Hi,
I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos. Everything works
fine so far. Now i need to have the host keytab generated by winbind to be in
the default /etc/krb5/krb5.keytab in order to use nfs with kerberos security.
The problem is i have set the parameter in smb.conf:
not yet? does it create a keytab file?
i tested the same thing on rhel4 with MIT kerberos and here it creates the
krb5.keytab file under /etc/krb5.keytab i then linked it to
/etc/krb5/krb5.keytab and now i can see all the keys with klist -k, but i can't
use them:
[EMAIL PROTECTED] etc]# klist
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
Hi,
I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos. Everything
works fine so far. Now i need to have the host keytab generated by winbind to
be in the default /etc/krb5/krb5.keytab in order to use nfs with
Yes the net ads keytab create created the keytab file now. But in the logs i
can see that the encryption type used is not good:
Apr 2 12:37:18 rhel4wbtest1 sshd[4542]: pam_krb5: error reading keys for
host/rhel4wbtest2.vegagroup.net from /etc/krb5/krb5.keytab: Bad encryption type
Apr 2
PLEASE HELP!!
I have got strange problem on samba-3.0.28-0.fc7 with logon hours and
passwords policies .I use tdbsam backend.
After changing time form winter to summer client's (windows XP) cannot
login after 8:00AM ( time zone Warszawa/Poland UTC ). Linux and windows
clients correctly changed
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
| Hi,
|
| I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos.
Everything works fine so far. Now i need to have the host keytab
generated by winbind to be in the default /etc/krb5/krb5.keytab in order
to use nfs with
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
| Yes the net ads keytab create created the keytab file now. But in
the logs i can see that the encryption type used is not good:
|
| Apr 2 12:37:18 rhel4wbtest1 sshd[4542]: pam_krb5: error reading keys
for
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John Newbigin wrote:
| For some time I had been running samba 3.0.10 from RHEL4. I have a samba
| - cups - pdf printer set up which uses the user supplied job name for
| the output file. The job name was formatted like this smbprn.1020
|
I use tdbsam .
I use pdbedit -P password hisotry -C 3
pdbedit -P min password length -C 5
-P maximum password age -C 7776000 (90 days)
-P minimum password age -C 6912000 (80 days)
-P user must logon to change password -C 2 (on)
So my passwords need to be changed every 90
Hi and thanks for you answer.
here is the output about the encryption used:
[EMAIL PROTECTED] krb5]# klist -e -k
Keytab name: FILE:/etc/krb5/krb5.keytab
KVNO Principal
--
2 host/[EMAIL PROTECTED] (DES cbc mode with
Hi Doug, *,
Sorry for my late answer - I discovered your mail, which never reached
my box, on gmane..
Douglas VanLeuven schrieb:
Friedrich Strohmaier wrote:
[..]
I can't tell what you're trying to do from what you've described.
It looks like you set the local machine sid and it worked.
It was
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
Hi and thanks for you answer.
here is the output about the encryption used:
[EMAIL PROTECTED] krb5]# klist -e -k
Keytab name: FILE:/etc/krb5/krb5.keytab
KVNO Principal
Enctypes look fine.
i have to use pam_krb5
how? when i use pam_winbind to login and automount to mount a users home
with kerberos security i dont get a TGT at login. So this doesn't seem
to work with pam_winbind or?
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: 02 April 2008 15:45
To: Oliver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
how? when i use pam_winbind to login and automount to mount a users home
with kerberos security i dont get a TGT at login. So this doesn't seem
to work with pam_winbind or?
Install examples/pam_winbind/pam_winbind.conf to
Sounds cool.
i made the changes. When i login as an ad user i don't get a ticket? Is
there anything else i need to set?
