samba - Oct 2018 - classicupgrade

Il 31/10/2018 16:59, Rowland Penny via samba ha scritto:
> The 'idmap config' doesn't work on a DC.
> The 'winbind' line doesn't work on a DC.
ok, this smb.conf is default from classicupgrade
i take out they
> Do you really need an insecure auth method ?
why ??
> Who was the user you where trying to connect as ?
a normal user
i tried also with users with password and without
> Rowland

-- 

*Corrado Ravinetto *

On Wed, 31 Oct 2018 17:06:08 +0100
Corrado Ravinetto via samba <samba at lists.samba.org> wrote:
> 
> 
> Il 31/10/2018 16:59, Rowland Penny via samba ha scritto:
> > The 'idmap config' doesn't work on a DC.
> > The 'winbind' line doesn't work on a DC.
> ok, this smb.conf is default from classicupgrade
I am fairly sure it isn't.
> i take out they
> > Do you really need an insecure auth method ?
> why ??
You have set 'ntlm auth = yes', this allows you to use an insecure auth
method.
> > Who was the user you where trying to connect as ?
> a normal user
Define 'normal user', is this a local Unix user (a user not part of the
AD domain) or an AD user ?
> i tried also with users with password and without
All users should have a password, they should also exist in AD.

Rowland

Il 31/10/2018 17:18, Rowland Penny via samba ha scritto:
>> ok, this smb.conf is default from classicupgrade
> I am fairly sure it isn't.
ok, i did many changes and cut&paste.
You are the expert !! :-)
>
>> i take out they
>>> Do you really need an insecure auth method ?
>> why ??
> You have set 'ntlm auth = yes', this allows you to use an insecure
auth
> method.
looks like cut&paste :-)
taken out
>>> Who was the user you where trying to connect as ?
>> a normal user
> Define 'normal user', is this a local Unix user (a user not part of
the
> AD domain) or an AD user ?
ok, sorry, are all AD users
>> i tried also with users with password and without
> All users should have a password, they should also exist in AD.
yes, but some users have password blank

thanks a lot
have a good we


-- 

*Corrado Ravinetto *
Sistemi informativi
corrado.ravinetto at lanificiocerruti.com 
<mailto:corrado.ravinetto at lanificiocerruti.com>
T: +39 015 3591283
Lanificio F.lli CERRUTI
*Lanificio F.lli Cerruti S.p.A. *
Via Cernaia 40, 13900 - Biella (BI) Italy
www.lanificiocerruti.com <http://www.lanificiocerruti.com/>

Twitter <https://twitter.com/Lan_Cerruti> Facebook 
<https://www.facebook.com/LanificioCerruti> Instagram 
<https://www.instagram.com/lanificiocerruti/>

Rispetta l'ambiente, non stampare questa mail se non necessario
Respect the environment, don't print unless necessary