similar to: Cannot conect LDAP to Kerberos

samba-3.0.21c, heimdal-0.7.2 The heimdal documentation[1] talks about a samba integration when both samba and heimdal are using ldap as their backends. I quote: "Now you can proceed as in See Using LDAP to store the database. Heimdal will pick up the Samba LDAP entries if they are in the same search space as the Kerberos entries." There is absolutely no further documentation. I tried

I have tried to create a samba domain with a ldap backend. This is how my ldap structure looks like. # example.com dn: dc=example,dc=com objectClass: dcObject objectClass: organization o: example dc: example # groups, example.com dn: ou=groups,dc=example,dc=com objectClass: organizationalUnit ou: groups # Domain Admins, groups, example.com dn: cn=Domain Admins,ou=groups,dc=example,dc=com

Hello, i've got the following setup windows nt4 server sp6 samba 3.0 alpha 24 (debian) running with security=server i'm trying the following thing: srv01:/etc/ldap# smbclient //srv01/darks -U darks Password: OS=[Unix] Server=[Samba] smb: \> quit srv01:/etc/ldap# getent passwd jack jack:x:501:500:Ulrich Eck:/home/jack:/bin/bash srv01:/etc/ldap# net rap user ADD jack secret -U

On 2 srv centos 4.4, run slapd. On one, supportedSASLMechanisms order is : supportedSASLMechanisms: DIGEST-MD5 supportedSASLMechanisms: GSSAPI supportedSASLMechanisms: CRAM-MD5 and on the other one is : supportedSASLMechanisms: GSSAPI supportedSASLMechanisms: DIGEST-MD5 supportedSASLMechanisms: CRAM-MD5 i'd like to use GSSAPI on all srv ... How can i change the order to force GSSAPI first ?

Hi, In samba help: samba-bdc.html there is a section available configs: Possible PDC/BDC plus LDAP configurations include: PDC -> LDAP master, with secondary slave LDAP server. BDC -> LDAP slave server, with secondary master LDAP server. So I configured it so and tested samba's ability to switch over to backup LDAP backend. If both LDAP servers are up, everything is just fine. But

Hi everyone I'm trying to use kerberos to authenticate to Samba 4 ldap. At the moment, I authenticate by specifying the binddn and password in /etc/nslcd.conf and all works fine If I add the line: sasl_mech GSSAPI to /etc/nslcd.conf and restart nslcd, no one can connect to the database. Nothing works. ldapsearch and getent passwd draw a blank. ldapsearch -x -b '' -sbase

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ldap# net getlocalsid [2005/02/11 12:40:13, 0] lib/smbldap.c:smbldap_search_suffix(1155) ~ smbldap_search_suffix: Problem during the LDAP search: (No such object) [2005/02/11 12:40:13, 0] utils/net.c:net_getlocalsid(494) ~ Can't fetch domain SID for name: SRV-PDC ldap# What's this problem? Help me!!! []'s __ M?rcio Luciano Donada

Signed-off-by: Johannes L?thberg <johannes at kyriasis.com> --- gss-serv-krb5.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/gss-serv-krb5.c b/gss-serv-krb5.c index 795992d9..a12bb244 100644 --- a/gss-serv-krb5.c +++ b/gss-serv-krb5.c @@ -106,6 +106,11 @@ ssh_gssapi_krb5_userok(ssh_gssapi_client *client, char *name) } else retval = 0; +#ifdef USE_PAM + if

Hey, On 05/01, Jakub Jelen wrote: >On 01/04/2017 10:57 AM, Johannes L?thberg wrote: >>Signed-off-by: Johannes L?thberg <johannes at kyriasis.com> >>--- >> gss-serv-krb5.c | 5 +++++ >> 1 file changed, 5 insertions(+) >> >>diff --git a/gss-serv-krb5.c b/gss-serv-krb5.c >>index 795992d9..a12bb244 100644 >>--- a/gss-serv-krb5.c >>+++

hi list.. I am trying to add an ldif with my users that I have derived from /etc/passwd. for some reason ldapadd is choking on the first entry... I've also tried removing the first one and predictably each one fails in exactly the same way...may I ask how best to correct this? Here is the error: LDAP# ldapadd -x -D "cn=Manager,dc=summitnjhome,dc=com" -W -f /tmp/passwd.ldif adding