Cheers
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: 02 April 2008 16:08
To: Oliver Weinmann
Cc: samba@lists.samba.org
Subject: Re:
Ok. i got it. I had to change the parameter for:
krb5_ccache_type = FILE
now the users get a cached ticket at login. COOL :)
but when the automount daemon tries to mount their home it fails:
Apr 2 16:41:09 rhel4wbtest2 rpc.gssd[1793]: WARNING: Failed to create
krb5 context for user with uid
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Replying to myself :
Add the following conf line to smb.conf:
rename user script = /usr/sbin/smbldap-usermod -r '%unew' '%uold'
ioguix a écrit :
Hello,
I am trying to rename a computer on my samba domain but it fails telling me I
hadn't rights
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Replying to myself :
Add the following conf line to smb.conf:
rename user script = /usr/sbin/smbldap-usermod -r '%unew' '%uold'
ioguix a écrit :
Hello,
I am trying to rename a computer on my samba domain but it fails telling me I
hadn't rights
Hi
I have recently figured that nfs supports only only des-cbc-crc:normal.
encryption type.
Regards
On Wed, Apr 2, 2008 at 8:11 PM, Oliver Weinmann [EMAIL PROTECTED]
wrote:
Ok. i got it. I had to change the parameter for:
krb5_ccache_type = FILE
now the users get a cached ticket at login.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
Ok. i got it. I had to change the parameter for:
krb5_ccache_type = FILE
now the users get a cached ticket at login. COOL :)
but when the automount daemon tries to mount their home it fails:
Apr 2 16:41:09
Shouldn't it? I mean...Taking a look to the output produced by
smbldap-useradd -? it says -w is a windows machine account
(otherwise, posix stuff only) or something similar... I don't have
the exact output right now.
As far as I understand, it should add all the Samba stuff needed for Windows.
On Wed, 2008-04-02 at 10:39 -0500, Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oliver Weinmann wrote:
Ok. i got it. I had to change the parameter for:
krb5_ccache_type = FILE
now the users get a cached ticket at login. COOL :)
but when the
No? Then how do you say we must do? Because I also tried to do that
from Windows, and it doesn't work... I mean... right click on my pc
and add machine to domain... and still doesn't work :S
Quoting myself form:
http://lists.samba.org/archive/samba/2008-February/138639.html
The linux server is
On Wed, Apr 2, 2008 at 12:03 PM, Hector Blanco [EMAIL PROTECTED] wrote:
No? Then how do you say we must do? Because I also tried to do that
from Windows, and it doesn't work... I mean... right click on my pc
and add machine to domain... and still doesn't work :S
I had this in the past. At
samba uses nss_ldap for the check during the add - ie it uses smbldap to add
and then uses nssldap to check the account was created.
The problem arises if the nssldap isn't configured properly.
if you do
getent passwd
on the samba host, does it work? do you see ldap users or only local
I see both.
The thing is that the machine is properly created, but the Samba parts
doesn't appear. Is like if smbldap-adduser worked only partially :S
2008/4/2, Quinn Fissler [EMAIL PROTECTED]:
samba uses nss_ldap for the check during the add - ie it uses smbldap to add
and then uses nssldap
Forced Election:
In workgroup WORKGROUP when announced server was:
SYSTEM-1 (192.168.1.248) : 50 Time(s)
SYSTEM-2 (192.168.1.183) : 2 Time(s)
SYSTEM-3 (192.168.1.248) : 1 Time(s)
Cannot get workgroup name from domain name browser:
192.168.1.153 : 96 Time(s)
I used smbpasswd -d username to disable an account.
How can I see the status of the account as being disabled?
Is there something similar to the passwd -S username command which
tells me the account status?
When I view the smbpasswd file the user I disabled appears unchanged,
not like the
Hector Blanco wrote:
Shouldn't it? I mean...Taking a look to the output produced by
smbldap-useradd -? it says -w is a windows machine account
(otherwise, posix stuff only) or something similar... I don't have
the exact output right now.
As far as I understand, it should add all the Samba
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
pdbedit -Lv username -- there are some other formats that might be of
interest.
Most specifically though, looking at the smbpasswd file, you SHOULD see
a D in the [] flags field.
Marc Fromm wrote:
I used smbpasswd -d username to disable an account.
On Wed, Apr 2, 2008 at 12:22 PM, Quinn Fissler [EMAIL PROTECTED] wrote:
samba uses nss_ldap for the check during the add - ie it uses smbldap to add
and then uses nssldap to check the account was created.
