[Samba] DNS update fails with Kerberos 1.8 on Ubuntu 10.04
Hi all, I've run into a problem regarding the DNS update while joining a domain. The joining of the domain worked but the domain update (enabled with --with-dnsupdate) did not. I could solve the issue by compiling Samba with older Kerberos libs (1.6.3). I know that Kerberos 1.8 disables DES by default and I can re-enable it allow_weak_crypto=true, however that did not work. I'd like to be able to use the standard krb5 libs however and thus my question: does anyone have any experience on what to do in this case? Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
Hi all, thanks for your replies! Is it correct to assume that net ads testjoin will only ask for a password if the secrets.tdb is missing or if it is corrupt. I understand that the secrets.tdb stores the account password and thus if that file exists and can be read the account password should be available to net and thus no need to ask for a password? Regards, Khaled 2010/7/6 Rob Moser rob.mo...@nau.edu: If you want to know what the net command is doing in more detail, try running it with the -d debuglevel option. debuglevel should be some number between 0 and 10, with 10 being the highest. I'd work your way up - 10 will flood you with so much information its hard to see whats going on. More details about the debug option and other net command-line options can be found in the man page for net. - rob. On 07/06/2010 01:49 AM, Khaled Blah wrote: Is there anyone who can help with this question? Regards, Khaled 2010/4/30 Khaled Blah khaled.b...@googlemail.com: Can anyone give me any hints please? I've read the man pages for smb.conf and for net and then I read the manual about the net command. Still, I don't know what testjoin actually does or tries to do. Regards, Khaled 2010/4/26 Khaled Blah khaled.b...@googlemail.com: I hope bumping is not frowned upon in this list :) cheers, Khaled 2010/4/24 Khaled Blah khaled.b...@googlemail.com: Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
I just noticed that I have replied to the wrong thread. Although my question is about net what I wanted to know I asked in a different thread. I'll quote my question to make clear what I was interested in: quote is it possible to execute net ads testjoin without net asking for a password (in any circumstance)? The reason for my question is that I want to use it in a script and thus won't be able to supply a password to net (net does not ask for a password on stdin). /quote Regards, Khaled 2010/7/7 Khaled Blah khaled.b...@googlemail.com: Hi all, thanks for your replies! Is it correct to assume that net ads testjoin will only ask for a password if the secrets.tdb is missing or if it is corrupt. I understand that the secrets.tdb stores the account password and thus if that file exists and can be read the account password should be available to net and thus no need to ask for a password? Regards, Khaled 2010/7/6 Rob Moser rob.mo...@nau.edu: If you want to know what the net command is doing in more detail, try running it with the -d debuglevel option. debuglevel should be some number between 0 and 10, with 10 being the highest. I'd work your way up - 10 will flood you with so much information its hard to see whats going on. More details about the debug option and other net command-line options can be found in the man page for net. - rob. On 07/06/2010 01:49 AM, Khaled Blah wrote: Is there anyone who can help with this question? Regards, Khaled 2010/4/30 Khaled Blah khaled.b...@googlemail.com: Can anyone give me any hints please? I've read the man pages for smb.conf and for net and then I read the manual about the net command. Still, I don't know what testjoin actually does or tries to do. Regards, Khaled 2010/4/26 Khaled Blah khaled.b...@googlemail.com: I hope bumping is not frowned upon in this list :) cheers, Khaled 2010/4/24 Khaled Blah khaled.b...@googlemail.com: Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
Is there anyone who can help with this question? Regards, Khaled 2010/4/30 Khaled Blah khaled.b...@googlemail.com: Can anyone give me any hints please? I've read the man pages for smb.conf and for net and then I read the manual about the net command. Still, I don't know what testjoin actually does or tries to do. Regards, Khaled 2010/4/26 Khaled Blah khaled.b...@googlemail.com: I hope bumping is not frowned upon in this list :) cheers, Khaled 2010/4/24 Khaled Blah khaled.b...@googlemail.com: Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
It seems you didn't even read my initial question. Quoting myself here: quote Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? /quote Regards, Khaled 2010/7/6 t...@tms3.com: SNIP Is there anyone who can help with this question? prism# net ads testjoin Join is OK That's about it. Pretty simple. Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] net ads testjoin without asking for password
Hello all, is it possible to execute net ads testjoin without net asking for a password (in any circumstance)? The reason for my question is that I want to use it in a script and thus won't be able to supply a password to net (net does not ask for a password on stdin). Thanks in advance to anyone who can shed some light on this for me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin without asking for password
