Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread steve
On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined the domain, users can logon. But I have a mess in the keytab:

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Gémes Géza
Hi, Comments in-line: On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined the domain, users can logon. But I have a

[Samba] Take hold Computer name Property/Attribute

2012-01-09 Thread Jessica Guynn
Hi guys, Back to my old problem. Successfully integrated windows 2008 ADS with Samba using winbind and PAM (thanks to Kukks and everyone in the forum and irc). By authenticating with ADS I am able to point ownership to a domain user , but how do you change the computer name field so when

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread steve
On 01/09/2012 09:47 AM, Gémes Géza wrote: Hi, Comments in-line: On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 12:34, steve st...@steve-ss.com wrote: On 01/09/2012 09:47 AM, Gémes Géza wrote: [...] samba-tool user add steve4 (the spn stuff you mention doesn't seem to be needed?) samba-tool domain exportkeytab /etc/krb5.keytab --principal=steve4 You don't need the last step (see

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 12:56, steve st...@steve-ss.com wrote: On 01/09/2012 11:50 AM, Michael Wood wrote: On 9 January 2012 12:34, stevest...@steve-ss.com  wrote: On 01/09/2012 09:47 AM, Gémes Géza wrote: [...] samba-tool user add steve4 (the spn stuff you mention doesn't seem to be needed?)

[Samba] Could not write response[27830:AUTH_CRAP] to client: Broken pipe

2012-01-09 Thread Chris Howley
Hello, We're using FreeRADIUS and winbind to authenticate access to our wireless network. The problem we're experiencing is that the secure channel between the wbind daemon and the DC appears to be unstable. The outages last for about 30 seconds and coincide with a series of ...Broken pipe

Re: [Samba] smb.conf 'use kerberos keytab = true'

2012-01-09 Thread Jim McDonough
On Sun, Jan 8, 2012 at 8:43 AM, steve st...@steve-ss.com wrote: openSUSE 12.1, Samba 3.61 joined to Samba 4 Domain /etc/samba/smb.conf on the Linux client is as follows: workgroup = CACTUS realm = HH3.SITE security = ADS use kerberos keytab = true testparm tells me it is ignoring the

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 14:30, steve st...@steve-ss.com wrote: On 09/01/12 12:12, Michael Wood wrote: On 9 January 2012 12:56, stevest...@steve-ss.com  wrote: [...] Hi Rename the keytab, touch /etc/krb5.keytab to start with a blank keytab and add only the nfs principal? What about all the other

Re: [Samba] Set primary group of file on samba share from windows

2012-01-09 Thread TAKAHASHI Motonobu
From: Hubert Kario h...@qbs.com.pl Date: Mon, 9 Jan 2012 11:53:26 +0100 As far as I examined there is no way to display/change the owner group of files via Samba. Also in Samba 3.x, we cannot set any groups to an owner of a file. I think it's difficult to implement because Windows does

[Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial apps that only run on Windows. My long term goal is to install some sort of central management system

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Adam Tauno Williams
On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial apps that only run on Windows. My long term goal

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread steve
On 01/09/2012 04:48 PM, Adam Tauno Williams wrote: On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
On Jan 9, 2012, at 10:48 AM, Adam Tauno Williams wrote: On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use

[Samba] samba4 and ntp

2012-01-09 Thread felix
I have configured samba4 and ntp following the official HowTO. Client computers running Windows XP synchronize their time correctly but only when windows starts or after a restart (same thing). My ntp.conf is the same found in the HowTo. ntp version is 4.2.6p4 and I set the following domain

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread steve
On 01/09/2012 05:18 PM, mikel king wrote: On Jan 9, 2012, at 10:48 AM, Adam Tauno Williams wrote: On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of

Re: [Samba] SOLVED The Group Policy Client service failed the logon. Access is denied.

2012-01-09 Thread Mat Enders
I am not sure how it got fixed but now it works. I deleted the registry key, deleted, and deleted their roaming profile from their home directory. And all works now. --Original Message-- From: Menders To: samba@lists.samba.org Subject: The Group Policy Client service failed the logon.

Re: [Samba] Samba4 and Bind with DLZ

2012-01-09 Thread felix
On Wed, 2011-12-07 at 13:13 -0500, fe...@epepm.cupet.cu wrote: Could you, please, give me some clue on how to configure dlz in Bind to work with Samba4? I installed samba4 from git check out from a week ago, then I provisioned it but DNS is not working. Now with a more recent checkout my

Re: [Samba] samba share permission

2012-01-09 Thread Charles Tryon
Malvin, You say you are talking about an NFS share. Are your users on Windows or Linux? Of course, if you really are using NFS, then the Samba config isn't going to control that. On Fri, Jan 6, 2012 at 4:03 PM, tung t...@yahoo.ca wrote: hi, i am very new to samba and have run

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Charles Tryon
The other gotcha is the question of, how comfortable are you (or perhaps more important, your BOSS) with running software that is still technically in Alpha release? This is exactly the question I'm trying to resolve with the head of our IT department. This is a complicated question, since the

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Natxo Asenjo
On Mon, Jan 9, 2012 at 4:47 PM, mikel king mikel.k...@olivent.com wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial apps that only run on

Re: [Samba] Can Samba + (OpenLDAP Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
On Jan 9, 2012, at 2:34 PM, Natxo Asenjo wrote: On Mon, Jan 9, 2012 at 4:47 PM, mikel king mikel.k...@olivent.com wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters

[SCM] Samba Shared Repository - branch master updated

2012-01-09 Thread Stefan Metzmacher
The branch, master has been updated via 507e75e s4:python/samba/ndr.py: add an optional 'allow_remaining' to ndr_unpack() via 1be5e58 pidl:Samba4/Python: add an optional 'allow_remaining' argument to __ndr_unpack__() hooks from 12cb6cd s3-build: Remove unused hooks to set

[SCM] Samba Shared Repository - branch master updated

2012-01-09 Thread Günther Deschner
The branch, master has been updated via aa3fcbb s3-waf: rpcclient does not need libads.so. via ab269de s3-passdb: remove a forward declaration. via 3583419 s3-libads: pretty print a keytab list. via 4c03f08 s3-pdbtest: only test trusted domains when pdb backends

[SCM] Samba Shared Repository - branch master updated

2012-01-09 Thread Günther Deschner
The branch, master has been updated via 88258c3 s4-kerberos: remove some unused prototypes. from aa3fcbb s3-waf: rpcclient does not need libads.so. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log -

[SCM] Samba Shared Repository - branch master updated

2012-01-09 Thread Stefan Metzmacher
The branch, master has been updated via 73d96ed s4:scripting/devel: add repl_cleartext_pwd.py script from 88258c3 s4-kerberos: remove some unused prototypes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

autobuild: intermittent test failure detected

2012-01-09 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-01-09-2200/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2012-01-09 Thread Volker Lendecke
The branch, master has been updated via 7104ce3 s3: Remove an unused label from 73d96ed s4:scripting/devel: add repl_cleartext_pwd.py script http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit