[Samba] Forcing clients to use NTLMv2 in 3.6.12

2013-06-19 Thread Shaw, Kevin
All, I need to force XP clients to use NTLMv2 when mapping to samba 3.6.12. My config is: ntlm auth = No client NTLMv2 auth = Yes client lanman auth = No client plaintext auth = No lanman auth = No XP systems can still map shares with the above config. If I add: max protocol = SMB2 min

[Samba] 3.6.12 build

2013-05-09 Thread Shaw, Kevin
All, I'm still struggling to get samba 3.6.12 built on a Solaris 8 sparc system. I built openldap 2.4.35 with --disable-ipv6 --disable-bdb --disable-hdb --disab le-mdb --enable-passwd. I built samba with: ./configure -prefix=/opt/XRX --exec-prefix=/opt/XRX --with-configdir=/etc/samba

[Samba] Building 3.6.12

2013-05-08 Thread Shaw, Kevin
All, I'm trying to build Samba 3.6.12 on Solaris 8 sparc using studio 12. Is this the correct forum to ask questions? This is my first build so any tips/tricks are appreciated. What are the prerequisites to get samba to compile so that it will join an AD domain? TIA, -Kevin -- To

Re: [Samba] Building 3.6.12

2013-05-08 Thread Shaw, Kevin
I can patch Solaris 10 to get Samba 3.6.12 and takes about 5 mins to complete. I know moving off Solaris 8 would be the best path to take however it's not my decision to make... -Kevin -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] Build 3.6.12 on Solaris 8

2013-05-01 Thread Shaw, Kevin
All, I need to build samba 3.6.12 on solaris 8 using studio 12. Has anyone accomplished this and willing to share tips, tricks, or notes? -Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] /var/samba/locks/smb_krb5/krb5.conf.DOM

2013-04-03 Thread Shaw, Kevin
All, I am running Solaris 10 and Samba 3.6.6. We use intelligent DNS and have more than 10 ADs. In /etc/krb5/krb5.conf I configure kdc and admin_server to point to the IDNS server so any one of our functioning ADs can be used dynamically. I've noticed that

[Samba] Error creating host keytab

2013-03-20 Thread Shaw, Kevin
I am running Samba 3.0.35. When I run net ads join or net ads keytab create I see that the keytab file cannot be created. Here's a portion of the log: [2013/03/20 07:57:50, 3] libads/kerberos.c:(337) kerberos_secrets_store_des_salt: Storing salt host/pitviper.DOMAIN@REALM [2013/03/20 07:57:50,

[Samba] Samba 3.6.6 authentication

2013-03-18 Thread Shaw, Kevin
Can anyone tell me if Kerberos is a requirement for windows server 2008R2 AD NTLM or NTLMv2 authentication? TIA, -Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Authentication in 2008R2 AD

2013-03-14 Thread Shaw, Kevin
What is the earliest version of Samba that will authenticate in a native 2008R2 AD? Is Kerberos a requirement to authenticate to native 2008R2 AD? TIA, -Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] username map is not functioning

2013-03-11 Thread Shaw, Kevin
All, When the company upgraded AD from 2003 to 2008R2 users lost the ability to access Samba shares without being prompted for a password. I've upgraded Samba from 3.0.30 to 3.6.6. I would like to continue using username map to map my users however it appears the map is being ignored. The only

Re: [Samba] username map is not functioning

2013-03-11 Thread Shaw, Kevin
This appears to be an IDMAP username mapping issue not an issue with the username map file. I think this is not an issue with the username map file. Thanks for the reply. -Kevin On Mon, 11 Mar 2013, Kevin Shaw wrote: When the company upgraded AD from 2003 to 2008R2 users lost the ability

[Samba] Trying to understand authentication

2013-03-11 Thread Shaw, Kevin
I am running Solaris 10 u8 running Samba 3.6.6. Windows server 2008R2 runs AD. I don't understand samba authentication and hope someone might be able to help me understand the process. The following configuration appears to be functional. NIS is running and Winbind is not. Pam.conf has not