similar to: password ldap clarification requested...

Hi, i'm looking for this how-to, often referenced but no more available: https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba and OpenLdap? Thank you in advance Marcello

So like at least a handful of people before me I have begun the valiant stugle to unify logins at my place of business. I have setup a test LDAP + Kerberos V cluster. And I have Setup a test Samba 3 PDC. What I would like to do is get Samba to handle kerberos ticket granting and authentication to the (LDAP + Kerberos V) Directory. Such that Windows is completely unaware of the existence of

Hello, my first post here :-), For several years, I are using samba 2.0 with local backend for windows stations and servers. NIS was our used for Linux stations and servers Now, LDAP /KERBEROS is replacing NIS and Samba (with ldap backend) will replace the local backend . My questions : 1- How can I migrate information form server1 (samba 2) to server2 (samba 3) ? I read the official Samba

Hi All, Hope someone here can help me ? *See end for background and system information... I'm looking for advice or links to clear documentation on the use and configuration of "net vampire" and it's ability to download PDC accounts with passwords intact. I have successfully used "net vampire" to synchronize my Samba BDC -- with my companies PDC. I've switched

Hi. As I said... I will bother you. :) I'm wondering if it's possible to make samba as a primary domain controller without having samba passwords, but instead using my two KDCs (MIT K5). Is it possible? What should I use in my smb.conf? The wonderful and less painful thing is samba authenticating via pam... but I don't know how... the documentation is quite misty. -- Sensei

Hello, I've been trying to figure out if it's possible to replace Active Directory with Samba (+ OpenLDAP, Kerberos, DNS etc.) on Linux - but from what I've found I'm not sure. Is it possible, or partially possible (I don't need every feature of AD)? What additional software (besides Samba) will I need? What functionality will I loose? Where can I find any

... Setting up a Samba PDC with the following: FreeBSD 5.3 Samba 3.0.x OpenLDAP 2.2.x Kerberos (Heimdal) Would like LDAP to take care of both posixAccount(s) and sambaSamAccount(s). Posix account via nsswitch+pam_ldap. Hope to find one complete documentation that describes this setup from scratch, start to finish. A Ports style install of all packages is fine but I can download, compile and

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

We have a Windows 2000 server with Terminal Services. It is an Active Directory master server for a microscopic network comprising itself and one Windows 2000 Workstation client. It is part of a network consisting of Unix machines: several Solaris 8 systems, a handful of Linux boxes, and a Mac OS X workstation. User authentication and other login information on this network is provided by NIS

Hello, this is the first time I write to the samba list and I hope my question is not off topic. I want to set up a samba server to replace an Active Directory for my Windows workstations. So far, I have a LINUX network that works perfectly, all my users are stored in a LDAP server and their authentication is done against a MIT Kerberos server. Hence all users have a valid kerberos ticket

Hello, I would like to configure PAM to sync Unix passwords to Samba passwords. When I add a new Unix user or change an existing Unix user's password, I want the same password to be stored in /etc/smbpasswd. I'm trying to follow these instructions: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/pam.html#id2606200 It sounds like this is what I want to do: "A sample

Hi folks, I have been able to migrate a WinNT4 domain to a Samba3 PDC domain using openldap as a backend and smbldap-tools to vampire the WinNT4 domain (pretty much following Samba3 by Example and documentation in smbldap project by IDEALX). Nevertheless, all 600 users migraged from the WinNT4 domain have attributes like these on the ldap database: userPassword: {crypt}x

Hello, recently we succeeded in doing a test migration from NT4 to a samba BDC with LDAP. The LDAP directory is now filled with machine, group and user account information. My question: as I have set the smb.conf parameter "ldap passwd sync = Yes", I would have expected that "net rpc vampire" would also set the UNIX password of the LDAP user account entries, i.e. the

I've tried numerous times but cannot get Vampire to bring across all groups or add users to all groups that they belong to. Sometimes I get everygroup except 1, other times not so lucky. Vampire log is below with an example of what is going wrong. vampire.log Fetching DOMAIN database Creating unix group: 'skischool' Creating unix group: 'sales' Creating unix group:

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba

Hi, Just wondering: What are you guys using to deploy software on your windows (7) workstations within the samba4 AD? These are options I know of: * wpkg (but it seems it's development is not too active) * wpkg-gp using the group policies * www.opsi.org (Client Management System for Windows clients) * standard windows software deployment, but I think that's msi-only This page also has

Am 06.10.2015 um 21:26 schrieb mourik jan c heupink: > I have checked all our policy directories on sysvol, and I have a > "Registery.pol" only in some "/Machine" directories, and none in "/User" > or "/Group Policy". Do you have any policy in the User tree in the GPME in that GPO? If you never defined one, then the file is missing. Try e. g.

Hi, I'm attempting to migrate an NT4 domain to Samba3, and getting quite frustrated with stuff that seems not to work as advertised. I'd appreciate any help. I've set up an OpenLDAP server, and Samba 3, configured it as a BDC, and tried running "net rpc vampire". This all works, and Samba does the appropriate stuff to try and populate the LDAP database. The scripts I've

Trying to migrate NT4 to samba 3.0.0 or 3.0.1pre3 with an ldap backend. I add a backup server account to the domain and joined. Getting the SID and the ldap init seem to work, and I start windbind. When I run net rpc vampire all I get is a ton of "Could not create posix account info for " errors. Then ofcourse pdbedit -L returns smbldap_search_suffix: Problem during the LDAP search: