Il 31/10/2018 16:59, Rowland Penny via samba ha scritto:> The 'idmap config' doesn't work on a DC. > The 'winbind' line doesn't work on a DC.ok, this smb.conf is default from classicupgrade i take out they> Do you really need an insecure auth method ?why ??> Who was the user you where trying to connect as ?a normal user i tried also with users with password and without> Rowland-- *Corrado Ravinetto *
On Wed, 31 Oct 2018 17:06:08 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote:> > > Il 31/10/2018 16:59, Rowland Penny via samba ha scritto: > > The 'idmap config' doesn't work on a DC. > > The 'winbind' line doesn't work on a DC. > ok, this smb.conf is default from classicupgradeI am fairly sure it isn't.> i take out they > > Do you really need an insecure auth method ? > why ??You have set 'ntlm auth = yes', this allows you to use an insecure auth method.> > Who was the user you where trying to connect as ? > a normal userDefine 'normal user', is this a local Unix user (a user not part of the AD domain) or an AD user ?> i tried also with users with password and withoutAll users should have a password, they should also exist in AD. Rowland
Il 31/10/2018 17:18, Rowland Penny via samba ha scritto:>> ok, this smb.conf is default from classicupgrade > I am fairly sure it isn't.ok, i did many changes and cut&paste. You are the expert !! :-)> >> i take out they >>> Do you really need an insecure auth method ? >> why ?? > You have set 'ntlm auth = yes', this allows you to use an insecure auth > method.looks like cut&paste :-) taken out>>> Who was the user you where trying to connect as ? >> a normal user > Define 'normal user', is this a local Unix user (a user not part of the > AD domain) or an AD user ?ok, sorry, are all AD users>> i tried also with users with password and without > All users should have a password, they should also exist in AD.yes, but some users have password blank thanks a lot have a good we -- *Corrado Ravinetto * Sistemi informativi corrado.ravinetto at lanificiocerruti.com <mailto:corrado.ravinetto at lanificiocerruti.com> T: +39 015 3591283 Lanificio F.lli CERRUTI *Lanificio F.lli Cerruti S.p.A. * Via Cernaia 40, 13900 - Biella (BI) Italy lanificiocerruti.com <lanificiocerruti.com> Twitter <twitter.com/Lan_Cerruti> Facebook <facebook.com/LanificioCerruti> Instagram <instagram.com/lanificiocerruti> Rispetta l'ambiente, non stampare questa mail se non necessario Respect the environment, don't print unless necessary