similar to: samba-3.0.14a-2 auth against a very Large AD domain

After reading through the doc for setting up 3.0beta with ADS, I have gotten it to work along the lines of the the doc said. I can use wbinfo -g or -u top get the users and groups, I can use the net user or net group command to do it as well. I can login with the kinit program, perfectly well as well. Unfortunately, I cannot seem to connect to the linux machine from a Windows machine. I keep

Is their a source rpm for the 3.0beta1 rpm? I would like to recompile it for ACL support, but I cannot seem to find one. Any links? Brent Norris Assistant DTC, Edmonson County Schools Cell: 270.246.0152

Hello, I have different Sites in my domain and want the different members to use the respective domain controller of their site. I can't get this to work right. I have a member that is in site B but executing "net ads info" outputs the DC of site A as active. I read about enabling "winbind_krb5_locator", but it is already located in

Hello list, Recently I've rebuilt our Windows 2000 DCs to Windows 2003 SP1 DCs that my 3.0.14a, mit-krb5-1.3.6, openldap-2.1.30 Gentoo box is a part of. Since then, on the Samba box I can getent group, getent passwd, wbinfo -t, wbinfo -g, wbinfo -u, etc. properly but anyone who accesses the shares on the Samba member server gets prompted for a password. The logs are as follows:

Solaris 11 include samba 3.6.25. I compiled samba 4.5.1 using GCC 4.8 and gmake. Had set following env variables to make sure krb5.conf was found # CPLUS_INCLUDE_PATH=/usr/include:/usr/include/kerberosv5/ # C_INCLUDE_PATH=/usr/include:/usr/include/kerberosv5/ After setting "client ldap sasl wrapping = plain" I was able to join to a Windows 2008 domain with samba 4.

Everyone, I have configured a new SLES 10 server exactly the same as I had previously configured a SLES 9 server. The only difference is the version of samba. On the SLES 10 server, I am running the 3.0.23c level, the SLES 9 server is behind a little. My problem is with connecting to other AD domains. Only my default domain has a valid sequence number. All the other domains are

I'm attempting to configure Samba 3.0.4 to work with Windows 2003 Active Directory, mapping users' home directories automatically. Currently we use this method in production with Windows 2000 but wish to migrate to 2003. The problem seems to be Kerberos related. I was able to join the Linux box (RedHat 9) to the AD. I can do a "kinit <username>" successfully. Klist shows a

Hello, I've been reading up on lots of documents that mention the different ways to do things as far as joining a linux machine to AD and authentication. I've tried most of them but its not helping at all. I've included my config files for smb.conf, krb5.conf, pam.d/system-auth and the applicable nsswitch.conflines. For security reasons, i've obscured part of the domain name. Any

Hi, I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos. Everything works fine so far. Now i need to have the host keytab generated by winbind to be in the default /etc/krb5/krb5.keytab in order to use nfs with kerberos security. The problem is i have set the parameter in smb.conf: use kerberos keytabe = true and as mentioned in man smb.conf i have set in krb5.conf

Hi all, According to this bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977 This particular error is actually a bug in the samba code. Does anyone know if there are patches that fix this ? Adding "allow_weak_crypto = true" to /etc/krb5.conf does not solve this for me :( Has anyone got a working solution for this ? -Alex IMPORTANT: This email remains the

Just a question. Did you create this server on site a and the moved it to site b? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Felix >Matouschek >Verzonden: vrijdag 14 augustus 2015 8:58 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] winbind_krb5_locator usage > >Hello, > >i investigated further and

On 09/01/15 08:40, Jason Long wrote: > Thanks. > I'm confused. Can I paste "set" command on windows for you? > "jason" account is administrator and can join and dis-join any computer. > > Cheers. > > > > On Wednesday, January 7, 2015 2:59 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > On 07/01/15 10:51, Jason Long wrote:

On 06/01/15 06:17, Jason Long wrote: > Thanks. > My domain name is "jasondomain.jj" and backend is "jasondomaini". No, your realm name is "jasondomain.jj" and it would seem that your domain name is "jasondomaini", the domain name can also be known as the 'workgroup' name. Set smb.conf to match this: [global] workgroup =

I used this command to provision the domain sudo /usr/bin/samba-tool domain provision --realm test.sg --domain TEST --adminpass Pa$$worD --server-role=dc here below i include my /etc/samba/smb.conf : # Global parameters [global] workgroup = TEST realm = TEST.SG netbios name = 4ecapsvsg6 server role = active directory domain controller dns forwarder =

On 07/01/15 10:51, Jason Long wrote: > Thank you. > I changed my "krb5.conf" as below : > > > [logging] > default = FILE:/var/log/krb5libs.log > kdc = FILE:/var/log/krb5kdc.log > admin_server = FILE:/var/log/kadmind.log > > [libdefaults] > default_realm = JASONDOMAIN.JJ > dns_lookup_realm = false > dns_lookup_kdc = true > ticket_lifetime = 24h

Alex, I've been a victim of this since Day 1. After a lot of reading and emailing, it comes down to this. libkrb5-3 version 1.8x by default disallows DES encryption. /etc/krb5.conf can be changed to allow weak encryption, but as it relates to Samba, is only effective in letting the system join the domain. For it's internal functioning, winbind uses an autogenerated krb5.conf that

I've been trying to setup Samba to authenticate users against accounts existing on a Windows 2003 Server without any backwards capability. Ideally, this needs to be done without any changes to the Windows 2003 Server. Users will not be logging into the Samba shares at all. This is merely for authentication. I'm running FreeBSD 4.10-Relase #4 with Samba 3.0.8. This is my smb.conf file:

Hi Rowland sorry for late reply I've tried as you suggested to download and install, using : wget -cq https://www.samba.org/samba/ftp/samba-latest.tar.gz tar zxf samba-latest.tar.gz cd samba* ./configure && make && make install But after i type #samba -V And #smbclient -V It return an error that samba is not installed -bash: /usr/sbin/samba: No

On 05/01/15 07:02, Jason Long wrote: > Thanks a lot. > I changed the below lines to correct domain name : > > idmap config JASONDOMAIN : range = 10000-999999 > idmap config JASONDOMAIN : schema_mode = rfc2307 > > and after join, the command "net rpc testjoin" show same error : > > Unable to find a suitable server for domain JASONDOMAINI > Join to domain

On 04/01/15 13:00, Rowland Penny wrote: > On 04/01/15 10:17, Jason Long wrote: >> Thanks a lot. >> I enter the command and result is : >> >> Using short domain name -- JASONDOMAINI >> Joined 'PRINTMAH' to dns domain 'JASONDOMAIN.JJ' >> but after run "net rpc testjoin" : >> >> Unable to find a suitable server for domain