The problem arises if the nssldap isn't configured properly.
if you do
getent
I have a samba server that has been running for quite a while, without any
problems. Last week, out of the blue, everybody lost connections. I restarted
winbind and samba and all was well. It happened again, and again all it took
was a restart. It happened over the weekend then again on Monday,
JJB wrote:
Forced Election:
In workgroup WORKGROUP when announced server was:
SYSTEM-1 (192.168.1.248) : 50 Time(s)
SYSTEM-2 (192.168.1.183) : 2 Time(s)
SYSTEM-3 (192.168.1.248) : 1 Time(s)
Cannot get workgroup name from domain name browser:
192.168.1.153 : 96 Time(s)
Cesar Amaya wrote:
Hello list,
I have two Samba-LDAP DC's each in different networks, domain
AMECC_SAL (192.168.40.0/24) and domain AMECC_GUA (192.168.42./24). I
have established a inter-domain trust relationship in both directions.
My problem comes when I try to log into a machine in the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Friedrich Strohmaier wrote:
| Hi Doug, *,
|
| Sorry for my late answer - I discovered your mail, which never reached
| my box, on gmane..
|
| Douglas VanLeuven schrieb:
| Friedrich Strohmaier wrote:
|
| [..]
|
| I can't tell what you're trying to do
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Please keep replies on-list.
For smbpasswd, they are not listed anyplace else. I believe they are
manufactured from the smb.conf entries for profile path and home
directory. I believe for other backends, they are contained in the file
and only
Search for a file called wins.dat, remove it, restart samba and go for a
coffee.
JJB escreveu:
Forced Election:
192.168.1.153 was a mac running Leopard. It has not been on the
network for a month, but this keeps happening. Does anyone have an
idea where this address might be cached?
--
Your password must be at least 5 characters, cannot
repeat any of your previous 0 passwords and must be at least 0 days
old. Please type a different password. Type a password that meets
these requirements in both text boxes.
...instead of the requirements set forth in OpenLDAP (minimum 6
Marcio Merlone wrote:
Search for a file called wins.dat, remove it, restart samba and go for
a coffee.
JJB escreveu:
Forced Election:
192.168.1.153 was a mac running Leopard. It has not been on the
network for a month, but this keeps happening. Does anyone have an
idea where this address
Hi,
I am using samba 3 came with redhat 5.1 , samba-3.0.25b-0.el5.4
Please help to answer these questions
1/ How can I can smb.conf to use /etc/samba/smbpasswd file ?
2/ What is the default 'security' on samba 3 user ?
3/ Does the lines start with a ; (semi-colo) are default
Hi,
I am trying to clone the samba repository using git and I get the
following error.
$ git-clone git://git.samba.org/samba.git samba
Initialized empty Git repository in /data/koteswar/samba/.git/
git.samba.org[0: 131.204.22.100]: errno=Connection refused
fatal: unable to connect a socket
Doesn't matter whats the problem - we have pilz to cure everything!
http://rnfjabkvmmwq.blogspot.com
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:
http://www.catb.org/~esr/faqs/smart-questions.html
The branch, v3-2-stable has been updated
via 2ba0037a3bb1e0692e5c35b11dd632590735d869 (commit)
via 7ab5d6f0251ee1d10e9393911c2f120b94f784fe (commit)
via 37aa01f033e6fdeb970d8357db6ea4498fe83d1f (commit)
from f8cc8e873508b358633dcdcf945b34587eef0950 (commit)
The branch, v3-2-test has been updated
via 0058ab30de943f134792e3d66051206086987110 (commit)
from 0970369ca0cb9ae465cff40e5c75739824daf1d0 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
The branch, v3-2-test has been updated
via 4714bae0dbbb2ad010c2929f83de6bca84cfac46 (commit)
from 0058ab30de943f134792e3d66051206086987110 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
