similar to: Authenticaton in Active Directory(again)

Gang, For those who asked about making a Solaris system a Kerberos client to Active Directory, the magic document to have is: http://www.connectathon.org/seam1.0/files/c0101.htm See the section "How to Configure a SEAM Client Using a Windows 2000 KDC". SEAM was Sun's Kerberos client stuff in Solaris 8; it is just there as part of Solaris 9 and 10. These instructions apply if

Hi I am having problems with machine authentication on an NT workstation 4.0 SP6a client. The current version of samba is 2.0.4b complied on Sequent/Dynix 4.4.8. We are using "smbd" and "nmbd" as services launched from the inetd file. No restrictive or secure components have been enabled. The "smb.conf" simply has the appropriate mount options defined. The problem

My question is regarding the possibility of someone wiretapping the communication and repeat the action. What if an intruder notice that there's a secure session starting (by guessing at the dst IP address and unintelligible payload) and then start capturing all the packets on this session for the purpose of repeating the whole session again? The secure user could add/delete interfaces and

Hello everyone: I have downloaded, compiled (with winbind) and installed samba 2.2.3. I also have followed the directions on how to configure samba to allow authentication of users via winbindd off of a Win PDC. However, I am still unable to get the authentication to work at all. Below is some of my configuration: smb.conf: (partial) winbind separator = + winbind uid = 10000-20000

On Fri, Jan 23, 2015 at 01:20:05PM -0800, Jeremy Allison wrote: > On Fri, Jan 23, 2015 at 10:16:34PM +0100, Ralph B?hme wrote: > > On Fri, Jan 23, 2015 at 01:08:31PM -0800, Jeremy Allison wrote: > > > On Fri, Jan 23, 2015 at 10:05:44PM +0100, Markus Doits wrote: > > > > > > > > On 23.01.15 19:57, Miguel Medalha wrote: > > > > > I am using

Hi there, I desperatly trying to store a BLF-CRYPT password hash in an LDAP userPassword Attribute and get dovecot to authenticate against it. I use a thunderbird as client and send the password plain with starttls. what worked so far but is kinda problematic for my smtp authenticaton was to store the has with the prefix {CRYPT} or {BLF-CRYPT}. Is there a way to get dovecot to authenticate

Darren, We have systems which are multihomed for virtualisation, but run only one sshd. You can connect to any IP-address and should be authenticated with gssapi/kerberos. So the client will ask for a principal host/virt-ip-X and the server has to have an entry for this in the keytab and has to select the right key by determining the hostname from the connection IP-address. There is no other way

Config: Samba 3 trusts a win2003 domain. XP workstations joined to Samba PDC domain. When a user in the 2003 domain tries to login using an XP workstation and choosing the 2003 domain in the "log onto" box this fails unless the user also has a Linux user account. Is there a way around this? Is this just the way it works? Thanks Lee Baker

Hi there, Does anyone have Dovecot working correctly with pam_mkhomedir, please? I seem to be going through quite a number of IMAP servers this week, trying to find one that will not only authenticate against a Windows domain but which will also create home directories for users the first time they log in. I'm using winbind to do the authentication & that seems to be doing the trick

On Fri, Jan 23, 2015 at 01:08:31PM -0800, Jeremy Allison wrote: > On Fri, Jan 23, 2015 at 10:05:44PM +0100, Markus Doits wrote: > > > > On 23.01.15 19:57, Miguel Medalha wrote: > > > I am using Samba 4.1.16 with smb2/3 and symbolic links are working alright. > > > > > > Following the smb.conf man page, I use: > > > > > > unix extensions

Dear list, I'm trying to get a Thumper (Sun Fire X4500) to play nice with AD so that we can offer a nearline storage service. Since many of our users will have multiple group memberships, it's imperative that samba be able to recurse through the groups that a user is a member of to determine if they have access to a resource. What happens instead is that every user who authenticates is

I am attempting to use winbind for Telnet authentication but winbind pam doesn't recognize ads realm or smb.conf workgroup..see error snapshot. pdtsun03 is hostname of solaris 10 ADS domain member running samba 3.0.11. "net ads join" worked..."net ads user" returns all MYADSDOMAIN users and samba shares work from both unix and NT side. one note..After make install, I

Hi, I've got a browsing problem, I'm searching the error for a long time now so I think betimes it's a bug ;-) For debugging purposes, I've left away everything in the network that's not necessary. There's now only one XP-Prof workstation (domain member) and one samba server (3.0.22, acting as PDC) anymore. Bind9 is the local DNS server; Forward and PTR entries are

We recently had a strange NFS performance anomaly between a V880 running snv_124 and two NetApp filers. To investigate, a DTrace NFSv4 (and eventually NFSv3) client provider would been extremely helpful. Unfortunately, all I could find were a request for code review of a v3 client provider and another request for help developing a v4 provider. Nothing seems to have come from those initiatives,

Hi, I have a few virtuozzo servers that are running different versions. Some are running 4.0 and some are running 4.6. I am having a hard time figuring out how to set the configuration file based on the rpm version that is currently installed. Is there a tutorial or page that has an example of something like this? Thanks -- You received this message because you are subscribed to the Google

Hi, I'm trying to access a file share on what I believe is a netapp server using kerberos authentication. I've done a kinit and gotten credentials and then ran: $ smbclient -U pedrocr //gsb-filer2/pedrocr -k -d10 This actually increased the number of credentials klist shows so looks good in that regard. Howeever, I got the error: """ SPNEGO login failed:

I'm trying to setup a Solaris 10 Sparc station to authenticate users on login with Windows ADS. I have found the documentation for this but having no luck in getting the pam modules to work. Here is what I have done so far: Compiling Kerberos MIT5-1.8.3: cd into the src directory ./configure --prefix=/opt/local gmake gmake install Compiling Samba 3.5.6: setenv CFLAGS "-O2"

I've googled my heart out, but I cannot see an example of ssh authentication with Active Directory and winbindd, particularly on Solaris 10. I have it working on Solaris 8 with telnet, but I'm trying to break my users of telnet. Has anyone got it working? If so, would you be willing to share the global section of your smb.conf and pam.conf with me? Is there something I need to put in one

Hi, I'm new to the list (and samba). It's a great technology and I look forward to learning more about it. I have an OS X Server that utilizes the built-in Samba to allow for Windows client connectivity. The OSXS gets the majority of its users from an LDAP server elsewhere on the campus. On OSXS, it's expected that the Windows users will be local or that the server will be a

https://bugzilla.mindrot.org/show_bug.cgi?id=2378 Bug ID: 2378 Summary: Allow login to a role using Hostbased auth on platforms supporting PAM_AUSER Product: Portable OpenSSH Version: 6.8p1 Hardware: Sparc OS: Solaris Status: NEW Severity: enhancement Priority: P5