similar to: Samba and keytab file creation

Samba expects the keytab file as /etc/krb5.keytab. Solaris 11 looks for a keytab file in /etc/krb5/krb5.keytab When samba joins the domain it (probably) updates the machine password and then updates its krb5.keytab file. When connecting via ssh, the system would use a keytab file that had the wrong kvno and probably the wrong password key. The following symlink command fixed ssh

On Thu, 16 Mar 2017 14:48:01 -0400 Gaiseric Vandal via samba <samba at lists.samba.org> wrote: > Samba expects the keytab file as /etc/krb5.keytab. > > Solaris 11 looks for a keytab file in /etc/krb5/krb5.keytab > > When samba joins the domain it (probably) updates the machine > password and then updates its krb5.keytab file. When connecting > via ssh, the

I have a Windows 2008 domain (one Win 2008 DC, one Win 2012 R2 DC.) I am trying to join a Solaris 11 machine to the domain for both Samba and other services. For "unix" logins and ssh, Solaris 11 is configured to use LDAP for user and group lookup and kerberos for authentication. The "kclient -T ms_ad" command joins the Solaris machine to the AD domain. It even

Hi, I was trying to get a new keytab in samba4 for my apache service. So I tried the following command: sh ktpass.sh --out /etc/apache.keytab --princ HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN --pass VerySecure123 --enc des-cbc-md5 I get the following error: Unable to find kvno for principal HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN Am I doing something wron or shouldn't I be

Hello, We're currently binding hosts to a Windows 2000 domain through a third-party product (that also supports Kerberos/NFSv4) but we also have a need to have other hosts grab their credentials from a Windows KDC for NFSv4 access. While we don't intend to bind these systems to AD, we do have the requirement to pull their SPNs from AD and place them in /etc/krb5.keytab. Note that

I'm new to Kerberos. I don't understand how Samba uses the system keytab (/etc/krb5.keytab) when "use kerberos keytab = true". Does Samba use service specific tickets? What tickets does Samba add? Do I need a cron job to keep them fresh or does Winbind take care of it? Sorry if these are elementary questions, but the Samba HOWTO didn't help me understand Samba's

Rowland Penny via samba wrote on 9/16/16 1:43 PM: > On Fri, 16 Sep 2016 13:00:52 -0700 > Robert Moulton via samba <samba at lists.samba.org> wrote: > >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A

Achim Gottinger via samba wrote on 9/16/16 3:05 PM: > > > Am 16.09.2016 um 23:00 schrieb Robert Moulton via samba: >> Rowland Penny via samba wrote on 9/16/16 1:43 PM: >>> On Fri, 16 Sep 2016 13:00:52 -0700 >>> Robert Moulton via samba <samba at lists.samba.org> wrote: >>> >>>> Achim Gottinger via samba wrote on 9/15/16 1:20 AM:

Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 00:29 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/16/16 3:05 PM: >>> >>> >>> Am 16.09.2016 um 23:00 schrieb Robert Moulton via samba: >>>> Rowland Penny via samba wrote on 9/16/16 1:43 PM: >>>>> On Fri, 16 Sep 2016

Am 17.09.2016 um 01:23 schrieb Robert Moulton: > Achim Gottinger via samba wrote on 9/16/16 4:14 PM: >> >> >> Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: >>> >>> >>> Am 17.09.2016 um 00:29 schrieb Robert Moulton via samba: >>>> Achim Gottinger via samba wrote on 9/16/16 3:05 PM: >>>>> >>>>>

Achim Gottinger via samba wrote on 9/15/16 1:20 AM: > > > Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >> On Wed, 14 Sep 2016 16:23:27 -0500 >> Michael A Weber via samba <samba at lists.samba.org> wrote: >> >>>> On Sep 14, 2016, at 2:00 PM, Achim Gottinger <achim at ag-web.biz> >>>> wrote: >>>> >>>>

Achim Gottinger via samba wrote on 9/16/16 1:43 PM: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A Weber via samba <samba at

Am 16.09.2016 um 22:43 schrieb Achim Gottinger via samba: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A Weber via samba <samba at

On Fri, 16 Sep 2016 22:43:42 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: > > Achim Gottinger via samba wrote on 9/15/16 1:20 AM: > >> > >> > >> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: > >>> On Wed, 14 Sep 2016 16:23:27 -0500 >

Am 17.09.2016 um 02:36 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 02:19 schrieb Achim Gottinger via samba: >> >> >> Am 17.09.2016 um 01:23 schrieb Robert Moulton: >>> Achim Gottinger via samba wrote on 9/16/16 4:14 PM: >>>> >>>> >>>> Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: >>>>>

On Fri, 16 Sep 2016 23:02:20 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 16.09.2016 um 22:49 schrieb Rowland Penny via samba: > > On Fri, 16 Sep 2016 22:43:42 +0200 > > Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > >> > >> Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >

Hi guys am looking for some guidance on how I can generate some keytab files from a samba 4 DC I been following a tutorial that states some bits on the windows side such as creating an spn C:\Users\Administrator>setspn -A host/test.sondrel.com at SONDREL.COM Test Registering ServicePrincipalNames for CN=Test,OU=Machines,DC=sondrel,DC=com host/envy.sondrel.com at SONDREL.COM Updated

Am 17.09.2016 um 03:24 schrieb r moulton via samba: > On Fri, Sep 16, 2016 at 6:08 PM, Achim Gottinger via samba > <samba at lists.samba.org> wrote: >> >> Am 17.09.2016 um 02:36 schrieb Achim Gottinger via samba: >>> >>> >>> Am 17.09.2016 um 02:19 schrieb Achim Gottinger via samba: >>>> >>>> >>>> Am 17.09.2016

Am 17.09.2016 um 06:14 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 04:53 schrieb Achim Gottinger via samba: >> >> >> Am 17.09.2016 um 03:24 schrieb r moulton via samba: >>> On Fri, Sep 16, 2016 at 6:08 PM, Achim Gottinger via samba >>> <samba at lists.samba.org> wrote: >>>> >>>> Am 17.09.2016 um 02:36 schrieb

On Wed, 25 Jul 2018 12:14:30 -0400 Gaiseric Vandal <gaiseric.vandal at gmail.com> wrote: > My partial smb.conf and nsswitch.conf is as follows.  FYI the user in > question is able to access directories via ssh so the permissions and > group membership seems correct - at least on the unix level. > > > root at weirdserver:~# getent passwd | grep myname >