similar to: Samba pwd in kerberos?

Hi. I've built an afs cell, a kerberos kdc, an openldap server, all kerberized. Now all linux clients can login on the cell using k5 authentication, finding informations about their home dirs with ldap. Their home reside on the afs cell, which allows r/w access since it releases a token from the k5 ticket. All macosx clients can login as well... but what about windows? ^___^;;;

Hi. Back again... I'm still looking for a possible integration of MIT K5 and AFS through the windows login, so I will ask you a question. A first considerations is that afs+k5 works fine but we have to create a local account with a fake password. The profile will be on the local disk. We can gain tickets and the token necessary to access \\AFS. The problem is: how to avoid a local account?

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and

Hi. I'm new to samba, so I don't know many things. I have a big infrastructure based on kerberos, ldap and afs. All our linux clients log nicely on the cell, no problem. The problem is as everywhere... windows. I'm trying to make windows log on the cell, using samba (I will try tomorrow to set up a domain). The questions about samba will come later on, so expect me to bother you :)

Hi. A question on a feature that interests me... Can I specify samba to handle the dot files in our linux samba server as hidden files in windows? It's quite ugly seeing all the hidden unix files .* visible on windows... -- Sensei <mailto:senseiwa@tin.it> <pgp:8998A2DB> <icqnum:241572242> <yahoo!:sensei_sen>

Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and

Hi. I'm trying to build a nt domain with samba 3.0.5 (only samba, no native nt/xp servers), but I cannot succeed. I'm following this http://thegoldenear.org/toolbox/unices/samba/samba-setup.html because I find the samba documentation not so clear. It's for samba 2, but it must be similar to samba 3... This is what I did: quantum home # groupadd -g 2000 admins quantum home # groupadd

Hi, i'm looking for this how-to, often referenced but no more available: https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba and OpenLdap? Thank you in advance Marcello

So like at least a handful of people before me I have begun the valiant stugle to unify logins at my place of business. I have setup a test LDAP + Kerberos V cluster. And I have Setup a test Samba 3 PDC. What I would like to do is get Samba to handle kerberos ticket granting and authentication to the (LDAP + Kerberos V) Directory. Such that Windows is completely unaware of the existence of

Hello, I've been trying to figure out if it's possible to replace Active Directory with Samba (+ OpenLDAP, Kerberos, DNS etc.) on Linux - but from what I've found I'm not sure. Is it possible, or partially possible (I don't need every feature of AD)? What additional software (besides Samba) will I need? What functionality will I loose? Where can I find any

... Setting up a Samba PDC with the following: FreeBSD 5.3 Samba 3.0.x OpenLDAP 2.2.x Kerberos (Heimdal) Would like LDAP to take care of both posixAccount(s) and sambaSamAccount(s). Posix account via nsswitch+pam_ldap. Hope to find one complete documentation that describes this setup from scratch, start to finish. A Ports style install of all packages is fine but I can download, compile and

We have a Windows 2000 server with Terminal Services. It is an Active Directory master server for a microscopic network comprising itself and one Windows 2000 Workstation client. It is part of a network consisting of Unix machines: several Solaris 8 systems, a handful of Linux boxes, and a Mac OS X workstation. User authentication and other login information on this network is provided by NIS

Dear list, I would like to know if the following statements are true, just to make sure that my understanding of passwords/ldap stuff is correct... Vampireing passwords from an nt4 pdc only populates the ldap server with windows passwords, and not the (linux) userPassword. Authenticating linux logons against this ldap server is therefore only possible using winbind. 'Normal' ldap

Hello, my first post here :-), For several years, I are using samba 2.0 with local backend for windows stations and servers. NIS was our used for Linux stations and servers Now, LDAP /KERBEROS is replacing NIS and Samba (with ldap backend) will replace the local backend . My questions : 1- How can I migrate information form server1 (samba 2) to server2 (samba 3) ? I read the official Samba

Hello, this is the first time I write to the samba list and I hope my question is not off topic. I want to set up a samba server to replace an Active Directory for my Windows workstations. So far, I have a LINUX network that works perfectly, all my users are stored in a LDAP server and their authentication is done against a MIT Kerberos server. Hence all users have a valid kerberos ticket

Hello, I would like to configure PAM to sync Unix passwords to Samba passwords. When I add a new Unix user or change an existing Unix user's password, I want the same password to be stored in /etc/smbpasswd. I'm trying to follow these instructions: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/pam.html#id2606200 It sounds like this is what I want to do: "A sample

Hi All, Hope someone here can help me ? *See end for background and system information... I'm looking for advice or links to clear documentation on the use and configuration of "net vampire" and it's ability to download PDC accounts with passwords intact. I have successfully used "net vampire" to synchronize my Samba BDC -- with my companies PDC. I've switched

Hello Guys, Doing some svn up and some looking at the code in the repo, found that MERB_ROOT and the replacement Merb.root constant based heavily on Dir.pwd (on trunk: http://merb.devjavu.com/browser/trunk/lib/merb.rb#L89) Dir.pwd present a problem when you try to run something "outside" the root of your app, let say inside app directory it will wrongly assing MERB_ROOT to Dir.pwd and

Hi you all, I am reading the Rolling with Rails article, by Curt Hibbs. In the beginning, when he is explaining how to install the MySQL Server, he comments we mustn''t set up any account cause MySQL uses an authentication algorithm that is not compatible with the current version of Rails. Is there any way to avoid this and establish an account with its password? (I am using MySQL 5.0

Hi, I can't tell the reason and conditions to repeat this bug... "ls" and "ls $PWD" produce different directory listing (of different times, so a subdir is existing in one listing and missing in an other). ls . $PWD Linux 2.6.15.6 GNU bash, version 2.05b.0(1)-release (i386-pc-linux-gnu) Linux 2.6.15.6 PREEMPT i686 /dev/hda5 on / type ext3