Re: [Samba] ldap not using kerberos (winbind rid idmap)

2006-02-04 Thread Andrew Bartlett
On Tue, 2006-01-24 at 13:51 +0100, Roman Sommer wrote: > hi, > > first of all - I am very sorry if this topic turned up in the mailing list > before - I really did have a look at the archive and couldn't find anything > like it. > > Here's the problem. I set up an idmapping using the rid facility

Re: [Samba] ldap not using kerberos (winbind rid idmap)

2006-01-31 Thread Andrew Bartlett
On Fri, 2006-01-27 at 16:15 +0100, Roman Sommer wrote: > thanks for your reply. > I was more thinking in terms of "how to kerberize ldap queries" rather > than how to enable SSL/TLS :) Or is this setting supposed to enable > spnego encrypted queries? Samba4 can do that kind of thing, but we don't

Re: [Samba] ldap not using kerberos (winbind rid idmap)

2006-01-27 Thread Roman Sommer
thanks for your reply. I was more thinking in terms of "how to kerberize ldap queries" rather than how to enable SSL/TLS :) Or is this setting supposed to enable spnego encrypted queries? regards, Roman Gerald (Jerry) Carter wrote: > Roman Sommer wrote: > >>> too. In fact ldap even asks for av

Re: [Samba] ldap not using kerberos (winbind rid idmap)

2006-01-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Roman Sommer wrote: > too. In fact ldap even asks for available SASL mechanisms. > After some negotiation it _successfully_ binds using GSS SPNEGO. > But.. even after this successfully established encrypted bind it > keeps querying in plain text. Is

[Samba] ldap not using kerberos (winbind rid idmap)

2006-01-26 Thread Roman Sommer
hi, first of all - I am very sorry if this topic turned up in the mailing list before - I really did have a look at the archive and couldn't find anything like it. Here's the problem. I set up an idmapping using the rid facility. It is working smoothly. I do have a question though. I logged some