similar to: pGINA and samba - authentication against LDAP userPassword field?

Does anyone have any experience using PGina with Samba for a simple "single sign on" approach using Windows clients? If so, I would love to know how it is working for you. I tried posting here a bit ago for a way to do this ("single sign on") with samba only, but I didn't get any responses and therefore looked into other opportunities. Thanks. Paul

Hi all, I'm under the gun to rid ourselves of the nt4 PDC which we currently use. options are A/D, samba, pgina. I really dig pgina, but dont think I can pass citrix credentials properly :( So I'm left with samba vs A/D. A/D is well,, ummmmm A/D, so tyring to avoid it. Currently have used Samba file servers for years. Have played with Samba PDC with2.2 Now, going to try

We use pGINA (www.pgina.org) to authenticate windows user logins via ldaps:// against the university directory. Don't know if that will fit your model, but it works for us. ---------------------------------------------- Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..."

Hi all, I am using OpenLDAP and over have ~800 users in its DB. I would like to simply use Samba as a file server, no PDC. I have been able to export my LDAP DB to a file containing hashes of users passwords. Is there a way I can import this file to smbpasswd or other file that Samba understands so that my 800 some odd users won't have to re register there passwords? I would really love

Hello, I have a small (medium?) sized network of about 30 XP machines. About 2/3 of these machines are running Home Ed. while the other 1/3 are running Professional Ed. I currently have two samba shares, and I'm using 'user' security. I want to implement single sign on, some way, somehow. I've considered: NIS and LDAP, but I can't get the NIS pGina plugin to

I suggest reading this: https://support.microsoft.com/en-us/help/4034314/smbv1-is-not-installed-by-default-in-windows Imo, the longer you wait with samba AD the harder it gets to get things running. You could better spend you time on settting up and migrating to AD the keep putting time in a dying product. But thats my optinion. Greetz, Louis > -----Oorspronkelijk bericht----- >

I've setup samba to use LDAP passdb backend and it works fine. LDAP has sambaNTPassword and more samba entities. But I wonder if I can make samba work with userPassword only. I think somebody is doing it and I look at their config but couldn't find anything special. Thanks. [global] workgroup = NT netbios name = SAMBASERVER server string = NT Master passdb

Hello everyone, I'm writing you a topic because i have a problem with smaba and LDAP. This is my problem, when I type in the shell slapcat, i've got this message : str2entry: invalid value for attributeType objectClass #1 (syntax 1.3.6.1.4.1.1466.115.121.1.38) slapcat: bad configuration file! There is my slapd.conf : include /etc/ldap/schema/core.schema include

Hello everybody, I've setup a SAMBA 3.0.X (3.0.32 right now) PDC with a LDAP backend running on FreeBSD 6.3 some time ago and users can't just login on unix box when the password their password, modified from Windows, include non-ascii character (such as french letter like "?" for example) I guess that they must some kind of charset issue but i just don't know how to debug

If I were going to do this, I would probably try moving to a Windows 200x AD domain controller, and implementing RSA SecurID on that machine. I have not worked with other OTP solutions. As far as I understand, if Samba is configured as a domain controller, it expects to be able to handle the authentication itself. OTP is , in my opinion, most valuable when you are exposing resources to the

I am trying to figure out if I can setup samba to verify only passwords against LDAP and keep everything else local. Anyone know how to set this up?

I have an old setup that serves my purposes, but which I'll move over to a more modern Samba4 setup at some point. I know it's old, deprecated etc. In any case, at the moment I'm having a problem with two Windows 10 machines connecting to the domain I set up. The network is a mix of XP, Windows 7 and Windows 10 machines. Four (4) windows 10 machines connect to the domain after the

I was wondering if anyone could advise me on this. I've got two Samba servers, each using passdb.tdb for authentication. All works well, but I've now been asked to let users change their own passwords (a requirement of data secuity). What's the best way of arranging this, preferably updating both servers at the same time? thanks

I run the computers in a small shop and want to change my users from using the local accounts on their windows boxes to a central account managed through ldap (openldap). I now have samba working with ldap and using ldap for authenticating shares as windows users ask for those shares to be mounted to their workstations. What I want is for the initial ctl-alt-del login to authenticate through samba

Hola a todos, Sigo la discusin sobre la web de usuarios R y me pregunto porque nadie ha mencionado "Ning". A m me parece una herramienta perfecta para crear las redes sociales, y estoy seguro que satisfacera mayora, si no todos los requisitos propuestos (foros, blogs, fotos, videos, miembros ...) Para crear uno : http://www.ning.com/main/createyourown Aqu podis ver un ejemplo:

??? This is solved. ? Problem was, incorrect settings in slapd.conf and dynamic / config file setup was mixed. ? str2entry: invalid value for attributeType objectClass #1 (syntax?1.3.6.1.4.1.1466.115.121.1.38) slapcat: bad configuration file! The core.schema and the core.ldif are bit different. debian installs slapd with dynamic ( in database ) config, when switch back to config file setup. The

Hi, Did anyone try to install Asterisk on the Mini-Box M300 with a Versa mini-ITX board 1GHz VIA x86 CPU? The box looks promissing, but I am not sure if Digium cards are compatible with the mother board (Versa mini-ITX) Also I am not sure if the 1GHz VIA processor can handle a Digium 24 port analog board, or an E1 digital board. If anyone had tried the Mini-Box, the processor, of the mother

Hi all, First, sorry for posting this mail in a Samba-list, I first posted it to ldap@umich.edu which should be a general LDAP discussion list and also to OpenLDAP mailinglist. So far I didn't got a single reply in any of those lists but that's probably because this issue is much more AD-related than plain LDAP. And we know that beside MS the Samba developers know most about AD :-) So

I managed to implement a single sign on system with MIT-Kerberos and windows clients using pgina with the PAM plugin (www.pgina.org). So my clients login via PAM having effectively a local user on the windows machine. Now I would like to add a public share (security=share) with the correct ACLs for my "local" users. Its somewhat like NFS with trusted accounts. So is it possible to

Am 24. Mai 2018 05:44:04 MESZ schrieb Marco Shmerykowsky via samba <samba at lists.samba.org>: >I have an old setup that serves my purposes, but which I'll move over >to a more modern Samba4 setup at some point. I know it's old, >deprecated etc. > >In any case, at the moment I'm having a problem with two Windows 10 >machines connecting to the domain I set up.