similar to: Winbind with krb5auth for trust users

Hai, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Andreas Hauffe via samba > Verzonden: dinsdag 22 augustus 2017 11:26 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Winbind with krb5auth for trust users > > Hi, > > thanks for the fast answer. > > All DCs (local and trusted domain) running on

Hi, the external trust, we have, is a one directional external trust. So users of the trusted dom can logon on local dom clients, but not the other way around. In case of "wbinfo -a" all communication is between the client and the domain controller of the local domain, which is the proxy for the auth process. In case of "wbinfo -K" all communication is between the client

On Tue, 22 Aug 2017 13:51:24 +0200 Andreas Hauffe via samba <samba at lists.samba.org> wrote: > Hi, > > sorry for not reading the comment above idmap config. I uninstalled > and reinstalled samba and configs to remove all old id mappings and > so on. Then changed all configs as adviced. The id mapping is working > correctly (wbinfo -i) for local and trusted domain. But I

Hi, hier are the file. I replaced the real domain/realm name by "search&replace", so there should not be a typping error in my file concernig the realm or domain names. Regards, Andreas client:~ # more /etc/hostname client.loc.example.de client:~ # more /etc/hosts # # hosts         This file describes a number of hostname-to-address #               mappings for the TCP/IP

Hai, Whats the os used? The first things i would check. Did you give both servers the nfs/spn. ? The current search order for keytabs to be used for "machine credentials" : <HOSTNAME>$@<REALM> root/<hostname>@<REALM> nfs/<hostname>@<REALM> host/<hostname>@<REALM> root/<anyname>@<REALM> nfs/<anyname>@<REALM>

On Tue, 22 Aug 2017 17:18:59 +0200 Andreas Hauffe via samba <samba at lists.samba.org> wrote: > Hi, > > the external trust, we have, is a one directional external trust. So > users of the trusted dom can logon on local dom clients, but not the > other way around. In case of "wbinfo -a" all communication is between > the client and the domain controller of the

See inline comments: On Tue, 22 Aug 2017 12:20:04 +0200 Andreas Hauffe via samba <samba at lists.samba.org> wrote: > Hi, > > hier are the file. I replaced the real domain/realm name by > "search&replace", so there should not be a typping error in my file > concernig the realm or domain names. > > Regards, > Andreas > > client:~ # more

Hi, sorry for not reading the comment above idmap config. I uninstalled and reinstalled samba and configs to remove all old id mappings and so on. Then changed all configs as adviced. The id mapping is working correctly (wbinfo -i) for local and trusted domain. But I still cannot logon with wbinfo -K with a trusted domain account. Andreas Am 22.08.2017 um 12:59 schrieb Rowland Penny via

Hi, I already added the two lines in smb.conf for my last test. Andreas [global]        security = ADS        workgroup = LOC        realm = LOC.EXAMPLE.COM        dedicated keytab file = /etc/krb5.keytab        kerberos method = secrets and keytab        log file = /var/log/samba/%m.log        log level = 1        template homedir = /home/%D/%U        template shell = /bin/bash

Hai,   Im setting up a new proxy and im testing a bit around. Goal is, get everyting working with minimal changes to the system.   Setup: Debian 8 with NFS nfsv3 and v4 (krb) automounts,  winbind 4.5.3 , squid 3.5.24 (with ssl support) Which is basicly a copy of my other proxy but a new install with more systemd and less packages used.   Working: -          ssh logins with AD users.

Hi rsync list! I have a problem with the exclude-from and include-from options. I want sync all jpeg files to an external server - exclude HK and texts folders and jpg inside this folders. My folder structure are: /products/ANYNAME/pictures/EU /products/ANYNAME/pictures/HK /products/ANYNAME/texts ... my include-from file: */ *.JPG *.jpg my exclude-from file: */HK/ */texts * my rsync

Hai,   Since im still having problems reading the man smb.conf about the NTLM settings, im asking here. How do i allow NTLM auth for my proxy.   I have been playing around with :           client NTLMv2 auth         raw NTLMv2 auth         ntlm auth         lanman auth   i’ve added the proxy user to the winbind_privileged group. and did set the needed rights. chgrp winbindd_priv

Hi all. I am a total newbie at Samba. I am running Ubuntu 6.06 (Dapper) and have Samba 3.022 installed. I am trying to set it up as a Domain controller (to be a domain server that Windows machines can log into). So far, I can get it to do this, but only with the ROOT account. Any other account and it tells me that the user/password is incorrect or invalid. Below is my smb.conf file. In the

This may or may not be CentOS related, but am out of ideas at this point and wanted to bounce this off the list. I'm running a CentOS 5.5 server, running the latest kernel 2.6.18-194.32.1.el5. Almost everyday around 3:30 AM the server completely locks up and has to be power cycled before it will come back online. (this means someone hat to wake up and reboot the server, oh how I love being

Hi, I'm facing a samba internal dns problem. Every command which starts with "samba-tool dns" throughs the following exception: ERROR(runtime): uncaught exception - (-1073741801, 'Memory allocation error') File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File

Let''s say I have two different geographic sites. They are pretty much identical ie. each site has a machine called web1 which is a web server, etc. Except there are couple site-specific settings ie. outgoing DNS servers are different, SSL certs are different etc. On the puppetmaster I can put in a file called e.g. /etc/sideid which would uniquely identify a site ie. siteX or siteY.

Are there known performance issues with using glusterfs on software raid? I've been playing with a variety of configs (AFR, AFR with Unify) on a two server setup. Everything seems to work well, but performance (creating files, reading files, appending to files) is very slow. Using the same configs on two non-software raid machines shows significant performance increases. Before I go a

Hey guys, I'm trying use check_memcached.pl to monitor a couple of memcached services running on two ports. I have my command definition setup like this: # 'check_memcached' command definition define command { command_name check_memcached command_line $USER1$/check_memcached.pl -H $HOSTADDRESS$ -p $ARG1$ } And I have my service definitions setup like this: # Define a

Hello, I have an active, balanced webcluster with 2 SLES10SP2 nodes, both running ocfs2 with an iscsi target. The ocfs2 volume is mounted on both nodes. Everything works fine, except sometime the load on both systems go as high as 200, then both systems freeze, only reboot helps to regain control. I noticed that this behaviour does not occur when the cluster is NOT balanced. When the load on both

PJ wrote: > This may or may not be CentOS related, but am out of ideas at this point and wanted to bounce this off the list. > > I'm running a CentOS 5.5 server, running the latest kernel > 2.6.18-194.32.1.el5. > > Almost everyday around 3:30 AM the server completely locks up and has to be power cycled before it will come back online. > (this means someone hat to wake up