similar to: Opensolaris-ish joins but does not seem to be valid

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 2:23:02 AM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Mon, 9 Oct 2017 18:04:45 -0500 (CDT) > Mike Ray via samba <samba at lists.samba.org> wrote: >

On Mon, 9 Oct 2017 18:04:45 -0500 (CDT) Mike Ray via samba <samba at lists.samba.org> wrote: > We have a product that is similar to Opensolaris. It joins to the > domain (Samba version 4.7.0) without error and I can verify that a > computer object is created in the domain for it. > > However, the command "getent passwd" which I would expect to return a > list of

On Tue, 10 Oct 2017 09:39:43 -0500 (CDT) Andrew Martin <amartin at xes-inc.com> wrote: > ----- Original Message ----- > > From: "samba" <samba at lists.samba.org> > > To: "samba" <samba at lists.samba.org> > > Sent: Tuesday, October 10, 2017 2:23:02 AM > > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be > >

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 10:19:29 AM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Tue, 10 Oct 2017 09:39:43 -0500 (CDT) > Andrew Martin <amartin at xes-inc.com> wrote: > >>

On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) Andrew Martin <amartin at xes-inc.com> wrote: > > > > Is this from the Opensolaris-ish machine ? > > > > I expected to see a smb.conf file from a Unix domain member. > > > > If it is from the machine where you are getting '[NT > > AUTHORITY]\[ANONYMOUS LOGON]', then can you try 'getent passwd

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 12:02:11 PM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) > Andrew Martin <amartin at xes-inc.com> wrote: > >

----- On Oct 11, 2017, at 5:56 PM, samba samba at lists.samba.org wrote: > ----- On Oct 10, 2017, at 12:02 PM, samba samba at lists.samba.org wrote: > >> On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) >> Andrew Martin <amartin at xes-inc.com> wrote: >> >> > > Rowland- > > I've been poking at this more and think the root of the problem is a

----- On Oct 12, 2017, at 1:52 PM, samba samba at lists.samba.org wrote: > On Thu, 12 Oct 2017 13:28:40 -0500 (CDT) > Mike Ray <mray at xes-inc.com> wrote: > >> ----- On Oct 11, 2017, at 5:56 PM, samba samba at lists.samba.org wrote: >> >> > ----- On Oct 10, 2017, at 12:02 PM, samba samba at lists.samba.org >> > wrote: >> > >>

----- On Oct 10, 2017, at 12:02 PM, samba samba at lists.samba.org wrote: > On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) > Andrew Martin <amartin at xes-inc.com> wrote: > > Rowland- I've been poking at this more and think the root of the problem is a Kerberos problem. After joining this machine to the domain, it goes through a process that it calls "AD/Kerberos

On Thu, 12 Oct 2017 13:28:40 -0500 (CDT) Mike Ray <mray at xes-inc.com> wrote: > ----- On Oct 11, 2017, at 5:56 PM, samba samba at lists.samba.org wrote: > > > ----- On Oct 10, 2017, at 12:02 PM, samba samba at lists.samba.org > > wrote: > > > >> On Tue, 10 Oct 2017 11:28:09 -0500 (CDT) > >> Andrew Martin <amartin at xes-inc.com> wrote: >

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"

Rowland, Thank you. I read the Oreilly book chapter 10, but I am still unclear on the requirements. If you have an idea for another book/man to read, please let me know and I will read. On Mon, Apr 25, 2016 at 11:48 PM, Rowland penny <rpenny at samba.org> wrote: > You may however run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something

I am running Samba 3.0.24 on OpenSolaris build 69, x86. I built Kerberos, LDAP and Samba from source so that I could join an AD domain in native mode. After many trials and tribulations, I successfully did a 'net ads join'. Here's the problem: When a user tries to connect to the Solaris server, I get the following error in the Samba log for the client machine: [2007/08/21 16:37:49,

Hello, I have a samba server set up as a member server in a native 2003 domain. Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave the domain? > user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM > administrator@DOMAIN.COM's password: > [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) > kinit succeeded but

Hi There, I have an odd issue with my samba4 infrastructure, I have two servers both replicating fine. DC1 passes all tests documented here: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller Except the following test: # kinit administrator # kinit: krb5_get_init_creds: Client (administrator at DOMAIN.NAME.COM.AU) unknown And in the logs I have found the

I running 3.0.25c on OpenSolaris. I can succesfully do a kinit and see the ticket via klist, but am unable to join the domain. /usr/sfw/sbin/net -d 5 ads join -U user@DOMAIN.LOCAL gives the following error... [2007/08/29 15:49:24, 3] libsmb/clikrb5.c:(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache file found) [2007/08/29 15:49:24, 0] libads/kerberos.c:(228)

I have been trying to setup Samba4 as a DC using kerberos for authentication. I have successfully provisioned the domain, and was able to join my domain using my windows machine as well as kinit to obtain a ticket for my administrator user from my servers. I have hit a wall trying to setup a server to authenticate a SPN using a keytab. I can join the domain and kinit as my administrator user,

Hi, I'm trying to get Rmysql to work o windows server 2008 64-bit. I have the latest build of mysql installed (mysql-5.1.34-winx64). When trying to load Rmysql, I got a warning that Rmysql is linking to an old-ish mysql build (5.0.67). I could do some basic stuff (the connection works) but it breaks when trying to read a large table. So I set up to use the buld 5.0.67 that Rmysql likes. 10

Hi all, I''m setting up a new fileserver, and while I''m not planning on enabling CIFS right away, I know I will in the future. I know there are several ZFS properties or attributes that affect how CIFS behaves. I seem to recall that at least one of those needs to be set early (like when the filesystem [or pool?] is created? Which properties might those be? Where can I find

> Hi, > > Try to add "rdns = false" in krb5.conf on SERVER1. > Hi Mathias, Thanks for your reply I have tried that option but same issues. This is getting worst now. Not sure what else to do, any other test/changes you advise me to do? Right now I'm out of ideas. > > 2016-06-21 13:36 GMT+02:00 Juan Garcia <juan at ish.com.au > <mailto:juan at