Hello, I maintain a network of numerous Linux workstations, several Apples, and a few Windows machines. The Apples and Windows XP machines already grab shared data via Samba and the remaining data is exported to the Linux machines via NFS. I am in the process of migrating the existing authentication system from XYZ123 to Kerberos and going to place user data---with the exception of passwords

Hi! I'm trying to use the internal LDAP provided by Samba4 to store mail domains used by SOGo. I have two sets of users. Those used by Samba and created through samba-tool and those created under some "ou" I have made up. A few days ago I was able to change the latter users passwords using "ldapadmin" (a windows LDAP client) but today I am not. When I try to change a

Hello, i have Cisco Unified Communications Manager with 10 ip phone,i dont buy license IVR of Cisco Unified Communications Manager. Can i use feature IVR on Asterisk connect with Cisco Unified Communications Manager. Sorry my English.Thank you. -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi to all here is my problem i have one very simple share [files] here is the permissions of directory fileserver data # ls /home/samba/data/ -la total 16 drwsrws--x 4 alan acct 4096 Apr 4 04:58 . drwxr-xr-x 3 alan users 4096 Apr 4 04:55 .. drwsrws-wx 2 alan acct 4096 Apr 4 04:58 alan drwsrws-wx 2 ldbl acct 4096 Apr 4 04:58 ldbl Here is samba version fileserver data # smbd -V Version 3.0.24

Hi everybody, Recently, I change my server to anoter, but I copied all accounts linux/samba users to new one. I migrate from Ubuntu Server 8.04 to 8.10 server It's the same old smb.conf of old machine, but one new problem. When logon is OK, but wait 5 minutes or less and when connect remote drive for second time by explorer, windows says that "not respoding", but wait 30 seconds and

Hello ! I trying sync ldap users with users samba. I?m using a interface, by create ldap users. So, when ldap user be created, i want account e password samba be created.???? No my smb.conf I put the follow lines: ??????? ldap admin dn = cn=admin,dc=def,dc=mg,dc=gov,dc=br ??????? ldap group suffix = ou = groups ??????? ldap machine suffix = ou = computers ??????? ldap passwd sync = yes

Hi list, We have a network with some XP and some Windows 7 computer, we use samba 3.6.6 on debian 6.0.6 from debian-backports. It's a pdc with passdb backend = ldapsam. In our logs there are lots of: ARCServer slapd[1263]: SASL [conn=46778] Failure: realm changed: authentication aborted I found out that at that time this emerges the tcpdump says: 12:59:54.656399 IP client.49551 >

Hi everyone. I'm encountering problems with the management of the id of the users, in the DC and in the domain members (RFC2370). I'm using Samba Version 4.2.10-Debian on Debian8.5. This is the DC configuration / result. root at samba4:/var/lib/samba# cat /etc/samba/smb.conf |grep -v '#' [global] workgroup = MYNET realm = ad.mynet.lan netbios name = SAMBA4 server

Hi, I''ve set up puppet to get node definitions from LDAP as per the docs. It''s been working well, but I now want to use fully qualified domain names instead of simple domain-less hostnames for the node name. I replaced the ou=Hosts entries with equivalent ones using FQDNs, restarted the puppetmasterd, and tried a "puppetd --test" from one of the nodes. However, I

Hello, I install samba-ldap-pdc on a ubuntu. I join well the domain with root user, but when I restart, root or user login don't work. I can access to share via network with root or user login. when I try under winXP pro to change security of a file, I can't access to server user list : "bad user or passwd" I've no error in log.smbd or debug my smb.conf [global] smb ports