General :: Samba Kerbers Retries Until Account Locked
Mar 23, 2010
I am using OpenSuse 11.2 and Samba/Kerberos to authenticate to a Active Directory Domain Server. It works fine if the enter the correct password, but if I enter an incorrect password samba keeps trying to used the same credentials to authenticate, and after five attempts AD locks out the account. I verified this with wireshark. I can't find any configuration options to limit attempts to one and then ask the client to renter the password.
View 6 Replies
ADVERTISEMENT
Nov 29, 2010
How do i list all locked account in my linux distributiion I have tried passwd -S -a but it seems to not working . My distribution details.
Code:
# lsb_release -a
LSB Version: :core-3.1-ia32:core-3.1-noarch:graphics-3.1-ia32:graphics-3.1-noarch
Distributor ID: OracleVMserver
[Code].....
View 1 Replies
View Related
Sep 20, 2010
I'm having problem with the Samba 3.2.5 file share which host my MS-Word Document the user (user1) already restart her PC but still she cannot open the file from MS Word.
Here's the file and it's status on the samba drive:
Code:
How to reset the Samba file locking mechanism ?
View 6 Replies
View Related
Jan 11, 2010
I've installed oS11.2 on a test box and joined it to our office domain without a problem. It's presently using winblows domain for authentication.
I can login normally, but when I attempt to unlock the screensaver using my windows credentials I am told that my account is "locked out, contact admin..."
A quick look at AD shows that my account is indeed being locked out, presumably when the 11.2 locks the screen.
what's causing this and how I can correct it?
View 7 Replies
View Related
Jul 18, 2010
I am sometimes getting the following msg, asking me for a password... enter password for default keyring to unlock, the application 'Account Manager' (/usr/libexec/mission-control-5) wants access to default keyring, but it is locked. I have never seen this before and I have no idea what the password would be (since I've never set a "keyring" password).
View 4 Replies
View Related
Mar 15, 2010
I've successfully joined my 8.04 LTS samba file server to the windows domain. I've read many tutorials like [URL].I used krb5 and winbind and not modern likewise-open. I had successfully got the ticket for the user under whom I was able to join to AD. I'm able to get domain controller information with net ads info. But I can't login to that server through ssh (I'm using Putty at windows XP) with any ADuser credentials. I've tried
windomainADuser
ADuser@windomain
ADuser
I only get user@10.0.0.10'password prompt and access denied.
View 2 Replies
View Related
Jun 22, 2010
I add user in Samba by
#smbpasswd -a noktualek
New SMB password:
Retype new SMB password:
How to check, How many user i really added
View 1 Replies
View Related
Sep 7, 2011
I'm working on sharing a user's home folder using the username and password of the user's lLnux account. I noticed that home folder sharing is quite easy as I just need to change the smb.conf file to enable it. However I can't seem to login anyway. It seems that Samba keeps its own records of username and passwords. Is there a way that I can map/sync the Linux users' usernames and passwords automatically to Samba? The end result should be that whenever I add a new user or a user changes his/her Linux login password,Samba automatically changes its password as well.
View 1 Replies
View Related
Feb 11, 2011
Apache is run as www as is all the files/folders. People are uploading via FTP, scp, so the problem is if I chmod so everyone can read, then rsync as a user it works until new files are added which then my ; if rsync fails with a permission denied. Now I can add a chmod in the script so everyone can read, but since www can already read, I figured I would just change my script to use www. I added the ssh key to his authorized_keys file, but when I try to just ssh in I see this in the secure file;
server sshd[29539]: User www not allowed because account is locked
sshd[29539]: Failed none for invalid user www from ip port 54983 ssh2
Now I read a few places already saying I need to add a password to the account, etc. but before I jump and try all I read, 1st major one, will this now break apache? Will this affect any startup things, etc. and .... will that unlock that user for ssh in or is there another preferred method?
