similar to: Attempting to access LDAP backend gives "Strong(er) Authentication Required"

LDAP can be use in clear text mode or with start_tls. There is still LDAPS which can also be used. Any of these should be used to authenticate users as LDAP[s] is not meant to authenticate anything, it's a DB. Kerberos should be used for authentication as it is meant for that purpose and could grant your users possibility to have SSO. More secure for admins, more simple for users... I have

set this parameter in smb.conf in the global part. ldap server require strong auth = no regards, Gabriel Franca Em 13/07/2016 06:02, mathias dufresne escreveu: > LDAP can be use in clear text mode or with start_tls. There is still > LDAPS which can also be used. Any of these should be used to > authenticate users as LDAP[s] is not meant to authenticate anything, > it's a DB.

Good afternoon friends, I am implementing squid + squidguard the pfsense authenticating samba 4 version 4.4.4 And always I get this message in squidguard logs. 2016-06-20 17:30:55 [75446] (squidGuard): ldap_simple_bind_s failed: Strong(er) authentication required 2016-06-20 17:30:55 [75446] Added LDAP source: administrator 2016-06-20 17:30:55 [75446] (squidGuard): ldap_simple_bind_s failed:

Good morning I am running a windows server 2003 AD domain where the option "server signing" cannot be changed I have installed the latest version of samba and i always get this error msg " Failed to join domain : Strong(er) authentication required" Kinit is working net ads join -U xxxxxx -d4 does give above error message Is there a solution for this ? It seems lots of person

Hi, my windows folks migrated to AD 2008 R2, resulting in the following error message when trying to join the domain: [HOST] /etc $ /opt/csw/bin/net ads join -U <USER> Enter <USER>'s password: [2009/07/01 11:51:28, 0] libads/sasl.c:ads_sasl_spnego_bind(819) kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required Failed to join domain: failed

Hello all, I'm having problems getting Samba to join a Windows AD. I am delegated OU admin, and have no direct access to the domain controller. We have 3 DCs in one domain where my OU exists. The users I wish to authenticate are in a different domain. I have set up Kerberos and can receive tickets correctly. I run net -d 4 ads join createcomputer=[Delegated OU] -U [account with join

Hello Gabriel, I recommend you use gpupdate /force on the windows command line after login. The results of above command can be checked afterwards with the "gpresults" command. Can be you have an permission problem on your samba server. Only skimmed ofver the thread but did you try samba-tools ntacl sysvolreset on your samba server? achim~ Am 22.05.2015 um 12:08 schrieb Gabriel

2015-05-22 13:32 GMT+02:00 Gabriel Franca <gabriel.franca at gmail.com>: > > I found it strange more and something I have already noticed a while. > > No GPO is applied when the User is the "Domain Users", so I wonder if I'm > doing something wrong or I have to change something. > > I believe the "Domain Users" are not allowed to change the

Hello Gabriel, Am 22.05.2015 um 15:23 schrieb Gabriel Franca: > Good morning people, > > I make the case that Achim Gottinger passed. > > samba-tool ntacl sysvolreset and received the following information: > Segmentation fault (core of the recorded image) > > then sent a samba-tool ntacl sysvolcheck and received the following: > ERROR (<type

Good morning List On Friday I had to leave so I could no longer continue with our lab. Weekend and holy all have to rest as much as possible. = D So I'm back and I will put the smb.conf for analysis. # Global parameters [global] workgroup = CMC realm = CMC.CORP netbios name = SAMBA server role = active directory domain controller dns forwarder =

Good morning everyone, Gabriel: I haven't had a chance to test this yet, but I'm also needing the same IE: Domain Users to have the GPO applied. Did you come right with this? Andrey: Thank you for letting me know about the SysVol replication across DC's, I haven't enabled this yet and will be doing so, is there anything I should watch out for? I'll just be using the "

Good morning people, I need a help with a gpo to give administration right only on the workstation for a normal user. I tried 3 tutorials I found on google plus none worked. How do you do when you need an ordinary user to have administration right only on the workstation? If you have a tutorial that is running in version 4.5.5 and can make it available thank you very much. Regards,

Good morning guys, need to migrate a samba 4.1.16 of Sernet that is installed on a CentOS 6 for a centOS7. (Old server giving hardware problem) Rowland gave me a while ago a script to back up the samba structure 4 and to restore what should I do? is that performing this procedure can migrate? or do I have to put all computers in the field again reconfigure profile etc ??? Kind Regards,

Good morning friends, I have the following structure: Centos 6.6 1) AD samba using .tgz package 2) using the proxy Sernet packages which use command: samba-tool domain join XXX.corp DC -U Administrator --realm = XXX.corp and set the squid via NTLM. Issues: 1) after the update I get the following messages in / var / log / messages: Aug 13 04:08:56 kernel samba: Out of memory: Kill process

Good morning Rowland. Today there are 2 servers with Samba 4.1.19 1) Samba 4.1.19 compiled used for the control domain (AD) 2) using Samba 4.1.19 Sernet package I used the command "samba-tool domain join" to use the Squid authenticating via NTLM. Before I was as follows: 1) Samba 4.0.4 compiled AD 2) using Samba 4.1.19 Sernet package I used the command "samba-tool domain

Hi all, here the company was using the packages Sernet-samba version 4.2.xx I removed it and started compiling it to version 4.4.4 I took only the smb.conf. The problem is that when I click the right button and go on the Security tab get this message. "As the permissions on home (\\ samba) are not sorted correctly, some of them may have no effect." Is there any command for me to

Hello Rowland Talking to users at that time discovered the following: They remove the machine network cable, put the User and Password them the domain, after the windows open the desktop they connect the network cable back in the machine and get to work. If you do this procedure is giving User and wrong password! On the issue of time the 2 DC's station using ntp. I stopped the samba

Hi Howland, That is precisely what I cannot do. I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. Do you know if there is a way to reset or show NIS Domain? Is there any way to assign uidNumber & gidNumber attributes via console? Best regards, Gabriel Franca -----

Hi Guys, I have a samba 4.0.3 running in a CentOS 6.4 and I want to install samba 4.1 in a new CentOS 7 server. Should I use the samba-4.1 rpm provided by CentOS or download, compile and install it from samba repositories? Which is better and why? Finally, How can I migrate domain and users data files from samba 4.0.3 to 4.1 ? Thanks, Edison

On Thu, Apr 11, 2019 at 8:43 AM Gabriel O. Franca via samba <samba at lists.samba.org> wrote: > > Good morning people, > > I am opening my lab with version 4.10.2 in centos 7.6. > I'm trying to compile using python3 without success. > Has anyone managed to compile using python3 in the centos 7.6 that might > give way to the stones? > Here is the error message