Hello,

I found the solution: a chmod 644 on the keytab file used by nginx...

Thank you for your help.

I'll also specify what I receive with a status on the service (on the WAPT server):

root@wapt:/opt/wapt# systemctl status waptserver.service
● waptserver.service - WAPT Server startup script
Loaded: loaded (/lib/systemd/system/waptserver.service; enabled; vendor preset: enabled)
Active ...

Hello,

Thank you for the suggestion: I performed all your tests and received the following via psexec:


...
2020-01-07 16:36:16,733 DEBUG https://monserveur.tld:443 "POST /add_host_kerberos HTTP/1.1" 403 169
2020-01-07 16:36:16,733 DEBUG authenticate_user(): returning
2020-01-07 16:36:16,733 ...

Thank you, that's exactly what I need!

Best wishes to the team, by the way.

As a young padawan fresh out of school, I don't (yet) know Python.
So, I'd be interested in any hints that might point me in the right direction.

Hello,

I'm having a small problem with my WAPT implementation regarding Kerberos.

I've read the previous posts and haven't been caught out by the $(hostname) issue: I have a serviceprincipalname that matches the name contacted by the agents.

When I deploy my agent, my machine...

Hello,

do you know if integrating Active Directory Web Services (ADWS) is planned for Samba 4? This would greatly expand its PowerShell capabilities.

It's a major undertaking, so I imagine not, but just in case...?

I haven't found anything to that effect...