similar to: ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

Alex, I've been a victim of this since Day 1. After a lot of reading and emailing, it comes down to this. libkrb5-3 version 1.8x by default disallows DES encryption. /etc/krb5.conf can be changed to allow weak encryption, but as it relates to Samba, is only effective in letting the system join the domain. For it's internal functioning, winbind uses an autogenerated krb5.conf that

-----Original message----- From: Jeremy Allison jra at samba.org Date: Sat, 13 Feb 2010 22:09:31 -0600 To: dale at briannassaladdressing.com Subject: Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lackssupportfor encryption type [SEC=UNCLASSIFIED] > On Sat, Feb 13, 2010 at 01:35:12PM -0600, dale at briannassaladdressing.com wrote: > > Alex, > > > > I've been a

In 1.6.0, when creating a MDT, you could specify multiple --mgsnode options and it would failover between them. 1.6.3 only seems to take the last one and --mgsnode=192.168.1.252 at o2ib:192.168.1.253 at o2ib doesn''t seem to failover to the other node. Any ideas how to get around this? Robert Robert LeBlanc College of Life Sciences Computer Support Brigham Young University leblanc at

Hello All, Having some trouble connecting to my Windows domain with my Solaris server. Some details included below that might give you an idea of what is going on here. I have tried setting allow weak crypto in the krb5.conf, I have tried specifying the encryption types and leaving it blank to use the defaults all to no avail... bash-3.2# kinit me at DOMAIN.LOCAL Password for me at DOMAIN.LOCAL:

I've looked around and can't find the answer. We have a Samba file server joined to our Active Directory and using ACLs. We are enforcing quotas on this machine, but when specifying the home directory, the directory is owned by the person who created it. Using Windows and going into the security permissions, there doesn't seem to be a way to remove the owning user/group. When you hit

I was looking through the change log of 3.3.0 and noticed that a new idmap_hash was introduced that seems to play well with trusted domains. What means are available to convert all my rids to this new hash so I can update file permissions? Thanks, Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University

We have a user trying to share a OneNote 2007 notebook and it takes minutes to load a 20 KB notebook. I've opened a 500 KB Excel spreadsheet from the same share and it took seconds. Has anyone else run into this problem? We are running Samba 3.4.8 on Debian Squeeze. Thanks, Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University

Ok, I can't seem to search for the right thing to get what I need. I'm looking for a solution where if quota or some other mailing system needs to send an email to an Active Directory user, that it uses the email address listed in Active Directory for that user. We are connected to Active Directory using winbind, on one system we are using pam_winbind, on another we are not. Of course,

I'm trying to think about how to setup a Samba system and would like to pick the brains of some experts. We are looking up put a large amount of storage ~75TB in a central data center. We have some remote (ok, not remote, but across slower links, ok if you consider several hundred clients over 1Gb to be slow) locations that we would like to set up samba servers that 'cache' the file

Hi all, I did upgrade from samba 3.0.28 to 3.4.1 on a domain member server. Now it seems there is a problem with reverse name resolving of winbind. The tools "ls" and "getfacl" shows UIDs instead of the usernames. When I run id "<username>" the username and the UID are shown correctly. After using "id" the name is also listed fine in the output of

Hello, I have enough details on how to have Linux users authenticate to a 2003r2 AD, but I need help getting their home dir's to automatically mount to a windows share. Any details would be greatly appreciated. Many thanks, James

Hi, I'm using a domain where the DNS is hosted by a couple of domain controllers on the network, outside of my control. I do have ability to work with group policy and active directory users and computers. I was able to join a samba/linux computer to the domain using 'net rpc join -S <IP of local DC/DNS server>'. This caused an entry for the computer to show up in Active

Hello samba gurus, I have a couple of questions regarding Linux file systems, and their ability to mimic NTFS, and the other question is regarding winbind and its uncanny ability to virtually lock up a samba AD member server once connectivity to the AD is lost. I apologize if anyone gets annoyed by this question. Environment: I am using samba 3.2 with XFS+ACL support joined as a AD domain member

I''ve been using btrfs as a spool space on our back-up server to get familiar with it and things work fine until the volume fills up. Our backup software (bacula) usually spools until the volume is full, then despools and respools, etc. With btrfs, it fills up and bacula thinks there is still space so it keeps trying and then finally errors out. I thought this was a problem because I was

Is it possible for the uid/gid numbers that are generated by the idmap_rid and idmap_hash to collide if there are a large number of users or groups? I cannot seem to find any documentation on the limitations of these plugins. Before using I want to make absolutely sure that there won't be any collisions. In doing some research about Likewise Open, I see it's hashing routine can have

Hey list, I'm wondering if there is any advantage to be gained by using kerberos with pam_winbind. I've configured pam_winbind and enabled krb5_auth though apart from being granted a ticket, I'm unsure as to any advantage that would be gained by enabling Kerberos. Thanks, Matt Delves -- --------------------------------------------- Matthew Delves System Administrator Information

Hi, We've a Samba server as purely fileserver in AD windows enviroment with a 2k3 server as bdc. Our goal is implement quote to manage disk space usage on samba server. Is it supported by samba ?! if not, which is the best way to approach it ? I did a little search on google but I've not found a clear way or documentation about it, so any advice is really appreciated. thx in advance,

Hi All, I am using Samaba for my network users and I run out of space soon as so many users store BIG files on the share folders. Is there a way to specify the max size for a file that can be stored using Samaba? Or At least max size for a folder will also help. -- Thank you, Kani

Hi, I actually have to install another samba server connected to Active directory by using winbind. All works ok, but i have a little problem. In fact if i use getent |grep user on server1, the output is the following: server1:~# getent |grep user user:*:20083:20040:USER:/home/user:/bin/bash server1:~# on the second one server which use the same AD and the same configuration file exept for

Hi all, Is there any way to force Winbind to auhenticate against a certain domain even if another was specified? I'm currently having problems authenticating some users on squid as they seem to inform the wrong domain. I can see messages like these on my cache log: Login for user [PROXY1]\[USERNAME]@[WRKSTATION] failed due to [No such user] The problem is that our domain is not called