Running Samba mostly on Redhat 5 with version 3.5.4-0.83
Also failed on Debian 3.5.6 and Solaris with a 3.5 version.
Logging details here are from Redhat case.
We have a similar problem on all Unix/Linux systems using
ADS as the backend authentication for samba shares on Unix/Linux.
It was
On Mon, Oct 3, 2011 at 4:27 PM, francis picabia fpica...@gmail.com wrote:
Running Samba mostly on Redhat 5 with version 3.5.4-0.83
Also failed on Debian 3.5.6 and Solaris with a 3.5 version.
Logging details here are from Redhat case.
We have a similar problem on all Unix/Linux systems using
I have a RHEL 5 system, with Samba 3.0.33 installed, that _used_ to
authenticate against the corporate Active Directory system without any
problems. However, about a month ago the connection broke, but the users
didn't complain until some time went buy. I've spent quite a few hours
trying to
On Mon, Sep 29, 2008 at 10:05:17AM -0700, William Wilson wrote:
We have a number of Solaris servers that we run samba shares off of.
So far, even using ads for authentication, we have to set up accounts
so an entry is in the passwd file for the user. Is there any way to
bypass passwd
We have a number of Solaris servers that we run samba shares off of.
So far, even using ads for authentication, we have to set up accounts
so an entry is in the passwd file for the user. Is there any way to
bypass passwd completely and just authenticate via the domain?
--
To unsubscribe
Hi,
I have a fresh install of Fedora 7 and Samba (Version 3.0.26a-0.fc7).
Trying to set up ADS authentication. I try net ads join -U
Administrator and receive the following error
net: relocation error: net: symbol krb5_get_init_creds_opt_alloc,
version krb5_3_MIT not defined in file
On Fri, 2007-09-14 at 11:39 -0400, Kevin R. Gutch wrote:
Hi,
I have a fresh install of Fedora 7 and Samba (Version 3.0.26a-0.fc7).
Trying to set up ADS authentication. I try net ads join -U
Administrator and receive the following error
net: relocation error: net: symbol
That did the trick!
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
All,
I have recently come across a problem I have been unable to resolve. I
have been running Samba with Winbind ADS authentication for the last
couple of years with good success until recently. About 2 weeks ago, I
restarted the Samba and Winbind services on a Fedora Core 3 machine
runing
sniplog.winbindd
[2006/10/05 17:14:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(310)
Username MYDOMAIN\MYCOMPUTER$ is invalid on this system
/snip
I get the above-listed entry in my winbindd log and my smbd log when attempting
to access a simple network share I've created.
snip
[global]
Hi again,
the answer is simple : you don't need net groupmap at all.
thats what the id-ranges in smb.conf are for:
the ADS-users and the ADS-groups are mapped by winbind to
user /group id's from the ranges specified and era presented
by nsswitch to the os like any other user group from local
Hi,
Your pam.d/logon file locks nice, mostly..
as you stated, the winbind part is authenticating correct, so you would
be able to login with an ADS account, if not the pam system would try to
verify the posix-account too.
This is why you get asked for the second password.
As i'm running linux
include system
# password
password include system
-Original Message-
From: Tom Skeren [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 07, 2004 4:04 PM
To: Jeremy Allison
Cc: samba
Subject: Re: [Samba] ADS Authentication
Jeremy Allison wrote:
It was an smb.conf issue. Authentication
*To:* Edward Wissner; samba
*Subject:* Re: [Samba] ADS Authentication
Edward Wissner wrote:
What did you change in your smb.conf file?
Well, I managed to get samba to authenticate, however, continued
winbindd problems make the setup worthless. Group searches fail,
or are incomplete
-Original Message-
*From:* Tom Skeren [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, December 08, 2004 10:32 AM
*To:* Edward Wissner; samba
*Subject:* Re: [Samba] ADS Authentication
Edward Wissner wrote:
What did you change in your smb.conf file?
Well, I managed to get samba
OK Christopher, samba is authenticating, if a bit oddly (some XP
machines can use \\sserver\fsk others need to use \\ipaddy\fsk---not a
huge problem).
However I don't think I'm grasping the net groupmap function. I was
of the belief that if I did this:
net groupmap add ntgroup=nt-group
Hi,
2 points:
1.) use the smb.conf which gives you a working wbinfo.
2.) this sounds like missconfigured pam to me.
-you have to tell pam that winbind is sufficient for auth and
account with the lines
account sufficient pam_winbind.so and
auth sufficient pam_winbind.so
Christoph Scheeder wrote:
Hi,
2 points:
1.) use the smb.conf which gives you a working wbinfo.
2.) this sounds like missconfigured pam to me.
-you have to tell pam that winbind is sufficient for auth and
account with the lines
Here's the /etc/pam.d/logon file info. This must be working
Jeremy Allison wrote:
On Mon, Dec 06, 2004 at 02:29:29PM -0800, Tom Skeren wrote:
I'm about ready to smash my head through a wall...I could use a few answers.
1. When using security = ads, and completing net ads join, it was my
understanding that samba authenticated username/pword against
Jeremy Allison wrote:
It was an smb.conf issue. Authentication against ADS is now
functioning. Now it's time to wrestle with ACLs. Thanks for the help.
TMS III
On Mon, Dec 06, 2004 at 02:29:29PM -0800, Tom Skeren wrote:
I'm about ready to smash my head through a wall...I could use a few
On Tue, Dec 07, 2004 at 01:04:05PM -0800, Tom Skeren wrote:
Jeremy Allison wrote:
It was an smb.conf issue. Authentication against ADS is now
functioning. Now it's time to wrestle with ACLs. Thanks for the help.
Thanks for the update. I'm suprised though. What was the smb.conf
problem ?
I'm about ready to smash my head through a wall...I could use a few answers.
1. When using security = ads, and completing net ads join, it was my
understanding that samba authenticated username/pword against ads, and
local posix accounts were nolonger needed, is this true?
2. If yes, I have
On Mon, Dec 06, 2004 at 02:29:29PM -0800, Tom Skeren wrote:
I'm about ready to smash my head through a wall...I could use a few answers.
1. When using security = ads, and completing net ads join, it was my
understanding that samba authenticated username/pword against ads, and
local posix
Jeremy Allison wrote:
On Mon, Dec 06, 2004 at 02:29:29PM -0800, Tom Skeren wrote:
I'm about ready to smash my head through a wall...I could use a few answers.
1. When using security = ads, and completing net ads join, it was my
understanding that samba authenticated username/pword against
I have installed PAM from sources, MIT Kerberos from sources, Openldap from sources
and samba3.0beta3.
With MIT kerberos I have created a krb5.conf file in the /etc directory that has a
realm with kdc (server) and admin_server and default_domain entries.
when I type ./kinit or ./kinit [EMAIL
Hello,
Beta 3, ./configure --with-ads krb5, slackware system (no PAM).
Things seem to be correctly configured, done the net join part without
errors, I can use e.g. smbclient -L or wbinfo -u, but users cannot acces
shares on the Samba machine. Snip from the log (trying to connect from
26 matches
Mail list logo