View 6 Replies
View Related
Mar 2, 2010
I have just recently setup our network with an Ubuntu server which is being accessed by one Ubuntu workstation with nfs, & one XP workstation with Samba. Following instructions from the web, I set permissions like this:
sudo chmod 777 /media/Data sudo chown -R curley:curley /media/Data The problem is that files created in Samba are locked from nfs & vice/versa. I am assuming I need to add the nfs network share to the Curley group or use something more global than curley to make this work?
Samba is working ok from Ubuntu when browsing through Nautilus, but there is no access to shares when doing things like uploading or downloading files to the web (the "save file" window only shows local folders). So I guess I wouldn't mind just using Samba if I could map a folder in Samba to solve that problem.
View 2 Replies
View Related
Oct 20, 2010
I tried to add a samba user account on an Ubuntu machine called "video" like I had on another Ubuntu machine, but it's telling me it already exists. At one point I had added the user via terminal, but the user did not show up in system-config-samba (the popular samba gui a lot of people use). So now I'm trying to re-add him and it's not working. Likewise, if I use terminal to sudo smbpasswd -x video, it says failed to find an entry for that user.
As far as I can tell, the user doesn't exist - yet I can't add him because it "already exists."
View 7 Replies
View Related
May 20, 2010
SO i made a server with ubuntu 10.04.
I created 3 new accounts on the linux then made identical samba accounts to match. For some reason when i input the information to log into a shared directory it doesn't work. my original login works fine, code...
not sure why it doesn't work, i logged into the server with my other accounts. is there a step im missing?
View 1 Replies
View Related
Apr 13, 2010
I configuring samba under Fedora 12, i just set in samba dialog Server Settings->Security and choose guest account: apache. The account is exist io the Samba Server, now i try to login from Windows to Linux share, server asks me login and password, however when i set apache as login and not set password, server asks me login again as the password is incorrect. As i understand under guest acount can login any windows user without the password.
View 4 Replies
View Related
Jun 25, 2010
I need some expert advice here regarding the samba problem after upgrading. All data migrated with the appropriate permission. I transferred the /etc/passwd, /etc/shadow and /etc/samba/* files to the new server.
Previous working version (Slackware v11 - 32bits - Old Hardware)
- samba-3.0.25a-i486-1_slack11.0
- XP Pro users are able to login and authenticate (NT DOMAIN)
- Login script and file sharing with permission are okay too
Upgraded to (Slackware 13.1 64bits - New hardware)
- samba-3.5.2-x86_64-1
- if the PC did not logoff, the file sharing and permission works fine.
- If they logoff, they will not able to re-logon.
- If I detach the PC from domain and then rejoin domain, I will be able to login to the domain, So I guess the samba configuration is working
I read it has to do with Machine Trust Account or something.
- Can I convert or make samba 3.5 recognize the Machine Trust Account on the new hardware?
- How can I check if the if the entry is successfully registered as machine trust account?
I checked and found the 'machinename$' (example) in all three places /etc/passwd, /etc/shadow and /etc/samba/private/passdb.tdb. I see no differences on the one PC that I unjoin and rejoin the domain versus those old domain name join to the old hardware.
View 1 Replies
View Related
Jul 15, 2010
I'm not able to create Samba Account. it is showing the error message as below
Failed to initialise SAM_ACCOUNT for user <username>. Does this user exist in the UNIX password database ?
Failed to modify password entry for user <username>
Unix accounts are created in Corporate Office, which is in US. We had a dedicated link from our office to US office. Now this link has been disconnected & now we have a VPN connection through internet to US Office. there is a firewall on both the sides. While creating samba account i tried to give netstat command & i saw it is trying to make a connection to the Unix Server at US, but the connection is not getting established it is showing SYN_SENT.
The port from the Home directory server trying to connect to the Unix server is connecting using Dynamic port but the Unix server port it is showing as PORTMAP. Network guys are not opening all the ports in the firewall. Kindly let me know the DESTINATION PORT that the home directory server is trying to connect to Unix Server, so that i can ask my network guys to open that perticular port. So that i can create Samba account to the users.
