similar to: Samba4 AD delegation to read userPassword attribute

On 30.10.2015 22:13, Jeremy Allison wrote: > On Fri, Oct 30, 2015 at 11:27:55AM +0100, Stefan Pietsch wrote: >> Dear Samba users and developers, >> >> we had the idea of storing S/MIME certificates in the Samba 4 LDAP. >> In the Windows Active Directory Users and Computers tool I can use the >> "Published Certificates" tab to add a certificate to a user

Dear Samba users and developers, we had the idea of storing S/MIME certificates in the Samba 4 LDAP. In the Windows Active Directory Users and Computers tool I can use the "Published Certificates" tab to add a certificate to a user account. As Mozilla Thunderbird requests the "userCertificate;binary" attribute of a user when sending encrypted mail, the LDAP response is empty.

Samba team, I'm having some problems to have a client Windows XP, I believe all systems could have the same issue, using Ldap authentication with Samba. This is a native OpenFiler configuration with a local LDAP server for Samba shares. The problem is that sharing is never authenticated where my suspicious is about sambaSID. Basically I create a test user called "rlvcosta". This

On 05.11.2015 09:18, Andrew Bartlett wrote: > On Tue, 2015-11-03 at 10:21 +0100, Stefan Pietsch wrote: >> On 30.10.2015 22:13, Jeremy Allison wrote: >>> On Fri, Oct 30, 2015 at 11:27:55AM +0100, Stefan Pietsch wrote: >>>> Dear Samba users and developers, >>>> >>>> we had the idea of storing S/MIME certificates in the Samba 4 >>>>

On Tue, 2015-11-03 at 10:21 +0100, Stefan Pietsch wrote: > On 30.10.2015 22:13, Jeremy Allison wrote: > > On Fri, Oct 30, 2015 at 11:27:55AM +0100, Stefan Pietsch wrote: > > > Dear Samba users and developers, > > > > > > we had the idea of storing S/MIME certificates in the Samba 4 > > > LDAP. > > > In the Windows Active Directory Users and

Hi Rowland, Sorry to inform that none of thus packages solve my problem. But today, with some Tranquil.it helps, I have some news: - Upgrade from 4.11.14 -> 4.12.9 is OK - Upgrade from 4.12.9 -> 4.13.2 : problem is present with Tranquil.it AND Louis package - Fresh install + member join with 4.13.2 is OK (Centos AND Buster packages) Problem only occur when upgrading member to 4.13.2 with

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > This mean that the printer try to auth in LDAP 'plain' (no SSL, no > > TLS), and so samba refuse that? > No, it means that Samba is refusing to accept a NTLM or Kerberos > authenticated connection without SIGN or SEAL negotiated, as an > attacker could take over an unprotected network connection and do

Mandi! Andrew Bartlett via samba In chel di` si favelave... Ok, i coma back to an old thread, because vendor finally reply. Little fast-rewind: i own some Konica-Minolta BizHub multifunction printers/copiers, and i need to ''bind'' it to my new AD domain. But authentication does not work, seems bacause that printer try to use SASL over plain LDAP (no SSL nor TLS). After

Hi, If I understand the MS documentation right a Windows desktop uses DNS (or WINS) to determine a DC and then connects to the ldap udp port 389 to get further details about the DC. I do not want to run a full DC but only a "simple" Heimdal or MIT kdc for Browser Negotiate authentication. Does Samba include such a standalone ldap service which just returns the only supported

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > There's some way to ''tight'' that configuration , eg permit 'ldap server require strong auth = > > no' only by some hosts? > > Or some other smb.conf options that i've missed? > Nothing at this stage. Ok. > The issue is that they need to do fully signed or sealed Kerberos

Hello, I have a customer that complains that Samba (as DC member) uses UDP during? AD authentication when clients mount a share. I have run a test and traced network packet and it seems UDP is used by the CLDAP (Samba server is 10.50.50.35, AD is 10.50.50.85) Frame 1: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) on interface vmxnet3s0, id 0 Ethernet II, Src:

I am experiencing an odd problem while attempting to mount and access a directory with smbfs. smbclient does not exhibit the same behavior. I have created a directory /mnt/smb-test and am attempting to mount a volume from a NetApp Filer running OnTap 7 with NTFS security mode. An Active Directory DC handles security for the share. The Linux machine shows as registered in AD and I can use

Hi I'm experiencing some odd behaviour when trying to change passwords. I have Samba 4.1.6-Ubuntu configured as an AD-DC on Ubuntu 14.04LTS. When I change a password (either from a Win10 Pro client, or using smbpasswd on the machine itself) it all reports that things have worked. I can then login to Samba using the new password. However, when I now try to login to Linux using the new

Question following HowTo build your own OpenChange/SOGo appliance: I have been building my own SAMBA4/OpenChange appliance *MOSTLY* following the instructions at http://tracker.openchange.org/projects/openchange/wiki/HowTo_build_your_own_OpenChangeSOGo_appliance . I am using Ubuntu-Server 12.04 LTS (Precise Pangolin) precise-server-amd64.iso OpenChange from svn co -r 3923

On 16/02/16 08:38, Rowland penny wrote: > You are not going to like this, but I am going to say it anyway: > > *Remove* any users that are in AD from /etc/passwd (the same goes for > groups) > > All your users & groups should now only exist in AD, you do not need > or can have, users & groups in AD *and* /etc/passwd & /etc/group. > > Your users will only have

I have a "Samba | SOGo | OpenChange" server running in VMware. I get the following message when running 'apt-get upgrade' -- The following packages have been kept back: libldb-dev libldb1 libmapi0 libmapiproxy0 libmapistore0 libnss-winbind libpam-winbind libsmbclient libwbclient0 openchangeproxy openchangeserver python-ldb python-ocsmanager python-samba samba

I strongly and completely disagree with statement that is "IMHO the need for openchange is disappearing. " It is the only and one project/soft providing Exchange functionality on Linux platform. 21.04.2016 17:24, Neil Price пишет: > On 21/04/2016 09:53, Mueller wrote: >> Hallo to all, >> >> does anyone know about the status of openchange ? >> It sems to

On 14/02/15 18:05, Steve Ankeny wrote: > answers below > > On 02/14/2015 08:22 AM, Rowland Penny wrote: >>> >>> They point to the DC as first nameserver and the gateway as second >>> (then the ISP nameserver) >> >> OK, they really should be only pointing to the DC. > > I've made that change with no change in the results. I've also

On 06/15/2015 07:14 AM, Rowland Penny wrote: > On 15/06/15 11:52, Steve Ankeny wrote: >> I have a "Samba | SOGo | OpenChange" server running in VMware. >> >> I get the following message when running 'apt-get upgrade' -- >> >> The following packages have been kept back: >> libldb-dev libldb1 libmapi0 libmapiproxy0 libmapistore0

On 10/10/2015 09:05 AM, Rowland Penny wrote: > On 10/10/15 13:44, Steve Ankeny wrote: >> I have an existing Samba-AD-DC built from Inverse packages, >> v.4.1.18+dfsg-3~inverse1 >> >> I have OpenChangeServer installed on that machine, v.2.4-zentyal6 >> >> When I start OpenChange, it "shuts down" my Samba-AD-DC so that no >> one can login.