similar to: krb5.conf in /var/lib/samba/smb_krb5 very different from original

i am in a mixed win2000 and win2003 R1 ActiveDirectory environment. Have always had ntlmv2 server and client required. LM and NTLM have always been rejected. That is how it has been for 10 years. Mounting from CentOS 5 to the windows servers has not been an issue for years. However, using ADS credentials for Linux workstation logons has always been a issue. If using ADS credentials to logon

Hello list, I've upgraded from Samba 3.0.14a to 3.0.27a (Samba is a domain member of a W2k3 native AD) and I see that in the /var/lib/samba/smb_krb5 directory a krb5.conf file is created. Is this krb5.conf file extracted from my original /etc/krb5.conf? Or is this file created from the "password server =" entry in my smb.conf file? My original /etc/krb5.conf contains the DC's in

Hi, Are there any way to add options to /var/run/samba/smb_krb5/krb5.conf_DOMAIN? I need to add udp_preference_limit and maybe have a better control on which kdc's are used. Best regards Emil Assarsson Sony Ericsson Mobile Communications AB "The information in this email, and attachment(s) thereto, is strictly confidential and may be legally privileged. It is intended solely for the

All, I am running Solaris 10 and Samba 3.6.6. We use intelligent DNS and have more than 10 ADs. In /etc/krb5/krb5.conf I configure kdc and admin_server to point to the IDNS server so any one of our functioning ADs can be used dynamically. I've noticed that /var/samba/locks/smb_krb5/krb5.conf.DOM get created when net ads join is run. I've also noticed that the kdc is set to an IP address

On 18/06/2023 16:29, Dale Renton via samba wrote: > On Sat, Jun 10, 2023 at 1:49?PM Rowland Penny via samba < > samba at lists.samba.org> wrote: >> Dale, just checking back on what you posted earlier and you had: >> >> create krb5 conf = no >> >> in your smb.conf >> >> Is that line still there ? >> If so, try removing it. >>

Just a question. Did you create this server on site a and the moved it to site b? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Felix >Matouschek >Verzonden: vrijdag 14 augustus 2015 8:58 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] winbind_krb5_locator usage > >Hello, > >i investigated further and

Hi Rowland, /var/run/samba/smb_krb5 does not exist. However /var/cache/samba/smb_krb5 exists, there is a file named "krb5.conf.INTRANET". Contents: [libdefaults] default_realm = INTRANET.VIPCO.DE default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 RC4-HMAC DES-CBC-CRC DES-CBC-MD5 default_tkt_enctypes = aes256-cts-hmac-sha1-96

I found a strange folder smb_krb5 in my samba lock directory. Inside, there is something that looks like a Kerberos Configuration, but the content is different from my /etc/krb5.conf (A) Does Samba correctly use my /etc/krb5.conf as before in version 3.023? (B) What is the smb_krb5-folder good for, where does it come from? (C) Can it be deleted safely or does it have to be backed up together with

> >On Thu, Dec 10, 2009 at 9:21 AM, <aplist at netcourrier.com> wrote: > > Hi, > > > > > > I have raised this question on the kerberos mailing list, but have been > told that Samba has it's own behavior regarding SRV lookups. > > > > My configuration uses the following : > > ?dns_lookup_realm = false > > ?dns_lookup_kdc = false

If I add winbind rpc only = Yes to smb.conf file then "wbinfo -u" will list users in the current domain. It won't list users in any trusted domains (including domains in the same forest.) This indicates that the domain is having some issue retrieving user names via LDAP. The forest is 2008 function level. The domain was 2003 functional level but I just raised that

Good morning all! I know this is not a Samba problem... It's a Windows 2008R2 AD problem! It would seem that in the last 72 hours, there has been some kind of AD/KRB/Encryption update that changes things a bit. I'm using Win2008R2, CentOS 5.5-x86_64 and Samba-3.5.6. I join about ten machines a week to the domain using a cookie cutter configuration setup, and all of the sudden this

While playing with large number of DCs in a domain, which does not fit in UDP DNS packet, I found another interesting issue. winbindd generates a temporary krb5.conf for each realm it uses, and stores it in /run/samba/smb_krb5/krb5.conf.$REALM. Here's a typical such config in fully-automatic mode: libdefaults] default_realm = RGS.RU default_etypes = aes256-cts-hmac-sha1-96

Hi, Is there any way to stop Samba regenerating the krb5.conf.[WORKGROUP] file under /var/lib/samba/smb_krb5 every time? It appears to completely ignore /etc/krb5.conf, is this expected? Kernel: Linux localhost 2.6.16.60-0.37_f594963d-smp #1 SMP Mon Mar 23 13:39:48 UTC 2009 x86_64 x86_64 x86_64 GNU/Linux smbd -V: Version 3.0.32-0.8-2045-SUSE-CODE10 Thanks, Alex

I have a printer that requires each user to have the ability to modify his/her defaults without administrator intervention. This printer is a Canon ImageRunner 5000. Each user has the option of setting the "Printing Preferences" to either print directly or to a mailbox on the printer. Up to this point (three weeks now), I have been unable to accomplish this simple task. For all

Hi All, Im going nuts trying to get a mixed environment going. I have a couple of problems, one related to logons and passwords which I think is a pam.d/gdm config error on my part and one where I cant get write acccess from the Ubuntu clients to the domain member server share. This is the most critical....please help me fix this. In a nutshell: Single win 2003 Srv ADS (sp1) A single domain

I just added a window server 2008 r2 to be a backup DC for our samba 4.4.5 AD/DC but I am getting an error when trying to manually sync samba to the windows server. I used the link on the wiki site to make the initial sync, which worked great § <https://wiki.samba.org/index.php/Joining_a_Windows_Server_2008_/_2008_R2_ DC_to_a_Samba_AD> Joining a Windows Server 2008 / 2008 R2 DC to a

Hi all, I get an error when I try to join domain from CentOS 6.5. Have you an idea ? /etc/samba/smb.conf : --------------------- [global] workgroup = XXX server string = Samba Server Version %v log file = /var/log/samba/log.%m max log size = 50 realm = XXX.YYY security = ads idmap uid = 10000-20000 idmap gid = 10000-20000

Greetings; I've been reading the OpenSSH source code and have a question about the des_ssh1_setiv function in cipher.c. (cut-n-pasted here from cipher.c v1.47) : static void des_ssh1_setiv(CipherContext *cc, const u_char *iv, u_int ivlen) { memset(cc->u.des.iv, 0, sizeof(cc->u.des.iv)); } This doesn't use the *iv parameter. Compare with: static void

I have a Win2k3 server and am trying to manage a Samba4 box (name:UBUNTUSERVER, running Ubuntu 12.04.3 + Samba 4.0.10) as a backup. All seemed well, but after a problem with replication (result 1306 WERR_REVISION_MISMATCH), I couldn't even demote the samba4 DC. So I deleted from SERVERW2K3, deleted /usr/local/samba and re-compiled everything. Also ran make quicktest, all seems OK. Now, this

Hi, We just imported (moved) all our staff from the old w2k domain to the new w2k3 domain. Say their accounts and passwords From STAFF domain to say NEW. Seems winbind is keeping the old domain users. I'm using winbind for squid auth on Mandrake linux 10.0 samba-client-3.0.10-0.1.100mdk samba-winbind-3.0.10-0.1.100mdk samba-doc-3.0.10-0.1.100mdk samba-common-3.0.10-0.1.100mdk