Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread John Obaterspok
Hello, Now I'm able to access samba network share from Win PC using my ipa user password. But I need to enter it each time. I have still not been able to logon to Win7 PC with my IPA user. Currently I get No mapping between account names and security IDs was done when I try to login. What I've

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread Loris Santamaria
El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió: I have still not been able to logon to Win7 PC with my IPA user. Currently I get No mapping between account names and security IDs was done when I try to login. What I've done is this: 1. Created a dns entry for winpc + a

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-11-02 Thread John Obaterspok
2014-11-02 21:51 GMT+01:00 Loris Santamaria lo...@lgs.com.ve: El dom, 02-11-2014 a las 19:54 +0100, John Obaterspok escribió: I have still not been able to logon to Win7 PC with my IPA user. Currently I get No mapping between account names and security IDs was done when I try to login.

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-30 Thread Dmitri Pal
On 10/29/2014 11:38 PM, Loris Santamaria wrote: El mié, 29-10-2014 a las 20:49 -0400, Dmitri Pal escribió: On 10/29/2014 05:01 PM, Loris Santamaria wrote: El mié, 29-10-2014 a las 21:40 +0100, John Obaterspok escribió: Hello, I've tried this as well. My IPA is not connected to an AD. My

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread John Obaterspok
Hello, I might be interested in this as well. Does this mean it would be possible for a windows client to access samba FS through IPA provided credentials? Currently my Windows PC gets IPA ticket (through MIT kerberos application) and can use this ticket to login to Linux server via putty. I

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread Dmitri Pal
On 10/29/2014 08:15 AM, John Obaterspok wrote: Hello, I might be interested in this as well. Does this mean it would be possible for a windows client to access samba FS through IPA provided credentials? Currently my Windows PC gets IPA ticket (through MIT kerberos application) and can use

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread Loris Santamaria
El jue, 23-10-2014 a las 12:32 +0200, Sumit Bose escribió: On Tue, Oct 21, 2014 at 07:49:11AM -0430, Loris Santamaria wrote: El lun, 20-10-2014 a las 21:19 -0400, Dmitri Pal escribió: On 10/20/2014 09:15 AM, Loris Santamaria wrote: [...] Trying to join the server to the

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread John Obaterspok
Hello, I've tried this as well. My IPA is not connected to an AD. My smb.conf looks almost the same. The differences are: - I got the default workgroup set (MY or something) - No FILE:/ prefix for keytab file I had the samba and ipserver on the same box so I just had to add the cifs server and

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread Loris Santamaria
El mié, 29-10-2014 a las 21:40 +0100, John Obaterspok escribió: Hello, I've tried this as well. My IPA is not connected to an AD. My smb.conf looks almost the same. The differences are: - I got the default workgroup set (MY or something) - No FILE:/ prefix for keytab file I had the

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread Dmitri Pal
On 10/29/2014 05:01 PM, Loris Santamaria wrote: El mié, 29-10-2014 a las 21:40 +0100, John Obaterspok escribió: Hello, I've tried this as well. My IPA is not connected to an AD. My smb.conf looks almost the same. The differences are: - I got the default workgroup set (MY or something) - No

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-29 Thread Loris Santamaria
El mié, 29-10-2014 a las 20:49 -0400, Dmitri Pal escribió: On 10/29/2014 05:01 PM, Loris Santamaria wrote: El mié, 29-10-2014 a las 21:40 +0100, John Obaterspok escribió: Hello, I've tried this as well. My IPA is not connected to an AD. My smb.conf looks almost the same. The

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-23 Thread Sumit Bose
On Tue, Oct 21, 2014 at 07:49:11AM -0430, Loris Santamaria wrote: El lun, 20-10-2014 a las 21:19 -0400, Dmitri Pal escribió: On 10/20/2014 09:15 AM, Loris Santamaria wrote: [...] Trying to join the server to the domain (net rpc join -U domainadmin -S ipaserver) fails, and it

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-21 Thread Loris Santamaria
El lun, 20-10-2014 a las 21:19 -0400, Dmitri Pal escribió: On 10/20/2014 09:15 AM, Loris Santamaria wrote: [...] Trying to join the server to the domain (net rpc join -U domainadmin -S ipaserver) fails, and it causes a samba crash on the ipa server. Investigating the cause of the crash

[Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-20 Thread Loris Santamaria
Hi all, I wanted to install a samba server (or more precisely a winbind server for pptp authentication) in a IPA domain which trusts an AD domain. I know that this configuration is not supported but since it works with plain samba or samba+ldap I wanted to get it a shot to see how far one could

Re: [Freeipa-users] Woes adding a samba server to the ipa domain

2014-10-20 Thread Dmitri Pal
On 10/20/2014 09:15 AM, Loris Santamaria wrote: Hi all, I wanted to install a samba server (or more precisely a winbind server for pptp authentication) in a IPA domain which trusts an AD domain. I know that this configuration is not supported but since it works with plain samba or samba+ldap I