixson wrote: > > Hi, > > > > I am in a position where I would like to have LDAP authentication for > > CIFS shares, but cannot modify the LDAP server. The LDAP server is > > Open > > Directory and does not have the Samba schema included or configured.

My OS Gentoo Linux Samba & krb5 version: app-crypt/heimdal-7.6.0? abi_x86_32 abi_x86_64 berkdb caps ipv6 libressl lmdb selinux ssl static-libs net-fs/samba-4.11.13-r1 abi_x86_64 acl addc addns ads client cups gpg json ldap pam profiling-data python python_single_target_python3_7 quota selinux syslog system-heimdal winbind My /etc/samba/smb.conf (testparm) Load smb config files from

RedHat AS 2.1 kernel 2.4.9-e.16 with kbr5-1.2.7 I've been playing with ADS features of samba-3.0alpha21 and am having problems getting winbind to work. I can join the domain: [root@asecl etc]# net ads join Joined 'ASECL' to realm 'ASE-LRC-AD.AE.UTEXAS.EDU' After joining the domain, I can use the other 'net ads' options of user, group, status and info.

hello i have been struggling for to long trying to setup the following configuration: debian samba 3 member server of a win 2000 AD here is my configuration: ## smb.conf ## [global] log level = 4 interfaces = 192.168.10.11/255.255.255.0 workgroup = datom realm = datom.dyndns.org server string = samba membre security = ads netbios name = cafeine log file = /var/log/samba/samba.log max log size

When upgrading our test system from 3.0.5pre1 to 3.0.5rc1 with identical configurations we found that one share using a group name with an embedded space was no longer accessible after the upgrade. Here's an example of the logged error message: [2004/07/13 10:50:07, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(298) group 'Domain in domain TESTDOM does not exist That's coming

Has anyone had experience with MIT Kerberos tickets not valid after server reboot? After server reboot I have to do a 'kinit' to get a new ticket, re-join the AD domain, and restart samba. Then all is fine until I have to reboot the server again.. Same thing again and again. My time is synced, Kerberos tickets are good for 500d.

Dear Help, We are in the process of setting up a new domain using Active Directory on Windows Server 2003R2. One of our goals was to use Active Directory for authentication on our AIX box (running version 6.1). I was able to successfully set up Kerberos, and the LDAP client to connect to our AD server so that you can now log in to the AIX box with users found in Active Directory. However, no

I have just managed to get my first Samba/LDAP PDC up and running. But I have one big security problem -- users logging in to the PDC using ssh can access all shares. User credentials, both for ssh login and for Samba access, are retrieved from the LDAP directory. All shares are stored in the /var/lib/samba directory. The directories permissions look like this: drwxrwx--- 2 root Domain

Gareth Did you ever get a solution to this? mary Mary Owen IT Manager Stride Treglown Limited Promenade House, The Promenade, Clifton Down, Bristol BS8 3NE T 0117 9157361 F 0117 974 5207 E maryowen@stridetreglown.com www.stridetreglown.co.uk

Greetings. I have problem with password expiration problem i cannot handle myself, so i wrote in this list. Recently i discovered that a newly created samba account has already expired password. smbldap-useradd -a -d /home/tommy -G education -s /bin/bash -M tommy -c "Tommy T." tommy smbldap-passwd tommy getent shadow user:*:::::::0 user2:*:::::::0 user3:*:::365::::0

I''ve gotten wondershaper to work in my linux box, which is part of a 3 computer network that shares the same dsl connection. The linuxbox handles most bulk down and uploading, and the other 2 are mainly for surfing and such. What I need from wiondershaper is that it should perform it''s tasks with all of the traffic to the dsl modem, but do nothing with the internal traffic