similar to: RES: authentification in ads2003

Hello, *This msg was already sent yesterday on this ml, but some i found some faults in the mail.* **If anyone can help me... the only thing i'm thinking now is to throw away the servers** I installed Samba 3.0.4 + kerberos 5 + winbind to make the debian woody server joining the Active directory service. Everything seems to be ok, except the authentification. If i try to go to the share of

Hello, I installed Samba 3 + kerberos + winbind to make the debian server joining the Active directory service. Everything seems to be ok, except the authentification. If i try to go to the share of the linux server, it asks me the password. And of course, no way to log in. B Here is the config: *samba* [global] workgroup = TEST realm = CARDS.BE.TEST.COM.LOCAL server string = %h

You should use the ntlm_auth module provided by samba. -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Riccardo Baldanzi Enviada em: quinta-feira, 22 de abril de 2004 16:51 Para: samba@lists.samba.org Assunto: [Samba] Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp Hi Guys,

Hi Thomas, I ran Samba-3.0.2a + MIT Kerberos 1.3.3 with Windows 2000 without any problem, all the users was able to access the shares with their tickets, after migrate my W2K server to Windows 2003 no one can access the shares on the linux machine using its netbios name, it only works trough ip address. I've been many people reporting the same issue, but no one was able do answer. Hi samba

What do you mean with "... ntlm_auth --helper-protocol=squid-2.5-ntlmssp does respond only BH..." ? Is it happing in a command line test ? Remember that this helper wait for a NTLM "hash" not a clear user and password, as basic helper does. The best way of testing is to put in use, inside the squid.conf. I've be using it for some months without problem. -----Mensagem

Yes, it is. I've made that some times... After having the Samba infra-structure running (winbind -u, winbind -g, winbind -a), you need to create some ACLs in squid.conf, take a look at: http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#winbind To check group membership you can use wbinfo_group or LDAP, I had some problems setting wbinfo_group with Samba 3.0.2, that's why I use LDAP. If you

Could you better describe your scenario ? Where are you trying to logging on ? >From where are you trying to logging on ? What kind of service are you trying to access ? -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Talwar, Puneet (NIH/NIAID) Enviada em: ter?a-feira, 27 de abril de 2004

I've done that using pam_winbind + courier. -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de pll+samba@permabit.com Enviada em: quinta-feira, 3 de junho de 2004 11:06 Para: samba@lists.samba.org Assunto: [Samba] Samba and Kerberos Is there anyway to have Samba auth against Kerberos?

What do you mean with ADC Slave, security=ads in smb.conf ? -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Bj?rn Giesler Enviada em: quarta-feira, 9 de junho de 2004 12:32 Para: samba@lists.samba.org Assunto: [Samba] Problem with authenticating a computer to a samba share Hi, I have a

Isn't possible to test the ntlm_auth with the ntlmssp protocol in a command line mode, you must use a browser able to handle ntlm because only this sort of browser send the appropriate ntlm challenges, try IE. Estevam Henrique -----Mensagem original----- De: samba-bounces+ecarvalho=bmf.com.br@lists.samba.org [mailto:samba-bounces+ecarvalho=bmf.com.br@lists.samba.org] Em nome de Champaka

Have you locked at samba-3.0.2a/source/nsswitch directory ? Normally the pam modules and nss libs are there, you need manually copy that to /lib/security (Debian system. maybe different in your distribution) Also remember to run ldconfig after copy the files to the lib directory. Make sure that you /etc/pam.d/login is, some like that: passwd: winbind files shadow: files group:

Hi Jim, I did what the doc says but the problem is the same. Does anybody saw this work ? I mean, is the Samba 3.0.2a+Kerberos MIT 1.3.3 able to be accessed by a WXP, W2K or W2K3 machine, using Kerberos tickets generated in a Windows 2003 KDC (W2K3 AD) ? Thanks -----Mensagem original----- De: Jim McDonough [mailto:jmcd@us.ibm.com] Enviada em: segunda-feira, 19 de abril de 2004 17:07 Para:

Hello Samba list! I have installed samba, joined it to the AD domain (lets say EXAMPLE.COM) and can auth against it with kinit. There are also 2 domains that we have a trust established with. Lets say trust1 and trust2. When I do a wbinfo -u I get: Trust1+username Trust2+username I get nothing from the local domain. I have a share set up for testing, but I cannot access it at all, I get

Greetings. I am running Samba 3.0.23d on Gentoo and am in the process of joining it to the AD domain as I have done with numerous other servers. The last item that I am working on that is bugging the crud out of me is that I have "winbind use default domain = yes", but when using wbinfo -[u|g] or getent [passwd|group] I still see the domain portion of the user/group account listed.

I am using Samba with Active Directory. I have successfully joined my Samba server to the domain D1 ( net ads join -U username@D2.DOMAIN.COM ). I am able to succesfully connect from Windows XP clients ( with no password ), but not from Windows 2000 ( even when specifying a password ). With w2k, I always get "Failed to verify incoming ticket!". I think it has something to do with

Hi, We just imported (moved) all our staff from the old w2k domain to the new w2k3 domain. Say their accounts and passwords From STAFF domain to say NEW. Seems winbind is keeping the old domain users. This server was serving the STAFF domain w/o problems before users were migrated. Domain is in 2000 native mode. I'm using winbind for squid auth on Mandrake linux 10.0

Hi, I'm using samba-*-3.0.6-4.3.100mdk and libkrb51-1.3-6.3.100mdk on LM10.0. A similar summary to what I'm seeing could be found here. http://lists.samba.org/archive/samba/2004-July/090210.html My relevant config info could be found below. May I ask how could I solve this in LM10.0? What packages do I need to update? The problem does not arise with NT. It happens to only W2K, XP,

I have set up LDAP/KRB5 access to my active directory network. If I do a getent passwd, I see the users with a unix UID/GID. If use kinit, I can get a token. If I su to a user, it creates a home folder, and shows correct IDs etc. However the machine will not log in via ssh or the GUI. In secure I see: Oct 27 11:14:55 rhelads sshd[4190]: pam_krb5[4190]: ccache dir: /tmp Oct 27 11:14:55 rhelads

Hi ! My problem is that : [2004/05/12 16:07:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/12 16:07:30, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/12 16:07:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/12 16:07:59, 0]

Hello list, after some weeks of operation and updates one server of mine needed a reboot. Now authentification with public key causes a segfault. System information: 2.6.8-gentoo-r4 x86_64 AMD Dual Opteron(tm) Processor 242 AuthenticAMD Debugging information: // ssh fom node2 to node1 # ssh -vvv node1 OpenSSH_3.9p1, OpenSSL 0.9.7d 17 Mar 2004 debug1: Reading configuration data