similar to: net ads join fails with pre-created machine accounts

On Mon, 6 Nov 2017 09:15:07 +0000 "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > Hi folks, > > we have recently tried to join several FreeBSD machines to your > forest where the machine accounts where pre-created by the core admin > team. We did as root: > > # kinit 'machine-name$' > # net ads join ... > > Unfortunately, it

Am 2019-01-10 um 17:02 schrieb Rowland Penny via samba: > On Thu, 10 Jan 2019 16:23:06 +0100 > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > >> Hi folks, >> >> we'd like to provision new Samba servers (file sharing only) with the >> system keytab. It will precreated by some other process (msktutil) >> because we

> On 11 Jan 2019, at 10:33, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Fri, 11 Jan 2019 09:39:35 +0100 > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > >> Am 2019-01-10 um 17:02 schrieb Rowland Penny via samba: >>> On Thu, 10 Jan 2019 16:23:06 +0100 >>> "Osipov, Michael via samba"

Hi folks, we'd like to provision new Samba servers (file sharing only) with the system keytab. It will precreated by some other process (msktutil) because we don't have direct access to a domain admin account. Is there any degragation in functionality by not using "secrets and keytab" and not doing "net ads join"? This is somewhat similiar to my question from

> On 11 Jan 2019, at 12:34, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Fri, 11 Jan 2019 12:03:30 +0100 > "Remy Zandwijk \(Samba\) via samba" <samba at lists.samba.org> wrote: > >> >> >>> On 11 Jan 2019, at 10:33, Rowland Penny via samba >>> <samba at lists.samba.org> wrote: >>> >>>

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Remy > Zandwijk (Samba) via samba > Verzonden: vrijdag 11 januari 2019 14:38 > Aan: Remy Zandwijk (Samba) via samba > Onderwerp: Re: [Samba] Running off pre-created keytabs > > > > > On 11 Jan 2019, at 14:25, Rowland Penny via samba > <samba at

Hai Guys,   The Debian Stretch packages are now also available in the repos. Im working on the samba 4.8.5 also.   I have also restructured the repo setup a bit, so package re-use is better which saved me some time. You choose the samba you want to run and you stay at that version until you change the repo.   The site info isnt updated yet with this, i'll do that after i finish up with

Hai, Sorry for all delays, it was needed. I have also restructured the repo setup a bit, so package re-use is better which saved me some time. This resulted in a samba 4.8 for jessie, no need for multiple repo lines anymore. You choose the samba you want to run and you stay at that version until you change the repo. The site info isnt updated yet with this, i'll do that after i finish

Hello everyone, We are trying to track down some samba issues and wondering there are some settings we can tweak. We have a new Supermicro server running the following with 192GB of RAM, 32 active CPUs and 54TB of usable zfs mirrors (raid10). uname -a FreeBSD hostname 11.1-RELEASE-p4 FreeBSD 11.1-RELEASE-p4 #0: Tue Nov 14 06:12:40 UTC 2017 root at

On Fri, 11 Jan 2019 09:39:35 +0100 "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > Am 2019-01-10 um 17:02 schrieb Rowland Penny via samba: > > On Thu, 10 Jan 2019 16:23:06 +0100 > > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> we'd like to provision

On Fri, 11 Jan 2019 12:03:30 +0100 "Remy Zandwijk \(Samba\) via samba" <samba at lists.samba.org> wrote: > > > > On 11 Jan 2019, at 10:33, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > On Fri, 11 Jan 2019 09:39:35 +0100 > > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > >

Hai, I've updated the repo with the Debian Stretch 4.9.4 packages. No changes on my side, so check the samba changelogs for whats fixed. Info : https://apt.van-belle.nl Buildlogs : https://downloads.van-belle.nl/samba4/Buildlogs/stretch/ The repo setup. 1) Choose http or https for you apt, both work, for https you need to : apt-get install apt-transport-https 2) Import my public key

Hi All, I started using Samba as an AD DC on el7 a few weeks ago. I have some questions for others who mights also be using Wing's rpms on el7 (http://wing-net.ddo.jp/wing). A) Is there a wiki/issues page for that repo? I could not find any.. B) is that the only repo of samba rpms available for el7/centos7? C) Is there a reason why samba46-4.6.14 is the latest available version? Are

On Fri, 11 Jan 2019 13:14:16 +0100 "Remy Zandwijk \(Samba\) via samba" <samba at lists.samba.org> wrote: > > > > On 11 Jan 2019, at 12:34, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > On Fri, 11 Jan 2019 12:03:30 +0100 > > "Remy Zandwijk \(Samba\) via samba" <samba at lists.samba.org> wrote: >

Hi all, I want to configure a samba server (3.0.25b) with krb5-1.6.2, openldap-2.3.37 and db-4.6.18 for single sign-on purpose. I have some questions. 1. Is the AD Administrator account for Samba to kinit and net join the AD only ? 2. Can I use a common user with "Create Computer Objects" permission to kinit and net join AD ? 3. I got "Failed to join domain: Strong(er)

> On 11 Jan 2019, at 14:48, L.P.H. van Belle via samba <samba at lists.samba.org> wrote: > > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Remy >> Zandwijk (Samba) via samba >> Verzonden: vrijdag 11 januari 2019 14:38 >> Aan: Remy Zandwijk (Samba) via samba >> Onderwerp: Re: [Samba]

Hi folks, I am trying to set up a domain/forest in VirtualBox server. My setup: * # uname -a FreeBSD bsd1dc.ad001.osipov.eu 10.3-RELEASE-p4 FreeBSD 10.3-RELEASE-p4 64 bit * Samba 4.4.5 from Ports tree # samba-tool -V 4.4.5 * Python 2 from Ports tree # python2 --version Python 2.7.12 Installation went smoothly but during domain provisioning Python fails with a segmentation fault

There are a number of rather low listen() queue limits in Samba which we also ran into on our pretty busy (around 300-500 users/server) Samba servers, also on FreeBSD 11.1 (six servers with 256GB RAM, 2x10Gbit ethernet, 140TB of storage). Please find enclosed a patch we use to up the limits (quite a bit). The patch makes it possible to control the queue limit via the config file using a “socket

Hi. HELP! I read: :-) http://www.samba.org/samba/docs/man/domain-member.html#domain-member-server (Which notes, "This is a rough guide to setting up Samba-3 with Kerberos authentication against a Windows 200x KDC. A familiarity with Kerberos is assumed." Is there "A guide to familiarity with Kerberos as a primer for Samba configuration" somewhere?) :-) This thread

I running 3.0.25c on OpenSolaris. I can succesfully do a kinit and see the ticket via klist, but am unable to join the domain. /usr/sfw/sbin/net -d 5 ads join -U user@DOMAIN.LOCAL gives the following error... [2007/08/29 15:49:24, 3] libsmb/clikrb5.c:(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache file found) [2007/08/29 15:49:24, 0] libads/kerberos.c:(228)