similar to: Unable to authenticate to share using UPN

A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 9275 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20230620/f0f4504f/smime.bin>

Sorry about that I typed and sent a full message, but it looks like the entire body got swallowed up in transit. Here is the full text again. Let's hope this one works. I have a server running CentOS 7.9 with the system provided Samba packages (4.10.16-24.el7_9). It is joined to an Active Directory domain and acting as a member server. The active Directory domain has a user object with among

Is anyone using Gluster with the Rocks cluster system? If so, do you know if there is a Roll for Gluster? Or, do you have any advice about things to do and things to avoid doing? We're considering using Gluster with Infiniband on our cluster and trying to learn whether other people have done this so we can perhaps learn from their experience. Thanks. .. Lana (lana.deere at gmail.com)

Hello, I'm trying to set up an experimental gluster storage cluster using virtual machines (VMs) on Xen. I want to be able to instruct the VMs to "forget" any previous gluster configuration (i.e. the server to forget about all previously configured peers, the peers to forget what storage volumes they are providing, etc). The use case is that the VMs will can be attached to

We have been struggling with our Lustre performance for some time now especially with large directories. I recently did some informal benchmarking (on a live system so I know results are not scientifically valid) and noticed a huge drop in performance of reads(stat operations) past 20k files in a single directory. I''m using bonnie++, disabling IO testing (-s 0) and just creating, reading,

Hi, By "logging in/authenticating with UPN through winbind" you are speaking about using UPN on Linux or UNIX clients when these clients are generating local users from AD using winbind? Kindly regards, mathias 2016-02-09 20:20 GMT+01:00 Björn Ramberg <bjoern.ramberg at gmail.com>: > Hey, > > I am running Ubuntu Trusty 14.04.3 with samba and winbind version >

Hey, I am running Ubuntu Trusty 14.04.3 with samba and winbind version 4.1.6-Ubuntu. Its run in a windows domain env which is running an AD on 2008 R2 servers. I can login just fine with using the AD accounts sam name. However, the question is now if all machines on the domain can use the AD UPN to login instead of the sam. I have looked around a bit and found a few old posts about this. This

Hi, Thanks for answering. Yes, the linux machines are joined to the domain through samba and are using the AD accounts on their linux clients to logon and authenticate through winbind. Using the AD accounts samid to logon is just fine, the question is if its possible to use the UPN instead of the samid to login. Kind regards, Björn On Wed, Feb 10, 2016 at 2:33 PM mathias dufresne

Hi all, I am trying to set up an linux server that allows users to log in via their windows UPN names rather than their SamID's. I have set up two test boxes: debian linux 7 running Winbind Version 3.6.6 Ubuntu Linux 14.04 running Winbind version 4.1.6-Ubuntu. smb.conf is at bottom of this post. I've bound both linux boxen to our Active Directory Server running 2008R2 and can return

Dear all, I'm running CentOS 7.3 with SSSD. I'm using sssd-ad to talk to an AD backend. Group names in the AD contain capitals. When sssd-ad is working normally, group names returned are all lowercase. However, when the AD backend goes offline, group names returned from the SSSD cache contain capitals. The change in case breaks stuff (sshd's AllowGroups, for one). Has anybody

Dear, I am trying to get a prediction of my GAM on a response type. So that I eventually get plots with the correct values on my ylab. I have been able to get some of my GAM's working with the example shown below: * model1<-gam(nsdall ~ s(jdaylitr2), data=datansd) newd1 <- data.frame(jdaylitr2=(244:304)) pred1 <- predict.gam(model1,newd1,type="response")* The problem I am

Hi Louis, 2016-08-29 16:18 GMT+02:00 L.P.H. van Belle via samba <samba at lists.samba.org >: > Hai > > > > After my squid group adventure, i have a remaining question here. > > > > The problem was as followed. ( and this probely dont applie to squid > kerberos helpers only. ) > > > > samba-tool setup for squid i used, was as followed. > >

When launching CentOS Stream for aarch64 in us-east-1 using the CentOS-sponsored AMI (ami-0a311be1169cd6581, found at https://wiki.centos.org/Cloud/AWS <https://wiki.centos.org/Cloud/AWS>) I am able to launch the EC2 instance using a Gravitron2 processor, as expected. However, when attempting to login to that instance, I get a password prompt for the ec2-user, centos, and root users. This

I want to know if we can configure samba to authenticate to active directory using the user principal name (upn). Currently, it is working using the samaccountname but we need to use the upn. I am using samba 3.5 Thanks

I have looked and looked but have not been able to find out how to allow UPN authentication to be processed by a Samba PDC? Is it possible to strip the "@domain" from the user before authentication at samba or map the UPN user to a dom\username for authentication? Thanks, Andrew LOGS /var/log/samba/log.user: SAM Logon (Interactive). Domain:[domain]. User:[user at

hello Achim, yes, if you change the  userPrincipalName LDAP attributethats suffient, thats what i changed through the windows tool. greetz, Louis Op 29 aug. 2016 om 19:42 heeft Achim Gottinger via samba <samba at lists.samba.org> het volgende geschreven: Am 29.08.2016 um 17:17 schrieb L.P.H. van Belle via samba: No, That was not sufficient, i had to use the windows tool to

Hi all, it took me about two days to find a solution for this problem. For me, the problem was that my samba server itself wasn't part of it's own domain. So what I had to do was: # net rpc join -S <samba server name> -U root From that moment on I was able to add windows machines to my domain without problems. Hopefully I could help some people. Ruediger -------------- next

Hey folks! I need to allow smartcard authentication of a third party certificate generated with an UPN that has a suffix that is not my domain name. From AD literature, it's possible. I followed these guidelines to make an additional UPN available for login: https://technet.microsoft.com/en-us/library/cc772007.aspx But I'm missing something. Kerberos does a part of the job, but then

No, That was not sufficient, i had to use the windows tool to change it. The is the explanation from the developer of squid helper. /snap I would say they are bugs. The first “issue” is as you say more about understanding the difference between UPN and SPN and how the tools use them. The helper tries to “authenticate” squid to AD as a user with the found SPN name, so the UPN must be the same

Hi John, Thanks for pointing me to case_sensitive, that indeed is the cause: the default for "case_sensitive" is "True", but for the AD provider "True" is invalid(??), so it defaults to "False"(???)! Good news is that with both "case_sensitive = False" and "case_sensitive = Preserving" the results from AD and cache are identical