[Samba] Oracle 11 nts authentication againts samba4 AD DC

Izan DíezSánchez ids at empre.es
Thu Mar 5 09:30:26 MST 2015

Rowland Penny <rowlandpenny <at> googlemail.com> writes:

> I personally would have changed the search filter to this:
> "(&(objectClass=user)(|(samAccountName=%s)(cn=%s)))",
> With this filter, you would get the same result as previously, but it 
> would also find machines if 'cn' is matched.
> However, I am no expert in kerberos and there are probably valid 
> why the search filter is the way it is, so I would urge you to file a 
> bug report on this.
> Rowland

That definitely seems a neat solution! I already reported a bug 
https://bugzilla.samba.org/show_bug.cgi?id=11130 but I don't know if I 
posted it in the right section and it's assigned to the correct person. 
Who is in charge of the kerberos implementation here?

Thanks again for your answers,


More information about the samba mailing list