similar to: Question: Samba and YP-Yellow Pages relation.

Hai, Someone called me called?? I did a quick read here in this thread.. The upn part is done, so your almost there. You need to make sure your DNS is working as it should. To check on the proxy with dig a hostname.FQDN. dig -x ip_the_server Test this for the DC hostnames/ips also. If that all ok, you can try these settings in squid # For squid ( works for me as of squid 3.2 up to 3.5

Hi Rowland, Actually I don't want to disable the Yellow Pages, that's a situation I already have in the pFsense, cause YP was disabled by the pfsense developers. So my doubt is: Is there a way to make samba (latest version) to work without the YP enabled? What about what people made with that samba version 4.4.16 I mentioned? Not sure how they did that. The only thing I know is that it is

On Thu, 5 Apr 2018 18:57:03 -0300 "Suporte - KONTROL" <suporte at kontrolsecurity.com.br> wrote: > Hi Rowland, > Actually I don't want to disable the Yellow Pages, that's a situation > I already have in the pFsense, cause YP was disabled by the pfsense > developers. Yellow pages is the old name for NIS and unless it is installed it isn't used by Linux and

Hai Amos, Thank you for your very clear responce.. few small questions.. Is there a way to setup the proxy for the following. 1) use negotiate kerberos for auth, ( which is working already for all domain joined machines ) 2) use a fall back that works, for now basic ldap works for non windows machines, and domain joined machines. 3) use any other fallback way for authentication users on windows

... sorry wrong list.. but you can read it and learn from it.. :-)) Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens >L.P.H. van Belle >Verzonden: dinsdag 18 augustus 2015 9:45 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [squid-users] debian Jessie squid with >auth (kerberos/ntlm/basic) ERROR

Hi Rowland, First of all, thanks Much for the message. Appreciate it! Here more details... The users do not log into the pfSense. The Samba is being used to authenticate users with the proxy (squid) in a pfsense environment (Freebsd) The PfSense box is added to the AD Domain as a "Member" only, so that way the proxy can authenticate against the AD via NTLM/Kerberos. Here is part of my

The most simple way to add SSO. ? Install winbind krb5-user, then?your smb.conf,? update this config : [global] ??? # Auth-Only setup with winbind. ( no Shares ) ????log level = 1 ??? workgroup = NTDOM ??? security = ADS ??? realm = YOUR-REALM ??? netbios name = HOSTNAME ? ??? preferred master = no ??? domain master = no ??? host msdfs = no ??? dns proxy = yes ? ??? interfaces = eth0 lo ??? bind

Hai, I think this is an old bug.. ( pretty sure about it ) And i suggest to dont change anything except smb.conf. Your trying to use kerbereros usersname. wbinfo -a marcio at EMPRESA.COM.BR Enter marcio at EMPRESA.COM.BR's password: And you using: winbind use default domain = yes This is and old bug somewhere in 4.5/4/6 i believe. Only change these, yes only slows down you

Hai marco, More info on squid config might help here and no smb.conf.. Ahead of things... And you better use something like this, change to negotiate auth. ( and use SSO ). auth_param negotiate program /usr/lib/squid/negotiate_wrapper_auth \ --kerberos /usr/lib/squid/negotiate_kerberos_auth -s HTTP/proxy1.internal.domain.tld at REALM \ #Or if you dont have the SPN set. --kerberos

On Thu, 2018-09-27 at 12:27 +0200, L.P.H. van Belle via samba wrote: > Hai marco,  > > More info on squid config might help here and no smb.conf..  > Ahead of things...   > > And you better use something like this, change to negotiate auth. ( > and use SSO ).  > > auth_param negotiate program /usr/lib/squid/negotiate_wrapper_auth \ >     --kerberos

For got to mention. If you dont have any certificates setup and not using tls. Set on the DC's. ldap server require strong auth = allow_sasl_over_tls Or ldap server require strong auth = no And you may need to enable NTLM v1 on the proxy also, but thats why i recommends kerberos auth. SO preffered imo, try to avoid any NTLM to improve your security. For NTLM v1 then you

On Thu, 5 Apr 2018 15:39:45 -0300 Suporte - KONTROL via samba <samba at lists.samba.org> wrote: > Hello Everyone, > I am pretty new on this SAMBA list, so greetings! > I have a technical question about the relation of SAMBA and YP (Yellow > Pages/ NiS) > > I´ve been learning on how to make my Firewall/proxy solution (based on > FREEBSD/PfSense) to have a

In Time. Checking the services, folders and permissions, it seems samba48 does not follow exactly the same samba47 model. When restarting samba47 by using "/usr/local/etc/rc.d/samba_server restart" I could see all three services being restarted (smbd, nmbd and winbind) Now restarting samba48 I can see 2 services only (smbd and nmbd); The Winbind seems to be separated. I could not find

Rowland, dont be to hard on the guy.. ;-) Sorry that i cant help out more atm but im in process of win7 to win 10 testing with samba, and mainwhile doing a rollout.. :-/ Here are some working examples on debian jessie.. with samba 4.1.7 debian. an apache2.4 kerberos auth example. AuthType Kerberos AuthName "Website Login" KrbMethodNegotiate On KrbMethodK5Passwd

Hello Gentlemen. OK, Tests were made. I got some errors only when using Samba48 (samba47 is still fine) IMPORTANT: I forgot to mention... This is being used with SQUID Proxy for SSO authentication. Got NTLMSSP neg_flags=0xa2088207 Got user=[user01] domain=[MYDOMAIN] workstation=[ADCONTROL01] len1=24 len2=338 Login for user [MYDOMAIN]\[user01]@[ ADCONTROL01] failed due to [{Access Denied} A

On Thu, 5 Apr 2018 17:01:22 -0300 "Suporte - KONTROL" <suporte at kontrolsecurity.com.br> wrote: > Hi Rowland, > First of all, thanks Much for the message. Appreciate it! > > Here more details... > The users do not log into the pfSense. The Samba is being used to > authenticate users with the proxy (squid) in a pfsense environment > (Freebsd) The PfSense box

Hello Everyone, I am pretty new on this SAMBA list, so greetings! I have a technical question about the relation of SAMBA and YP (Yellow Pages/ NiS) I´ve been learning on how to make my Firewall/proxy solution (based on FREEBSD/PfSense) to have a trust-relationship with the Microsoft AD/Domain so I can have Single Sign-on with NTLM/Kerberos integration. PfSense has the YP (Yellow Pages) disabled

Hello everyone, Just made a brand new installation of the Samba 4.10 for FreeBSD (got it from FreeNAS project) and it worked very well but I am facing some issues while working with it + Squid 4.6 Here is the thing. I could Join the machine to my Domain with absolutely no problems. I also created the Kerberos keytab, etc. For some reason, the Squid Helpers are showing an error message, like

Hi Rowland, Thanks Much for the help, as usual! About Kerberos: Yes, I have implemented Kerberos and NTLM. I need both working. About winbindd_privileged: Not sure what you mean with " I think you might want to check that again, the 'winbindd_privileged' dir went away quite some time ago." Shouldn't that folder be there anymore? Everytime I install Samba47 or 48 it creates

Hi Rowland. Very good point (man smb.conf) - I found out that, if I have the line " client NTLMv2 auth = yes" then I don't need any other setting. Also, the Min Protocol is for the sharing purposes, not authentication. So, I am deleting the "min protocol" entry and keeping the "client NTLMv2 auth=yes". I am also using SPNEGO, which is required in this case.