similar to: How to use kerberos as the default auth in AD config?

Hi Rowland, I tried both pam winbind & also samba with fix for CVE-2018-1139. But still cannot get windows 2016 "protected users" to work with samba. Note that "wbinfo --krb5auth" manages to authenticate. This I see it uses WINBIND_PAM_AUTH & not WINBIND_PAM_AUTH_CRAP. I dont see how to switch to WINBIND_PAM_AUTH instead of AUTH_CRAP. Any further insights? Thanks!

Thanks Rowland for your pointers! I'm sorry to just mention it as win2k. This is actually a Windows 2016 server on which we want to get AD/"Protected Users" working. I will try pam_winbind & get back if this solves the issue. --Shyam On Tue, 14 Aug 2018 09:25:29 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 13 Aug 2018 17:32:05 -0700 >

On Mon, 13 Aug 2018 19:25:24 +0530 Shyam Kaushik via samba <samba at lists.samba.org> wrote: > Hi Folks, > > We have samba(4.8) deployed with following key parms > security = ADS > realm = TEST > client NTLMv2 auth = No > ntlm auth = disabled > > We have a win2k user configured as a "Protected User" >

Well, you know, a 2010 EOL-date isn't that old... :P On Mon, Aug 13, 2018 at 7:41 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Mon, 13 Aug 2018 19:25:24 +0530 > Shyam Kaushik via samba <samba at lists.samba.org> wrote: > > > Hi Folks, > > > > We have samba(4.8) deployed with following key parms > > security = ADS >

http://bugzilla.netfilter.org/show_bug.cgi?id=765 Summary: Netfilter crash on bridged/TAP device on 2.6.38 & 3.0 kernels Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Ubuntu Status: NEW Severity: major Priority: P2 Component: bridging

On Fri, Jul 10, 2015 at 02:21:50PM +0530, Shyam Kaushik wrote: > Hi Volker, > > Thanks for your reply. When the problem was happening(before we turned off > level2-oplocks), we had captured one run with smbd debug all:10 > (unfortunately we didn’t setup for other modules like vfs etc). Can you > please see if this below trace helps? Thanks. Can you please send the whole

Hi All, Need your help/inputs on what could be the probable cause/how to debug this further. We are using samba-4.0.25 & expose a share that has oplocks enabled & no kernel-oplocks set. We constantly see these messages in samba logs [2015/06/25 03:05:30.593150, 0, pid=1581, class=locking] ../source3/smbd/oplock_linux.c:184(linux_release_kernel_oplock) linux_release_kernel_oplock:

On Thu, Jul 09, 2015 at 01:09:05PM +0530, Shyam Kaushik wrote: > Hi Volker, > > Yes this problem happens when we have "kernel oplocks = no". This happened > constantly in one of production systems & so we disabled level2-oplock > /set kernel-oplocks=yes (to avoid this issue). So unfortunately don’t have > an environment where it reproduces now & cannot capture

On Thu, Jul 09, 2015 at 10:39:58AM +0530, Shyam Kaushik wrote: > Hi All, > > Need your help/inputs on what could be the probable cause/how to debug > this further. > > We are using samba-4.0.25 & expose a share that has oplocks enabled & no > kernel-oplocks set. We constantly see these messages in samba logs > > [2015/06/25 03:05:30.593150, 0, pid=1581,

Hi Folks, We are using samba-4.0.22. We have a very strange issue: We have samba connected to AD & a folder layout like AA\BB\CC\ Folder AA ? has explicit permission for "AD\user1" Folder BB ? does not inherit permission from AA & "AD\user1" is explicitly removed Folder CC ? does not inherit permission from BB & "AD\user1" is added If we

Hi, I'm having trouble realizing a krb5auth with pam_winbind with trusted domain users (external trust) on our clients. The client is joined to a local domain, which has a "external trust" to a global domain. The following things are working for all users (local and trusted domain): "wbinfo -i" "wbinfo --pam-logon" "wbinfo -a" "kinit"

Hai,   Im setting up a new proxy and im testing a bit around. Goal is, get everyting working with minimal changes to the system.   Setup: Debian 8 with NFS nfsv3 and v4 (krb) automounts,  winbind 4.5.3 , squid 3.5.24 (with ssl support) Which is basicly a copy of my other proxy but a new install with more systemd and less packages used.   Working: -          ssh logins with AD users.

Hai,   Since im still having problems reading the man smb.conf about the NTLM settings, im asking here. How do i allow NTLM auth for my proxy.   I have been playing around with :           client NTLMv2 auth         raw NTLMv2 auth         ntlm auth         lanman auth   i’ve added the proxy user to the winbind_privileged group. and did set the needed rights. chgrp winbindd_priv

Hi: we have following setup: 1. 2.6.16-33-based Xen 3.0.3/Xen-3.0.4 DOM-0 kernels. 2. Using LILO-mbootpack from USB we boot Xen-->DOM-0 setup 3. We mount harddisk and try to install xp.hvm While,we are successful with FCs as DOM-U, for XP we get, VBD (768) could not be connected. We do have max_loop count to 64 and enough loop devices. Note that above error is consistent on both 3.0.3

Hi, the external trust, we have, is a one directional external trust. So users of the trusted dom can logon on local dom clients, but not the other way around. In case of "wbinfo -a" all communication is between the client and the domain controller of the local domain, which is the proxy for the auth process. In case of "wbinfo -K" all communication is between the client

The division part of the following code is not executing - (seq(n-1)*mean(XS)-cumsum(XS[seq(n-1)]))*diff(XS)/((n-1)*var(XS)) Note: Prof Yatracos: Would you please send them one example ? Thanks, Kaushik -----Original Message----- From: ripley@stats.ox.ac.uk [mailto:ripley@stats.ox.ac.uk] Sent: Friday, August 30, 2002 4:27 PM To: Kaushik Bhattacharyya Cc: r-devel@stat.math.ethz.ch;

Hi folks I have two data frames. I know that the nth (let's say the 7th) row in the first data frame (sequence) is there in the second (today.sequence). When I try to check that by doing 'sequence[7,] %in% today.sequence', I get all FALSE when it should be all TRUE. I'm certain I'm making some trivial mistake. Any solutions? The code to recreate the data frames and see

Hi all, Please can anybody explain how communication(direct or indirect) happens between xen and guest os(windows) in full virtualization mode. Both from VMM to guest and from guest to VMM. Thanks and regards, Aditya. __________________________________________________________ Yahoo! India Answers: Share what you know. Learn something new http://in.answers.yahoo.com/

Hi,I have recently installed llvm-3.1 , gnu classpath-0.97.2 and vmkit I compiled a simple java file "hello.java" to hello.class Then converted hello.class to llvm bytecode(hello.bc) using vmjc from vmkitwhen i tried to run "hello.bc" using lli I am getting the following error shyam at shyam:~$ cat hello.javaimport java.io.*; class hello { public static void main(String[]

I''m using xen-unstable, and I''ve successfully made a passthrough of an intel storage controller to an HVM domU, binding with pciback. 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family SATA AHCI Controller (rev 05) I can access the array from within Windows by installing Intel Rapide Storage Drivers, and everything works as it should. I only have a