similar to: pam_winbind and krb5_auth

Hey Folks, I''m looking at doing automated provisioning of new servers and am trying to integrate puppet into this process. What I''m wondering though is what the best process for securely registering a new node is. At the moment the first time puppet is run I have to then accept the certificate on the puppetmaster and then run puppet again. What I would like to do is accept the

I'm currently using an implementation of pam_winbind to authenticate users on linux servers via Active Directory. This works as expected apart from an issue whereby after changing a password, a user can login with both their old and their new password. Having done a bit of investigation, it appears that this is a 'feature' from Microsoft as described in

Hey All, I''m running into a problem whereby some nodes are struggling to retrieve the metadata for files. I''ve moved all the nodes across to 0.25.1 to try and eliminate version inconsistencies though they still appear. I''ve also started using asynchronous stored configs as well. I''m wondering if this has anything to do with performance on the box and if there

Hi, in our setup, we have a number of AD domains with an exisiting one-way trust between the local domain of the system (which I will call LOCALDOM in the following) and the domain containing the user accounts (which I will call TRUSTEDDOM in the following). The domain controllers run Windows Server 2012. Beginning with samba 4.4 we have an issue with authentication through pam_winbind on the

Hello, ive tried to send letters to samba list few times and every time i get a mail back with an error "Message status - undeliverable" from Mailer-Daemon at mthelen7.ballarat.edu.au. The contents of the letter is following: The message that you sent was undeliverable to the following: Mdelves (User account is expired) So i'm sending this test message to make sure my letters

Howdy All, I need to change the machine names on about 10 machines ( winxp ) on a samba 3.05/redhat9 network ( NO LDAP ) Am I correct in the order I have listed below to accomplish this 1. remove the machines from the domain ( change to a workgroup ) 2. remove the machines from the smbpasswd file ( I can use webmin for this ) 3. stop samba 4. remove the machines from /etc/passwd 5. add new

Hey All, This is probably a gotcha of some kind. That is to say I''ve missed a configuration somewhere. I''ve recently moved over to using mongrel as the puppet server type and having nginx proxy to one of four mongrel instances. What I''m seeing though is that when I try to run a new node (one that has been created post moving to mongrel/nginx) is that it returns with the

Dear list members, I am running a small active directory domain for my home network. Everything is working as expected, except for the authentication of active directory users on my machines running debian wheezy. Here is my setup: 1) Active Directory Domain Controller is running on a raspberrypi (raspbian) with samba compiled from source (v4-1-stable from git repository) 2) WIndows 7 machines

Hey All, I''m wondering if there is an easy way to distinguish between SP2 and SP3 on a SLES 10 installation. Thanks, Matt Delves --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group,

Hey Folks, I''m looking for some documentation on migrating clients from one puppet server to another. Any links would be greatly appreciated. Thanks, Matt Delves --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com

Hey All, I''m looking for a way to get puppet to define nagios hostgroupescalations. Is this possible and if so, what is the syntax? Thanks, Matt Delves -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to

Hey Folks, I'm running into what appears to be a known configuration problem though am at a lost end with trying to resolve it. The problem is that when following the SAMBA and LDAP configuration guide on http://wiki.samba.org/index.php/3.0._Initialization_LDAP_Database I'm getting errors running the ldiff part. The error that is occuring is due to the sambaDomainName. slapadd:

Greetings List, I'll begin by outlining what it is that I have to do. First, I have a windows 2k server that is currently on its last legs. It holds a list of users, groups and shares that are still required after the migration to a Linux based server. I've heard of a command called 'vampire' that extracts the required users and groups, though as of yet have been

Hey Folks, I currently have bind and dhcpd configured to allow for dynamic updates, though when I try to manually add in the srv records required for correctly identifying the samba pdc, they get overwritten when bind starts. How can I modify the bind configuration so that it writes the correct information? Also, is there a way to have samba write the correct information to bind? As for the

Hello guys, I am using PAM (0.82) to authenticate (samba) workgroup users and it works fine (pam_smbpass). But after joining a domain and start using pam_winbind too, pwauth (2.3.10) get a segmentation fault when trying to authenticate any workgroup or domain user. What happens is that it does authenticate the user successfully, but when it calls pam_end() to release its resources, it crashes.

Hey Folks, I''m just starting to look into Puppet though am finding it a bit confusing as to how to get it setup on the network I administer. At the moment it is a combination of RHEL 4 and SLES 10 boxes with windows and novell also. I know that windows / novell is beside the point though am wondering how to get puppet setup on the RHEL and SLES side of things. Any good howto''s

Hi all, I'm trying to get pam_winbind to create ticket cache on login if the AD is available. Please note that this is an Ubuntu Lucid system. When trace this with wireshark it receives a TGT ticket for the user. The current solution is to use pam_krb5 before attempting winbind. That gives me a ticket cache. The main problem is that if the user enters the wrong password it does two login

Is there a way to enable user to change password on first signon?

On Tue, Oct 20, 2015 at 9:53 AM, David Chisnall <David.Chisnall at cl.cam.ac.uk > wrote: > On 20 Oct 2015, at 17:46, Daniel Berlin via llvm-dev < > llvm-dev at lists.llvm.org> wrote: > > > > You could ship the non-combined program. > > IE You can ship an llvm jit and a gpl2 program, and jit the program > > on the user's machine. > > NeXT

All DC are running same Samba version : 4.4.2. All DC are hosted on same Centos 7. On broken server(s): wbinfo -i mdufresne failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user mdufresne On working servers: wbinfo -i mdufresne AD.DOMAIN\mdufresne:*:12104:100:Mathias Dufresne (TEMP):/home/AD.DGFIP/mdufresne:/bin/false The smb.conf is: