0
votes
1answer
22 views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
0
votes
0answers
57 views

browse samba shares and login with ssh at the same time[Active Directory]

hello, i have a problem with krb5 and samba. when samba is running(i can browse shares with domain account) i can not login with ssh. And when samba is NOT running i can login with ssh with domain ...
0
votes
0answers
21 views

Get Service_key in the course of kerberos authentication

Built environment 1) Exchange server: The operator system of Exchange server is Windows Server2008R2, We configured it as Active Directory (primary domain controller) used for client ...
0
votes
1answer
81 views

Kerberos authentication of Windows clients and Redhat 5.5 with Samba PDC?

I already realize that configure Redhat 5.5 as PDC (Primary Domain Controller), and the clients (Windows XP and Windows 2003) can join the realm. The realm name of Linux server is EXAMPLE.COM. ...
1
vote
2answers
204 views

mounting windows shares on linux while keeping windows permissions

I have a windows share on a windows2003 server (WINJOE) which I want to back up to a Linux machine (LINUXJOE) that is properly joined to the domain. My goal is to backup shared folders of WINJOE to ...
0
votes
0answers
31 views

Do servers only uses SPNs that match its hostname from its keytab for Kerberos?

If a server's keytab file includes SPNs that do not match the server's hostname, these SPNs are not used when clients try to verify their tickets. Is this a Kerberos limitation by design? Here's what ...
1
vote
1answer
39 views

Samba need an ip of same network of Windows Active Directory to make the join?

Im working to setup samba in windows network. The goal is windows users from Active Direcotry uses their passwords to log in samba shares. I am not sure if, in this setup, AD server and Samba Server ...
0
votes
1answer
357 views

House roaming profiles on realm trusted samba server?

Raison D'ĂȘtre I am attempting, so far unsuccessfully, to house roaming profiles for an Active Directory domain on a realm trusted Ubuntu 12.04LTS ZFS-on-Linux file server. The end goal is to have an ...
0
votes
1answer
423 views

kerberos cifs multiuser mount from AD PDC

I'm trying to mount a cifs folder on a ubuntu server with multiuser support from a windows DC. I can get user kerberos tickets as root on the server and mount the directory with kerberos without any ...
0
votes
0answers
31 views

Active Directory RealmFlags trust for delegation

I have a setup with a Samba4 AD server. I want to mark my AD as trusted for delegation. So when logging in via putty to my linux server I want the kerberos ticket to be delegated. What I have now is ...
0
votes
1answer
85 views

How to list Samba 4 shares using server's IP and Kerberos authentication?

I am successfully able to list the Samba 4.0.3 shares by using smbclient -L myhostname -k command. However I am unable to do the same by using smbclient -L 192.168.1.2 -k and I get the session ...
1
vote
0answers
95 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
0
votes
1answer
389 views

Mounting samba share authenticated by kerberos automatically through /etc/fstab

I have a samba server working and I can access the different shares with the command smbclient -k //$server.$my_domain.$net/$my_share I would like the mount to be automatically provided at boot ...
1
vote
1answer
297 views

Can a Windows machine authenticate against Samba with Kerberos when users are stored in AD?

I understand the title is probably less clear that it should be, but I couldn't think of anything better. We have two domains, let's call them example.com and subnet.example.com. The former is ...
0
votes
3answers
220 views

SSO for linux/AD Windows 2008

I have multiple CENTOS servers that are all currently working off of a local /etc/passwd for user account control and have local home folders etc. This makes it a pain when users come on board leave ...
0
votes
1answer
72 views

Keep access to Samba share when link to Active Directory is off

my architecture is like that : a deported active directory server with replica a local network with Windows XP clients in Active Directory Domain a local Samba server member of the domain in samba ...
0
votes
1answer
151 views

Authenticating Samba share with AD OU

I'm wanting to link Samba to Active Directory so that I can apply permissions to a share respective to the OU that windows user belongs to. Im not entirely sure of where to start, I've currently just ...
3
votes
1answer
1k views

Windows clients unable to access Samba share on AD joined Linux box every 7 days

The problem: Every 7 days, 2 Windows Servers are unable to access a SMB/CIFS share. It will start working after a handful of hours. The environment: OpenFiler Linux box joined to 2003 AD Domain ...
1
vote
1answer
591 views

samba + kerberos ssh single signon (SSO)

Hey folks, I'm modifying an existing samba config that it works fine for authenticating AD users on linux servers to also handle Kerberos and SSO. I've successfully got pam_winbind to use kerberos ...
4
votes
3answers
394 views

Linux on Windows AD Domain

Successfully joined my Linux Box to a Windows AD Domain. Wanted to know from other admins if it us possible to specify what groups from windows ad is allowed to login? Otherwise anyone with a AD ...
0
votes
1answer
672 views

Cannot delete files on samba share when authenticated using kerberos

I have a samba server that authenticates users using LDAP, however it does have kerberos enabled as well. Unfortunately users authenticated using kerberos cannot delete files. I can test this using ...
0
votes
1answer
3k views

Can Samba authenticate against MIT Kerberos?

We have a network with mostly Linux servers and clients, which we recently moved from NIS to Kerberos & LDAP. One of the main reasons was to secure our NFS shares using Kerberos. This is all ...
0
votes
1answer
190 views

kerberos5 unable to authenticate

We have a Debian file server, configured to serve up samba shares, using winbind and kerberos. This is configured to authenticate against a Windows2003 DC. All worked fine until recently when I did a ...
4
votes
4answers
6k views

How to re-join an AD2003 domain with Samba after deleting the machine account?

During some troubleshooting I deleted the machine account for a Linux server running samba from our AD 2003 domain. We are using Kerberos for authentication, and after I deleted the machine account I ...
1
vote
3answers
1k views

Disabling Windows password changes on Samba domain

When a user on one of our Windows clients hits ctrl-alt-delete to change his password, our Samba domain controller is notified and performs the password change. Unfortunately, the group policy rule ...
2
votes
3answers
702 views

Provide Samba access based on LDAP info?

I'm trying to get a server set up that provides some file shares to Windows clients, and I'd like it to integrate with an existing authentication framework my school already has set up. There's a ...