similar to: Seeking Good Documentation for... (freebsd+ldap+samba(pdc)+kerberos)

Hi, To this point I have been careful about mixing Win2K and WinXP profiles when using samba as a PDC/Profile server. Settings I have used have been like the following... logon path = \\%L\profiles\%u\%m (in smb.conf) with a typical profile directory as follows... drwx------ 14 test wheel 512 Mar 14 11:32 Win2K drwx------ 17 test wheel 512 Oct 27 18:22 WinXP lrwxr-xr-x 1 test

Hi, This may not be a Samba specific issue I am having but it came up when working with samba shares specificaly so I thought I would ask here first. Please feel free to redirect me to more appropriate sites if needed. I am running Samba version 3.0.4 on Slackware 10. I am running into a problem with being able to allow a normal non-root user to either mount samba shares or regular disk

Thank you for the reply Joe. Which smb.conf files would you want to see? I am trying to mount shares from 2 FreeBSD, 1 RH9 (linux) and 2 Windows servers to a directory structure on my system. To give an idea my mount script is as follows (with some info removed): # Smeagol (FreeBSD Domain Controler/Profile Server) # mount -t smbfs -o username=$user,password=$pass,ro //smeagol/home-dir$

Hi, i'm looking for this how-to, often referenced but no more available: https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba and OpenLdap? Thank you in advance Marcello

So like at least a handful of people before me I have begun the valiant stugle to unify logins at my place of business. I have setup a test LDAP + Kerberos V cluster. And I have Setup a test Samba 3 PDC. What I would like to do is get Samba to handle kerberos ticket granting and authentication to the (LDAP + Kerberos V) Directory. Such that Windows is completely unaware of the existence of

Hi. As I said... I will bother you. :) I'm wondering if it's possible to make samba as a primary domain controller without having samba passwords, but instead using my two KDCs (MIT K5). Is it possible? What should I use in my smb.conf? The wonderful and less painful thing is samba authenticating via pam... but I don't know how... the documentation is quite misty. -- Sensei

Hello, I've been trying to figure out if it's possible to replace Active Directory with Samba (+ OpenLDAP, Kerberos, DNS etc.) on Linux - but from what I've found I'm not sure. Is it possible, or partially possible (I don't need every feature of AD)? What additional software (besides Samba) will I need? What functionality will I loose? Where can I find any

We have a Windows 2000 server with Terminal Services. It is an Active Directory master server for a microscopic network comprising itself and one Windows 2000 Workstation client. It is part of a network consisting of Unix machines: several Solaris 8 systems, a handful of Linux boxes, and a Mac OS X workstation. User authentication and other login information on this network is provided by NIS

Dear list, I would like to know if the following statements are true, just to make sure that my understanding of passwords/ldap stuff is correct... Vampireing passwords from an nt4 pdc only populates the ldap server with windows passwords, and not the (linux) userPassword. Authenticating linux logons against this ldap server is therefore only possible using winbind. 'Normal' ldap

Hello, my first post here :-), For several years, I are using samba 2.0 with local backend for windows stations and servers. NIS was our used for Linux stations and servers Now, LDAP /KERBEROS is replacing NIS and Samba (with ldap backend) will replace the local backend . My questions : 1- How can I migrate information form server1 (samba 2) to server2 (samba 3) ? I read the official Samba

Hello, this is the first time I write to the samba list and I hope my question is not off topic. I want to set up a samba server to replace an Active Directory for my Windows workstations. So far, I have a LINUX network that works perfectly, all my users are stored in a LDAP server and their authentication is done against a MIT Kerberos server. Hence all users have a valid kerberos ticket

Hello, I would like to configure PAM to sync Unix passwords to Samba passwords. When I add a new Unix user or change an existing Unix user's password, I want the same password to be stored in /etc/smbpasswd. I'm trying to follow these instructions: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/pam.html#id2606200 It sounds like this is what I want to do: "A sample

Hello R Folks, I am new to R. I have been struggling to overlay a barchart with a xyplot together on one plot but did not get this worked out. Any help and idea are greatly appreciated. I attached R scripts for barchart and xyplot below and also data I used. What I am trying to do is just to put the barchart and xyplot together on one plot. Huapeng <<dispersal_infestation.csv>>

I store my file_column database outside of my RAILS_ROOT. It seems to work in real life, but not in tests. In the tests, I can''t set both the root_path and the store_dir. In tests, setting the store_dir option will override the root_path option. The only way for root_path to work is to remove store_dir. I think the problem is in file_column.rb on line 22: options[:store_dir]

steve wrote: > > My only remaining question is that to open port 22 on the file server, > I've had to open all the other ports otherwise I could not kinit or > anything else. Could you/is there a list of ports which need to be > open for a S3 fileserver which is also a nfs server to be able to > communicate to the rest of the LAN without all ports being opened? > >

Hi Rowland, Thanks for your explanation. We have set up Samba to authenticate users against an external MIT Kerberos server and usernames match those in Unix password files. The setup was almost exactly like the Ubuntu help page: https://help.ubuntu.com/community/Samba/Kerberos#MIT_Kerberos There are others who have also set up Samba this way:

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Hi All, Hope someone here can help me ? *See end for background and system information... I'm looking for advice or links to clear documentation on the use and configuration of "net vampire" and it's ability to download PDC accounts with passwords intact. I have successfully used "net vampire" to synchronize my Samba BDC -- with my companies PDC. I've switched

I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) Modern versions of MIT kerberos support GSS-SPNEGO natively, but are only willing to negotiate for kerberos tickets and not NTLM

Folks, I seem to have a problem when I upgraded our kerberos from 1.3.1 to 1.4.1 (MIT krb 5), all of a sudden I can't ssh as another user. i.e. ssh host works but ssh joe at host doesn't work. Same with scp's. I've tried recompiling ssh (even though the so-name of kerb libs didn't change), but it didn't work, and still no go... I'm using openssh 3.9p1 on Solaris