Web lists-archives.com

Re: [Samba] Group policies are not applied




On Thu, 2 May 2019 10:43:08 +0200
"L.P.H. van Belle via samba" <samba@xxxxxxxxxxxxxxx> wrote:

> Good morning Rowland, 
> 
> No, in most other utils of samba "-k"  means use kerberos auth, as in
> kinit username(@REALM)
> 
> Why in this case its -k KERBEROS 
> 
> The manual does not tell where KERBEROS stands for the "Kerberos
> REALM" or a path to file? A bit confusing. 
> 

OK, if you run this:

samba-tool user create --help

Under:
  Credentials Options:

You will find this:

    -k KERBEROS, --kerberos=KERBEROS
                        Use Kerberos

What isn't obvious from that, is that 'KERBEROS' is actually 'yes'

rowland@devstation:~$ samba-tool user create user37 P4ssw0rd* -H ldap://dc4
ERROR(ldb): Failed to add user 'user37':  - LDAP error 1 LDAP_OPERATIONS_ERROR -  <00002020: Operation unavailable without authentication> <>
rowland@devstation:~$ samba-tool user create user37 P4ssw0rd* -H ldap://dc4 -k yes
User 'user37' created successfully

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba