similar to: Winbind vs pam_krb5/nss_ldap

I am currently using Mssfu, nss_ldap, and pam_ldap to enable my linux boxes to auth against MsA.D. and get all their user info from MsA.D. I recently discovered that winbind can accomplish the same without Mssfu, as long as I'm content to be limitted by the winbind config directives 'template shell' and 'template homedir'. I'd like to drop sfu if I can. The 'template

Hi all, Is anyone using C7 in production with LDAP and kerberos? Currently all of my machines run C5 or C6 with nss-pam-ldapd or nss_ldap, with kerberos and pam_krb5 for authentication. Before I fire up a test VM (is it even worth it?) I wanted to check feedback from the community. Cheers! Dan

Hi all Situation: Samba 3.0.11 FreeBSD 5 nss_ldap pam_krb5 Connecting to W2k3 ADS with installed MSSFU. (LDAP Posix Schema) pw user show -a pw group show -a both work. Authentication via Kerberos works fine. Users have access via samba to the files and directories that belong to them. But not to the Files belonging to their group. The 'Security' Tab under Windows shows the groups as

> -----Original Message----- > From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On > Behalf Of Gordon Messmer > Sent: den 21 januari 2015 05:47 > To: CentOS mailing list > Subject: Re: [CentOS] Is anyone using C7 in production yet? (sssd, nss-pam- > ldapd, kerberos, etc) > > On 01/20/2015 05:26 PM, Dan Irwin wrote: > > Before I fire up a

On Wed, 27 Jun 2018 02:09:24 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > I think I have my Mac AD mappings wrong. The following link > https://support.apple.com/kb/PH26272?viewlocale=en_ME&locale=en_ME, > says: > > > On a computer that's configured to use Directory Utility's Active > > Directory connector, you can specify an Active

Next strange problem... W2k3 ADS. Sambe as ADS Member. pam_krb5 nss_ldap winbindd all seam to working correctls. Windows Users can access the shares on the Samba Server and can login using pam. smbclient works for all users... except from the Domain Administrator. smbclient //server/user -U user => is fine.... smbclient //server/Administrator -U Administrator [2005/03/23 17:33:30, 0]

Greetings ... Have a question, was is the advantages of use pam_winbind verses pam_krb5 for Samba user authentaction? I mean, if I point my Linux box Kerberos to a Win2003 AD server, I am able to authenticate my users out of AD, but at the moment still having problems with winbind and nsswitch. Is there an advantage to using pam_winbind instead of pam_krb5? Mailed Lee

Hi, We recently updated our domain to 2008R2 servers from 2000. I know the services for unix changed from the proprietary setup in 2000 to rfc2307 compliant around 2003 R2 I've updated samba to 3.5.4 (apparently most earlier versions don't play well with the changes in AD), and gotten things essentially working. The problem is users created since the old 2000 servers have been

Hello people, My difficult is get "nss_ldap" compiled and running on my server. I download the tgz file from PADL Software Pty Ltd website, decompress/untar, and then run "./configure" . ./configure runs just fine with no error message. Things go bad when I type: make This is the output after I try to do "make": root@ldap:~/nss_ldap-262# make make all-am make[1]:

Hi All, Any thoughts on why, while everything seems ok at the OS level (getent , id -a ) Samba doesn't pickup any supplementary groups when Solaris is configured with 'group: files ldap' in nsswitch.conf and using it's own native nss_ldap.so.1 but does when using PADL's nss_ldap? Everything else is equal. Do they use/accept different calls or could it be an

Suddenly as of this morning, none of my users can authenticate to samba because nss_ldap is producing cryptic errors. Nothing has changed on either the LDAP server or the Samba server. Looks like this in /var/log/messages: Aug 11 11:19:29 edgar smbd[8394]: nss_ldap: could not soft reconnect to LDAP server - Server is unavailable Yet, the LDAP server IS available, and happily chirping away

I've been unsuccessfully trying to get nss_ldap to work. I've chased down hundreds of google searches over the last 3 days, and I can't seem to get a centos system to authenticate against ldap. Every daemon on the system is running into the same problem: nss_ldap: could not search LDAP server - Server is unavailable sshd, nscd, httpd, you name it.. slapd is clearly running, telnet

Hi all! A while ago I caught a discussion re Samba and LDAP SAM backend, with OpenLDAP and nss_ldap. It seems that the reason the smbd process keeps crashing (and thus losing connections) has something to do with the fact that the LDAP standard allows connections to be unilaterally closed by the directory server, and this was causing Samba to crash. Again - this is my hazy recollection of the

Hi list, I've seen this error now many times (at my own setup and in the archives): sam_account_ok: Checking SMB password for user Simon Dassow [2004/03/05 12:54:19, 1] auth/auth_util.c:make_server_info_sam(821) User Simon Dassow in passdb, but getpwnam() fails! But: # id 'Simon Dassow' uid=1000(Simon Dassow) gid=513(Domain Users) groups=513(Domain Users), 512(Domain Admins)

A few weeks ago, we upgraded our Red Hat 7.3 and 9 machines to OpenSSH 3.6.1p2 w/ the corresponding version of Simon's GSSAPI patch. All the expected functionality seems to be there: I can ssh/scp/sftp via Kerberos tickets or local password. However, I seem to be getting a new error message in my logs: For Red Hat 7.3: Message from syslogd at gallifrey at Thu Oct 2 17:24:12 2003 ...

Hi, I rebooted a old Centos 5 box and now its stuck in an ever increasing timeout loop; nss_ldap: reconnecting tl LDAP server (sleeping # seconds).... This happens before network services starts. Any one know how I can break out of this? I tried booting in single user mode from the grub menu but no dice, the thing keeps nss_ldap looping. Thanks in advance, - aurf

> There is a bug with nss_ldap and bash32 ... I created a new RPM for the > nss_ldap that is currently in our testing repo. Johnny, I was wondering if that RPM includes the security fixes detailed in https://rhn.redhat.com/errata/RHSA-2008-0389.html Thanks in advance, M

I sent this the other day, but did not get any replies, can anyone help? Hi All, I have a sparc solaris 8 server running samba 2.2.11 (which i complied with winbind). The server has been running for years and has about 20 local users setup using local files for openssh and rexec logins, and samba shares. They each use samba to map to their home directory and a common shared folder. They also

Hello all. I have experienced an unusual behaviour from dovecot which I believe to be related to some interaction between dovecot and nss_ldap/Pam. Centos/Postfix/mbox(es)/Openldap/dovecot. The box is using PAM with ldap, and is also running BIND, SAMBA, and DHCPD. Dovecot 1.0rc2 from source. I left dovecot at the default, to use PAM for authentication and guess the mailbox. This worked

I have installed and configured the puppet client nodes to use LDAP to authenicate users. LDAP connection is OK and user can be authenicated via LDAP. I use nscd and with my ldap config setting specify on /etc/ldap.conf However, puppet is not happy; and in the /var/log/messages it gives tons of puppet-agent[27499]: nss_ldap: could not search LDAP server puppet-agent[27499]: nss_ldap: