[Samba] use spnego question - samba 47 to samba48 migration

[Elias Pereira]

In a shell execute:

# testparm -v | grep spnego

You will see 2 possibilities.

client use spnego principalç = no
client use spnego = yes

I believe that's 2nd option. :)

On Fri, Jun 22, 2018 at 7:51 PM Kontrol-Suporte via samba <
samba at lists.samba.org> wrote:

> Hello Everyone,
>
> Good evening!
>
>
>
> Here a Background:
>
> I am moving from samba47 to samba48 - I am keeping my existing scripts and
> config files.
>
> The messages below are now appearing while executing some tasks in samba48
> only - samba47 is not showing it:
>
>
>
> #Unknown parameter encountered: "use spnego"
>
> #Ignoring unknown parameter "use spnego"
>
> #Unknown parameter encountered: "use spnego"
>
> #Ignoring unknown parameter "use spnego"
>
>
>
> Question:  is the "use spnego" deprecated for samba48? If so, what is
> replacing it?
>
>
>
> Here my smb4.conf file:
>
> ###############################
>
>
>
> [global]
>
> workgroup = MYDOMAIN
>
> map to guest = never
>
> logon path = \\%L\profiles\.msprofile
>
> logon home = \\%L\%U\.9xprofile
>
> logon drive = P:
>
> usershare allow guests = no
>
> client NTLMv2 auth = yes
>
> client lanman auth = no
>
> client plaintext auth = no
>
> use spnego = yes
>
> client use spnego = yes
>
> min protocol = LANMAN2
>
> idmap gid = 10000-20000
>
> idmap uid = 10000-20000
>
> realm  = MYDOMAIN.CORP
>
> security = ads
>
> template homedir = /home/%D/%U
>
> template shell = /bin/bash
>
> winbind offline logon = yes
>
> winbind refresh tickets = yes
>
> winbind enum users = yes
>
> winbind enum groups = yes
>
> winbind nested groups = yes
>
> winbind use default domain = yes
>
> encrypt passwords = yes
>
> socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
>
> log level = 3 passdb:5 winbind:3
>
> usershare allow guests = no
>
> printcap name = /dev/null
>
> load printers = no
>
> printing = bsd
>
> local master = no
>
> kerberos method = secrets and keytab
>
> winbind refresh tickets = yes
>
>
>
>
>
> [homes]
>
> comment = Home Directories
>
> valid users = %s, %D%W%S
>
> browseable = no
>
> read only = no
>
> inherit acls = yes
>
>
>
> ###############################
>
> Thanks Much!
>
>
>
> Fabricio.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Elias Pereira