similar to: samba share management / connection problem

Hi Paul, I think -U is just ignored when -k and a valid ticket is available. Here you have a valid ticket, you use -k to ask smbclient to use credentials from that ticket, and you add -U for another user. Please try same smbclient command without -k, it should ask you the password for test123 user. That's not a bug, for me it is a lack of documentation on how to use -k switches with almost

Hi, I am using different users while executing kinit and smbclient as shown below, but I am not getting any error. How can a initial ticket granted to one user can be used for another user. Can you give some clarification. I am not an expert hence this doubt. I am using win 2003 AD. [root at 0050568B7DEB samba-4.3.4]# klist klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_0)

Rowland: I took the "dns" from "server services" line in smb.conf, then restart the Samba service. The commands I have given, is running on the DC Samba Run the command: [root at srv14 ~]# kinit administrator Password for administrator at DOMAIN.LOCAL: [root at srv14 ~]# klist -e Ticket cache: KEYRING:persistent:0:0 Default principal: administrator at DOMAIN.LOCAL

Hello, I have install samba ad. On AD the config look like # Global parameters [global] netbios name = DC1 realm = SAMDOM.EXAMPLE.COM server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = SAMDOM server role = active directory domain controller idmap_ldb:use rfc2307 = yes # Default idmap config for local BUILTIN accounts and

Hi, we have a winbind issue with Samba (Version 4.2.7-SerNet-RedHat-19.el6) on one of our servers. After a while (once a day) one of the winbind daemons causes a very high cpu load (100%). This load remains until we kill this process. This server is a member of a AD domain with several trusted domains. I think this happens because winbind has problems with one of the trusted domains (ALS2)

Dear, Does anyone have any idea what may be causing this error? Even I had to leave off Samba, because I believe that due to NT_STATUS_INTERNAL_ERROR error, several desktops are presenting failure credentials when they try to access shares. After I left off Samba, the errors are gone. ------------------- Mensagem original ------------------------------- Assunto: Re: [Samba]

Hi, I setup a test envirement on a dedicatet server. OS: debian stretch samba: 4.5.8 smbclient: 4.5.8 I set it up as DC, the provision work well, yes I've delete the smb.conf in advance. When I test kinit I got an kerberos ticket, but I've problems with smbclient either I use kerberos or password auth. Myabee someone could help me? my smb.conf: # Global parameters [global]

Hai,   now realmd sssd and autofs are all not my cookies.. but..   i see 2 things. 1) you missing the CIFS spn. here is shows how to make them and extract them. https://wiki.samba.org/index.php/Generating_Keytabs  https://wiki.samba.org/index.php/Keytab_Extraction      2) for the smblcient try :  smbclient //server.domain.dom/escaner -U user -W DOMAIN.DOM -R host -k -d 3 -m SMB2 ....added

Hello everyone, First time with Samba 4. I've got it running mostly (with Windows 7 clients, everything works like a charm.), but I-m struggling with an issue that is driving me nuts (spent countless hours trying out stuff and googleing without luck): When users log in from Win XP Pro terminals, and are forced to change initially assigned passwords, they get an error (1728: error in RCP

On 10/03/15 19:01, Roman Dilken wrote: > On 10.03.2015 19:25, Rowland Penny wrote: > >> Hi, what are you trying to join to? >> >> Remove this line 'idmap_ldp:use rfc2307 = yes' >> >> one) it should be 'idmap_ldb:use rfc2307 = yes' two) it is only >> used on a DC. >> >> How are you trying to do the join ? >> >>

Hello, Sorry for take so long to answer, but I was not able to do the tests because the computer is in use and out of my office. Finally I've progressed in this topic with realmd, sssd and autofs, but now I'm locked on mounting shares from my member server. I'm able to use autofs and smbclient to mount and connect to sysvol share on my DC server, but when I try to connect to my

On 27.06.2018 13:43, Rowland Penny via samba wrote: > On Wed, 27 Jun 2018 13:04:12 +0200 > basti via samba <samba at lists.samba.org> wrote: > >> Hello, >> when I try to login to AD member via IP-Address from Windows Client it >> works. >> >> Login to AD Member from Windows Client via DNS Name fail. >> Windows Errorcode: 0x80070035 >>

Hi, i've got a problem joining a domain with samba 4.1.17 on freebsd. Everytime I try it, the join fails with a core dump. Debugging it, it seems that it is stuck on authentication. Kerberos works, I get credentials, but if I try to join the domain, it fails. The problem seems to be somwhere in this debug-output: 1. net ads join: Doing spnego session setup (blob length=96) got

I use bind on the same maschine as samba (bind_dlz). there is no additional bind9 in my test network. the default gw (kvm host) do nat. and bind of this network does know nothink about zone "foo". I think that is a problem of the windows nslookup. I installed bind nslookup on the PC just for test and this can resolve "foo" and "foo." c:\s_tools (nslookup win)

Good Morning, Ive been trying to test Samba AD on Ubuntu 18.04 using samba version 4.8.0  The DC seems to be working fine all tests have passed.  I was able to connect Win7 RSAT, a Ubuntu workstation and a File server.  My problem is the file server will not give response to 'sudo getent passwd' with or with out username or DOMAIN\username. Everything else works as far as I can tell.

On 10/03/15 18:05, Roman Dilken wrote: > Hi, > > i've got a problem joining a domain with samba 4.1.17 on freebsd. > > Everytime I try it, the join fails with a core dump. > Debugging it, it seems that it is stuck on authentication. Kerberos > works, I get credentials, but if I try to join the domain, it fails. > > The problem seems to be somwhere in this

Hi, here it attached my smb.conf and Winbind debug log after reboot. My OS is Debian Jessie and has a fixed ip. Thank you On 06/06/2016 22:05, Rowland penny wrote: > On 06/06/16 14:52, Alexis RIES wrote: >> Hello, >> >> After each reboot, my Samba AD member server lost domain join after >> reboot, I have to re-enter the server in the domain with the "net ads

Hello, a short history, I am using samba 4 with Debian 9 from the repository, 2 days ago the server was broken, but I was copy all the /var/lib/samba directory to a safe place, then I was installed a new server with the same Debian and samba from repository, and stopped smbd, nmbd and winbind, unmask samba-ad-dc and finally copied all the directory from the old server to the new server and started

Hi, Our AD domain "A.COM" has a one-way trust with "B.COM" with B.COM being the trusted domain. We have a samba server that is joined to A.COM on which users of B.COM need access. We have samba and winbind configured and it seems to be working correctly except for the following message that keeps on appearing in the log.wb-B logfile: [2017/05/04 14:42:53.727050, 0]

Problem: wbinfo -t fails. As long as it fails, I am unable to map sids to Group Names. I need this functionality for my application. I can use just about everyother function of wbinfo at least partially... Distro: Debian woody. Packages: ii samba 3.0.11-0woody1 a LanManager-like file and printer server fo ii samba-common 3.0.11-0woody1 Samba common files used by both the server a