similar to: Missing domain user tickets with winbind

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Shyam Prasad N via samba > Verzonden: woensdag 1 april 2020 13:10 > Aan: samba-technical at lists.samba.org; samba at lists.samba.org > CC: sribhat.msa at outlook.com > Onderwerp: [Samba] Missing domain user tickets with winbind > > Hi, > > My name is Shyam Prasad.

Thanks. That worked. :) However, I see the krb5cc file only if I login to ssh using the password. If I use ssh private keys to login, I do not see this file being generated. I guess this is because it doesn't use krb5 authentication with the AD server in that case. This is not a major bottleneck, but wanted to understand the scenario. Regards, Shyam On Wed, Apr 1, 2020 at 5:05 PM Alexander

On 01/04/2020 12:20, L.P.H. van Belle via samba wrote: > For that to work, you need to add the CIFS/hostname.fqdn at REALM to the host your logging in. > The COMPUTER$ should hold it. > Allow the computer to delegate the cifs service. ( or all ) Thing is, the OP is trying to use a users ticket to mount, but seems to be doing it as root, which isn't going to work, mainly because

Hi, I've ended up in a weird situation with my Windows AD environment. My linux host was originally joined to the domain. For some reason, the domain server got reset and created a fresh domain with the same name and all the AD objects (including users/groups) were recreated. After this, I tried leaving the domain (which was failing with 'No such file or directory' error). I then

Hey folks, I am using puppet for some OpenStack deployments and on a new node things look pretty good right until after the successful reception of a cert from the puppet master. I get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: $concat_basedir not defined. Try running again with pluginsync enabled at

Sorry, I made a mistake with my title. So I resend this email. ---------------------------------------------------------------------------------- Hi, I'd like to live-migration after snapshots deleted. But it doesn't work.Here's my steps: # virsh snapshot-create VM # virsh snapshot-delete VM Snapshot # virsh migrate --live VM qemu+ssh://localadmin@compute3/system And It comes out

Hi, I am trying to connect to remote libvirt via script, and I get password prompt from the shell. ============================================================================ uri='xen+ssh://root@myserver/?no_verify=1' def req(credentials, user_data): print('in req...\n') for cred in credentials: if cred[0] == libvirt.VIR_CRED_AUTHNAME: cred[4] =

Hi guys Is anybody can help me how to use openAuth to connect a remote URI without input the boring password? we assume the password of root for remote machine is "123456". Even I running the example in libvirt library esxlist.py(change uri to a qemu type and assign the username and password). Bellow is my simple test code, unfortunately it still need me to input the password.

On 03.11.15 15:37, Daniel P. Berrange wrote: > On Tue, Nov 03, 2015 at 10:14:00AM +0200, Shahar Havivi wrote: > > Hi, > > > > I am trying to connect to remote libvirt via script, > > and I get password prompt from the shell. > > > > > > ============================================================================ > >

Gives GSSAPI-MIC the same options capability currently provided for public key logins by the AuthorizedKeysFile. Uses krb5_principal_match() to support widcard matches. Uses percent_expand() to expand tokens for: credential USER[/INSTANCE]@REALM homedir /home/user username user cred name USER cred instance INSTANCE cred realm REALM My intended application: # cat

Hi, I have a CIFS share that I mount on a CentOS6.4. Currently I am keeping the password in a regular hidden file, for example /test/.cred with the username and password. the /etc/fstab directive points to that file. for example: //10.0.0.1/share /mnt cifs defaults,credentials=/test/.cred Since this file is readable by the root user, I figured if there might be a way to

Hello, Have spotted strange behaviour of GlusterFS fuse mount. I am unable to list files in a directory until parent directory is listed. However if I do list file with full path it is listed on some client nodes. Example: localadmin at ldgpsua00000038:~$ ls -al /var/lib/nova/instances/_base/ ls: cannot access /var/lib/nova/instances/_base/: No such file or directory localadmin at

I can report that the computer renaming worked. As it turned out, only the cn was incorrect ... ldbsearch -H ldap://DC1 -UAdministrator 'CN=DT06' dn: CN=DT06,OU=Desktops,OU=Computers,DC=domain,DC=com objectClass: computer cn: DT06 operatingSystem: Windows 10 Pro displayName: WH23$ sAMAccountName: WH23$ ... so a simple LDAP rename worked ... ldbrename -H ldap://DC1 -UAdministrator

Dear list, Resetting a computer password in samba 4.6 or later via Windows 7 PowerShell doesn't work. It worked fine until 4.5. Can someone confirm this or do only I have this problem? PS C:\Users\Administrator> Reset-ComputerMachinePassword -Credential $cred Reset-ComputerMachinePassword : Das Kennwort des sicheren Kanals für das Computerkonto konnte in der Domäne nicht zurückgesetzt

Hi all! Is it possible to run smbd in an AD user's context? If not, is it possible to have smbd to tell a third-party function to not stray outside from logged on user's (AD user) context (home directory)? I'm programming a VFS module[1] which will be the bridge between Windows and iRODS[2]. iRODS depends on a configuration file, .irods/irods_environment.json, which resides in the

>> >Could we please have a clarification on the semantics of >> >PAM_CRED_ESTABLISH vs. the semantics of PAM_REINITIALIZE_CREDS? >> >> My interpretation is: >> >> You call PAM_ESTABLISH_CRED to create them >> You call PAM_REINITIALIZE_CRED to update creds that can expire over time, >> for example a kerberos ticket. Oops. I meant

[libvirt-users should be able to help out] On Wed, Jun 01, 2016 at 01:58:09PM +0000, John L. Magee wrote: > Rich- do you know a way we could use virsh in scripts without > manually entering the username/password creds for every invocation? > Or could you point me to a source who may be able to help? We need > to be able to set Linux VM memory and cpu configurations from a > linux

See inline comments: On Thu, 3 Nov 2016 19:17:58 -0200 Marcio Demetrio Bacci <marciobacci at gmail.com> wrote: > Hi Rowland > > Following the results to: > > *USER:* > wbinfo --uid-info=10060: > bacci:*:10060:30049:bacci:/home/EMPRESA/bacci:/bin/false > It looks like 'bacci' is a normal user and the owner of the Policies GUID dir should be 'Domain

Hey folks, I''m falling behind in my Mongrel duties and seriously need to recruit an enterprising individual to take on the patch queue and help push out a new release with some minor fixes. The goal would be to just get patches that are currently languishing, pull them together, put them in the source, write some tests to try them, and then one slight design change. If this works out

Hi, just joined the list and know very little about smb. I'm trying to do something that should be simple, but my current solution isn't working 100% All I need is a list of smb shares on the network. I'm doing this: /usr/bin/nmblookup -M -- - and then use this on each ip returned: /usr/bin/smbclient -g -p 139 -NL <ip addr> That works for most cases but it fails to find