The branch, v3-2-test has been updated
via 0970369ca0cb9ae465cff40e5c75739824daf1d0 (commit)
from 547eacf6058d2bc5b41b266b70f8f4747aca4eae (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
The branch, v3-2-test has been updated
via b12edbeffee1f7d1fd971cde9189e5137ddeb35b (commit)
via 8a1a9f967db25d3928f19e46d60af249f934f323 (commit)
from 4714bae0dbbb2ad010c2929f83de6bca84cfac46 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log
On Wed, Apr 02, 2008 at 05:54:27AM -0500, G??nther Deschner wrote:
The branch, v3-2-test has been updated
via b12edbeffee1f7d1fd971cde9189e5137ddeb35b (commit)
via 8a1a9f967db25d3928f19e46d60af249f934f323 (commit)
from 4714bae0dbbb2ad010c2929f83de6bca84cfac46 (commit)
The branch, v4-0-test has been updated
via d777a83b8478bf09a45eccde38036eccbd219df8 (commit)
via 9692a48aeb1c22a86a98ca736f173b2332a87480 (commit)
via 4d1fb503de31c5c81eb22cdd0a61eae5e4813b40 (commit)
via e67d8c7b6a5035c64d96ff92494ae38f7b6d8205 (commit)
via
The branch, v4-0-test has been updated
via 2763fc6294aa35018d4317dd9eebcba969e70333 (commit)
via 0e371cf169e9a607fcbb3e65437ab9413935dd52 (commit)
via 8c3591d98f42a75d68d698f7b4be8f2e0284522f (commit)
via 3e8aecbc2ee3c0bb32aa83c5035a758f16f344cb (commit)
via
The branch, v4-0-test has been updated
via fc50e78e2631e8253571bc236302e2859e4d1559 (commit)
from 2763fc6294aa35018d4317dd9eebcba969e70333 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test
- Log -
The branch, v3-0-test has been updated
via cd6d910c4dd44a07dd7b8f197d6ea5a441fbefa1 (commit)
from 4648c1ab78ccf00893c10a024928f165101c8e12 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test
- Log -
The branch, v3-2-test has been updated
via c19fdf43d16ce9fba3e8e12e6192bac31837715e (commit)
from b12edbeffee1f7d1fd971cde9189e5137ddeb35b (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
The branch, v4-0-test has been updated
via 8c27941171999d2d42834b92a2693aca0435d345 (commit)
via 206b7d387c6d17e5cc40fd45b489abac9235a7a4 (commit)
via 018eb64f038210279b90925e6a981c067aef4be9 (commit)
via ac5e5fee1db2999053dee82d1fcf97ca8799c9b5 (commit)
via
The branch, v4-0-test has been updated
via 21fcf7c419658b3ae296428ca7a4ccf2288c17fe (commit)
from 8c27941171999d2d42834b92a2693aca0435d345 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test
- Log -
The branch, v3-2-test has been updated
via f6069126e5e6d239b1ae00e897a420227f923e3f (commit)
from c19fdf43d16ce9fba3e8e12e6192bac31837715e (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
The branch, v3-2-test has been updated
via ea3cfadc2504c891b4784719bd8e6debcc38c879 (commit)
via 9e15ce03ca66a0b5ffdb39dd2faaad6e0f967e31 (commit)
from f6069126e5e6d239b1ae00e897a420227f923e3f (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log
URL: http://build.samba.org/
--- /home/build/master/cache/broken_results.txt.old 2008-04-02
00:00:44.0 +
+++ /home/build/master/cache/broken_results.txt 2008-04-03 00:00:49.0
+
@@ -1,4 +1,4 @@
-Build status as of Wed Apr 2 00:00:01 2008
+Build status as of Thu Apr
The branch, master has been updated
via 4c006c675d577d4a45f4db2929af6d50bc28dd9e (commit)
from 794ed5852c09deaffd1817f8a443b4711ed4d06f (commit)
http://gitweb.samba.org/?p=sahlberg/ctdb.git;a=shortlog;h=master
- Log
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project Samba GTK+ frontends.
The branch, master has been updated
via 86aaae79af5ce5aad89b1a9145dd6787c772a8ae (commit)
via
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project Samba GTK+ frontends.
The branch, master has been updated
via bb16484a143fbd2476b5d9e162077e211db99c56 (commit)
via
The branch, master has been updated
via 10e585413c217d9b9c32ff3d2fb3d8f24183c458 (commit)
from 4c006c675d577d4a45f4db2929af6d50bc28dd9e (commit)
http://gitweb.samba.org/?p=sahlberg/ctdb.git;a=shortlog;h=master
- Log
62 matches
Mail list logo