similar to: Mailserver + Samba4

Hi, the problem seems to be related to this bug: https://bugzilla.samba.org/show_bug.cgi?id=6750 I try therefore to set machine password timeout = 0 Il giorno mar 29 ott 2019 alle ore 11:11 Rowland penny via samba < samba at lists.samba.org> ha scritto: > On 29/10/2019 10:04, banda bassotti wrote: > > I had already done it: > > > > # samba-tool spn list

Hi I am setting op an email server and want samba (kerberos) authentication. I am struggling for 1 week now. Is there maybe someone with experience who can help Thanks, Philip

Ok, you did to much as far i can tell. You want to see this: i'll show my output, then i is better to see what i mean. this is where you start with. klist -ke |sort ( default member ) ---- -------------------------------------------------------------------------- 3 host/HOSTNAME1 at REALM.DOMAIN.TLD (aes128-cts-hmac-sha1-96) 3 host/HOSTNAME1 at REALM.DOMAIN.TLD

Ok, Your keytab looks ok now. oldsamba.dom.corp is an alias for fs-a.oldsamba.dom.corp. fs-a.dom.corp has address 10.0.0.2 i would have expected here. oldsamba.dom.corp is an alias for fs-a.dom.corp. fs-a.dom.corp has address 10.0.0.2 Or was that a typo? I assuming a typo.. About your setup from the script outpout. Change this one. /etc/hosts 10.0.0.2 fs-a.dom.corp fs-a oldsamba #

On 05/11/2019 12:17, banda bassotti via samba wrote: > Luis, ok I'v removed everything, step 1: > > KRB5_KTNAME=FILE:/etc/krb5.keytab2 net ads keytab CREATE -P I have said this once already, but, I will try again ;-) You are creating a keytab, which may or may not be called /etc/krb5.keytab2 > step2: > # KRB5_KTNAME=FILE:/etc/krb5.keytab2 net ads keytab ADD >

On 29/01/17 18:02, Gordon Messmer wrote: > On 01/28/2017 04:03 PM, TE Dukes wrote: >> What is the preferred remote mail client for 7.3? > > > I'm a fan of SOGo. > never heard of it - looks interesting BUT the production versions are only available with a support contract the begins at $US 750 / annum - how dangerous is the nightly build? - I normally wouldn't dream

On 22/09/2020 20:58, Rowland penny via samba wrote: > On 22/09/2020 20:28, Philip Offermans via samba wrote: >> Hi I am setting op an email server and want samba (kerberos) >> authentication. I am struggling for 1 week now. Is there maybe >> someone with experience who can help >> >> Thanks, >> Philip >> > Ever had a feeling of deja-vu ? > >

I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO Using: -Samba4 alpha15 -Bind9.8.0 When I added an XP PC (192.168.123.244) to my domain I got this in syslog: May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update 'mydomain.com/IN' denied May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result == (((1) << 16) + 28) || result == 0) failed,

Hi list, i noticed that when doing imap gssapi authentication with kerberos, dovecot (here 2.1.7) always searches /etc/krb5.keytab although i have auth_krb5_keytab = /etc/mail3.krb5.keytab in my etc/dovecot/dovecot.conf and doveconf -n also show this setting. If i combine the keytabs in krb5.keytab it works. Is there another location where i should put my configuration regarding gssapi/kerberos ?

Dear Sirs, There is Postfix+Dovecot+Sogo installation in our company. I have attentively red Installation and Configuration Guide. However, I could not find some information. Could you give me an advise how to: 1. Add/remove e-mail address 2. Change user e-mail address password 3. Add user e-mail address into mail alias 4. Forward e-mail 5. List all users e-mails What is the best

As part of building my new mail server, I'm installing the RPMS to match my old server. However, I can't find a perl-Net-SCP RPM for this version. Can someone point me to where I can get it, preferrably a repo that I can use that has it. I have found perl-Net-SCP-0.08-1.el6.rf.noarch.rpm. As a last resort I could localinstall that. Would it have any nasty side effects? Gary

SOGo/Openchange is not willing i f it is not holding the fsmo roles. And by the way in an multiple DC replicating environment you can kill your domain on the fly even with a real "Exchange-Server" if you are not carefull enough. So the only way to make OPenchange live in your domain ist o join it as dc. And status of development as far as I know this is hard to do. Or you manage to

I'm running Samba 4.1.6, Ubuntu 14.04 with Dovecot, Postfix & SOGo When I try to connect to the mailserver via Thunderbird, it gives me a specific error -- Unable to open the summary file for Inbox. Perhaps there was an error on disc, or the full path is too long. I've looked at (and reset) file permissions on the local drive where mail is stored but not the mailserver, and

Hi I am trying to authenticate my mail server with samba ad. The only problem is that I don?t get it working. root at dna:/data/CA/EasyRSA-v3.0.6# ldapsearch -x -h gaia.rompen.lokaal -D 'vmail' -W -b 'cn=users,dc=rompen,dc=lokaal' Enter LDAP Password: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. I can not read

I am trying to use a keytab for a client machine to authenticate to Samba's own LDAP server. The samba servers (replicated) are ubuntu 16.04 with samba 4.5.2 compiled from source. The client machine is ubuntu 16.04 with stock samba 4.3.11. It has been joined directly to the Samba domain ("net ads join"). I have also extracted a keytab ("net ads keytab create -P")

I am trying to join an existing samba server but I get an error message that the DNS update failed. I have read that this doesn?t matter and the join is still successful. But the problem comes when I try to grant privileges to the unix admins. root at dna:/home/pi# net ads join -U administrator Enter administrator's password: Using short domain name -- DOMAIN Joined 'DNA' to dns

Darren, We have systems which are multihomed for virtualisation, but run only one sshd. You can connect to any IP-address and should be authenticated with gssapi/kerberos. So the client will ask for a principal host/virt-ip-X and the server has to have an entry for this in the keytab and has to select the right key by determining the hostname from the connection IP-address. There is no other way

Am 30.06.2016 um 23:16 schrieb Mark Foley: > Achim, thanks a lot! A couple of questions on your suggested settings: > >> 1. Create an user >> samba-tool create user dovcot > I did this (actually `samba-tool user create dovecot`), but it asked for a password. I > entered one. You didn't mention that, so I hope it's OK. Yes > > >> 2. Add the spn

Question following HowTo build your own OpenChange/SOGo appliance: I have been building my own SAMBA4/OpenChange appliance *MOSTLY* following the instructions at http://tracker.openchange.org/projects/openchange/wiki/HowTo_build_your_own_OpenChangeSOGo_appliance . I am using Ubuntu-Server 12.04 LTS (Precise Pangolin) precise-server-amd64.iso OpenChange from svn co -r 3923

Did a few test here "auth_gssapi_hostname = "$ALL"" is no longer required with dovecot (2.2.13 here). Add "auth_debug=yes" to your dovecor config. 192.168.100.1 is my clients ip 192.168.100.101 is the servers ag is the domain account username I use to login to windows and also the username configured in thunderbird. On my debian system an package named