similar to: Samba as a PDC with LDAP and Kerberos

I've been searching and researching this and I can't seem to find the answers I'm looking for. I'd like to setup a Samba PDC that Windows clients will join. The PDC will use an LDAP backend to get authorization information (username, home directory, etc). The authentication portion is handled by an MIT Kerberos KDC. I think I'm real close to having it all together but I'm

Hello everybody, We are using SMB as PDC and roaming profile. but login /log off are taking 15 min (200 MB) on our GB network. when I use tcpdump to monitor SMB on the client and the server , I can see that the copy hang during several minutes. our stations : win xp sp2 (webclient disabled) our smb serveur : samba-3.0.9 here is my smb.conf : # Global parameters [global] workgroup =

Hi everybody, I'm using a FreeBSD 6.1 box running Samba-3.0.23c_2,1 from the ports tree, authentification is provided by two MS PDC (kdc1 and kdc2, the domain is called PARIS). Previous versions of Samba (<3.0.23c) used to work perfectly but since I upgraded to 3.0.23c, I have very disturbing timeouts problems affecting winbind. A simple "smbclient -L <myserver> -U

Hi All, I've installed and configured Samba 3.5.11 on a Solaris 8 machine. I was able to join it to the 2008 R2 AD. However, its smbd daemon is crashed everytime I connect to its shared folder from the windows machine, so I'm not able to connect to its shared folders. Below is its log from smb.log file. Is there anyone has any idea what cause the problem? I appreciate very much Regards,

I have this config: # BL00070 - Disable NFS service {["nfs","nfslock","netfs","portmap"]: ensure => stopped, enable => false, } user {"rpc": ensure => absent, provider => "useradd" } user {"rpcuser": ensure => absent, provider => "useradd" } file

So I have two classes for openvz setup. The first is openvz::setup and it sets up the box for OpenVZ.. then another class (in same .pp file) called openvz::master sets up the config for the main system (as opposed to a VE). The error I see is that the openvz::master class is executed (and fails) becuase it doesn''t seem to load up the setup class? debug: Calling puppetmaster.getconfig

Hi, Andrew, Thank you very much for your answer. Now our case is as below: 1, our client machine is the windows 2000 2, We want our Kerberos run in the Unix box. 3, We also want the samba as PDC for all windows user and machine. 4, We want integrate the Kerberos Authentication with samba authentication. So in this situation, can we get the kerberos login from the windows

Hi, All!! I have a Windows XP client configured to use Kerberos authentication (with a MIT KDC). I configured it with ksetup.exe from Windows 2000 and it works well. Question is: can I use the kerberos tickets I got at logon time to access the shares from our samba server, without configuring a entire AD struct and soon? Actually, I can access the shares, but only if my kerberos password and

After setting up Samba 3 I noticed the Windows 2000 box was requesting a ticket from the KDC for HOST/<NETBIOS NAME>@MYREALM.COM when it tried to connect to the Samba server. I presume that W2K is sending the ticket it is granted along to the Samba server. If that presumption is correct, is it possible to make Samba authenticate the user with the Kerberos ticket they present? If so, how

hi, ? i have recently installed a samba 4 in a DC role. The distribution is a debian jessie/sid, the version of samba is 4.1.7. The server is globally working but there is some litle trouble. on the server itself, i can do a kinit without probleme but if i try a kpasswsd, i obtain the following ? root at station:/var/log/samba# kinit Password for administrator at TOTO.FR: root at

I had some questions come up today during the Puppet demo here: 1. Is there any way to apply different intervals to different classes? For example, we might want a security baseline manifest to run once a month, package installation files once/day, etc. Since we''re a brokerage, we also don''t want ANY system changes during trading hours. I guess we could cron killing the

I have one module, kibana, that defines a file snippet for the apache module to fulfill (e.g., /etc/https/conf.d/kibana.conf). The apache::params class defines a variable of the path of where this snippet should be placed, $config_d. The snippet uses this variable in its definition. However, it seems that the snippet never resolves the $apache::params::config_d variable, and I''m

I have a node that has some bad stored configs (namely the wrong ssh host keys) that I''m trying to clear out. Looking around it seems I''m supposed to do: puppet node clean foo.example.com However, that keeps bailing out because it''s trying to open a SQLite3 db where stored configs are normally kept, but my stored configs are kept in puppetdb (http://pastie.org/7814483

I wonder anyone has came across this problem I have facing. Currently running 3.0.20b as member of W2K3 AD, I have a third party educational software that runs from a samba share which is available for all students. Somehow, I find that CPU is running high in % with server slowing down and winbind users not resolving properly to username from GID. I notice that a lot of these messages are

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 11 Mar 2014, Graham Leggett wrote: > On 11 Mar 2014, at 7:32 PM, Graham Leggett <minfrin at sharp.fm> wrote: > >> Giving the different prefix a try on a test account, a mailbox directory is created, but the rest of the maidir directories (new, cur, tmp) aren't created, and the error below is returned. >> >>

Hi there, when enabling the option PAMAuthenticationViaKbdInt, a login with password is always possible, even though when you disabled it with PasswordAuthentication no and PermitRootLogin without-password! Is this intended? Why is there no documentation about this (or at least a waring in the default configuration file)? The problem is, it is enabled in the default installation of Debian

Hello, I am trying to join a Samba 3.0.24 server into an ADS domain, which is served by two Windows 2003 servers (let's say srv1.domain.local (192.168.1.1) and srv2.domain.local (192.168.1.4)). I am running Samba on a FreeBSD 6.2 machine and I have established an OpenVPN connection to the ADS network (tunneling). I have this in my resolv.conf:

Hi, An update on my work to integrate my Linux server (CentOS 4.3) in AD 2003. Sorry about the long post :) Found this page (http://www.enterprisenetworkingplanet.com/netos/article.php/3487081) and followed the instructions on it. First, I made sure that the Samba installation is supporting Kerberos, LDAP, AD and Windbind. That was OK. I made sure that /etc/hosts contain the name of the AD

> Is there ? GUI for sieve. > > I don't have installed Squrielmail, but won't like to manage the > Rules per ssh

Hello all, I am doing some tests for an SSO for our Windows workstations using Kerberos without ADS. So far, Windows client can obtain the ticket from the Heimdal KDC and it's possible to login to SSH servers using Vintela Putty. I am now trying to use the Kerberos credentials to access Samba shares. I can mount the shares using my Kerberos tickets from a Linux and I see the service ticket