similar to: Alternate to 'net ads keytab'?

Hi, I was trying to get a new keytab in samba4 for my apache service. So I tried the following command: sh ktpass.sh --out /etc/apache.keytab --princ HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN --pass VerySecure123 --enc des-cbc-md5 I get the following error: Unable to find kvno for principal HTTP/myhost.samba.my.domain at SAMBA.MY.DOMAIN Am I doing something wron or shouldn't I be

On Fri, 16 Sep 2016 22:43:42 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: > > Achim Gottinger via samba wrote on 9/15/16 1:20 AM: > >> > >> > >> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: > >>> On Wed, 14 Sep 2016 16:23:27 -0500 >

On Fri, 16 Sep 2016 23:02:20 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 16.09.2016 um 22:49 schrieb Rowland Penny via samba: > > On Fri, 16 Sep 2016 22:43:42 +0200 > > Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > >> > >> Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >

Hi guys am looking for some guidance on how I can generate some keytab files from a samba 4 DC I been following a tutorial that states some bits on the windows side such as creating an spn C:\Users\Administrator>setspn -A host/test.sondrel.com at SONDREL.COM Test Registering ServicePrincipalNames for CN=Test,OU=Machines,DC=sondrel,DC=com host/envy.sondrel.com at SONDREL.COM Updated

Am 16.09.2016 um 22:49 schrieb Rowland Penny via samba: > On Fri, 16 Sep 2016 22:43:42 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >>> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>>> >>>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via

Rowland Penny via samba wrote on 9/16/16 1:43 PM: > On Fri, 16 Sep 2016 13:00:52 -0700 > Robert Moulton via samba <samba at lists.samba.org> wrote: > >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A

Achim Gottinger via samba wrote on 9/16/16 3:05 PM: > > > Am 16.09.2016 um 23:00 schrieb Robert Moulton via samba: >> Rowland Penny via samba wrote on 9/16/16 1:43 PM: >>> On Fri, 16 Sep 2016 13:00:52 -0700 >>> Robert Moulton via samba <samba at lists.samba.org> wrote: >>> >>>> Achim Gottinger via samba wrote on 9/15/16 1:20 AM:

Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 00:29 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/16/16 3:05 PM: >>> >>> >>> Am 16.09.2016 um 23:00 schrieb Robert Moulton via samba: >>>> Rowland Penny via samba wrote on 9/16/16 1:43 PM: >>>>> On Fri, 16 Sep 2016

Am 17.09.2016 um 01:23 schrieb Robert Moulton: > Achim Gottinger via samba wrote on 9/16/16 4:14 PM: >> >> >> Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: >>> >>> >>> Am 17.09.2016 um 00:29 schrieb Robert Moulton via samba: >>>> Achim Gottinger via samba wrote on 9/16/16 3:05 PM: >>>>> >>>>>

I'm new to Kerberos. I don't understand how Samba uses the system keytab (/etc/krb5.keytab) when "use kerberos keytab = true". Does Samba use service specific tickets? What tickets does Samba add? Do I need a cron job to keep them fresh or does Winbind take care of it? Sorry if these are elementary questions, but the Samba HOWTO didn't help me understand Samba's

I am working on trying to set up Solaris 11 and Linux clients as Samba domain members with a Win 2008 AD domain controller/directory server. I am also trying to configure Kerberos for unix level authentication. I am unclear if Samba can create a keytab file or only use a previously created on. With solaris, there is "kclient" command that creates the machine account on the

Am 17.09.2016 um 02:36 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 02:19 schrieb Achim Gottinger via samba: >> >> >> Am 17.09.2016 um 01:23 schrieb Robert Moulton: >>> Achim Gottinger via samba wrote on 9/16/16 4:14 PM: >>>> >>>> >>>> Am 17.09.2016 um 00:54 schrieb Achim Gottinger via samba: >>>>>

Achim Gottinger via samba wrote on 9/15/16 1:20 AM: > > > Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >> On Wed, 14 Sep 2016 16:23:27 -0500 >> Michael A Weber via samba <samba at lists.samba.org> wrote: >> >>>> On Sep 14, 2016, at 2:00 PM, Achim Gottinger <achim at ag-web.biz> >>>> wrote: >>>> >>>>

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I am working with integrating various Linux distros as domain members with an Active Directory Domain running on Windows Server 2008 R2 native. The Domain admins have allowed des keys for backwards (nfs) compatibility, but prefers the default enctypes supported in 2008 r2: http://support.microsoft.com/kb/977321 * AES256-CTS-HMAC-SHA1-96

Achim Gottinger via samba wrote on 9/16/16 1:43 PM: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A Weber via samba <samba at

Am 16.09.2016 um 22:43 schrieb Achim Gottinger via samba: > > > Am 16.09.2016 um 22:00 schrieb Robert Moulton via samba: >> Achim Gottinger via samba wrote on 9/15/16 1:20 AM: >>> >>> >>> Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: >>>> On Wed, 14 Sep 2016 16:23:27 -0500 >>>> Michael A Weber via samba <samba at

Am 17.09.2016 um 03:24 schrieb r moulton via samba: > On Fri, Sep 16, 2016 at 6:08 PM, Achim Gottinger via samba > <samba at lists.samba.org> wrote: >> >> Am 17.09.2016 um 02:36 schrieb Achim Gottinger via samba: >>> >>> >>> Am 17.09.2016 um 02:19 schrieb Achim Gottinger via samba: >>>> >>>> >>>> Am 17.09.2016

Am 14.09.2016 um 18:23 schrieb Michael A Weber: > >> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba >> <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >> >> >> >> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >>> Experts— >>> >>> I’m attempting to export a keytab for a created

Am 17.09.2016 um 06:14 schrieb Achim Gottinger via samba: > > > Am 17.09.2016 um 04:53 schrieb Achim Gottinger via samba: >> >> >> Am 17.09.2016 um 03:24 schrieb r moulton via samba: >>> On Fri, Sep 16, 2016 at 6:08 PM, Achim Gottinger via samba >>> <samba at lists.samba.org> wrote: >>>> >>>> Am 17.09.2016 um 02:36 schrieb

On Fri, 16 Sep 2016 13:00:52 -0700 Robert Moulton via samba <samba at lists.samba.org> wrote: > Achim Gottinger via samba wrote on 9/15/16 1:20 AM: > > > > > > Am 15.09.2016 um 09:35 schrieb Rowland Penny via samba: > >> On Wed, 14 Sep 2016 16:23:27 -0500 > >> Michael A Weber via samba <samba at lists.samba.org> wrote: > >> >