similar to: windbind locks out domain account

Hello folks, Been beating my head with an winbind and pam just behaving oddly. I have following various HOW-TO's, wiki's, and docs, and just can't seem to get past a wall. Here a some of the issues: - the 1st attempt at ssh'ing to a server gives me a 'Wrong Password' in the logs. Here's an exact snippet: Aug 6 18:45:40 mia21654bcu001 sshd[5371]: pam_winbind(sshd):

I'm having a very annoying problem I can't figure out. I've been running Samba4 as our office AD/DC for several years. This is a recent problem. Whenever I Remote Desktop into a particular Windows workstation (192.168.0.4) I get the following message in /var/log/samba/log.samba: Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[mark at HPRS] at [Thu, 17 Jan 2019

2.2.6 installed from rpm on rh 7.2 system... I'm trying to use pam_winbind and apache's basic authentication to restrict access to certain directories served by apache. It does work, but when I enter a wrong password I get this error in log.winbindd: Plain-text authentication for user jarboed returned NT_STATUS_WRONG_PASSWORD Is there a way that pam_winbind.so can encrypt the passwords

On 8/27/21 1:50 PM, wwp wrote: > Hello Greg, > > > On Mon, 7 Oct 2019 09:06:23 -0700 Greg Bailey <gbailey at lxpro.com> wrote: > >> There's been discussions in the past about updating MATE RPMs in EPEL-7: >> https://bugzilla.redhat.com/show_bug.cgi?id=1436260 >> https://lists.centos.org/pipermail/centos/2019-August/173154.html >> (and lots of

On Sat, 19 Jan 2019 19:03:58 +0000 Rowland Penny wrote: > > On Sat, 19 Jan 2019 13:37:18 -0500 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > I sure could use some help on this. Perhaps this problem is due to a > > recent Windows update? > > > > I have determined that whenever I log into the Windows 7 host > > DBSERVER from any

On Sat, 2019-01-19 at 13:37 -0500, Mark Foley via samba wrote: > I sure could use some help on this.  Perhaps this problem is due to a > recent Windows update? >  > Furthermore, when I do actually log into this computer as 'mark' and > enter the correct PW, it > works fine, no Auth errors.  > > Could someone point me in the right direction for research?  Turn up

I posted this to comp.protocols.smb, but I'll give it a shot here too... Background : We have an existing Win2k domain, 2 Win2k domain controllers, all working just fine. I've been using Samba 2.2.x for quite a while to provide access to specific folders on *nix machines using Domain security...So I'm reasonably familiar with how file/print sharing works. But what I'm

Hi, I was able to get my server in the domain. I can see it from ADUC and Network Places. But I can't get it to use AD to authenticate the users that want to access the server/share. Wbinfo -u and -g return the users and group of my MONTREAL domain. Net ads info also returns the correct information about my domain. I then tried to run getent passwd but that only returned the list of the

We're looking at using windbind and AD for our user account details but have run into a small snag. All user accounts in AD are upper case but our linux accounts are lower-case. Is there a simple solution we've overlooked? We really don't want to have to hack this... Thanx, Russell SMithies ======================================================================= Attention: The

Configuration: Samba 3.0.14a-1 (on debian 3.1) + winbind 3.0.14a-1 + krb5-user 1.3.6-2 I need help debugging pam_winbind.so in /etc/pam.d/ssh on debian. Samba is a member of an AD domain, authenticating access to shares via winbind+nsswitch.conf. Authentication to shares works great. Now I want winbind to authenticate ssh users as a pam module and it's failing. Below I show the output of

Hello, I'd like to know if in a full samba environment is it better to use winbind or ldap to resolve id's ? users will connect from windows clients, linux clients with samba or also with ssh and nfs maybe.

I have only been on the list a short while today, but mostly see winbind questions...is there a definitive how-to for winbind and maybe faq? Seems we need some better documentation with everyone having questions/problems... Dan

Hello we use a samba with a old ldap (zentyal-ebox), for now it is impossible to update to new samba version because we use the ldap schema repository for others purposes, son we can move to another version that support samba 4 AD, for the moment we just keep this version. It is possible to join and validate user with linux desktop, we actually use a lot of clients with windows xp/7 and work

Hai.   Config. Debian Stretch, samba 4.7.7. member server AD backend. Network setup like in the howtos here. : https://github.com/thctlo/samba4/tree/master/howtos      Today i discovered that somehow a disabled user was able to login after a few retries.   I run a SSH/SFTP server for data exchange with the customer of the company here.   The SSH/SFTP server is restricted by groups, this

Hello, After a couple of years using Samba as a DC I figured I would start working it the other way around. I'm using CentOS, the latest and tried to use the GUI manager. I am sort of confused as there are acutally 2 windows. I filled out both and supplied the name of the AD administrator. Do I just put the AD domain in there with .realm after it? (eg testdomain.com.realm)? I tried with

I am trying to map existing users to their old home folders (moved over from a windows box), I have authentication up and running great. And I have all my shares setup and working except for the users home folders. Does this look like a local permission issue? Any help is much appreciated, and thank you in advance for taking the time to read. The home directories are their usernames in

I am trying to download and install Wine of XUbuntu but get the following error. The following packages have unmet dependencies: wine: Depends: binfmt-support (>= 1.1.2) but it is not installable Recommends: winbind but it is not installable Any help would be greatly appreciated.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been unable to find any up-to-date information on the problem with solaris and winbind nsswitch.conf. It seems that Solaris doesn't like the winbind option in /etc/nsswitch.conf very much at all. When using the passwd program, it complains: <snip> # passwd pad passwd: Changing password for pad Supported configurations for passwd

Hi, I run a Fedora 2 box with Samba 3.0.10 as a domain member. The PDC is a Win server with AD. Running winbind, all domain users and groups are visible on the Samba box. To grant a special group of domain users access to parts of a samba share, I would like to - add a *local* group on the samba box (*not* in AD!) and - add some *domain* users to this new group. Unfortunately the trick of

Greetings, Was away from samba for a time, now trying again. I have this working under Solaris 10, but have not been able to get a functional samba Active Directort member server working on Solaris 9 since samba 3.2.15. Later versions Samba will serve file to PC clients, but not permit interactive logins to the host. I see messages like: ld.so.1: su: fatal: relocation error: file