similar to: sssd config doesn't ask for password

I didn't setup any ssh-keys for authentication yet. Sorry. > Karel Lang AFD <lang at afd.cz> hat am 23. Februar 2015 um 14:48 geschrieben: > > > Hi there, > isn't possible, that the problem is just very basic and you've got a > authentication set via ssh-key on admin locally on the server you try to > logon? > Just saying .. > > cheers :]

Hello, if anybody would kindly have anything to advice, please, please - do :-) SETUP: Fedora 28 + Samba 4.8.5 AD (testing environment consisting of 1 Samba server and 1 joined windows machine and 1 account) :-) PROBLEM: the "--must-change-at-next-login" is the problematic part after creating user, with this attribute the user is authenticated OK during FIRST Logon BUT!! when

On Wednesday, 12 September 2018 18:13:16 CEST Andrew Bartlett wrote: > On Wed, 2018-09-12 at 17:16 +0200, Karel Lang AFD via samba wrote: > > Hello, > > if anybody would kindly have anything to advice, please, please - do > > > > :-) > > > > SETUP: > > Fedora 28 + Samba 4.8.5 AD (testing environment consisting of 1 > > Samba > > server

ssh -v shows which authentication modules are used. Might be GSSAPI/Kerberos, e.g. On 2015-02-23 15:08, Tim wrote: > I didn't setup any ssh-keys for authentication yet. Sorry. > > > >> Karel Lang AFD <lang at afd.cz> hat am 23. Februar 2015 um 14:48 geschrieben: >> >> >> Hi there, >> isn't possible, that the problem is just very basic and

Hello guys, could someone help me better understand the mechanism of negotiating of the SMB protocol? I watch closely samba list and recently there was a talk about the 'smb.conf' parameters like eg. "max protocol =" etc. with regards to Windows 10 (and other windows clients of diff versions). I read Jeff_Layton-Linux-CIFS-Client.pdf and

To all who have holidays this time of year :-). And may all our Samba-related wishes come true in 2015 :-). Cheers, Jeremy.

It has been a while since I have had to annoy you. You may be pleased to know that my server has been working quite well...until recently. I think it is because of a power hit we took recently. I don't know which came first, but I have four symptoms: 1) When I log in on a Windows machine, with an account that should have administrator permissions, I don't have said admin rights. 2)

Hi folks, Still trying to get security = share working, which it appears means I need to install Samba 3. As the server is pretty much goverened by this, I can install whatever linux is required, although I know Fedora, so CentOS etc is possible. I've just tried uninstalling Samba 4 from my F20 laptop to play with Samba 3. Can someone explain to me why to remove Samba I also have to

After being content with an old laptop running XP for years, my job decided to provide me with a shiny new one running Windows 7 Professional. The biggest problem with this is that I can't get the Windows 7 box to login to my Samba NT4-style domain controller. I have upgraded samba from 3.0.33 to 3.6.23, and copied my smbpasswd file to where the new samba expects to find it in

Hi Rowland, Thanks for the informations. Yes, the Fedora Samba 4 package is built with MIT kerberos. I know it is still 'fresh' so that is what i do - run tests :-). Actually this thing with password expiration, is only thing i found so far, otherwise, it 'behaved' surprisingly well. Thanks again! Karel -- *Karel Lang* *Unix/Linux Administration* lang at afd.cz | +420 731 13

Friends-- I'm stumped! Cannot get mount.cifs to work over a tun connection. How would you trouble-shoot this? 1. It cannot be openvpn causing the problem: I can ping across the connection both directions on all machines. 2. It cannot be samba causing the problem: I can mount.cifs the smb shares on the lan (using the identical credentials file) without any issue. 3. Have iptables

Hello list and all, this is my case: 4month ago i joined new job with company: 400 employees, RHEL and CEntOS 6.5 servers in backbone (and some windows servers as app servers), with one Samba3 PDC fileserver/domain server with tdbsam backend for windows 7 workstations and NIS for Linux workstation and servers authentication... you can imagine this situation was a bit mess My goal was to

Hello my latest content updates: * https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member New page. It replaces the old "Member Server" page, which shows now just a notice (https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server) Everything to know is described on the new "Domain Member" page. In combination with the file-/printserver and other

Hi I hope that I am not totally wrong when asking this on a Samba list, but as I followed a tutorial found at the SAMBA wiki I hope I can find someone how is able to help me. My goal is to set up a server acting as a SAMBA AD Server with single sign on for linux users. I use a Ubuntu Server 13.10 as the base. On top of this I installed a SAMBA 4.1.2 from GIT, did provisioning, Kerberos

Hello, A windows XP machine 'X' (the only one left in the LAN) sees all fedora14/samba3 shares on f14 machine 'A' but cannot see fedora20/samba4 shares on machines 'B' or 'C'. 'X' can ping all of the others by name, and all of the others 'A', 'B' and 'C' CAN see ALL of the other shares INCLUDING on the XP machine 'X'.

Hello, I would like to share my progression with samba4. I had a try with Samba3 with ldap ... Samba4 is so much easier !! I was able to install Samba 4 on CentOS6.4 by following the wiki on wiki.samba.org. I kept a trace on my blog in French language of what I've done. It may help somebody one day. Now, I have a win 7 workstation that has join the domain and a user, with a roaming

Hello all, we are currently running several samba 3 services to give CIFS access to shares (mostly homedirs). Well, access to the shares are controlled by our LDAP service (not AD, OpenLDAP). Our servers are using sssd + pam to check wether or not a user is allowed to mount the share (on some old servers we also use the pam_ldap module for pam). Now, we just want to run samba 4 as simply as

Hi, on my member server it is no problem to login with a domain account because I have set winbind use default domain = yes. But how to do this on a DC? It doesn't matter if winbind use default domain = yes is set. So can I do this? E.g. by using su command? The reason for my question is to run cronjobs by dedicated service accounts. Thanks in advance Tim

Hello, we are using sssd version 1.12 on openSUSE 13.1 with Sernet-Samba Packages 4.1.11. Samba runs as a single AD DC We have removed the complete openSUSE samba stuff before testing. sssd runs on the same machine as samba. Our sssd config: -------------------------------------------------------------------------------- [sssd] services = nss, pam config_file_version = 2 domains =

Hi all. I have the following setup: 1st dc is on CentOS 6 with Sernet samba 4.1.13 2nd dc is on Debian 7 with Sernet samba 4.1.13 The 2 dc work as expected. on CentOS I was able to configure sssd to work on Debian I'm using winbind Now I have a 3rd server which is CentOS 7 with samba 4.1.1 from CentOS repository. This system serves as a file server and works ok with samba, but I have a