similar to: authenticate with kerberos via login to X Windows

Is there any way to "automate" kerberos authentication on Mac OS X? Here's the problem: When a user wants to access samba-3.0.2a -server from a Mac, he/she has to run "kinit" to get the principal ticket. If this is not done, Mac's tools (Finder) will try to authenticate with NTLM, which is and will be disabled on our servers. Of course, this fails miserably. I

Hi, we're facing problem where dovecot 1.2rc5 is not able to authenticate user via gssapi. (I'm forwarding information from red hat's bugzilla) Steps to reproduce: 1. Install dovecot with kerberos support, create mailboxes for the client 2. Get initial credentials on client side 3. Attempt to log in via dovecot using gssapi -> login failed Client side 1. Email client displays:

I'm in the process of setting up a samba file server, and I'd like to set it up so users can authenticate with their Kerberos realm credentials. It seems that every article I read wants me to bind the thing to a domain, and authenticate that way. The only problem with that is user accounts aren't domain accounts, they are "shadow" Kerberos realm accounts (forgive me,

Am 04.07.2016 um 01:34 schrieb Mark Foley: > After a nearly 2-year struggle to get Dovecot to do either NTLM or GSSAPI authentication with > Samba4 AD/DC, I believe I've finally got it! Infinite thanks to Achim Gottinger for his > patience in working this through with me. Although my purpose was for Dovecot to authenticate > mail clients, the configuration settings needed were on

On 04/07/16 21:21, Mark Foley wrote: >> To: samba at lists.samba.org >> From: Achim Gottinger <achim at ag-web.biz> >> Date: Mon, 4 Jul 2016 09:29:02 +0200 >> Subject: Re: [Samba] How to GSSAPI/Kerberos authenticate with Dovecot >> >> Am 04.07.2016 um 01:34 schrieb Mark Foley: >>> After a nearly 2-year struggle to get Dovecot to do either NTLM or

This was blocked with both good and bad log output due to the size limit on attachments so I've removed the log from the successfull authentication. I think its pretty obvious whats going on from the failed log, thanks Andy. -----Original Message----- From: ww m-pubsyssamba Sent: 06 May 2004 10:32 To: 'Jeremy Allison'; 'samba@lists.samba.org' Subject: RE: [Samba] Kerberos

My goal is to authenticate a Windows 2003 Server user from a FreeBSD 4.10 box via samba. A week ago I had this working. I then needed to verify the procedure and test on a fresh install. Now it doesn't work, despite doing the same steps (I think). I generated a Kerberos ticket on the w2k3 box and transfered it to the FreeBSD box. I used the ktutil command to incorporate the ticket into

Rowland Perry wrote: > >/imdap config AD : backend = rid /> >/ > /> How did you 'fix' this, on face value, there is nothing wrong with that line. "imdap" is not "idmap" (so now you understand why I missed it after staring at it so long :-) > When you join the domain with 'kerberos method = secrets and keytab', > you should get a

I am setting up samba in a windows 2003 environment and am trying to confirm kerberos authentication. When I run kinit on my Linux machine I get a message kinit administrator@cablecar.local administrator@cablecar.local's Password kinit:: krb5_get_init_creds: unable to reach any KDC in realm cablecar..local I can ping my domain server by name just fine. Am I missing something that needs to

On 14/01/15 23:33, Shaun Anderson wrote: > This is a new Samba config that has not yet worked. I have installed sernet-samba 4.1.14. > > [root at sltltfsee samba]# rpm -qa | grep sernet > sernet-samba-libsmbclient0-4.1.14-10.el6.x86_64 > sernet-samba-common-4.1.14-10.el6.x86_64 > sernet-samba-4.1.14-10.el6.x86_64 > sernet-samba-libs-4.1.14-10.el6.x86_64 >

Hi List, I'm having an issue between Samba and OS X with regards to Kerberos authentication to a Samba AD member server. I'm using local UNIX accounts and entries in the passdb instead of Windind on the samba server, ie create account by adding to /etc/passwd then smbpasswd -a username. From an OS X client system if I obtain a ticket for user "UserA" like kinit

ahh. stupid me.. yes.. but this should have worked, with the correct pass.. echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' Thanx for pointing me.. ;-) Greetz, Louis >-----Oorspronkelijk bericht----- >Van: rowlandpenny at googlemail.com >[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny >Verzonden: woensdag 22 april

So tell us what did >> You << correct ? If you put it in the list mail everybody can enjoy from it ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > basti via samba > Verzonden: woensdag 12 december 2018 16:44 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [Solved] GSSAPI/Kerberos

On 22/04/15 15:04, L.P.H. van Belle wrote: > Are you sure you have the "correct" administrator password .. > > this should work , echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' > that does not involve kerberos yet.. > > Please run: > > SETHOSTNAME=`hostname -s` > SETDNSDOMAIN=`hostname -d` >

Hi, Sorry for this necrobump.... But I'm still can't use my local root user to browse content of my NFSv4/Krb5 share...... (others permission are checked when root use this share) So a lot of questions appeared during my tests : - Must i have same idmap.conf on both client and server ? - Why rpc.idmapd only use 'nsswitch' method even if 'static' is

Ok, now its clear to me. We need to set UMICH_SCHEMA in idmap.conf Read : http://linux.die.net/man/5/idmapd.conf Working on it now. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle > Verzonden: vrijdag 9 oktober 2015 13:34 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] kerberos

Hi, i've installed Samba 3.0.23d on Solaris 10 (SPARC) with MIT Kerberos 1.5.1, openLDAP 2.3.30 and openSSL 0.9.8d. I have 2 Windows Server 2003 SP1 Domain Controller and about 20 Windows XP SP2 clients. My problem is that i can't get a kerberos ticket to join the domain. If i try to get a ticket with 'kinit Administrator@PONTOS.LOCAL' i get always the error kinit(v5): KDC

Hai, Here you go.. But all my settings are scripted. https://github.com/thctlo/samba4 found here. Read the script : samba-with-nfsv4.sh Start it like ./ samba-with-nfsv4.sh (client or server) Its tested and works on debian jessie. I contains the nfs server settings and client settings. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at

> To: samba at lists.samba.org > From: Rowland penny <rpenny at samba.org> > Date: Mon, 4 Jul 2016 21:43:46 +0100 > Subject: Re: [Samba] How to GSSAPI/Kerberos authenticate with Dovecot > [formerly Where is krb5.keytab or equivalent?] > > On 04/07/16 21:21, Mark Foley wrote: > >> To: samba at lists.samba.org > >> From: Achim Gottinger <achim at

On 22/04/15 16:01, Rowland Penny wrote: > On 22/04/15 15:04, L.P.H. van Belle wrote: >> Are you sure you have the "correct" administrator password .. >> this should work , echo ${SAMBA_NT_ADMIN_PASS}| smbclient >> //localhost/netlogon -U Administrator -c 'ls' >> that does not involve kerberos yet.. >> Please run: >>