similar to: Samba as a member of the W2K ADS domain using Kerberos

Dear experts, Quick quotation... I have a sendmail server behind the shorewall-2.1.7 server. I would like to do Port forwarding (DNAT) for clients on the internet, who need to access the mail server. Please let me know, which way is the most suitable to accomplish this; using following 2 types of configurations Setup - Internet -- > shorewall -- > sendmail

I've been successfully running Samba 3.0 under FreeBSD 5 attached to a 2003 Domain for awhile now. As of about a week ago, I could no longer get most users to authenticate to the Samba server. It happened at roughly the same time I upgraded to FreeBSD 5.4. I'm using heimdal 0.6.3, samba 3.0.14 and FreeBSD 5.4. I had the error running samba 3.0.11 and 3.0.12 from the FreeBSD ports

Hi, I'm using samba-*-3.0.6-4.3.100mdk and libkrb51-1.3-6.3.100mdk on LM10.0. A similar summary to what I'm seeing could be found here. http://lists.samba.org/archive/samba/2004-July/090210.html My relevant config info could be found below. May I ask how could I solve this in LM10.0? What packages do I need to update? The problem does not arise with NT. It happens to only W2K, XP,

I've almost got this thing working. I have it set up on a centos machine to authenticate logins and automounts to windows file servers. But it won't allow me to specify a domain as part of the userid. I can set a default domain in smb.conf and logging into that domain works like a champ. And I can list the other domains with "wbinfo --online-status" (not sure what

I'm using Solaris 8, samba 3, kerberos and openldap. I'm anexing: log.smbd, smb.conf, krb5.conf, nsswitch.conf and the ktpass command in AD. Somebody can help me? I get this output in log.smbd: ----------------------------------- [2005/08/11 12:41:45, 0] smbd/server.c:main(802) smbd version 3.0.20rc1 started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2005/08/11

All, I have recently come across a problem I have been unable to resolve. I have been running Samba with Winbind ADS authentication for the last couple of years with good success until recently. About 2 weeks ago, I restarted the Samba and Winbind services on a Fedora Core 3 machine runing Samba 3.0.10-1 (installed from FC3 RPMs) and the active directory authentication has started failing. The

I have one server windows2000 mixed mode with active directory and samba 3.0 PDC. This is my smb.conf [global] workgroup = TESTIPLANET netbios name = TEST server string = DOMINIO TEST interfaces = 10.10.6.158 bind interfaces only = yes preferred master = Yes domain master = Yes wins support = Yes domain logons = yes

Hi folks, I have been trying to use the ADS as the IDMAP backend but without success. I have followed the examples in the HOWTO and Samba-3 by example. While both of these docs describe using LDAP as the repository, I have not been able to make the info work for ADS. I do not want to use LDAP nor ADS to authenticate Linux users, just for the UID/GID resolution. There will be multiple Samba

If your getting kinit problems with net ads join (don't bother with testjoin-it will error out no matter), do the following: 1. Change an administrators password, especially if you upgraded from NT 4. 2. Create a krb5.conf file int /etc that looks like this: logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log

Hi all. Pretty new in Linux side of the world. I'm trying to run Samba 3.x on Fedora-core-1 in an ADS environment, with krb5 authentication. Installed Samba 3.0.2rc2 from source, installed the required libraries for kerberos MIT, configured smb.conf and krb5.conf. Run net ads join -U administrator and it worked, i can see the machine account in the active directory. From my linux box I

I am looking for some info on an issue I have authenticating Samba 3.0(Centos 5) to a W2k3 AD. Server info: Samba server: HP DL 365, Centos 5 linux: samba-3.0.28-1.el5_2.1 samba-common-3.0.28-1.el5_2.1 pam_krb5-2.2.11-1 krb5-workstation-1.6.1-25.el5_2.1 krb5-libs-1.6.1-25.el5_2.1 pam_krb5-2.2.11-1 krb5-libs-1.6.1-25.el5_2.1 KRB libs were installed and then updated via YUM. Windows server: Same

Once again, I forgot to change the "To:" line so apologies to Andrew, who will have this twice.... Hi Andrew, thanks for the response. (I've modified the subject line because I just realised I mis-remembered the error message when I typed the subject line before...) I was running 3.0.33 on both boxes with identical conf files; it wasn't working then, so I updated to 3.5 in

I'm having the toughest time getting this to work... I have a windows 2000 domain and i'm in the process of adding a Samba fileserver... All of the setup guides i have seen point me in the right direction, but fail to provide assistance for my single problem... basically i've figured out that if i have security = share. I can run the gentent passwd command and see the domain accounts

Am still having problems getting Samba/W2K ADS to work w/MIT-KRB5. Fresh install of following: Slackware 10.1 Openldap 2.2.23 MIT krb5 1.4 Samba 3.0.11 (with clitar patch) Following "http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#ads-member" I get to: kinit administrator@OURORG.OURDOMAIN.ORG (comes back to prompt after password, no error. klist -e gives:

Hi everyone, I'm relatively new to Samba - at least for more in-depth installations. Big Thank-You from my company to the brilliant developers responsible for this software. We have our Samba server integrated with our Windows 2003 AD domain users via Winbind - a working installation with some issues described below. getent passwd works as the many docs show (one entry below):

I'm trying to get Samba set up to use ADS authentication against a Windows 2003 Server running in native mode. I have successfully joined the domain, and kinit user@MYDOMAIN.DOM works successfully. I can also use smbclient to connect to shares on the local machine, so Samba is basically working. However, when I try to connect from a Windows machine I get [C:\]net use \\unx02\pub The

Hello, I am using samba-3.0alpha21 on a out of the box debian-3.0 box trying to join a native windows 2000 (active directory) domain. I have used alpha18,19,and 20 in the past with alot of success on red hat and linux from scratch systems with minimum challenges. However I cannot seem join the domain in this instance. I am using openldap 2.1.8 and mit kerberos 1.2.7. The result of "net ads

Please forgive the long post but I am at my wits end here! Below are the files that I have configured, the results of several commands, and some output from log files.... ANY HELP AT ALL??!! wbinfo -p Ping to winbindd failed on fd -1 could not ping winbindd! wbinfo -t checking the trust secret via RPC calls failed error code was (0x0) Could not check secret kinit and klist seem to work

HI, when i try to execute the kinit command on my Red hat 9 system with samba 3 i get the following error [root@niit125 root]# kinit junaid@NIIT.EDU.PK Password for junaid@NIIT.EDU.PK: kinit(v5): Clock skew too great while getting initial credentials so how do i solve the clock skew problem cause i have checked the time on both of them it is the same. the net ads join command doesnt

Hi There, we have a winbind installation here that is used for squid authentication and group resolving. the winbind server is part of the domain ch.domain.intern. the ads forrest is organized like domain.intern ch.domain.intern at.domain.intern fr.domain.intern and other sites will follow. authentication and group resolving works actually fine, BUT: if the link to at or fr is down winbind