Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-31 Thread christoph.beyer
Hi Jochen et al, that worked fine, though if I get it right everyone can now read the active directory structure (?) Connecting to the samba machine results still in errors, but that may be something stupid on my behalf too... thanks for helping ~christoph

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-31 Thread Andrew Bartlett
On Fri, 2003-10-31 at 21:41, [EMAIL PROTECTED] wrote: Hi Jochen et al, that worked fine, though if I get it right everyone can now read the active directory structure (?) No, you still need to authenticate, but nothing stops an attacker from 'stealing' the TCP/IP connection, if they control

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-31 Thread Jochen Schmidt
Hi Christoph On 31 Oct 2003, Andrew Bartlett wrote: On Fri, 2003-10-31 at 21:41, [EMAIL PROTECTED] wrote: Hi Jochen et al, that worked fine, though if I get it right everyone can now read the active directory structure (?) No, you still need to authenticate, but nothing stops an

RE: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-31 Thread ww m-pubsyssamba
join W2003 domain with 3.0.0 (krb ticket is OK though) Subject: Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though) Hi Christoph On 31 Oct 2003, Andrew Bartlett wrote: On Fri, 2003-10-31 at 21:41, [EMAIL PROTECTED] wrote: Hi Jochen et al, that worked fine, though if I get

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-30 Thread Jochen Schmidt
Hi Christoph, On Wed, 29 Oct 2003 [EMAIL PROTECTED] wrote: I'm using the production release of 3.0.0 and can not join a W2003 domain: [printsrv4] /spool/samba-3.0.0/bin $ ./net -d 10 ads join -Uhumpty_dumpty [2003/10/29 15:35:39, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got [EMAIL

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-30 Thread Andrew Bartlett
On Thu, 2003-10-30 at 20:34, Jochen Schmidt wrote: Hi Christoph, On Wed, 29 Oct 2003 [EMAIL PROTECTED] wrote: I'm using the production release of 3.0.0 and can not join a W2003 domain: [printsrv4] /spool/samba-3.0.0/bin $ ./net -d 10 ads join -Uhumpty_dumpty [2003/10/29 15:35:39, 3]

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-30 Thread Christoph Beyer
Hi Andrew et al, thank you for the tip, is there any way to get around this, my windows admins don't know how to disable this feature. Is it possible to set it on a 'per host base' on the windows side, if yes: where ? Are there plans to realize the feature in an upcoming release in the near

Re: [Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-30 Thread Jochen Schmidt
Hi Christoph, please try the following: - Open dsa.msc as Domain Administrator. - Right-Click your AD-Domain and select properties - Select the Group Policy Tab and Edit your Policy (or the Default Domain Policy) - Select Computer Configuration\Windows Settings\Security Settings\Local

[Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

2003-10-29 Thread christoph.beyer
Hi everyone, I'm using the production release of 3.0.0 and can not join a W2003 domain: [printsrv4] /spool/samba-3.0.0/bin $ ./net -d 10 ads join -Uhumpty_dumpty [2003/10/29 15:35:39, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got [EMAIL PROTECTED] [2003/10/29 15:35:39, 1]