similar to: Samba(4) + AFS

Okay I don't think what I want to do is possible but here goes. I want to deploy a samba domain for my windows clients, but I want samba to use AFS on the back end. But AFS requires kerberos to get tickets and tokens. So is there anyway to make this work. I personally don't care if samba accepts kerberos tickets from the client or not, but a ticket and AFS token will need to be

Hi @all, I have some question I can't find a explanation. I have a standalone Samba3 as PDC. It works perfect with LDAP. Now I want to implement Policies. 1) Is it possible to use GPO from ads ? And if so, where to store this policies. 2) Or can I only use policies created with poledit from NT4 which should be stored in NETLOGON. Any help or links about this would be apreciated.

When setting up an LDAP PDC do I have to have both user and machines in the ou=People container? Here's what I've got. LDAP Tree ou=People,o=umd.umich.edu ou=NIS,ou=Groups,o=umd.umich.eud ou=machines,ou=Samba,ou=Services,o=umd.umich.edu ou=Idmap,ou=Samba,ou=Services,o=umd.umich.edu smb.conf (ldap stuff) ldap delete dn = no ldap suffix = o=umd.umich.edu ldap

I'm attempting to join a Samba 3.0.4 domain on a Debian linux box, with a Windows XP client. Problems 1) Can only get the join to work if I use the root account. On Win2k I can use any account in the Domain Admins group. 2) The join succeeds, the unix account and the smb account are created but the smb account is disabled, and the password contains all XXXXs. Joining the domain works

In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ winbind are talking to dc1 everything is great when talking to dc2 or dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required" and nothing works. I don't think its a samba config problem but my AD admins aren't real helpful in getting samba

I've got a Samba PDC and a Samba domain member server. I successfully joined the domain, started winbind and run the wbinfo -p; wbinfo -t tests, both succeeded. But if I do a winbind -g I only get BUILDIN/group and if I do a wbinfo -u I get "Error looking up domain users". But ntlm_auth succeeds. So I'm a little confused. At this point this is a minor issue since

I think I have come across what seems to be a bug in the interplay between Samba and AFS. I'm running 1.9.16p11 on an IBM RS/6000 (AIX 4.1.5) with the AFS support included (AFS 3.4a). The client machine is running Windows 95. I've created an AFS area which is writeable (rlidwk) to an AFS protection group. The group contains two AFS users, say user1 and user2. If user1 creates a file in

Hi! I've noticed that openssh always does a do_setpag() if compiled with AFS-support no matter which authentication method is used. Maybe I'm missing something but shouldn't it only get a pag, if AFS-token-passing is used? If password authentication is used, an AFS-pam-module (or the authenticate function on AIX) will do the job, otherwise, no token can be obtained and therefore no

Hello, I going to use ssh with Kerberos V5 support along with support for AFS. I don't want to use Kerberos V4 or AFS token passing. The only thing I need from AFS is creating an AFS token (using appropriate function from krb5 API) after user's authentication. It seems to me that such scenario is not much supported by the current code. Rather it is assumed only Kerberos 4 will be used

For some reasons the afs tokenforwarding stuff has changed siginificantly from v 2.9p2 to 2.9.9p2. This makes it impossible to use public key authenticication in a standart AFS environment. I don't know the reasons for these changes. In any case attached is a patch which restores the old behaviour. Regards Serge -- Serge Droz Paul Scherrer Institut mailto:serge.droz at

Hi all! Just wondering whether anybody has any idea on configuration for accessing AFS volume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS

I've been beating myself senseless trying to build OpenSsh 3.0.1 on Solaris 2.5.1 and get AFS login working. The symptoms of the problem are: sshd builds (used --with-afs and -with-kerberos4 - there is no PAM on this box), accepts connections from non-AFS users, but does not accept a connection from an AFS user; the user sees "permission denied" after entering the password. The

Hi All- I have SuSE 8.2 installed on two different Intel machines, with (as far as I can determine) all required packages for doing what I'm trying to do here. Both machines suffer the same problems. I didn't find any SuSE 8.2 rpms, so I'm trying to build Samba 3.0 (stable) (24th Sep, 2003) on either of these machines but am having problems with it. As root, I did a

The native authentication methods of openssh are (not counting insecure RhostsRSAAuthentication) 1) public key 2) password For users with home dirs in AFS space, method 1) does not work. Except with (non foolproof) fiddling on the access controls within the home directory. This might lead to security issues when done by inexperienced users. Without some work, only 2) remains. Being forced to send

With the help of Jan Iven I have been able to compile openssh-2.9.9p2 on Solaris 2.6 with AFS/kerb4 support using gcc. ./configure --sysconfdir=/etc/ssh --with-tcp-wrappers \ --with-egd-pool=/var/run/egd-pool \ --with-kerberos4=/usr/athena --with-afs=/usr/afsws to do this I modified the resulting Makefile, from: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include

I'm sorry, but I've been looking in the archives, and I can't find an answer to this question. I believe OpenSSH supports AFS, but I can't seem to make it work. I've tried to install krb5-devel, but it doesn't work. I've made configure --with-kerberos4 --with-afs, and it says it can't find krb.h. Did anyone manage to compile openssh 2.3.0 with AFS? Which kerberos

Okay I've recently started have some problems with the Samba AFS code. If I'm doing mass data operations, deleting 14 GB of data (lots of files), copying lots of files, etc. I'll get access denied error at random times. If I let everything sit for a few minutes then I can continue the operation. It appears that the smb process is loosing/forgetting/delete my AFS information.

Hello, currently we are storing the incoming mail in the user's home directory, which is within a distributed filesystem called AFS (OpenAFS). Accessing the "mbox" file directly (using the distributed filesystem) works fine with mutt, thunderbird, ... To access the INBOX from a machine, which does not have access to this distributed filesystem, we are using IMAP (UW-imap). Now I

http://bugzilla.mindrot.org/show_bug.cgi?id=717 Summary: AFS tokens are not generated upon login Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org

I've got a very odd situation occurring. I recently upgraded to Samba 2.0.26a and now secondary group membership doesn't work. On the filesystem I have this layout /derek /derek/Folder 1 /derek/Folder 2 derek has these ACLs # file: derek # owner: root # group: root user::rwx group::r-x other:r-x Folder 1 has these ACLs # file: Folder 1 # owner: root # group: g1 user::rwx group:rwx