similar to: Problems connecting to server from Windows side of Linux/Windows network

Hi, I rarely deal with kerberos but everytime I do it's painful... I have a Windows Server 2016 VM at foo-ad.foo.com. It has the AD role and it owns the FOO.COM domain. I added a *AD* account FOO\aaptel%aaptel. PS C:\share> get-aduser aaptel DistinguishedName : CN=aaptel,CN=Users,DC=foo,DC=com Enabled : True GivenName : Name :

On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. > > When I select the option "Account is sensitive and cannot be delegated" (in Active Directory

Hello, can you say me how I can deny in my samba  that some aplication can read my active directory users anonymous. ** Alcatel Onetouch Idol 3 (5.5) ** en 06/01/2018 16:55, Andrew Bartlett via samba <samba at lists.samba.org> escribió: > > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba

On Wed, 2018-01-31 at 16:15 +0000, Antonios Kalkakos wrote: > On 6/1/2018 23:55, Andrew Bartlett wrote: > > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: > > > I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7

I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. When I select the option "Account is sensitive and cannot be delegated" (in Active Directory Users and Computers under the Account tab) for a user account regardless of its

I ran both scripts last night and was able to get the Chromebook to join the domain this morning. Thanks, Achim! For posterity's sake, I should mention that I changed the user's password when I enabled AES on their Account tab, in ADUC. Thanks, Mike On Wed, Dec 27, 2017 at 9:52 AM, Achim Gottinger via samba < samba at lists.samba.org> wrote: > Hello Mike, > > Can be you

On 6/1/2018 23:55, Andrew Bartlett wrote: > On Sat, 2018-01-06 at 11:11 +0000, Antonios Kalkakos via samba wrote: >> I have an AD with two Debian Stretch Samba 4.5.12 DCs. The Samba and Heimdal Kerberos 7.1.0 packages are installed from Debian repositories. Management is done from MS-RSAT installed on a Windows 7 Pro client. >> >> When I select the option "Account is

I am trying to use a keytab for a client machine to authenticate to Samba's own LDAP server. The samba servers (replicated) are ubuntu 16.04 with samba 4.5.2 compiled from source. The client machine is ubuntu 16.04 with stock samba 4.3.11. It has been joined directly to the Samba domain ("net ads join"). I have also extracted a keytab ("net ads keytab create -P")

----- On Oct 10, 2017, at 12:02 PM, samba samba at lists.samba.org wrote: > On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) > Andrew Martin <amartin at xes-inc.com> wrote: > > Rowland- I've been poking at this more and think the root of the problem is a Kerberos problem. After joining this machine to the domain, it goes through a process that it calls "AD/Kerberos

SNIP > > Finally have an error message! > > > > {"timestamp": "2023-11-22T12:55:27.227588-0800", "type": "KDC > > > Authorization", "KDC Authorization": {"version": {"major": 1, > > > "minor": 0}, "status": "NT_STATUS_NO_SUCH_USER", "localAddress":

Hi Everyone, I'm trying to get smbclient to cooperate with my new EMC Celerra (just got it a little while ago) using kerberos. My windows domain environment is win2000 + sp4, the EMC is "joined" to the domain. I am using samba 3.0, fresh sources, and MIT KRB5 1.3.4, all freshly built. I join the domain, etc. everything is happy. I use kinit user@REALM to get my initial tgt.

Hello Mike, Can be you need to recreate the machine and tgt password on yout server so it adds the aes enc types for these after raising the functional domai level. The required scripts can be found in tthe samba sources in /source4/scripting/devel/ Use chdcpass for the machine-account and chgkrbtgtpass for the tgt account. I did this on an single addc server a while back and had no issues.

Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of "credentials

Am 2016-11-28 07:14, schrieb Matthias Kahle via samba: > Hi Folks Hi Matthias, > I'm trying to share user home directories hosted on a Samba-4 member > server via NFSv4. Everything's working well with the Windows shares but > when it comes to kerberized NFSv4 it fails. I can't even mount the > home > root directory via nfs on the server itself ("mount.nfsv4:

Hi All, I have setup samba as Active Directory Domain Controller as per the steps mentioned in wiki page https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller I have also setup squid proxy with kerberos auth on other machine as per the steps mentioned on squid wiki page. However I couldn't find any documentation to do a KCD setup. Here are things I

Hi, I have problem with GPO and dns/kerberos resolution I do a samba -i -d3 to a log file and started on client: gpupdate /force: lpcfg_load: refreshing parameters from /srv/samba/etc/smb.conf params.c:pm_process() - Processing configuration file "/srv/samba/etc/smb.conf" samba version 4.1.0rc2 started. Copyright Andrew Tridgell and the Samba Team 1992-2013 ... ldb_wrap open of

I found other problem in error log (samba -i -d 3) GSS server Update(krb5)(1) Update failed: Miscellaneous failure (see text): Failed to find ADMIN01$@CORMANDOM.INT-CORMAN.BE(kvno 3) in keytab FILE:/srv/samba/private/secrets.keytab (arcfour-hmac-md5) I sent a bug for my problems. best regards St?phane ----------------------------------- St?phane PURNELLE Admin.

Hi, I have problem with GPO and dns/kerberos resolution I do a samba -i -d3 to a log file and started on client: gpupdate /force: lpcfg_load: refreshing parameters from /srv/samba/etc/smb.conf params.c:pm_process() - Processing configuration file "/srv/samba/etc/smb.conf" samba version 4.1.0rc2 started. Copyright Andrew Tridgell and the Samba Team 1992-2013 GENSEC backend

After reviewing logs I found that my previous assumption was wrong. Situation: - i'm trying to start live migration from hyper-v host A (BMSRV4-HYPERV) to hyper-v host B (BM-SRV-5) from host B (logged in as user from DOMAIN ADMINS group). Kerberos constrained delegation is set in accordnance to microsoft instructions with proper SPN's set (well, proper as in with the workaround I

Hi, I have problem with GPO and dns/kerberos resolution I do a samba -i -d3 to a log file and started on client: gpupdate /force: lpcfg_load: refreshing parameters from /srv/samba/etc/smb.conf params.c:pm_process() - Processing configuration file "/srv/samba/etc/smb.conf" samba version 4.1.0rc2 started. Copyright Andrew Tridgell and the Samba Team 1992-2013 ... ldb_wrap open of