similar to: accessing AFS volume

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via > samba wrote: >> Do you know any example Samba configuration that authenticate >> to plain - non-AD, e.g. MIT KDC - Kerberos server? > > This a normal and fully supported configuration. It maps to > normal unix users. Thanks! is it mean that the OS

On 2017-04-16, 19:06, S P Arif Sahari Wibowo via samba wrote: > I was looking into samba wiki pages and cannot find > documentation for this. Generally most the documentation pages > either discussing samba as AD member or standalone. So still looking at this. So this is the state currently: kerberos setup (krb5.conf and keytab) is working in the server, I can do kinit properly. But

Hi! Do you know any example Samba configuration that authenticate to plain - non-AD, e.g. MIT KDC - Kerberos server? Would you mind point me to that configuration? What will be the issue of this kind of configuration? Thank you. -- ____ ____ ____ ____ (stephan paul) Arif Sahari Wibowo /___ /___/ /___/ /___ http://www.arifsaha.com/ ____/ / / / ____/

On 2017-04-25, 15:40, Andrew Bartlett via samba wrote: > This looks like the instructions: > https://social.technet.microsoft.com/wiki/contents/articles/2751.kerberos-interoperability-step-by-step-guide-for-windows-server-2003.aspx#Using_an_MIT_KDC_with_a_Stand-alone_Windows_Server_TwentyOhThree_Client Thanks Andrew! This is quiet useful info. > Also, you still have to create all the

On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > Not windows clients without much pain. In theory Windows can > join a non-AD KDC, but it is incredibly rarely done. Would you mind to give clearer picture how much pain we are talking about here? Any link to somebody who did it? I need to compare it to the pain of another alternatives I have in the table, like let clients mount

On 2017-04-22, 02:12, Andrew Bartlett via samba wrote: > To be clear, this would be an 'MIT Trust'. This isn't > currently supported, but would allow you to authenticate with > the username and password via krb5 from the trusted domain, > but use the ticket to log in to the Windows desktop and the > Samba file server. Actually no. I fork this thread to specifically

Hi! Do you know any trick (scripts, combining rsync with other tools, etc.) to let rsync only delete the files with modification time before (older than) a certain date-time (can use the time of a file as a reference time)? It probably more difficult when we rsync out (for rsync in, the we can actually find out right away which files in that criteria using small Find::File perl script). The

On Sun, 2017-04-16 at 19:06 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba > > wrote: > > > Do you know any example Samba configuration that  > > > authenticate to plain - non-AD, e.g. MIT KDC - Kerberos  > > > server? > >

On 2017-04-27, 07:13, Gaiseric Vandal via samba wrote: > A Samba AD directory server (domain controller) is its own > kerberos server. I don't see how you could configure it to use > another KDC. I don't know Kerberos much, so I am wondering can something like this "delegated"? > Depending on how may computers in your environment, it may be > easier to have

On 2017-04-20, 08:03, Rowland Penny via samba wrote: > It works against a Samba AD DC from a Unix domain member, There are no Samba AD DC, as the title said, I am setting Samba to authenticate with non-AD Kerberos. > provided you change 'localhost' to the domain members short > hostname. No change: # smbclient -k -U mykerbuser -L myserver session setup failed:

On Thu, 20 Apr 2017 07:32:16 -0600 (MDT) S P Arif Sahari Wibowo via samba <samba at lists.samba.org> wrote: > On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > > I think you really want to move to Samba as an AD DC. > > In that case, how can I setup a Samba AD DC which has its > authentication came from another non-AD Kerberos service? > Preferably in a

On Wed, 2017-04-19 at 10:09 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-19, 01:22, Stefan Just via samba wrote: > > There is a tutorial how to make a Kerberos server to be a  > > samba server too. > > I don't have option to do changes in the Kerberos server, at  > least not now. Is that the only way to have samba authenticated  > from a non-AD

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote: > On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba wrote: > > Do you know any example Samba configuration that > > authenticate to plain - non-AD, e.g. MIT KDC - Kerberos > > server? > > This a normal and fully supported configuration. It maps to > normal unix users. Thanks! is it mean that

Am 19.04.2017 um 14:37 schrieb Rowland Penny via samba: > On Wed, 19 Apr 2017 09:22:47 +0200 > Stefan Just via samba <samba at lists.samba.org> wrote: > >> >> There is a tutorial how to make a Kerberos server to be a samba >> server too. >> >> It is available at: >> http://www.danbishop.org/2015/01/30/ubuntu-14-04-ultimate-server-guide/8/

On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > I think you really want to move to Samba as an AD DC. In that case, how can I setup a Samba AD DC which has its authentication came from another non-AD Kerberos service? Preferably in a separate server from the Kerberos service. I also have a LDAP service synchronized with the Kerberos service, but I cannot have the old solution

On 2017-04-20, 07:46, Rowland Penny via samba wrote: > I don't think you can. It will be very sad if that's the case, since it means Samba is not adequate tool for this purpose. If we need to manage separate passwords database anyway, no difference than just have the Windows support person setup a Windows box to do the file sharing. I was hoping to convince decission maker to use

On Thu, 2017-04-20 at 07:25 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-16, 19:06, S P Arif Sahari Wibowo via samba wrote: > > I was looking into samba wiki pages and cannot find  > > documentation for this. Generally most the documentation pages  > > either discussing samba as AD member or standalone. > > So still looking at this. > > So this is

Am 18.04.2017 um 20:36 schrieb S P Arif Sahari Wibowo via samba: > On 2017-04-17, 15:23, Andrew Bartlett via samba wrote: >> No, but your clients will need to get a ticket somehow. That is >> presumably already happening otherwise you wouldn't be asking for this. > > No, the situation is that currently I only have Kerberos server, but not > ADS. I like to setup Samba

On Tue, 2017-04-25 at 15:23 -0600, S P Arif Sahari Wibowo via samba wrote: > On 2017-04-20, 03:35, Andrew Bartlett via samba wrote: > > Not windows clients without much pain.  In theory Windows can  > > join a non-AD KDC, but it is incredibly rarely done. > > Would you mind to give clearer picture how much pain we are  > talking about here? Any link to somebody who did it?

http://bugzilla.mindrot.org/show_bug.cgi?id=717 Summary: AFS tokens are not generated upon login Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org