similar to: SSO across multiple physical subnets

hi: our company want to use samba3+openldap with singal sign on. we have several branches.people would travel arround head quarter and branches with their notebooks. so we don't have roaming users, but we do have roaming computers. we want to use a single domain for every site, and we want every site keep working even when wan link is broken. my plan below: 1. place

I have been trying to get SSO to work correctly with the following packages, and I appear I am missing something and I was wondering if anyone can help me or point me in the right direction? I am currently using the "auth_ntlm_winbind_module" for apache to try and authenticate and was hoping to get SSO to work. I have gone through all the steps on SEVERAL sites trying to figure out how

So I was googling around about this over the last week and here is what I found: nis/yp is for some reason bad. Kerbos is holy, but no how-to's that don't involve windows and active directory. What is the recommended sso approach for centos? Where are there examples / docs to follow? Jason -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- -

Hi, I think it is great that samba4 has a single sign on solution for Windows platforms and it seems to work well too, but I am wondering is it possible to do the same for a Linux environment? I have been studying how to implement single sign on using the Ubuntu way through this document: https://help.ubuntu.com/community/SingleSignOn and I am wondering if I can do the same with samba4 where the

I actually spent the entire last day getting 'ad' backend to work. Adding 'idmap config SAMDOM : backend = ad' and related lines in the client's smb.conf results in `getent passwd` ... Use : getent passwd username Check if wbinfo -u works also. As tip, if you try these. id username getent passwd username wbinfo -u | grep username If all work and show your usename,

Hai, > -----Oorspronkelijk bericht----- > Van: Harpoon [mailto:harp00n at protonmail.com] > Verzonden: vrijdag 18 januari 2019 9:24 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] SSH SSO without keytab file > > Thanks for the prompt reply! Your welkom. > > > I did see that you are using Administrator, and thats the problem.

All; My Google foo is failing me, and searching through the last 10 months on this mailing list hasn't helped either. We have an existing Active Directory domain set up, and I'd like to add a CentOS 8 Workstation to it. I have experience using both realmd and manual configuration to allow local login with AD accounts to various Linux distribution, and have this working on my test

Hai, Lets start here. Handy for us to know. OS? Samba version? AD or member setup? And I suggest, set this in the ssh server. # GSSAPI options GSSAPIAuthentication yes Restart the ssh server and try to SSO login. If its a AD server this should work. Yes, you dont get home dir etc, end up in / after login, but lets check if this works. Greetz, Louis > -----Oorspronkelijk

moin *, sorry for the cross-post; follow-ups should go to xdg@ (the only one of those lists i'm subscribed to). i'm pondering with the idea to implement SingleSignOn based on an authentication agent like the ones employed by ssh and gnupg. the system would consist of the two main components: - fdo-keyagent, certainly a d-bus service - pam_keyagent. a PAM module that would authenticate

>That should tell you something. You're absolutely right on that. >> - Samba + (sssd) + Winbind + LDAP? Couldn't try this one, as I seen >> that basically sssd=Winbind (yet there WAS a module for Winbind to >> use sssd?) > >The winbind daemon came first and is used to connect Samba to AD, from >my understanding it was mostly written by one person. That

Hi! My goal is to connect Authentik to Samba (running on Ubuntu). What I tried (with no success): - Samba directly to the LDAP outpost (as Authentik can expose it's internal DB like that): this would/will work but Authentik can't use the Samba scheme at the moment. - Samba -> PAM -> sssd -> LDAP outpost: in theory this worked a long time ago (SMBv1?) but as the password is not

OK, I'm certain that this topic has been beat to death, but I need some assistance. I am trying to migrate to a SSO for the majority of our workstations and servers within our organization. I am currently trying to integrate a Gentoo Linux workstation to authenticate to the AD server. Once I get the process nailed down, I'll be moving on to bigger and better things... Prior to

On Tue, 14 May 2024 07:29:25 +0000 Gerg? V?ri via samba <samba at lists.samba.org> wrote: > Hi! > > My goal is to connect Authentik to Samba (running on Ubuntu). > > What I tried (with no success): > - Samba directly to the LDAP outpost (as Authentik can expose it's > internal DB like that): this would/will work but Authentik can't use > the Samba scheme at

I have a customer that I''m developing a solution for on RoR. They have IIS today and use Sharepoint for their intranet. Is it possible to have some kind of single sign-on between these systems? So when a user is logged in to ther Sharepoint she will also be logged in to my rails-app? We haven''t decided yet on what to deploy rails on so I''m open to suggestions... If we

Hi all, I have a running Samba4 Server. I am able to authenticate Windows and Linux Clients very. (1) I want to use samba4 as SSO. In this regard my next step is to authenticate our web site users from samba4 server. In this web site, at home page our corporate users give their e-mail address username at companydomain.com and password (not e-mail password). (2) Our E-mail server is hosted on

> ............ > > > You can, provided you have a user.map in smb.conf > > Oeps, Ah yes, forgot that, because he was testing on the DC. > And DC's dont use the user.mapping. > > Thanks for the correction. With regard to tdb ipmap, I set this parameter on domain member. Domain controller has no such parameter set. I'll look into the other useful suggestions you

Hello All, I¹ve installed the vanilla shorewall F12, I¹ve got it installed on a couple of other servers with no problems. no matter how I define the zones and interfaces, shorewall logs and allows, rejects or drops only traffic to world. ACCEPT:info net:<myip>/32 $FW icmp Shorewall:world2fw:REJECT:IN=br0 ACCEPT:info world:<myip>/32 $FW icmp

Dear all, I guess there were a lot of posts about this subject, but Im really stuck & prefer start a new thread hoping that some of you won't mind re-posting to help the Samba NewBie that I am. well, here is my situation: - more than 1000 users on a hetegenous network, One Domain & the need to keep only one. - I need my Linux Boxes' users to get authenticated against a single

I have a LOT of questions!!! This may take a while. I know some of this stuff is at the edge of what Samba4 is just becoming able to do, so if anyone who knows feels this is better posted on samba-technical I'd appreciate a cross-post from someone in a position to know for sure - I did consider posting it there straight away but I figured it's a dev list and I could at least get _some_ of

Hello, We are looking to use Xen as our hypervisor. However, after doing some research it''s still not clear as to the amount of memory Xen 64bit can support? The highest I''ve found is 4TB of physical memory. For the host VM''s, I''ve found several statements that indicated that the max per VM was 32GB. Are these numbers accurate? And can these limits be removed