similar to: joining to domain breaks kerberos authentication

Query re winbind, primary group enumeration from Active Directory and Services For Unix I am wondering if anyone can explain to me how the GIDs work when using winbind to extract them from an ADS server. I have Unix servers running AIX 5.3 ML-10, an ADS server running Win 2003-SP2 with SFU 3.5 installed. I have been configuring the Unix servers as domain members and using winbind to extract the

Hi Andrew, revisiting this subject once again because I seem to have reached an impass. -<| Quoting Andrew Bartlett <abartlet at samba.org>, on Monday, 2018-09-24 07:14:48 PM |>- > On Mon, 2018-09-24 at 09:06 +0200, Philipp Gesang wrote: > > > A long time ago I posted a script to dump the machine password to > > > stdout for the benifit of an 802.1x client, but

On Wed, 7 Feb 2018 10:02:10 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Following the > https://wiki.samba.org/index.php/Changing_the_DNS_Back_End_of_a_Samba_AD_DC, > ran some tests migrating from Bind9 to Samba Internal with the > following results > > Stopped the BIND, Samba-AD-DC services > > samba_upgradedns

On Fri, 2018-10-12 at 16:59 +0200, Philipp Gesang via samba wrote: > Hi Andrew, > > revisiting this subject once again because I seem to have reached > an impass. > > -<| Quoting Andrew Bartlett <abartlet at samba.org>, on Monday, 2018-09-24 07:14:48 PM |>- > > On Mon, 2018-09-24 at 09:06 +0200, Philipp Gesang wrote: > > > > A long time ago I

On Mon, 2018-10-15 at 16:05 +0200, Philipp Gesang via samba wrote: > -<| Quoting Andrew Bartlett <abartlet at samba.org>, on Saturday, 2018-10-13 08:09:31 AM |>- > > On Fri, 2018-10-12 at 16:59 +0200, Philipp Gesang via samba wrote: > > > Hi Andrew, > > > > > > revisiting this subject once again because I seem to have reached > > > an

-<| Quoting Andrew Bartlett <abartlet at samba.org>, on Saturday, 2018-10-13 08:09:31 AM |>- > On Fri, 2018-10-12 at 16:59 +0200, Philipp Gesang via samba wrote: > > Hi Andrew, > > > > revisiting this subject once again because I seem to have reached > > an impass. > > > > -<| Quoting Andrew Bartlett <abartlet at samba.org>, on Monday,

I have a Samba 3 server running as my domain controller and want to configure it to authenticate user passwords off a MIT KDC server that is already up and running. I have the KDC client software installed on the Samba box and it will authenticate users using it's tools. I have been looking for some sort of a how-to but I have not found anything that works or explains much very well. Most

-<| Quoting Andrew Bartlett <abartlet at samba.org>, on Tuesday, 2018-10-16 05:17:13 AM |>- > On Mon, 2018-10-15 at 16:05 +0200, Philipp Gesang via samba wrote: > > -<| Quoting Andrew Bartlett <abartlet at samba.org>, on Saturday, 2018-10-13 08:09:31 AM |>- > > > On Fri, 2018-10-12 at 16:59 +0200, Philipp Gesang via samba wrote: > > > > Hi

Hi Rowland, Following the https://wiki.samba.org/index.php/Changing_the_DNS_Back_End_of_a_Samba_AD_DC, ran some tests migrating from Bind9 to Samba Internal with the following results Stopped the BIND, Samba-AD-DC services samba_upgradedns --dns-backend=SAMBA_INTERNAL Reading domain information DNS accounts already exist Reading records from zone file

We have an existing samba server with many userids, using NTLM authentication (stored in OpenLDAP). We would like to add many other userids, which will authenticate against an existing MIT kerberos server. Each of our customers will have either an NTLM-based userid/password, or a kerberos-based userid/password, but never both. We would like both kinds of userids to work with the same samba

Hello, Does samba support the use of S4U? What do we need to configure in SAMBA or krb5 to support getting a ticket obtained by S4U. We are using 3.0.25 and krb5-1.4.1 We are getting the following error: decode_pac_data: Name in PAC [username@something1.something2.realmname] does not match principal name in ticket The ticket could be different than the PAC name because the

I can force a browser election with the Win98 command: net view /workgroup:workgroupname However, that does not work on NT (and I haven't tried it on W95). What I'd really like is a command from the Linux command line to force the election. I've looked everywhere and can't find it. For my purposes having preferred master=yes and restarting Samba is not an option. Does anyone

We are new to Samba and looking for some help please. We are attempt to authenticate users of a website with a Windows active directly connection using Samba 4.8.3 on centos 7 with apache NTLM_auth module. The active directory for the windows domain is a forest domain that has 3 domains. With a Global catalog on a number of sites. We can manage to authenticate against one domain. As

Hi list, Windows 7 Pro, joined to an NT-style domain hosted by Samba 4.5.16-Debian, installed by Apt. A user had issues authenticating with FreeRADIUS on the server, so I changed the password from terminal to a generic password, and logged her in. I then asked her to change her password by pressing Ctrl+Alt+Delete -> Change Password. I typed in the generic password, and told her to type in her

Hello I have a question related to Samba + Win2k Workstations. I have replaced a Win2k server by Samba (2.2.4). Everything was fine: the users could login and access shares, but they could not connect to printers shared on another Win2k workstations and even could not change their wallpapers. Since I needed to do that work fast, the solution I could find to this situation was to give to all

hi, im having some problems on WoW. it has been running on my fedora core 7 desktop PC perfectly out of the box, even in directX mode(i added the direct3d key to the registry). im now trying to run it on my Fedora 9 laptop. it is an intel x3100GMA. the graphics are working after some messing with config.wtf, im experiencing random lockups that can happen anywhere between the character select

Hi Everyone, I'm trying to get smbclient to cooperate with my new EMC Celerra (just got it a little while ago) using kerberos. My windows domain environment is win2000 + sp4, the EMC is "joined" to the domain. I am using samba 3.0, fresh sources, and MIT KRB5 1.3.4, all freshly built. I join the domain, etc. everything is happy. I use kinit user@REALM to get my initial tgt.

Here are the spec of my Laptop OS - Ubuntu hardy 8.04 + with fully updated Wine - 1.0rc1 Intel P4 3.0Ghz 1 gig ram nVidia geforce fx 5200 64mb using newest drivers using envy came be 2 fps increase from last nvidia version I had installed. Here is my Config.wtf file in WOW. SET gxApi "opengl" SET ffxDeath "0" SET ffxGlow "0" SET SoundOutputSystem "1"

Real quick I have 1 Windows 2000 Pro machine that can connect to my Samba server just fine.....no problems whatsoever.... I have 5 other machines, all running Windows XP Pro (all have been updated with Microsoft's latest patches, etc.) that cannot even access the Samba server. I have only a Workgroup created, and from each of my XP machines, they all see the Samba server just fine in the

I am trying to set up a samba server with a Window XP Home client. I'm able to access the share from the Linux server, and can 'see' the samba server in the Windows client, but when I attempt to access the server from the XP client, I get a message that says: \\server is not accessible. You might not have permission to use this resource. Contact the administrator to find out if