similar to: mount share using kerberos ticket fails

After re-join kinit Administrator net ads keytab add cifs/$(hostname -f) -k net ads keytab add_update_ads -k samba-tool delegation for-any-service COMPUTERNAME$ on ( or use : delegation add-service accountname principal [options] ) Reboot Should work now. ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Yvan

Thanks for your help! Le 09/03/2020 ? 15:39, L.P.H. van Belle via samba a ?crit?: > Did you "deleated the computer object" to allow kerberos services. > And did you add the CIFS/spn to the computer and keytab ? > I am sorry, I don't really understand the above: mount requires a keytab AND a user ticket? > https://wiki.samba.org/index.php/Generating_Keytabs > >

Did you "deleated the computer object" to allow kerberos services. And did you add the CIFS/spn to the computer and keytab ? https://wiki.samba.org/index.php/Generating_Keytabs If its a member, which i assume. kinit Administrator net ads keytab add cifs/$(hostname -f) -k net ads keytab add_update_ads -k Add these and it should work. You might need to restart or reboot., sometimes

Hi, I am trying to mount fileserver (samba, 10.20.30.16) shares on a linux domain member server, where I logged on via ssh using AD my credentials. I am unable to get past the "mount error(126): Required key not available" error message. I have read and googled a lot, and could use some help. See this: > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & >

Hi samba --version Version 4.0.6-GIT-4bebda4 smb.conf: [users] path = /home/users read only = No Working on the DC which is also the fileserver user steve2 can write to his folder at /home/users/steve2 But if we now mount the share: sudo mount -t cifs //doloresdc/users /mnt -osec=krb5,multiuser he can't write to the mounted share at /mnt/users/steve2 He gets 'Permission denied'.

Hello, On Debian 9 (stretch prerelease) I am able to mount with the following command with root using the following command: mount -t cifs //smb.physics.wisc.edu/smb /smb -osec=krb5,multiuser,username=smbadmin at PHYSICS.WISC.EDU --verbose root can also access files as expected However, when cifs-utils 6.6-5 is installed, a different user cannot access as expected: ls /smb ls: cannot

On Thu, 25 Jan 2024 18:45:52 -0800 Peter Carlson via samba <samba at lists.samba.org> wrote: > I am getting a permission denied when trying to ls as a domain user a > samba mount with windows ACLs (sigh I thought I had this figured > out). I tried to include self descriptive server names and include > them in the info below (fs1: file server, nc: addc, u2gui: ubuntu >

Hai Mourik-Jan, Beste wensen he ;-) Lets start here.. A and PTR record exists for both servers? Does CIFS/spn and root/spn exist in the AD? In krb5.conf, set these : ; not used for nfs4 but cifs might need it. ; for Windows 2003 ; default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; permitted_enctypes = rc4-hmac

On Fri, 2017-02-10 at 11:15 -0600, Chad William Seys wrote: > Hi Jeff, > > > So we have a default credcache for the user for whom we are operating > > as, but we can't get the default principal name from it. My guess is > > that it's not finding the > > This mount is run by root UID=0 and seems to be find that credential > cache without problem (earlier

> That is what I did. But it fails even when mounting manually: > 1. Connect on the desktop using domain user "yvan.masson" (either > graphically / TTY / SSH). Kerberos ticket is properly created. > 2. Running "sudo mount -t cifs //ad.FOO.BAR.LOCAL/Echange /mnt -o > user=yvan.masson,cruid=yvan.masson,sec=krb5" fails with "Required key > not

Le 10/03/2020 ? 11:21, Rowland penny via samba a ?crit?: > On 10/03/2020 10:10, Yvan Masson via samba wrote: >> Le 10/03/2020 ? 10:37, Rowland penny via samba a ?crit?: >>> On 10/03/2020 09:18, Yvan Masson via samba wrote: >>>> If think I did not properly explain my setup, sorry for that: Samba >>>> here is not sharing anything. It is just used for

Le 10/03/2020 ? 10:37, Rowland penny via samba a ?crit?: > On 10/03/2020 09:18, Yvan Masson via samba wrote: >> If think I did not properly explain my setup, sorry for that: Samba >> here is not sharing anything. It is just used for joining a Windows >> domain, so that users can sit on a chair in front of this Debian >> computer, use their domain credentials in

Le 10/07/2019 ? 12:33, Rowland penny via samba a ?crit?: > On 10/07/2019 10:37, Yvan Masson via samba wrote: >> >> OK thanks. However I still want to clarify what is wrong with my >> original setup, where "Partage" directory is shared on a standalone >> Samba 4.9.5 server: >> /home/yvan/Partage/ >> ??? Consultation/ >> ??? Echange/ >

On 1/26/24 02:35, Rowland Penny via samba wrote: > On Thu, 25 Jan 2024 18:45:52 -0800 Peter Carlson via samba > <samba at lists.samba.org> wrote: >> The share mounts and I am a member of the correct groups >> CARLSON\peter at u2gui:~$ cat /etc/fstab //fs.carlson.lab/test /mnt/test >> cifs credentials=/root/smbcreds,multiuser,sec=ntlmssp,_netdev 0 0 > I think

Le 10/07/2019 ? 14:28, Rowland penny via samba a ?crit?: > On 10/07/2019 13:16, Yvan Masson via samba wrote: >> >> >> Le 10/07/2019 ? 12:33, Rowland penny via samba a ?crit?: >>> On 10/07/2019 10:37, Yvan Masson via samba wrote: >>>> >>>> OK thanks. However I still want to clarify what is wrong with my >>>> original setup, where

Hi, First, thanks for all people that continuously giving great advice on this list! I am setting up a standalone server (Debian 10, Samba 4.9.5+dfsg-5 from Debian). The following directory is shared and contains two directories: /home/eleve/partage/ ??? Documents ??? Travail I want user "eleve" to be able to modify everything, and guest users to have read access on

Le 09/08/2019 ? 21:36, Rowland penny via samba a ?crit?: > On 09/08/2019 20:18, Yvan Masson via samba wrote: >> Hi list, >> >> For testing purpose, I am running a standalone Samba 4.9.5 on Debian >> with the following smb.conf: >> >> [global] >> server role = standalone server >> map to guest = Bad User >> guest account = nobody > That

Hi list, For testing purpose, I am running a standalone Samba 4.9.5 on Debian with the following smb.conf: [global] server role = standalone server map to guest = Bad User guest account = nobody [test] path = /home/yvan/Partage/share guest ok = yes writable = yes inherit acls = yes I want "bob", "alice" and guest user to have full access to all files in this share, so I

Le 09/03/2020 ? 16:43, Rowland penny via samba a ?crit?: > On 09/03/2020 15:18, Yvan Masson via samba wrote: >> Thanks for your help! >> >> Le 09/03/2020 ? 15:39, L.P.H. van Belle via samba a ?crit?: >>> Did you "deleated the computer object" to allow kerberos services. >>> And did you add the CIFS/spn to the computer and keytab ? >>>

Hai, I know, im not the best in english, but i've updated the time sync page on the wiki. If someone can check it and update where needed. I've added this part. https://wiki.samba.org/index.php/Time_Synchronisation#Requirements_2 And https://wiki.samba.org/index.php/Time_Synchronisation#Set_up_time_with_systemd-timesyncd_on_a_Unix_Domain_Member Greetz, Louis