similar to: use spnego question - samba 47 to samba48 migration

Hello Gentlemen. OK, Tests were made. I got some errors only when using Samba48 (samba47 is still fine) IMPORTANT: I forgot to mention... This is being used with SQUID Proxy for SSO authentication. Got NTLMSSP neg_flags=0xa2088207 Got user=[user01] domain=[MYDOMAIN] workstation=[ADCONTROL01] len1=24 len2=338 Login for user [MYDOMAIN]\[user01]@[ ADCONTROL01] failed due to [{Access Denied} A

Hi Rowland, Thanks Much for the help, as usual! About Kerberos: Yes, I have implemented Kerberos and NTLM. I need both working. About winbindd_privileged: Not sure what you mean with " I think you might want to check that again, the 'winbindd_privileged' dir went away quite some time ago." Shouldn't that folder be there anymore? Everytime I install Samba47 or 48 it creates

In Time. Checking the services, folders and permissions, it seems samba48 does not follow exactly the same samba47 model. When restarting samba47 by using "/usr/local/etc/rc.d/samba_server restart" I could see all three services being restarted (smbd, nmbd and winbind) Now restarting samba48 I can see 2 services only (smbd and nmbd); The Winbind seems to be separated. I could not find

Hi Rowland, First of all, thanks Much for the message. Appreciate it! Here more details... The users do not log into the pfSense. The Samba is being used to authenticate users with the proxy (squid) in a pfsense environment (Freebsd) The PfSense box is added to the AD Domain as a "Member" only, so that way the proxy can authenticate against the AD via NTLM/Kerberos. Here is part of my

On Fri, 22 Jun 2018 19:25:11 -0300 Kontrol-Suporte via samba <samba at lists.samba.org> wrote: > Hello Everyone, > > Good evening! > > > > Here a Background: > > I am moving from samba47 to samba48 - I am keeping my existing > scripts and config files. > > The messages below are now appearing while executing some tasks in > samba48 only -

Hi Rowland. Very good point (man smb.conf) - I found out that, if I have the line " client NTLMv2 auth = yes" then I don't need any other setting. Also, the Min Protocol is for the sharing purposes, not authentication. So, I am deleting the "min protocol" entry and keeping the "client NTLMv2 auth=yes". I am also using SPNEGO, which is required in this case.

Hi Rowland, Actually I don't want to disable the Yellow Pages, that's a situation I already have in the pFsense, cause YP was disabled by the pfsense developers. So my doubt is: Is there a way to make samba (latest version) to work without the YP enabled? What about what people made with that samba version 4.4.16 I mentioned? Not sure how they did that. The only thing I know is that it is

On Sat, 23 Jun 2018 17:04:39 -0300 Kontrol-Suporte via samba <samba at lists.samba.org> wrote: > Hello Gentlemen. > OK, Tests were made. I got some errors only when using Samba48 > (samba47 is still fine) IMPORTANT: I forgot to mention... This is > being used with SQUID Proxy for SSO authentication. > > Got NTLMSSP neg_flags=0xa2088207 > Got user=[user01]

Hello everyone, Just made a brand new installation of the Samba 4.10 for FreeBSD (got it from FreeNAS project) and it worked very well but I am facing some issues while working with it + Squid 4.6 Here is the thing. I could Join the machine to my Domain with absolutely no problems. I also created the Kerberos keytab, etc. For some reason, the Squid Helpers are showing an error message, like

Hi Andrew, Thanks much for the message. As I am using FreeBSD 12, that´s the latest SAMBA version available via PKG support, although I know it's possible to compile the ver 4.10 Would you mind let me know where to get its Source code and possibly some DOC material for FreeBSD compiling? I will definitively give it a try. Thanks Once again!!! Much appreciated! Fabricio. -----Original

On Sun, 24 Jun 2018 20:32:20 -0300 Kontrol-Suporte via samba <samba at lists.samba.org> wrote: > Hi Rowland, > Thanks Much for the help, as usual! > > About Kerberos: Yes, I have implemented Kerberos and NTLM. I need > both working. About winbindd_privileged: Not sure what you mean with > " I think you might want to check that again, the >

Hello Everyone, I am pretty new on this SAMBA list, so greetings! I have a technical question about the relation of SAMBA and YP (Yellow Pages/ NiS) I´ve been learning on how to make my Firewall/proxy solution (based on FREEBSD/PfSense) to have a trust-relationship with the Microsoft AD/Domain so I can have Single Sign-on with NTLM/Kerberos integration. PfSense has the YP (Yellow Pages) disabled

Hello Everyone, Good morning/afternoon/evening. Is there any chance to have SAMBA 48 working with Python36 and its derivatives? ( py36-dnspython-1.15.0.txz. py36-iso8601-0.1.11.txz, py36-ply-3.11.txz, py36-setuptools-40.6.2.txz) Currently SAMBA 48 requires python 26, but that is conflicting with existing packages in the server that is using py36. Any way to work around that issue?

On Thu, 2019-04-04 at 08:38 +0200, Andrea Venturoli via samba wrote: > On 4/4/19 12:36 AM, Suporte - KONTROL via samba wrote: > > > > Hi Andrew, > > Thanks much for the message. > > > > As I am using FreeBSD 12, that´s the latest SAMBA version available > > via PKG support, although I know it's possible to compile the ver > > 4.10 > > Would

Hai, Someone called me called?? I did a quick read here in this thread.. The upn part is done, so your almost there. You need to make sure your DNS is working as it should. To check on the proxy with dig a hostname.FQDN. dig -x ip_the_server Test this for the DC hostnames/ips also. If that all ok, you can try these settings in squid # For squid ( works for me as of squid 3.2 up to 3.5

Hello everyone, Good morning/afternoon/evening. Got a question regarding a FREEBSD 12 being used as a proxy (SQUID) with SAMBA410. Do I have to keep SMBD and NMBD services enabled with WINBIND to act as a an Active Directory "CLIENT ONLY" (for Squid proxy purposes) or, can I disable SMBD and NMBD and keep WINBIND only? I am asking because I made a test killing both processes and

Hai, Sorry for all delays, it was needed. I have also restructured the repo setup a bit, so package re-use is better which saved me some time. This resulted in a samba 4.8 for jessie, no need for multiple repo lines anymore. You choose the samba you want to run and you stay at that version until you change the repo. The site info isnt updated yet with this, i'll do that after i finish

Hai Guys,   The Debian Stretch packages are now also available in the repos. Im working on the samba 4.8.5 also.   I have also restructured the repo setup a bit, so package re-use is better which saved me some time. You choose the samba you want to run and you stay at that version until you change the repo.   The site info isnt updated yet with this, i'll do that after i finish up with

Greets, samba-users, I contact this list because of a problem I face at a customer's site. We run Samba version 3.0.28-0.6-1787-SUSE-CODE10 there on a SLES 10 SP2 server. This server is located behind a firewall (run by me), that firewall allows all relevant Samba-ports through (137-139, 445). The clients are located in a separated subnet, the routing between client- and server-subnet is

Hai, I've updated the repo with the Debian Stretch 4.9.4 packages. No changes on my side, so check the samba changelogs for whats fixed. Info : https://apt.van-belle.nl Buildlogs : https://downloads.van-belle.nl/samba4/Buildlogs/stretch/ The repo setup. 1) Choose http or https for you apt, both work, for https you need to : apt-get install apt-transport-https 2) Import my public key