similar to: RES: Samba and Kerberos

You should use the ntlm_auth module provided by samba. -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Riccardo Baldanzi Enviada em: quinta-feira, 22 de abril de 2004 16:51 Para: samba@lists.samba.org Assunto: [Samba] Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp Hi Guys,

Yes, it is. I've made that some times... After having the Samba infra-structure running (winbind -u, winbind -g, winbind -a), you need to create some ACLs in squid.conf, take a look at: http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#winbind To check group membership you can use wbinfo_group or LDAP, I had some problems setting wbinfo_group with Samba 3.0.2, that's why I use LDAP. If you

What do you mean with "... ntlm_auth --helper-protocol=squid-2.5-ntlmssp does respond only BH..." ? Is it happing in a command line test ? Remember that this helper wait for a NTLM "hash" not a clear user and password, as basic helper does. The best way of testing is to put in use, inside the squid.conf. I've be using it for some months without problem. -----Mensagem

Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command line mode, you must use a browser able to handle ntlm because only this sort of browser send the appropriate ntlm challenges, try IE. Estevam Henrique -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Champaka

Hi Thomas, I ran Samba-3.0.2a + MIT Kerberos 1.3.3 with Windows 2000 without any problem, all the users was able to access the shares with their tickets, after migrate my W2K server to Windows 2003 no one can access the shares on the linux machine using its netbios name, it only works trough ip address. I've been many people reporting the same issue, but no one was able do answer. Hi samba

I also have made this configuration working with w2k, the problem is related do enc-types used by w2k3. I have seen a lot of people complaining about the same issue. Can the samba gurus help the community ??? What are the right configuration to put a Samba 3.0.x working as a Active Directory 2003 member and be accessible through \\<samba name>\<share name> ?! Please Jerry Carter,

Hi all, I'm running Debian/stable with Samba 3.0.2a and Cups 1.1.20final-12 both from backports.org and have the following smb.conf file: [global] workgroup = PermaCorp server string = %h server (Samba %v) ########## Printing ########## load printers = yes printing = cups printcap name = cups #### Debugging/Accounting #### log level = 3 log file =

Hi all, Is it possible to have a Samba server use pam as the authentication mechanism, which then in turn authenticates against an MIT Kerberos realm? We already have kerberos up and running, but no Windows Domain infrastructure. We're currently not using LDAP (but we'd want that to auth against Kerberos anyway). I have the Samba-3 HOWTO, but there doesn't seem to be much

Hi all, I'm about to begin building a single-sign-on environment (hopefully). We just brought our first set of Windows-based PCs in, and would like to integrate them into our existing Linux/MacOS X environment. We are currently running MIT Kerberos, and would like to create a Samba PDC which authenticates against these KDCs. Another parallel project is to migrate to OpenLDAP. I

Hi Jim, I did what the doc says but the problem is the same. Does anybody saw this work ? I mean, is the Samba 3.0.2a+Kerberos MIT 1.3.3 able to be accessed by a WXP, W2K or W2K3 machine, using Kerberos tickets generated in a Windows 2003 KDC (W2K3 AD) ? Thanks -----Mensagem original----- De: Jim McDonough [mailto:jmcd@us.ibm.com] Enviada em: segunda-feira, 19 de abril de 2004 17:07 Para:

INFORMACAO CONFIDENCIAL Prezado(a) Amigo(a): Esta carta/e-mail nada tem de semelhante As muitas "aldrabices" que circulam pela Internet. Ela ? uma mensagem rara que tem um conteUdo que pode modificar a sua vida para melhor. Assim, peco-lhe um pouco de paciencia, e que a leia com atencao, muita atencao, e no final, muito provavelmente, se sentira recompensado(a). Este e um assunto que

INFORMACAO CONFIDENCIAL Prezado(a) Amigo(a): Esta carta/e-mail nada tem de semelhante As muitas "aldrabices" que circulam pela Internet. Ela ? uma mensagem rara que tem um conteUdo que pode modificar a sua vida para melhor. Assim, peCo-lhe um pouco de paciencia, e que a leia com atencao, muita atencao, e no final, muito provavelmente, se sentira recompensado(a). Este e

Could you better describe your scenario ? Where are you trying to logging on ? >From where are you trying to logging on ? What kind of service are you trying to access ? -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Talwar, Puneet (NIH/NIAID) Enviada em: ter?a-feira, 27 de abril de 2004

What do you mean with ADC Slave, security=ads in smb.conf ? -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Bj?rn Giesler Enviada em: quarta-feira, 9 de junho de 2004 12:32 Para: samba@lists.samba.org Assunto: [Samba] Problem with authenticating a computer to a samba share Hi, I have a

Hi people, What are the pros and cons of Winbind, LDAP and Kerberos in a Samba 3.0.2 plus Active Directory environment ? What could be the best design for this scenario ? Estevam Henrique ========================================================= Esta mensagem pode conter informacao confidencial e/ou privilegiada. Se voce nao for o destinatario ou a pessoa autorizada a receber

Hi people, I have a Debian (Woody) 2.4.25+Samba 3.0.2a running, I've joined a Active Directory domain (net ads join) and I can successfully browse the AD users and groups with wbinfo -u and wbinfo -g. I need to give to the samba (Windows) users access do linux console/terminal, I've read the samba documentation about pam_winbind ( http://us1.samba.org/samba/docs/man/winbind.html

As many of us suffer this problem I would like to share my success with the list. This weekend I made this configuration work ! After this procedure you can access the samba machine, from any client (Win-XP, Win2k, Win2k3, Win9x and WinNT) using \\samba-netbios-name\share-name (using kerberos) or \\samba-ip-address\share-name (using NTLM) Debian Woody 3.0R2 Samba-3.0.4 MIT Kerberos 1.3.4 Windows

Have you locked at samba-3.0.2a/source/nsswitch directory ? Normally the pam modules and nss libs are there, you need manually copy that to /lib/security (Debian system. maybe different in your distribution) Also remember to run ldconfig after copy the files to the lib directory. Make sure that you /etc/pam.d/login is, some like that: passwd: winbind files shadow: files group:

Yes, List, I am an UML user that already have a real machine running 8 UML for: UML1..UML4 are used for connection to one leased line that is used for incoming/outgoing mail and incoming webmail accesses: UML1=internal firewall, connected to internal LAN UML2=mailrelay/dmz UML4=webrelay/dmz UML3=external firewall, connected to the NET UML5 and UML6 are used for connection to one ADSL line

Hi people, I have a Linux box running Samba 3.0.2a in ADS mode MIT Kerberos 1.3.3. My W2K e WXP users can't access the linux box by netbios name, the only access that works is by IP address, I know that's caused because access thought IP address don't make use of Kerberos. The most strange for me it's that the same environment works fine with a W2K Active Directory, I read in same