View 1 Replies
View Related
Apr 21, 2010
I setup openldap and samba on 9.10. The ubuntu desktop client gets authenticated successfully with the server.
But when I do a passwd on the client, only the ldap passwd is getting changed but not in the samba and the unix user account.
My smb.conf
Code:
passdb backend = ldapsam:ldap://192.168.3.100
ldap suffix = dc=example,dc=local
ldap user suffix = ou=People
ldap group suffix = ou=Groups
[Code]....
View 4 Replies
View Related
Apr 21, 2010
I setup openldap and samba on 9.10. The ubuntu desktop client gets authenticated successfully with the server. But when I do a passwd on the client, only the ldap passwd is getting changed but not in the samba and the unix user account.
My smb.conf
Code:
passdb backend = ldapsam:ldap://192.168.3.100
ldap suffix = dc=example,dc=local
ldap user suffix = ou=People
ldap group suffix = ou=Groups
[code].....
But only the ldap password is getting changed and not in the samba and unix user account.
I tried
unix password sync = yes
but same result.
View 1 Replies
View Related
Mar 16, 2009
I have a local file server running Samba on Fedora 9. It's already configured and serves a few people without any problems. I am now trying to set up a new read-only share with the username 'guest' and the password 'guest'. However, with no success so far! If I log on as 'guest' with the password 'guest' like so:
Code:
su - guest
No problem. Once logged in, if I try:
Code:
smbclient //samba/share
I'm prompted for a password. If I enter 'guest' I get:
Code:
session setup failed: NT_STATUS_LOGON_FAILURE
If I enter nothing (null) I get:
Code:
Anonymous login successful
Domain=[RIVER] OS=[Unix] Server=[Samba 3.2.8-0.26.fc9]
tree connect failed: NT_STATUS_LOGON_FAILURE
View 8 Replies
View Related
Mar 26, 2010
I am using a machine I SSH into to do some processing over very large files, but I am now unable to access it through ssh.The shell I had opened is not responsive, and when I try to connect again, it hangs even before asking for the password.I suspect this to be a memory problem as a couple of processes need to load a lot of the data to process it.Is there an emergency way of going back into this machine, or killing some processes to free the memory up ? I tried ssh ... 'kill -9 pid' but it is not even able to do this.Do you reckon the processing is still happening or is the machine completely idle ? How would you advise me to go back to it ? It's for my final year project, and I'm starting to stress !
View 2 Replies
View Related
Nov 13, 2010
I have a hard drive that I have partitioned into two large chunks. I have Fedora 12 on one, and I would like to put another distro on the other. I do most things on my Fedora, but on the Second distro, I'll be doing more sensitive things such as banking. If I wanted to "Lock out" the Banking distro, and only boot to it if I have an SD card or Flash drive, to act as a "key" would it be simple as putting the boot sector of the banking Distro onto the removable media, or is there something else I need to do?
to summarize, I'd like my system to automatically boot to Fedora, unless I have some form of removable media (preferably an SD card but Possibly a Flash drive) plugged in; in which case, I'd like it to boot to my banking Distro. What would be the easiest, way to go about this?
View 14 Replies
View Related
Apr 5, 2011
to the point on Fedora 13 I moved the top menu bar on the desktop to the bottom and auto hide the bar on bottom,now I can not use ether. Right clicking on the bars does nothing. I set a backup point before the changes. How do I fix this problem?
View 1 Replies
View Related
Jan 21, 2010
I have a few old workstations no longer serving the company. My thought was to use these as internet stations where employees can register their time thru our internal web-based application. I would like to have an environment working like Windows with the SteadyState add-on, access to a limited list of web-sites and no system changes by the user. I have looked at [URL] and [URL] which both meets me criteria when it comes to locking out the user from all system settings, but both seems to be totally open to all web-sites without the possibility for the admin to make a list of allowed sites.
Running it from a bootable CD without using the HD seems like the way to go for a surf-kiosk.
