similar to: Samba and ADS

Good morning (brazil ;-]) everyone, I'm in trouble and i need your help! I have a samba 3 running on a linux box (debian 3.1 sarge) as PDC (domain is EVERSYSTEMS_INF). I dont know if it's possible, but, i need that samba controls the authentication on some windows machines, an example: i have a machine A,B and C, and all of them are part of theont machine A and B, but not in C. And a user

Hello, I am currently trying to install Samba w/ ADS support on a series of Solaris 9 & 10 machines. I have tried compiling samba3, but some reason it will not compile with ADS support. I have compiled MIT krb5 and openldap previous to compiling Samba. I compiled openldap and installed it into /usr/local/openldap. Kerberos was compiled and installed into /usr/local/kerberos5. When

Ugh. With MAKE_KERBEROS5=yes, on a recent STABLE, I get the following trying to use Kerberized telnet: # telnet -l test big.x.kientzle.com Trying 66.166.149.54... Connected to big.x.kientzle.com. Escape character is '^]'. [ Trying mutual KERBEROS5 (host/big.x.kientzle.com@X.KIENTZLE.COM)... ] Bus error (core dumped) Fortunately, it's pretty easy to track down: (gdb) up #2

Hi! I have two Dcs, with Samba 4.7.7, i need tranfer(dont seize) fsmo between dcs, but dont work samba-tool fsmo transfer --role=domaindns -Uadmin Password for [XXXX\admin]: ERROR: Failed to delete role 'domaindns': LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE -  <attribute 'fSMORoleOwner': no matching attribute value while deleting attribute on

Greetings, Still no progress trying to get Samba 3.5.6 built on Solaris 10, using gcc 3.4.6. Maybe fresh eyes will see something? Been having issues building samba since 3.4.9 (and anything greater than 3.2.15 on Solaris 9 where samba will build, but winbind will not work properly for user authentication.) techops$ make Using CFLAGS = -I/opt/local/kerberos5/include -O -I.

I have FreeBSD-6.1 and it appears the default installation has a full complement of Kerberos5. But, /usr/src/kerberos5/README states: This subtree is world-exportable, as it does not contain any cryptographic code. At the time of writing, it did not even contain source code, only Makefiles and headers. Please maintain this "exportable" status quo. Thanks!

Hi everyone, I am interested in estimating this type of random effects panel: y_it = x'_it * beta + u_it + e_it u_it = rho * u_it-1 + d_it rho belongs to (-1, 1) where: u and e are independent and normally zero-mean distributed. d is also independently normally zero-mean distributed. So, I want random effects for group i to be correlated in t, following an AR(1) process. I am

I've spent the morning looking at making some RPMs for Fedora Core 1 and run into a problem with GSSAPI. Basically the default install of Fedora doesn't come with the necessary gssapi code to build the RPMs by default (i.e. you need to say %define kerberos5 0 in openssh.spec). Since Fedora is going to fork off from RedHat I was going to create a set of patches to make a

Hi All. Right now, if OpenSSH is configure'ed --with-kerberos5 and the system has a krb5-config that's not in /usr/local/bin then configure won't find it. The attached patch changes this so krb5-config will be used if it's anywhere in the path (although if it exists in the directory specified by --with-kerberos5= then the user-supplied path will take precedence). You will

I've been trying for a couple of days to get ADS support built into Samba 3. I've been searching the archives for something that will help me out, but nothing seems to work. Here's what I've tried, first on FreeBSD 4.8: FreeBSD 4.8 Samba 3b3, ./configure --with-ads --with-krb5=/usr (I installed FBSD krb5 from /usr/src/kerberos5) works like a charm. make works and I see all the

Greetings, I'm working on the infrastructure of a medium size client/server environment using an Active Directory running on Windows Server 2003 for central authentication of users on linux clients. Additionally OpenAFS is running using Kerberos authentication through Active Directory as well. Now I want to grant users remote access to their AFS data by logging in into a central OpenSSH

I'm trying to configure a Solaris 8 system to authenticate Samba against Windows 2003 ADS. I've compiled the appropriate packages; however, I'm quickly stuck trying to get my kerberos ticket. Here's the error: sumac:/opt/local/kerberos5/bin# ./kinit admin@DCRI.DUKE.NET kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials

Hello, i try https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record ldapvi '(invocationId=*)' --cross-ncs objectguid I get objectGUID:: i55tljAenUWun3ISCvEXoQ== When I do "samba-tool dns add dc1 _msdcs.foo i55tljAenUWun3ISCvEXoQ== CNAME dc2.foo -Uadmin" ERROR(runtime): uncaught exception - (8, 'WERR_NOMEM') File

> > > root at artu:~# upsc Elit at artu > > Init SSL without certificate database > > battery.voltage: 13.90 > > battery.voltage.high: -1.08 > > battery.voltage.low: -0.87 > > device.type: ups > > driver.name: blazer_usb > > driver.parameter.pollinterval: 2 > > driver.parameter.port: auto > > driver.version: 2.7.2 > >

Hi, when I logon from windows machine, the username is validated against samdb. How can user be validated against Kerberos5 (principals)? Thanks and regards, Fabian

Hello, I get this error message when i try to join my Samba4 server to an existing domain: """ >./net vampire domain.local -Uadmin --realm=domain.local Password for [WORKGROUP\admin]: Become DC [(null)] of Domain[DOMAIN]/[domain.local] Promotion Partner is Server[dc1.domain.local] from Site[Default-First-Site-Name] Options:crossRef behavior_version[2] schema

Hi. I've had this patch a while (and I posted an earlier version a while back): it tries to use krb5-config to obtain the Kerberos build options. If it's not available, or isn't in the path specified to --with-kerberos5 then the existing behaviour is kept. It seems to work for me with MIT and Heimdal. I got some feedback from one person, would any of the Kerberos-using folk care to

After some days, here is my personal cookbook for Samba in Solaris. I needed to share a folder in my Solaris server, but using my Windows Active Directory Account. Here are my proccess, if it can help to anyone or if anyone can make corrections or suggestions. Thx. Personal Cookbook for Samba. Objective: To enable a Unix server for share folders for Microsoft Windows machines with

Hi all, After having spend 2 days to resolve my problem to configure Samba 3.0 (the path to the libgcc_s was wrong) I've finally installed it and I'm trying to join the W2K AD domain with the command: 1. kinit admin@OUR.DOMAIN.ORG (asking password and getting the ticket from the W2K) 2. net ads join -Uadmin@OUR.DOMAIN.ORG (doesn't work) error message : [2003/02/06 15:09:02, 0]

Hi, after a successfully migrating my NT4 with OpenLDAP to a Samba4 AD...I got a problem. Like in the sambawiki tutorial (https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC) I tried to configure LDAPS. I used the auto-configured certs. They are located in "/var/lib/samba/private/tls". My smb.conf: # Global parameters [global] netbios name = PDC