similar to: Kerberos errors during ads operations

hi, ? i have recently installed a samba 4 in a DC role. The distribution is a debian jessie/sid, the version of samba is 4.1.7. The server is globally working but there is some litle trouble. on the server itself, i can do a kinit without probleme but if i try a kpasswsd, i obtain the following ? root at station:/var/log/samba# kinit Password for administrator at TOTO.FR: root at

I am able to get a kerberos ticket with kinit. When I try to net ads join, it seems to loop. In running net ads join in -d 10, I found that it tries enctypes 18,17,16,and 2 and then repeats, over and over. It does not seem to work on any of these. I'm trying to get it to join a win2k3 domain. Below is the bottom part of the log from net ads join, as well as some of my krb5.conf. Any

Hello Kevin, We have a  Samba/Windows20008R2 domain that's been running a few years now. Here are the details: * clients auth with SSSD (ldap, kerberos, ldap_schema=rfc2307bis) * idmap * samba on clients/server for joining domain We have scripts that automatically create users with UnixHomeDir, UID and GUID numbers within AD. I don't know about using WInbind...  I dropped that

Hi Rowland, I get below error while running the script again. bash samba-collect-debug-info.sh > samba-output kinit: Client's credentials have been revoked while getting initial credentials cat samba-output Please wait, collecting debug info. Wrong password or kerberos REALM problems, exiting now. Below is my /etc/krb5.conf [libdefaults] default_realm = EMEA.MEDIA.GLOBAL.LOC

I'm attempting to configure Samba 3.0.4 to work with Windows 2003 Active Directory, mapping users' home directories automatically. Currently we use this method in production with Windows 2000 but wish to migrate to 2003. The problem seems to be Kerberos related. I was able to join the Linux box (RedHat 9) to the AD. I can do a "kinit <username>" successfully. Klist shows a

> I do not understand why you are doing this, for kerberos to work correctly, you need to be able to find everything easily and everything must be using the same time. So, you need kerberos, a dns server and an ntp server and if you want more than authentication, you need a fileserver. OH look, I just described Active Directory ? Not saying you cannot get this setup to work, but why are

hi, ? i have recently installed a samba 4 in a DC role. The distribution is a debian jessie/sid, the version of samba is 4.1.7. The server is globally working but there is some litle trouble. on the server itself, i can do a kinit without probleme but if i try a kpasswsd, i obtain the following ? root at station:/var/log/samba# kinit Password for administrator at TOTO.FR: root at

Hi, I 've a gateway and I want to use squid authenticated with Windows 2000 Active Directory users. I've a development platform with Debian/Sarge as gateway, and it works. (samba 3.0.10-1 and Kerberos 1.3.6-1) On the other side the production platform uses RedHat Enterprise AS3, initially with Samba 3.0.6 and Kerberos 1.2.7-28. I was not able to use Active directory groups without get

Samba 4.7.6 Ubuntu /etc/hosts: 127.0.0.1 localhost.localdomain localhost ::1 localhost6.localdomain6 localhost6 # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-localhost ip6-loopback fe00::0 ip6-localnet ff02::1 ip6-allnodes ff02::2 ip6-allrouters ff02::3 ip6-allhosts /etc/resolv.conf: # This file is managed by man:systemd-resolved(8). Do

Had a situation where users could not map drives from Windows XP to Solaris 9 system running Samba-3.0.10 for Active Directory. This system has been running for a couple of years without problems. Now recently, the site administrators have added some new servers to the domain which may have introduced a problem. This krb5.conf file has been modified to hide the site in question. [libdefaults]

as i promise last week, a incomplete documentation about configuring a trust beetween a heimdal kdc and a windows AD domain really sorry for non-french speakers of course, i'm very interresting in any feedback... Pascal configuration - le realm Kerberos est DEMO.LOCAL - le realm du domaine AD est ad.demo.local La configuration du KDC lui m?me ne pr?sente pas de difficult?

Hello, I've installed a samba4 server and now I've tried to get a kerberos ticket, like this: base:/usr/local/samba# kinit stefan stefan@SAMBA4.LOCAL's Password: kinit: converting creds: Invalid argument I'm using heimdal-clients (0.6.3) and samba4 svn r22508. My krb5.conf test configuration: [libdefaults] default_realm = SAMBA4.LOCAL kdc_timesync = 1

Hello! If i try a net ads join i get a kerberos error , but my kerberos works fine, i can do a kinit,klist and so on. the error i get is the following. [2005/09/01 08:02:16, 0] libads/kerberos.c:ads_kinit_password(146) kerberos_kinit_password root@MY.DOMAIN.COM failed: Cannot resolve network address for KDC in requested realm [2005/09/01 08:02:16, 0] utils/net_ads.c:ads_startup(191)

Hi all I'm actually trying to setup an AD authentication on linux workstations. - I've setup an windows AD 2003 server, which work fine. - I've setup linux redhat 4 enterprise server (used as a workstation for the moment) - On the redhat, I already have setup smb.conf, krb5.conf, nsswitch.conf, pam.d/login, pam.d/system_auth. I have pasted all these files below. ==> I get

Hi, I'm running a mixed linux/Windows network with authentication done using Active Directory. The Linux clients use Samba/Winbind for authentication (with help from the list, thanks!). I've setup smb.conf such that doing 'net ads join -Uadministrator' populates my /etc/krb5.keytab (see configuration files below). klist shows me a nice set of principals from /etc/krb5.keytab

On 9/30/2020 7:23 PM, Jason Keltz wrote: > On 9/30/2020 4:11 PM, Remy Zandwijk via samba wrote: > >>> On 30 Sep 2020, at 21:42, Jason Keltz via samba >>> <samba at lists.samba.org> wrote: >>> >>> >>> On 9/30/2020 3:01 PM, Remy Zandwijk via samba wrote: >>>>>>> On the client, add: >>>>>>>

Hi, As I recall, 3.0.25a creates it's OWN krb5.conf file based on info it gets back from the DC to try to handle site stuff (so it uses the 'nearest' kdc, etc). I forget exactly how this mech. works, but if the kdc returned with the site info (which subsequently gets built into samba's personal 'krb5.conf' file) is down, or replication is off, your kinit would work,

Hi, i've installed Samba 3.0.23d on Solaris 10 (SPARC) with MIT Kerberos 1.5.1, openLDAP 2.3.30 and openSSL 0.9.8d. I have 2 Windows Server 2003 SP1 Domain Controller and about 20 Windows XP SP2 clients. My problem is that i can't get a kerberos ticket to join the domain. If i try to get a ticket with 'kinit Administrator@PONTOS.LOCAL' i get always the error kinit(v5): KDC

On 9/30/2020 4:11 PM, Remy Zandwijk via samba wrote: >> On 30 Sep 2020, at 21:42, Jason Keltz via samba <samba at lists.samba.org> wrote: >> >> >> On 9/30/2020 3:01 PM, Remy Zandwijk via samba wrote: >>>>>> On the client, add: >>>>>> >>>>>> gensec_gssapi:requested_life_time = <int> # seconds

Hi My overall project is to get a Debian Sarge mail/samba-server to connect with a Windows server 2003, but i'm having problem with the kerberos/LPAD connection. I started uot with this guide: http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 And i got all the components (Have_KRB5_H and etc.), but no connection.. If i test the conn with: kinit administrator@DOM.NET