similar to: LDAP server listening on UDP for resource location

On 30.10.2015 22:13, Jeremy Allison wrote: > On Fri, Oct 30, 2015 at 11:27:55AM +0100, Stefan Pietsch wrote: >> Dear Samba users and developers, >> >> we had the idea of storing S/MIME certificates in the Samba 4 LDAP. >> In the Windows Active Directory Users and Computers tool I can use the >> "Published Certificates" tab to add a certificate to a user

On Thu, 2018-05-10 at 15:48 +0200, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > Ok, i coma back to an old thread, because vendor finally reply. Thanks! > > Little fast-rewind: i own some Konica-Minolta BizHub multifunction > printers/copiers, and i need to ''bind'' it to my new AD domain. > >

to my knowlidge, konica = xerox. and this works fine imo but im not able to look this up now. i did have xerox connected to my ldapS addc’s. i can check this monday. Greetz, Louis > Op 11 mei 2018 om 04:09 heeft Andrew Bartlett via samba <samba at lists.samba.org> het volgende geschreven: > >> On Thu, 2018-05-10 at 15:48 +0200, Marco Gaiarin via samba wrote: >> Mandi!

Mandi! Andrew Bartlett via samba In chel di` si favelave... Ok, i coma back to an old thread, because vendor finally reply. Little fast-rewind: i own some Konica-Minolta BizHub multifunction printers/copiers, and i need to ''bind'' it to my new AD domain. But authentication does not work, seems bacause that printer try to use SASL over plain LDAP (no SSL nor TLS). After

Hi All, I have been using Samba 4.15 on CentOS 6.3 64 bit for last 3 months with no issues but suddenly there i am facing below issues. 1. Windows 7 Pro/Ultimate cannot join the domain, but can telnet all the port. 2. Shared resources on Server 2003 which is added to domain is available some time and some time not. For isolating the issue I have temporary removed the server from Domain the

Hello everybody, I have a problem with LDAP userdb and dovecot. Let me first explain my LDAP configuration: I got three Active Directory LDAP servers (a.galliera.it, b.galliera.it, c.galliera.it) responding round robin to the name galliera.it. I want to use LDAP for the userdb lookup, so I configured dovecot-ldap-userdb.conf.ext as follow: hosts = galliera.it # round robin base =

Hello Samba group, I ran into a problem concerning Dovecot LDAP authentication to the Samba4 Active Directory. Background: I want to install a Openchange+Samba4 environment using Sogo, Dovecot and Postfix. I didn't want to use openldap as described in the Openchange documentation, why should I use 2 LDAP databases? Fedora 17, latest updates applied Samba: Version 4.1.0pre1-GIT-813bd03

Mandi! Rowland Penny via samba In chel di` si favelave... > I think that is what Andrew is trying to tell you, the printer needs to > support SASL over TLS/SSL or it will never work. I don't think there is > anything you can do, but I am surprised that the print doesn't already > support it, after all, it isn't something new ;-) Mi confusion grow. ;-) As stated in my

Hi, I have no success in using AD with dovecot. The little checkpassword script I cooked up that uses ldapsearch to lookup a user DN (with an authenticated bind) and then ldapsearch with an authenticated bind for that DN again works well. * Approach 1: use a service account to bind to AD, lookup the user DN, and bind to that DN. It fails. The LDAP config looks like: hosts =

I'm trying to test/move some of my LDAP-enabled devices from my actual OpenLDAP server(s) to my new samba AD domain. For now, i'm poking with printers, and i'm testing a Konica-Minolta BizHub C224e. Defining user autentication to external source, i can set (between LDAP, NTLM, NDS, ...) 'Active Directory', and i can/must provide the domain naime. After that, DNS and kerberos

Hi Rowland, Sorry to inform that none of thus packages solve my problem. But today, with some Tranquil.it helps, I have some news: - Upgrade from 4.11.14 -> 4.12.9 is OK - Upgrade from 4.12.9 -> 4.13.2 : problem is present with Tranquil.it AND Louis package - Fresh install + member join with 4.13.2 is OK (Centos AND Buster packages) Problem only occur when upgrading member to 4.13.2 with

Dear Samba users and developers, we had the idea of storing S/MIME certificates in the Samba 4 LDAP. In the Windows Active Directory Users and Computers tool I can use the "Published Certificates" tab to add a certificate to a user account. As Mozilla Thunderbird requests the "userCertificate;binary" attribute of a user when sending encrypted mail, the LDAP response is empty.

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > This mean that the printer try to auth in LDAP 'plain' (no SSL, no > > TLS), and so samba refuse that? > No, it means that Samba is refusing to accept a NTLM or Kerberos > authenticated connection without SIGN or SEAL negotiated, as an > attacker could take over an unprotected network connection and do

Hello, I have two Samba Domains and each trust each other (PDCs run 3.0.22). Also I have a samba member server (3.0.24) that runs winbind. When I use wbinfo I can see the user and groups of both domains. I also can chown/chgrp files with users of the domain the server is member of. But I can`t chown/chgrp with accounts of the trusted domain. chown doesn`t work at all. chgrp works, but then only

Systems: - Win2003R2 Domain Controller - Debian AMD64 with Samba 3.0.22-1 as ADS member; Users via nssldap / pam_krb5; MIT-Kerberos 1.4.3-7 On Win2003SP1 Terminalserver (ADS member, machine name: TS ; domain VW) with shares from Samba (see above) the access to these shares needs very often some seconds (sometime time out) for open folders/files. This occurs @ inital file/folder opening,

Can anybody tell me please, what isn't correct? What should I change in config? /var/samba/log/log.XP-CLIENT-IP: [2006/06/22 08:24:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(303) Username DOMAIN\XP-CLIENT-NAME$ is invalid on this system all works in general, but the error above is listed in every /var/log/samba/log.CLIENT Thanks Steffen ---------------------------------------------

Hey guys I am running CentOS 5 with httpd 2.2.3 I am trying to configure mod_authnzldap authing against Active Directory and I have it working about 50% of the time. About 50% of the time this works with no issue, the rest of the time it fails. Sometimes it fails and notes the following in the error log: [Mon Oct 22 15:58:03 2007] [debug] mod_authnz_ldap.c(373): [client 10.XXX.XX.XXX]

Hello, I have two Samba Domains and each trust each other (PDCs run 3.0.22). Also I have a samba member server (3.0.24) that runs winbind. When I use wbinfo I can see the user and groups of both domains. I also can chown/chgrp files with users of the domain the server is member of. But I can`t chown/chgrp with accounts of the trusted domain. chown doesn`t work at all. chgrp works, but then only

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > There's some way to ''tight'' that configuration , eg permit 'ldap server require strong auth = > > no' only by some hosts? > > Or some other smb.conf options that i've missed? > Nothing at this stage. Ok. > The issue is that they need to do fully signed or sealed Kerberos

IPsec Pre Shared Key for enterprise wireless is worse than PPTP according to https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/ . Make sure IPsec is used with certificates instead. tinc is an educational project sponsored by a university aiming to grow awareness of encryption over the public internet. It does not have a marketing department. Criticism is welcome. Think of