similar to: Samba and AD Certificate Services

Hai Pierro, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Pietro Stäheli via samba > Verzonden: vrijdag 15 februari 2019 10:48 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Samba and AD Certificate Services > > Hi folks, > > Does anybody have experience using ADCS in conjunction with Samba? I > would

Hi All, This Samba release changelog (https://wiki.samba.org/index.php/Updating_Samba#Incorrect_TLS_File_Permissions) specifically mentions a security issue and that that the multiple *.pem files needed for LDAP via TLS all need "special permissions" - and mentions to delete old files without the required permissions to force file renewal. Yet in the official Samba documentation

Hi everyone, I have a basic SAMBA setup with a main AD DC ad1 and a backup AD DC ad2, running on Samba 4.5.16-Debian on Raspbian. I would now like to enable LDAPS so my users can authenticate in other non Samba services using Active Directory. From reading the documentation here: https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC I understand that for the most

I am currently NOT using SSL on my Samba domain. While reading "Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC" and thinking about implementing. I'm having trouble "getting my head" around what certificates go where. Simply put, I am not clear as to generating certificates on the clients and then copy which files to to the server or vice versa? What happens when

Hi, On 20/06/2018 20:38, Andrew Bartlett wrote: > To be clear, we don't replicate sysvol, you need to work that out > yourself (yes, this sucks). > Right, I'm doing that with Robocopy from the Windows DC initially, then with rsync. >> Is there any further preparation I need to do on the Windows server side >> to make a clean demotion possible? I can force the

Okay, it's done. Here is the file Le mar. 6 ao?t 2019 ? 10:55, Rowland penny via samba <samba at lists.samba.org> a ?crit : > On 06/08/2019 09:36, Guillaume Couvreur wrote: > > it doesn't work, here is the log file > > Nothing there, can you try raising the log level ? > > start by adding: > > log level = 4 > > to smb.conf and restart Samba and

Hi, I'm preparing to move a small business environment away from Windows-based AD (Windows Server 2012R2, Domain and Forest downgraded to Win2008R2 level) to Samba. So far in my lab environment joining Samba as a DC works, including DNS and Sysvol replication. OS: Debian 9 Samba versions 4.5.12 (Debian repository) and 4.8.2 (latest release compiled from source), same behavior on both

Hi guys, Does anybody know if freebsd-update is going to be available for 6.1-RELEASE before the end of Colin's "summer of FreeBSD work"? I wouldn't like to bother Colin directly via e-mail, so if anyone already asked for this or something.... Thanx, regards -- Pietro Cerutti <pietro.cerutti@gmail.com>

Hello i have an Imac g4 flat panel 1ghz with geforce 4mx , ubuntu gutsy and a 2.6.22 kernel . I have tried nouveau, but i have some problem. I post also my log ... thx ___________________________________ L'email della prossima generazione? Puoi averla con la nuova Yahoo! Mail: http://it.docs.yahoo.com/nowyoucan.html -------------- next part -------------- A non-text attachment was

Dear all, I think there's a security problem with the acroread plugin for firefox. I'm using sysutils/pwsafe to manage my passwords. A feature of this tool is that it can copy the requested password to the X clipboard, allowing the user to paste it (eg. in a password box), never seeing the pass in clear. When I load a PDF document in Firefox, the acroread process lives on even after the

Hi: I have a machine with four interfaces connecting four different networks. I am learning to use nmap and trying to force the nmap working only one interface. As nmap man page states, I use -e option and it would not work: nmap -e fx0 -v -sP 192.168.128.0/23 Starting Nmap 3.95 ( http://www.insecure.org/nmap/ ) at 2006-02-04 14:04 CST getinterfaces: Failed to open ethernet interface (el0)

Hi all. I'm looking for a way to empty user's trash folder. Can message deletion or folder purging be scheduled? Thanks in advance. -Pietro.

Hello, I'm having trouble connecting to an Apple Time Capsule's smb shares. The connection doesn't work, and with "dmesg" I see the following message, repeated every time I try: [26937.531511] CIFS VFS: RFC1001 size 39 bigger than SMB for Mid=4 [26937.531580] Bad SMB: : dump of 48 bytes of data at 0xffff880052832380 [26937.531615] 00000027 424d53ff 00000074 00018800

My ldaptest.php works now. Can't tell the "missing link" so far ... but it seems it's connect via ldaps now (and reading users etc)

Hello I'm trying to do the following vector operation: given vector x = c(x1,x2,x3,x4...xn), produce vector y = c(x1,x1+x2,x1+x2+x3,...x1+...+xn). E.g., from x = c(1,3,2,2,5), produce y = c(1,4,6,8,13). The underlying problem is finding the cumulative distribution function given the empirical density distribution function. I have done some research on this but the only relevant

Thanks ! On this forum is also shown this information : http://lists.xiph.org/pipermail/speex-dev/2009-January/007050.html According to vk's results, it could be possible to run Speex at 4/6 & 8 kbps on a Cortex M-3 at 36 MHz ... so not excluding the EFM32 ... Nico 2010/3/3 Pietro Maggi <studiomaggi at gmail.com> > On ST forums there is someone that states it has done an

Dear Speex developers I am going to port Speex on LPC2368 I tested Speex encoding and the mesurments shows ~40ms cpu time for one frame Do you know who ported speex to NXP or other 32bit platform? Best Regards Zohar fox -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.xiph.org/pipermail/speex-dev/attachments/20081105/8261e962/attachment.htm

On 19/05/2023 09:50, Olivier MARTIN via samba wrote: > Thanks Andrew for your reply. > > Actually, I started to dive into the code just before your answer to try > to analyze and potentially fix the issue. But after stepping back I > actually realized I was looking at the wrong LDAP entry! > > My initial intention was to set the domain controller's GUID to a known

On Mon, 2018-03-19 at 11:55 +1300, Garming Sam via samba wrote: > Hi, > > Maybe this page might be helpful. I don't know how up to date it is, but > the expectation seems to be that it should be able to work with > alternative forms of authentication (with Kerberos PKINIT). > > https://wiki.samba.org/index.php/Samba_AD_Smart_Card_Login Yeah, I think something that

Hi, I'm trying to get connected through the Microsoft ADSI tool to my server but get the follwing error message : Operation failed error code : 0x80090350 The System cannot contact a domain controller to service the authentication request. Please try again later. I want to set a Widows AD PKI auth and so following this documentation ( stuck in this step ) :