View 3 Replies
View Related
Jan 4, 2011
I m trying to share a dosktop screen by using teamviewer on window systems. i m able to do so if my computer is unlocked, but m unable to do if it is LOCKED.
My question is how can i connect to a remote window machine from a window machine if remote machine is LOCKED using Teamviewer.
View 1 Replies
View Related
Mar 19, 2010
Recently updated the kernel in Ubuntu 9.10 and for some reason now, a folder which was not read-only now is. I can't delete anything from it. Have tried using the GUI for changing permissions, however, it has a mind of it's own and won't unlock the folder.
Anyone had this happen where a folder locked when you didn't want it to be?
View 4 Replies
View Related
Oct 11, 2010
I cannot start the pcsc deamon :
Code:
[root@jonas ~]# /sbin/service pcscd status
pcscd dead but subsys locked
[root@jonas ~]# /sbin/service pcscd start
Starting PC/SC smart card daemon (pcscd): [OK]
[root@jonas ~]# /sbin/service pcscd status
pcscd dead but subsys locked
What does this mean and what can I do about it?
View 4 Replies
View Related
Aug 3, 2011
I'm getting error while starting some service in Linux.
# /etc/init.d/observiced start
Starting Oracle Secure Backup services... 2011/08/02.23:03:01 child didn't lock rock file - child never locked rock file (FSP rock file manager) [FAILED]
When I see the status it gives me as mentioned below.
# /etc/init.d/observiced status
observiced dead but subsys locked
View 4 Replies
View Related
Feb 23, 2011
I am running RHEL5 and squid as a cache.i installed xlockmore and xscreen saver to lock X as a root.after installation of above mentioned RPMs, in a terminal window i entered xlock command and just logout from root.but now onward unable to login. Login screen is appeared but i m unable to type usernameand password is working there and i can logged in as a root. i entered startx command here and entered in GUI mode my key board is not working there. while mouse is functioned properly. what is the reason, if it is locked by xlock, how to unlock X
View 9 Replies
View Related
Oct 12, 2009
Is there any way to limit x number of samba users by samba ? Say if there are already 5 samba users using the share, I would like to restrict any futher samba requests.. How do i do that ?
View 1 Replies
View Related
May 17, 2011
I dual boot into Arch Linux and OS X 10.6 on my MacBook pro. I synced my UID between both OSes and created an HFS partition (with no journaling) to use as a shared home/Users partition. For the most part it works just as I'd expect, but sometimes when I'm booted into OS X certain files are "locked" (when I get info on a particular file the "Locked" box is checked under the "General" pane. I can resolve the issue by manually unchecking the box) and/or I get "Operation not permitted" when I try deleting or chmod'ing a file. In both cases I don't see anything out of the ordinary on the permission bits displayed with ls -l, except for a trailing '@' character in the position where the sticky bit would normally occur:
This '@' character shows up on ALL normal files, so doesn't seem to be linked to the locked/operation not permission situation.
On the Linux side of things I never have permission problems. To the best of my limited knowledge and experience with ACLs I've not found any ACLs on any of the files in question.
For what it's worth, I do most of my file editing using emacs (Aquamacs in OSX), is it possible it is setting weird permission bits?
What is the "locked" setting that OS X uses and does it have a permission bit equivalent (so at the very least I could recursively unlock all files in my home directory from the terminal) why might some, but not other files get "locked" when booting into OS X what is the meaning of the '@' character?
View 1 Replies
View Related
Jul 24, 2010
I have installed fedora 13 recently and installed IDPS(snort) on it. But now I am not able to start service httpd. When I write service httpd start, it says OK, but I know it is a false message bcoz when I write service httpd stop it gives me Failed.
On writing service httpd status it gives a message:
httpd dead but subsys locked
I have tried "rm -f /var/lock/subsys/httpd" - no solution
yum update hasn't solved my problem as well.
I have to show my project running at my college. And I can not understand properly the technical instructions as I am new to linux.
View 2 Replies
View Related
