Reputation
Top tag
Next privilege 50 Rep.
Comment everywhere
Badges
1 11
Newest
 Curious
Impact
~7k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Mar
27
awarded  Curious
Mar
27
accepted Renew Kerberos ticket for daemon
Mar
27
comment Renew Kerberos ticket for daemon
This worked for me: sudo k5start -f /etc/dhcp/user.keytab -U -k /tmp/krb5cc_0 -K 10 -l 10h -p /var/run/k5start.pid -L -b. I can see k5start running as root via ps. Obviously I'll need to monitor to make sure the ticket renewal is functional, but I think this is what I need.
Mar
27
awarded  Supporter
Mar
27
comment Renew Kerberos ticket for daemon
I was looking at k5start as well, but I must be doing something wrong with the syntax as I don't see it detach. Note that the keytab/cred cache is created using sudo as I figure root needs to be the one that owns it. sudo k5start -p /var/run/k5start.pid -b -f /etc/dhcp/user.keytab -U -K 10 -l 10h -- sh -c 'ls -l /tmp/krb5cc_0'
Mar
26
asked Renew Kerberos ticket for daemon
Mar
23
accepted ISC DHCP with Active Directory Secure Dynamic DNS Updates
Mar
23
answered ISC DHCP with Active Directory Secure Dynamic DNS Updates
Mar
17
awarded  Editor
Mar
17
revised ISC DHCP with Active Directory Secure Dynamic DNS Updates
Added additional configuration information and DNS response to DHCPD
Mar
16
asked ISC DHCP with Active Directory Secure Dynamic DNS Updates
Jan
19
awarded  Popular Question
May
21
awarded  Tumbleweed
May
14
asked Remove Samba as Last Domain Controller
Sep
28
awarded  Notable Question
Sep
24
awarded  Autobiographer
Jan
31
comment Granting Access to Computer Accounts on Samba Shares
That was previously posted in this thread, and doesn't apply to the Samba implementation. SMB1 security is no different than SMB2, you have the same options with regards to Kerberos/NTLMv1/v2.
Jan
31
comment Granting Access to Computer Accounts on Samba Shares
Not with SMB2 enabled on the NAS. Works just fine with SMB1.
Jan
11
comment Processor usage increases with 4GB RAM installed
That's a good thought. Any way to tell if the cache has been disabled from within the distro?
Jan
5
comment Granting Access to Computer Accounts on Samba Shares
Does not appear to be applicable, here. For example, there are no Domain User accounts in /etc/passwd. In the case of the NAS, it looks like Winbind is responsible for the mapping. I'm also not getting the same error messages in the smbd.log as that person showed (compare to the original post above).