similar to: Classicupgrade FL 2012_R2 NTLM/Kerberos logon

Mandi! Havany via samba In chel di` si favelave... >> It sounds like you are still using the old, deprecated (by Windows) >> roaming profiles, instead of Folder redirection. ?! Some more clue, Rowland? I use roaming profiles *AND* folder redirection, usually... ;-) > So, I think I will use the "classicupgrade" method. I will wait a few > days to make sure

Hello, Le 06/06/2024 ? 15:40, Rowland Penny via samba a ?crit?: > On Thu, 6 Jun 2024 13:33:04 +0200 > Havany via samba <samba at lists.samba.org> wrote: > > >> - Classisupgrade is destructive for the NT4 Domain, but we can keep >> data of the old NT4 Domain and we can rollback to this with ours >> Ansible playbooks. We will loose all change between migration

On Thu, 6 Jun 2024 13:33:04 +0200 Havany via samba <samba at lists.samba.org> wrote: > - Classisupgrade is destructive for the NT4 Domain, but we can keep > data of the old NT4 Domain and we can rollback to this with ours > Ansible playbooks. We will loose all change between migration and > rollback and we will improve a possible long downtime. > > - With "Big

Hi Darin, Le 05/06/2024 ? 17:34, Darin via samba a ?crit?: > > > Hello Havany, > I am just going to jump into this discussion. > Welcome! >> We try 2 scenarios : - A "Big bang" migration to an new domain made from scratch : but we need to migrate all users, computers, laptops, filers without loosing profiles, files server access... In a short time (1-2 weeks

Hello Havany, I am just going to jump into this discussion. > We try 2 scenarios : - A "Big bang" migration to an new domain made from scratch : but we need to migrate all users, computers, laptops, filers without loosing profiles, files server access... In a short time (1-2 weeks maximum) - A "classicupgrade" migration, but it need several steps to improve security. And at

On 20.06.2024 9:28, Rowland Penny via samba wrote: > On Wed, 19 Jun 2024 19:16:51 +0200 > Marco Gaiarin via samba <samba at lists.samba.org> wrote: > >> Mandi! Havany via samba >> In chel di` si favelave... >> >>>> It sounds like you are still using the old, deprecated (by Windows) >>>> roaming profiles, instead of Folder redirection.

On Wed, 19 Jun 2024 19:16:51 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Havany via samba > In chel di` si favelave... > > >> It sounds like you are still using the old, deprecated (by Windows) > >> roaming profiles, instead of Folder redirection. > > ?! Some more clue, Rowland? I use roaming profiles *AND* folder >

Am 12.03.2019 um 10:16 schrieb Rowland Penny via samba: > On Tue, 12 Mar 2019 01:47:53 +0100 > Christian via samba <samba at lists.samba.org> wrote: > >> Am 11.03.2019 um 09:24 schrieb Rowland Penny via samba: >>> On Mon, 11 Mar 2019 07:16:30 +0100 >>> Christian via samba <samba at lists.samba.org> wrote: >>> >>>> Dear all,

Hello: I have a squid3 with aunteticacion ntlm integrated to samba4 but in workstations with windows 8.1 constantly asked for the username and password and it does not let the user navigate, use debian 8 + samba 4.7.7, no idea because that happens in client with windows 7 works well. smb.conf workgroup = MYDOMINIO security = ads netbios name = srv-proxy server string = Servidor Proxy de

Am 11.03.2019 um 09:24 schrieb Rowland Penny via samba: > On Mon, 11 Mar 2019 07:16:30 +0100 > Christian via samba <samba at lists.samba.org> wrote: > >> Dear all, >> >> we are transitioning from an openldap / MIT KDC setup to a samba4 AD. >> I am doing this by setting up a samba NT4 domain, populating it from >> LDAP and sticking in the password hashes

THANK YOU FOR YOUR REPLY THE RESULT : KVNO Principal ---- -------------------------------------------------------------------------- 1 HOST/samba4 at FSS.LAN (des-cbc-crc) 1 HOST/samba4.fss.lan at FSS.LAN (des-cbc-crc) 1 SAMBA4$@FSS.LAN (des-cbc-crc) 1 HOST/samba4 at FSS.LAN (des-cbc-md5) 1 HOST/samba4.fss.lan at FSS.LAN (des-cbc-md5) 1 SAMBA4$@FSS.LAN (des-cbc-md5) 1

No, no idee, but really, upgrade to samba, best option, in my opinion. If thats not possible, it happens.. A timeout option can be set in krb5.conf for example : kdc_timeout = 5000 You have these for krb5.conf to try out also. the complete list. des-hmac-sha1 DES with HMAC/sha1 (weak) aes256-cts-hmac-sha1-96 aes256-cts AES-256 CTS mode with 96-bit SHA-1 HMAC

I am getting an unexpected gap in a simple plot of monthly data series. I have created a csv file of monthly climate observations that I store on-line. When I download the csv file and plot one of the series, I get a gap even though there is data for the missing point. Here is a snippet to show the problem. ## Strange plot results link <-

On Fri, 2024-04-05 at 19:13 +0100, Rowland Penny via samba wrote: > On Fri, 5 Apr 2024 19:58:33 +0200 > Pavel Lis? <pavel.lisy at gmail.com> wrote: > > > So, > > > > I've done some progress. > > > > I've made configuration according this article > > https://fedoramagazine.org/samba-as-ad-and-domain-controller/ > > they use sample

I have a Windows 2008 domain (one Win 2008 DC, one Win 2012 R2 DC.) I am trying to join a Solaris 11 machine to the domain for both Samba and other services. For "unix" logins and ssh, Solaris 11 is configured to use LDAP for user and group lookup and kerberos for authentication. The "kclient -T ms_ad" command joins the Solaris machine to the AD domain. It even

On Fri, 5 Apr 2024 19:58:33 +0200 Pavel Lis? <pavel.lisy at gmail.com> wrote: > So, > > I've done some progress. > > I've made configuration according this article > https://fedoramagazine.org/samba-as-ad-and-domain-controller/ > they use sample kerberos config file from package samba-dc-provision: > > sudo cp /usr/share/samba/setup/krb5.conf

Ok, Your keytab looks ok now. oldsamba.dom.corp is an alias for fs-a.oldsamba.dom.corp. fs-a.dom.corp has address 10.0.0.2 i would have expected here. oldsamba.dom.corp is an alias for fs-a.dom.corp. fs-a.dom.corp has address 10.0.0.2 Or was that a typo? I assuming a typo.. About your setup from the script outpout. Change this one. /etc/hosts 10.0.0.2 fs-a.dom.corp fs-a oldsamba #

Hai,   I noticed something strange in the keytab file on my member server. This is a followup of : [Samba] winbind question. (challenge/response password authentication) Samba 4.5.3 on Debian Jessie.   Leave the domain. net ads leave -k Deleted account for 'PROXY2' in realm 'REALM'   I checked in windows, and the computer is gone in the “Computer” ou.   Removed the

am getting this error in smbd.log when user try to open Share from Windows box: gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/mymember.my.domain.tld at MY.DOMAIN.TLD(kvno 58) in keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)] SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE I have made a research here in google and here in mail

On Fri, 05 Apr 2024 21:17:45 +0200 pavel.lisy at gmail.com wrote: > On Fri, 2024-04-05 at 19:13 +0100, Rowland Penny via samba wrote: > > On Fri, 5 Apr 2024 19:58:33 +0200 > > Pavel Lis? <pavel.lisy at gmail.com> wrote: > > > > > So, > > > > > > I've done some progress. > > > > > > I've made configuration according