similar to: Connect Samba 4.3 to an existing Kerberos server

Hi all, I was hoping to setup a realm trust between a Samba AD domain and a kerberos realm running mit-krb5, however it looks like that isn't currently supported. Is that correct, or am I missing something (I'm running Samba 4.9.4)? Having noticed that "samba-tool domain trust" only seems to cater for trusts involving other AD domains, I tried to workaround that (in the

Hi all. I?m trying to understand a weird authentication failure: I have two domains (TC83.LOCAL and TC84.LOCAL), each in a diferent forest, with a bidirectional forest trust. The samba server kvm7246-vm022.maas.local is a domain member of TC83 and is running a recent build from git master (f38077ea5ee). When I test authentication of users in each domain by running ntlm_auth on the samba server,

Well I'm hoping someone here can give me some assistance. Where I work we manage multiple AD forests. We are looking for a way to centrally manage this. Right now each forest has its own logins for our support people here. I hoping there's a way to make samba make this a bit easier. I know samba will do domain trusts, but is there a way to have it have do trusts to each seperate forest.

Here's the keytab info: ubuntu at kvm7246-vm022:~/samba$ sudo klist -ek /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 12 host/kvm7246-vm022.tc83.local at TC83.LOCAL (etype 1) 12 host/KVM7246-VM022 at TC83.LOCAL (etype 1) 12 host/kvm7246-vm022.tc83.local at TC83.LOCAL (etype 3) 12

hi, the release notes of samba4.3 read: "The support for trusted domains/forests has improved a lot." and " Both sides of the trust need to fully trust each other!" is this still true for samba 4.5 or is it possible to create a one way trust from DC domain A (samba) to DC domain B (windows)? i've looked at the samba 4.5 release notes, but didn't find anything about

Hello, I am using SAMBA 4.1.6 AD on Ubuntu 14.04.02, I am trying to use the Active Directory Domains and Trust tool but it keeps giving me this message. I am trying to fix this issue: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. (SQLEditors) Would you please help how I can solve

Hi All- Please pardon my repost of my usenet article in this list. Previously, I asked if Samba 3.0 could be an Active Directory Domain Controller (ADDC). I have the feeling that the answer is no. If so, then I have this other question: Can I use Samba as an NT4 PDC for making a Windows NT4 domain that would host several M$ Windows XPP client computers as domain clients/members, but have

Hi, the external trust, we have, is a one directional external trust. So users of the trusted dom can logon on local dom clients, but not the other way around. In case of "wbinfo -a" all communication is between the client and the domain controller of the local domain, which is the proxy for the auth process. In case of "wbinfo -K" all communication is between the client

Hi Rowland, > Are you using sssd or nslcd ? I am using sssd. I can ssh into the server using credentials from either kerberos realm. E.g. ssh cwseys at PHYSICS.WISC.EDU@smb01.physics.wisc.edu (works) ssh seys at AD.WISC.EDU@smb01.physics.wisc.edu (works) PHYSICS.WISC.EDU is an MIT kerberos KDC. AD.WISC.EDU is a active directory KDC (etc). The reason I thought sssd would be best is because

Hi Rowland et al, > > The reason I thought sssd would be best is because I want to use the > > /etc/passwd file for user existence and was easy to set up. > > You cannot have the same user in /etc/passwd and AD i.e. user 'foo' in > /etc/passwd could, and probably would, be seen as the the AD user 'foo'. The way the system is set up, username existance and

Release Announcements ===================== This is the second release candidate of Samba 4.3. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.3 will be the next version of the Samba suite. UPGRADING ========= Nothing special. NEW FEATURES

Release Announcements ===================== This is the second release candidate of Samba 4.3. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.3 will be the next version of the Samba suite. UPGRADING ========= Nothing special. NEW FEATURES

Hello all, Mine is Active Directory domain. I have already reinstall my server. It was fresh install. But of course I am still following this topic. Regards Le 3 juil. 2016 13:05, "Klaus Hartnegg" <hartnegg at uni-freiburg.de> a écrit : > On 20.06.2016 at 12:16 Jules Houantonon wrote: > >> please is it possible to change samba4 domaine name ? >> Did someone

I am not sure if this is relevant root at sambaPDC:~# /usr/local/samba/bin/net rpc trustdom establish DomainB Enter DOMAINA$'s password: Could not connect to server DomainB_DC Trust to domain DomainB established root at sambaPDC:~# root at sambaPDC:~# /usr/local/samba/bin/net rpc trustdom establish DomainC Enter DOMAINA$'s password: Could not connect to

We run Apple's OD to support our Linux, Mac, and Windows clients and servers. We are under pressure to use AD because more and more software coming out for Windows requires it. We don't want to use AD, so Samba4 looks good. However, we don't want to pull apart our directory to implement samba4. Is there a way to get Samba 4 running so that it is able to use the existing LDAP and

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

Does anyone have any hints or suggestions on getting some JetDirect-based printers set up for bidirectional printing in Samba? We're using LPRng 3.8.0, ifhp 3.4.7, and samba 2.2.2 From the LPRng standpoint, the printers seem to be set up for bidirectional communication fine.. but how do we get Samba to allow bidirectional communication? Thanks in advance! Glenn --- Glenn E. Sieb,

============================= Release Notes for Samba 4.3.0 September 8, 2015 ============================= This is the first stable release of Samba 4.3. UPGRADING ========= Read the "New FileChangeNotify subsystem" and "smb.conf changes" sections (below). NEW FEATURES ============ Logging ------- The

============================= Release Notes for Samba 4.3.0 September 8, 2015 ============================= This is the first stable release of Samba 4.3. UPGRADING ========= Read the "New FileChangeNotify subsystem" and "smb.conf changes" sections (below). NEW FEATURES ============ Logging ------- The

Now I have a some time to answer, maybe a few of your questions. Am 26.02.19 um 20:59 schrieb lists via samba: > Hi, > > No replies unfortunately. Unsure why. There are still a lot of questions open and I think a lot of things have to be done. > > We searched the list, and we found little discussion on the subject of > trusts. We see occasional questions, but they are often