similar to: NT_STATUS_NETWORK_SESSION_EXPIRED

Check /etc/krb5.conf [libdefaults] default_realm = YOUR.INTERNAL.REALM # The following krb5.conf variables are only for MIT Kerberos. kdc_timesync = 1 ccache_type = 4 < this one best is to match the windows defaults. (see: https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/maximum-lifetime-for-service-ticket )

On 07/09/2020 09:51, David Mace via samba wrote: > Hi, > > Looking for some help with this issue, been struggling for a few weeks > > We run a file server using Samba 4.9.5 (openSUSE Leap 15.2 > 4.9.5+git.343.4bc358522a9-lp151.2.27.1). > > Active Directory using Windows Server 2016. The Samba server is a > member of the domain. Windows 10 desktops and Linux desktops are

I am developing apps using ARI which need suppression of DTMF tones in the audio, and I have been told (back in December) that asterisk depends on SIP providers to suppress DTMF tones in the audio stream. Having sorted out my ARI code to suppress DTMF as I wanted, it turns out that SIP providers are not very good at doing that suppression (leaving audible clicks, or failing to suppress the tones

Hai Oliver,   Yes, thats ook pretty standard. On this questiosn. >thats the only one kerberos cache file in /tmp right now. >looks like kerberos does not renew the ticket :(? Do you have something like :  ( look in /var/tmp )   These are the tickes generated by the server. -rw-------  1 root  root   488 Sep 27 10:05 host_0 -rw-------  1 proxy proxy 9646 Sep 30 09:05 HTTP_13

Hi Oliver , If you config is still the samba as i found in the list. On the member server, in smb.conf Change : realm = hq.kontrast To : realm = HQ.KONTRAST And whats in the krb5.conf of the member server? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner via > samba > Verzonden: woensdag 28

I'd like to migrate a Netware 5.0 serve to Samba and LDAP. I'm wondering how I might export the usernames, passwords, and perhaps group memberships to the destination LDAP. If I can get the data into LDIF form, I'm okay from there. Does anyone know how the passwords in Netware 5.0 are encrypted? I hope to bring them over, but reseting the passwords is not out of the question (just

Yes the file /etc/krb5.keytab is exists. You mean this lines? dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes there was edits when i join the system. OLIVER WERNER Systemadministrator > Am 23.09.2016 um 08:55 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Fri, 23 Sep 2016

All, using Samba as an AD (2k12) domain member in Stretch (2:4.5.12+dfsg-2+deb9u4) with tdb as default and rid as domain backend. No overlapping. Everything works fine. Setup was done as in the wiki [1]. If you're connecting from a Windows 10 client and do not add dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = Yes to

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Hi Rowland, > I hope someone has seen this before and knows what's going on. Given > > the time delay between the problem recurring, I'm guessing the issue > > lies with Kerberos, but I'm not sure how to verify that or how to > > resolve the issue. If you need more info, please let me know. > > > > Problem: > > Each morning, windows users are

Hi, After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). After restarting winbind works fine again. We using 4.5.0 right now. I hope the following informations will be enough at this moment In samba log on DC i got the following Error: [2016/09/22 08:58:56.925190, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [dfs_samba4]

Hm,, Good question Marco, now after re-reading it, i understand what you trying to say. How i did read it and understand it. dedicated keytab file (G) Specifies the absolute path to the kerberos keytab file when `kerberos method` is set to "dedicated keytab". When the kerberos method is in "dedicated keytab" mode, dedicated keytab file must be set to specify the

On Thu, Sep 22, 2016 at 06:14:19PM +0200, Oliver Werner via samba wrote: > Hi, > > After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). > > After restarting winbind works fine again. > > We using 4.5.0 right now. > > I hope the following informations will be enough at this moment Seems like your krb5 ticket expired. What does klist say ?

Hi Rowland, i have tested unjion and join again the member. But that looks not better :/. Any ideas? Best wishes OLIVER WERNER Systemadministrator > Am 23.09.2016 um 14:38 schrieb Oliver Werner via samba <samba at lists.samba.org>: > > Yes the file /etc/krb5.keytab is exists. > > You mean this lines? > > dedicated keytab file = /etc/krb5.keytab >

Hi rowland, is pam really need? Users should not login via terminal to this system. this is only as Samba File-Server OLIVER WERNER Systemadministrator > Am 30.09.2016 um 13:51 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Fri, 30 Sep 2016 13:32:18 +0200 > Oliver Werner <oliver.werner at kontrast.de> wrote: > >> the interface part is

the interface part is ok. eth0 has another IP as eth0:35 DCs show me the profiles unix authentication register user session in the systemd…. inheritable capabilities management OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de

Hai guys, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: maandag 17 december 2018 16:08 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] NT_STATUS_NETWORK_SESSION_EXPIRED Domain member > > On Mon, 17 Dec 2018 15:38:02 +0100 > "L.P.H. van Belle via samba"

On Fri, 30 Sep 2016 13:32:18 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > the interface part is ok. eth0 has another IP as eth0:35 > > DCs show me the profiles > > unix authentication > register user session in the systemd…. > inheritable capabilities management > OLIVER WERNER > Systemadministrator > I use Devuan and I get: Kerberos

Hi Louis, Thanks for your feedback. My krb.conf looks like: [libdefaults] default_realm = HQ.KONTRAST dns_lookup_realm = false dns_lookup_kdc = true So i change now in smb.conf in UPPER Case and will check this. Thx OLIVER WERNER Systemadministrator > Am 28.09.2016 um 16:05 schrieb L.P.H. van Belle via samba <samba at lists.samba.org>: > > Hi Oliver , > >

hi, now after 10 hours my samba has the next crash and need to restart winbind. Here are the list/kinit: # before kinit pl0024:~# klist klist: Credentials cache file '/tmp/krb5cc_0' not found pl0024:~# kinit Administrator Password for Administrator at HQ.KONTRAST: pl0024:~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at HQ.KONTRAST Valid starting