similar to: multi factor authentication

I use PrivacyIdea as a MFA provider (via RADIUS, though that's just my usage case). It can authenticate directly against winbind or ldap backends, and has a PAM module for Linux clients. For Windows logins, there's a "Credential Provider", details here: https://community.privacyidea.org/t/using-privacy-idea-for-windows-logins/1082/2 . (YMMV, I haven't tried it for that.

Hello, I am trying to add shares by configuring the server through Yast on an OpenSuse Tumblweed and KDE desktop on a Dell machine. The Samba package is version 4.9.1 on a i586 (32-bit) architecture. After making changes using the Samba Server GUI invoked from Yast I press OK and come out. But none of the changes are saved. I would be grateful if some could help. Kind regards,

I've found that some embedded devices have older CIFS clients, which can only talk over SMB1. So, you can adjust your server to allow it, or look for another file transport. Kris Lou klou at themusiclink.net On Wed, Sep 9, 2020 at 3:16 PM Jeremy Allison via samba < samba at lists.samba.org> wrote: > On Wed, Sep 09, 2020 at 02:35:28PM -0700, Peter Pollock via samba wrote: >

So you have to reset the other account flags after doing it? On 08/15/2019 02:43 PM, Kris Lou via samba wrote: > pdbedit -c="[]" <user> > > This clears the Account Flags (warning, clears ALL Account flags) that you > can also view via "pdbedit -Lv <user>" > > > Kris Lou > klou at themusiclink.net > > > On Thu, Aug 15, 2019 at 12:11

IMHO, in short, learn to use encrypted connections. 2016-07-27 22:38 GMT+02:00 Kris Lou <klou at themusiclink.net>: > As of 4.2.11: https://www.samba.org/samba/security/CVE-2016-2112.html > > =================== > New smb.conf option > =================== > > ldap server require strong auth (G) > > The ldap server require strong auth defines whether the

Hi everyone, I have installed a Samba AD DC version 4.2.11-20 in a Centos 6.7 machine and joined it in an existing domain. Everything seems working fine except I can't bind to it using LDAP simple authentication. When I try to perform a simple ldapsearch I get the following response: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required.

I have a bit of an oddity here: I'm using Samba 4.2.14 with AD, using Samba's internal DNS to serve to my domain (and forwarding others to Google Public DNS 8.8.8.8). However, it looks like client queries (and subsequent forwards) to a vendor's URL (www.pitneybowes.us) fail, but are successful if I query Google directly: [root at XXXX~]# nslookup -type=any www.pitneybowes.us >

Hi all, I seem to have run into a case where my DC's aren't being round-robin'ed by DNS. I've got 3 DC's using Internal DNS, but every time I ping mydomain.com and check the results (ipconfig /displaydns), it's always in the same order. The same order appears when I query the DC's directly, individually: # nslookup mydomain.com 172.23.51.5 Server:

> > The internal DNS is NOT supporting round robin. As Rowland said use Bind9 > That's news to me! If so, then the internal DNS backed is not suitable for multiple DC's. (Though, I could've sworn it worked on versions 4.2+ < 4.7. It's on my to-do list to explore this further with different versions.)

Is there an easy way to undo an account that is locked out due to wrong password count exceeded? -- Bob Wooldridge EDM Incorporated

Hi All, We're migrating our environment to AD. The question we have is about the users in /etc/passwd. Our users are in the TDB and /etc/passwd. What is the best way to purge the users from /etc/passwd? If we remove them manually, the user info cannot be enumerated using getent passwd. Any suggestions/ Thanks, RT

Hi Rowland, Fair comment. This is not a new domain and we are migrating to AD. The box in question runs Samba 3.6 (PDC and a physical box) and as such we are not able to directly migrate it. We are adding a Samba 4 box (a VM) , to which will become the new PDC . This box will then be used to migrate to AD. The Samba 3 box will converted as a file server. The confusion in smb.conf is possibly

I'm currently using the standard Samba 4.5.8 on Debian 9.1, but would like to have spotlight support for Mac users. As far as I can tell, the standard package isn't compiled with spotlight support, so I will need to compile it myself. Is there an easy way to know what the configure string was that was used to compile the packaged version? I simply want to add the --enable-spotlight flag

Hi all, Sorry for this question which has certainely already been answered, but I could not find info in the list nor in the wiki. From my Debian laptop running testing (samba 4.9.5) and with an empty smb.conf (I wanted to be sure that only default values are used), I can not browse shares of a Windows 10 machine (sorry, Thunderbird splits some lines): smbclient -L 192.168.122.200 Unable to

On Wed, Dec 27, 2023 at 12:21?PM Sonic <sonicsmith at gmail.com> wrote: > On Wed, Dec 27, 2023 at 2:31?PM Kris Lou via samba > <samba at lists.samba.org> wrote: > > > named.conf.local > > > ===================== > > > include "/usr/local/samba/private/named.conf"; > > > ===================== > > > > Is the correct

You're geniuses one and all! That looks to have fixed the problem! At a later date I'll try to work out how to do it via ftp so I can avoid the smb1 protocol altogether, but for now I have a working solution so THANK YOU! On Wed, Sep 9, 2020, 3:45 PM Andrew Bartlett via samba < samba at lists.samba.org> wrote: > The other thing is NTLMv2, also required by default in modern

Hai,   Im playing around with my XCP-NG ( open source Xen Server ) and *(trying to add the SMB Storage Repo.   The samba server is running ... Debian Jessie with samba 4.8.5 On the server im seeing in my logs. :   [2018/09/28 14:42:43.948555,  0] smbd/process.c:525(init_smb_request)   init_smb_request: invalid wct number 55 (size 106) [2018/09/28 14:42:44.963470,  0]

Well, this is interesting (to me, at least). I joined a W10 machine to the domain (4.8/4.9.4 mix, I'm working on it), then renamed it via "WMIC /node:<computer> computersystem where name="<computer>" call rename name="<newname>". Doing so changed the displayName, sAMAccountName, dNSHostName, and assorted servicePrincipalNames, but did not change the

Perhaps try http://wing-repo.net/ for CentOS rpms? The readme is out of date -- inspecting the repo at http://wing-repo.net/wing will find 4.6, 4.7 (in extras), 4.8rc3. Kris Lou klou at themusiclink.net On Wed, Feb 21, 2018 at 8:27 PM, denis.shigapov via samba < samba at lists.samba.org> wrote: > We have the standard centos. > I have recompiled packages from Fedora, as well as all

On 01/02/2020 15:10, Rowland penny via samba wrote: > Not really, all Samba AD DC's are global catalogs ;-) Ah, OK... so we don't need to worry about that then? -- Paul Littlefield Telephone: 07801 125705 Email: info at paully.co.uk Wiki: http://wiki.indie-it.com/wiki/Special:AllPages LinkedIn: https://www.linkedin.com/in/paullittlefield Paul Littlefield is environmentally