Hi Robert, I've already tried that and it wouldn't work :( If I understand it correctly, then net writes the account password for the joining account to the secrets.tdb file and if that file still is there say after a reboot then net ads testjoin should not ask for a password right? Regards, Khaled 2010/7/1 Atkinson, Robert ratkin...@tbs-ltd.co.uk: Try :- -U username%password on the command. Rob. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Khaled Blah Sent: 01 July 2010 15:05 To: samba@lists.samba.org Subject: [Samba] net ads testjoin without asking for password Hello all, is it possible to execute net ads testjoin without net asking for a password (in any circumstance)? The reason for my question is that I want to use it in a script and thus won't be able to supply a password to net (net does not ask for a password on stdin). Thanks in advance to anyone who can shed some light on this for me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba *** Any opinions expressed in email are those of the individual and not necessarily those of the company. This email and any files transmitted with it are confidential and solely for the use of the intended recipient or entity to whom they are addressed. It may contain material protected by attorney-client privilege. If you are not the intended recipient, or a person responsible for delivering to the intended recipient, be advised that you have received this email in error and that any use is strictly prohibited. Random House Group + 44 (0) 20 7840 8400 http://www.randomhouse.co.uk http://www.booksattransworld.co.uk http://www.kidsatrandomhouse.co.uk Generic email address - enquir...@randomhouse.co.uk Name Registered Office: THE RANDOM HOUSE GROUP LIMITED 20 VAUXHALL BRIDGE ROAD LONDON SW1V 2SA Random House Group Ltd is registered in the United Kingdom with company No. 00954009, VAT number 102838980 *** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads dns register
D'oh! I was quite stupid for not seeing this, so thx a lot Jim! Khaled 2010/5/21 Jim McDonough j...@samba.org: On Wed, May 12, 2010 at 6:59 AM, Khaled Blah khaled.b...@googlemail.com wrote: I would like to know whether it is possible to select (a) specific IP(s) for a net ads dns register call. The reason for my question is that we have setups with several interfaces, a few of which are internal interfaces but technically they're ethernet interfaces. Adding all those internal interfaces to a Windows AD server leads to the DNS server giving out the wrong IP address. Use the interfaces = parameter in smb.conf to restrict this. -- Jim McDonough Samba Team SUSE labs jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads dns register
Does noone have any ideas on this? regards, Khaled 2010/5/12 Khaled Blah khaled.b...@googlemail.com: Hello, I would like to know whether it is possible to select (a) specific IP(s) for a net ads dns register call. The reason for my question is that we have setups with several interfaces, a few of which are internal interfaces but technically they're ethernet interfaces. Adding all those internal interfaces to a Windows AD server leads to the DNS server giving out the wrong IP address. Thanks in advance! regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] net ads dns register
Hello, I would like to know whether it is possible to select (a) specific IP(s) for a net ads dns register call. The reason for my question is that we have setups with several interfaces, a few of which are internal interfaces but technically they're ethernet interfaces. Adding all those internal interfaces to a Windows AD server leads to the DNS server giving out the wrong IP address. Thanks in advance! regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
Can anyone give me any hints please? I've read the man pages for smb.conf and for net and then I read the manual about the net command. Still, I don't know what testjoin actually does or tries to do. Regards, Khaled 2010/4/26 Khaled Blah khaled.b...@googlemail.com: I hope bumping is not frowned upon in this list :) cheers, Khaled 2010/4/24 Khaled Blah khaled.b...@googlemail.com: Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net ads testjoin
I hope bumping is not frowned upon in this list :) cheers, Khaled 2010/4/24 Khaled Blah khaled.b...@googlemail.com: Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] net ads testjoin
Hello all, I am new to this list and hopefully I am at the right place. Firstly, thanks to everyone involved in this project. You do a great job! Now, I use net to join Windows AD domains and was wondering where I can find out more information on what happens during a net ads testjoin. The information I found on the documentation pages of net or smb.conf on the website did not say much about it. I have noticed that a testjoin will ask for a password when the domain membership is not valid and it'll ignore kerberos tickets. Is there something I am missing here? I am grateful to any insight you guys could give me! Regards, Khaled -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
