A Windows 11 domain member refuses to take its time from a Samba AD DC running chrony. Plain NTP works, the configuration is fine, yet the DC never answers. The cause: above functional level 2012, Windows uses the MS-SNTP extended authenticator, which neither chrony nor Samba support. I patched both, and after one more trap in the byte order, Windows now accepts the signed replies.
Tag: Kerberos
I’ve been running SAML based SSO using Simplesamlphp for some time now. While its PHP based approach is very flexible (and configuration is easy compared to Java-based Shibboleth) there are still quite some things you need to know to get started. Keycloak is an alternative that’s not as flexible to use (as far as I’ve […]
Categories
NFS version 3 and 4 compared
There have been quite some changes between versions 3 and 4 of the NFS protocol. From an administrator’s perspective, the following changes were introduced: User / group id mapping:Version 3 and below used a numeric user / group id based mapping: so a user with user id 1000 on the client was mapped to a […]