similar to: delete kerberos databases and start over

I've used the Samba AD DC HOWTO <https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO> to install Samba 4 as an Active Directory/Domain Controller. I've successfully configured the domain/realm and DNS (as far as I can tell) and worked my way through Testing Your Samba Domain Controller <https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO#Testing_Your_Samba_Domain_Controller>

On 13/02/15 22:48, Steve Ankeny wrote: > Thanks for the quick response! > > Do I still need the following packages? > > adam at sogo:~$ sudo dpkg --get-selections | grep krb5 > krb5-config install > krb5-user install > libgssapi-krb5-2:amd64 install >

Hi, We just imported (moved) all our staff from the old w2k domain to the new w2k3 domain. Say their accounts and passwords From STAFF domain to say NEW. Seems winbind is keeping the old domain users. This server was serving the STAFF domain w/o problems before users were migrated. Domain is in 2000 native mode. I'm using winbind for squid auth on Mandrake linux 10.0

Hello Samba list! I have installed samba, joined it to the AD domain (lets say EXAMPLE.COM) and can auth against it with kinit. There are also 2 domains that we have a trust established with. Lets say trust1 and trust2. When I do a wbinfo -u I get: Trust1+username Trust2+username I get nothing from the local domain. I have a share set up for testing, but I cannot access it at all, I get

We have serveral RHEL 3.0 Update 2 servers running Samba. These have been working flawlessly for several months.. Recently, the base upgraded all the Windows 2000 servers to Windows 2003.. NOTE: we don't have admin rights to the Domain Controllers.. (wish we did..) Previous to the Domain (and kdc) controllers to 2003 we had no issues joining a new Samba Sever to the ADS.. Using the same

Hi, We just imported (moved) all our staff from the old w2k domain to the new w2k3 domain. Say their accounts and passwords From STAFF domain to say NEW. Seems winbind is keeping the old domain users. I'm using winbind for squid auth on Mandrake linux 10.0 samba-client-3.0.10-0.1.100mdk samba-winbind-3.0.10-0.1.100mdk samba-doc-3.0.10-0.1.100mdk samba-common-3.0.10-0.1.100mdk

Hi folks, I have an issue that has me shaking my head. Once a workstation has made the initial connection to a host, things seem to work well for a day or so. However, if the resource hasn't been accessed in a while, and then a connection is retried, this following message is returned: "\\hostname is not accessible. You might not have permission to use this network resource. Contact

Hi I successfully joined the AD as member server, smbclient \\\\hostname\\homes -U username works, but on a windows 2000 client connecting to the homes share using \\hostname failes with [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket! [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket!

Hi, I am unable to login to a samba system that uses kerberos to authenticate to ADS if the users password has expired on the ADS system or if "User must change password at next login" is checked on the ADS.. I get a "login incorrect" message on the linux system and the log file gives the following error: pam_winbind[3647]: request failed: Must change password, PAM error

Hi all, I get an error when I try to join domain from CentOS 6.5. Have you an idea ? /etc/samba/smb.conf : --------------------- [global] workgroup = XXX server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 realm = XXX.YYY security = ads idmap uid = 10000-20000 idmap gid = 10000-20000

Dear all, I have a linux server that uses redhat AS4.I want to make a samba file server.Because we have a windows 2003 domain,I must use "security = ADS".The samba version is samba-3.0.10-1.4E.9. The samba server joined windows 2003 domain successful.I can find samba server in the "network neighborhood".Client PC access samba server must confirms with PDC.The domain member

Still very new to puppet, so go easy :-) Bit of a braindump I''m afraid, but I''d really appreciate any "Yep", "interesting", "No!!!" comments. I''ll start with an example - adding NTP support. This primarily consists of two configs: a) NTP clients - this is quite easy, it''s a templated file requiring the names of the NTP

Thanks for the reply. Le 2014-08-26 12:30, steve a ?crit?: > On Tue, 2014-08-26 at 12:02 +0200, Cyril Feraudet wrote: >> Hi all, >> >> I get an error when I try to join domain from CentOS 6.5. Have you an >> idea ? >> >> >> /etc/samba/smb.conf : >> --------------------- >> [global] >> workgroup = XXX >>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everybody, I'm getting crazy trying to get my Linux box work with Active Directory. It's a Fedora Core 4, and these are the installed rpm's [root@desarrollo ~]# cat /etc/redhat-release Fedora Core release 4 (Stentz) [root@desarrollo ~]# rpm -qa|grep samba samba-3.0.14a-2 samba-common-3.0.14a-2 [root@desarrollo ~]# rpm -qa|grep

This completes the server side daemons ipa support --- installer/modules/ovirt/manifests/ovirt.pp | 5 ++++ src/host-browser/host-browser.rb | 29 +++++++++++++++++++++------ 2 files changed, 27 insertions(+), 7 deletions(-) diff --git a/installer/modules/ovirt/manifests/ovirt.pp b/installer/modules/ovirt/manifests/ovirt.pp index 2e91e69..d3d01d6 100644 ---

Hi All, I have machine M1 hosting Samba PDC. It stores only user information. I have machine M2 acting as KDC server. I have machine M3 hosting CIFS shares and it joins into the domain hosted by PDC M1. I have machine M4 used as CIFS client. On M2, I have added users and cifs/host service principals for M3. Also added service principal in keytab file. I have added all the user and service

Hi, I installed ovirt on fedora 12 (64 bits) successfully but I had to make some changes to make it work. 1. Installation from rpms builded from the lastest git version 2. Patch ace : missing backslashes in sed commands vim /usr/share/ace/modules/ovirt/manifests/freeipa.pp line 33 : '/\\[kdcdefaults\\]/a \\ kdc_ports = 88' single_exec {"set_kdc_defaults":

Hello I'm not able to connect to Samba AD domain by realm. sudo realm join OFFICE.COMPANY.COM -U administrator Password for administrator: See: journalctl REALMD_OPERATION=r41422.307314 realm: Couldn't join realm: Failed to join the domain this is in journal: smbmem41.office.company.com realmd[211374]: adcli: joining domain office.company.com failed: Couldn't set password for

This lays 90% of the groundwork needed on the server side to support the use of a remote ipa server. Leaving the option disabled in the installer until the necessary node integration(dns/keytab placementi location) is completed Also apply: [PATCH server] update ovirt-add-host to use ipa commands instead of kadmin.local [PATCH server] separate ipa common tasks freeipa::common and rename

Hello, i installed a SAMBA 4.7.4 AD Server on Ubuntu 18.04 (BETA). SAMBA4 was compiled from source. For MIT Keberos i also installed libkrb5-dev and krb5-kdc and compiled with the "--with-system-mitkrb5" option. The installation runs pretty good (some dependencies problem, solved manually). But now im not able to test kerberos: # kinit administrator --> kinit: Cannot find KDC