Christian Naumer
2019-Jan-11 09:56 UTC
[Samba] upgrade to 4.8.3 authentication not work without specifying domain
How about setting: map untrusted to domain = yes The default changed here. But it would still help if we could see the smb.conf as the big difference with 4.8 is that winbind needs to run now. This might also do something like this. Regards Christian Am 11.01.19 um 10:46 schrieb L.P.H. van Belle via samba:> I gave you the most simple option. > > And the difference is. > > myserverdomain\username works only on that server. (myserverdomain) > .\username works on any server where the loginname and password are the same. > > There is NO other option for you that i know off. (sorry) > Yes.. the other option is, setup an AD domain. > > > Greetz, > > Louis > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >> Alberto Maria Fiaschi via samba >> Verzonden: vrijdag 11 januari 2019 10:40 >> Aan: samba at lists.samba.org >> Onderwerp: Re: [Samba] upgrade to 4.8.3 authentication not >> work without specifying domain >> >> >> Il 11/01/19 10:25, L.P.H. van Belle via samba ha scritto: >>> If the clients login locally and not in a domain. >>> >>> Then tell you users to use .\loginname >> >> It is a solution equivalent to telling him to log in with myserverdomain \ username. >> This is what I wanted to avoid considering the average computer literacy of my group of users >> >> thanks, >> >> Buda >> >>> >>> Greetz, >>> >>> Louis >>> >>> >>> >>>> -----Oorspronkelijk bericht----- >>>> Van: Alberto Maria Fiaschi >> [mailto:alberto.fiaschi at estar.toscana.it] >>>> Verzonden: vrijdag 11 januari 2019 10:16 >>>> Aan: L.P.H. van Belle >>>> CC: samba at lists.samba.org >>>> Onderwerp: Re: [Samba] upgrade to 4.8.3 authentication not >>>> work without specifying domain >>>> >>>> thanks, but this solution is not applicable to my reality. >>>> Unfortunately, the clients are not in a domain and in addition, >>>> currently I do not have any deployment tools. >>>> A historically bad context ... >>>> >>>> Buda >>>> >>>> Il 11/01/19 10:06, L.P.H. van Belle via samba ha scritto: >>>>> >>>>> >>>>>> -----Oorspronkelijk bericht----- >>>>>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >>>>>> Alberto Maria Fiaschi via samba >>>>>> Verzonden: vrijdag 11 januari 2019 9:32 >>>>>> Aan:samba at lists.samba.org >>>>>> Onderwerp: [Samba] upgrade to 4.8.3 authentication not work >>>>>> without specifying domain >>>>>> >>>>>> I updated a centos 7 without changing the samba >>>> configuration. Before >>>>>> authentication worked even without having to specify the >>>> domain to the >>>>>> logon. After the update, on the other hand, it is >>>> mandatory to specify the domain. >>>>> Updated from version to version? ( os and samba please ) >>>>> >>>>> Yes as MS also changed in windows its default. >>>>> >>>>>> user password: not work. >>>>>> domain \ user password work. >>>>>> I have 5000 windows (xp / 7/10) clients not in domain. >>>>>> Client workgroups are varied. >>>>>> Users are not expert at all and are not able to change >>>> their habits. >>>>> Ok, now are you using "WorkGroup" or an DOMAIN? >>>>> In case of domain, you cat pre-set the DOMAIN through GPO. >>>>> I have also user that wont change ther habits.. ;-) >>>>> >>>>> Set it in the computer GPO at templates/system/logon >> DefaultDomain. >>>>> Example >>>> :http://www.grouppolicy.biz/2010/06/group-policy-setting-of-th >>>> e-week-29-assign-a-default-domain-for-logon/ ) >>>>>> Please help me !! >>>>> Hope it helps you a bit. >>>>> >>>>>> tanks >>>>>> >>>>>> Buda >>>>>> >>>>>> -- >>>>>> -------------------------------------------------------------- >>>>>> ---------- >>>>>> *Alberto Maria Fiaschi* >>>>>> /UOC: / Reti e Sistemi Area Nord-Ovest >>>>>> /Dip.to: / Tecnologie Informatiche >>>>>> >>>>>> */ESTAR / * >>>>>> /c/o / Azienda Ospedaliero Universitaria Pisana >>>>>> Presidio Ospedaliero Spedali Riuniti Santa Chiara >>>>>> Via Roma, 67 - 56126 Pisa, Italy >>>>>> /Tel.: / +39 050 99 3117 >>>>>> /Fax: / +39 050 99 3396 >>>>>> /mail:/alberto.fiaschi at estar.toscana.it >>>>>> <mailto:alberto.fiaschi at estar.toscana.it> >>>>>> /profilo suhttp://it.linkedin.com/pub/alberto-fiaschi/ >>>>>> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >>>>>> -------------------------------------------------------------- >>>>>> ---------- >>>>>> >>>>>> /Le informazioni contenute nella presente comunicazione >> ed in ogni >>>>>> eventuale file allegato possono essere riservate e sono comunque >>>>>> destinate esclusivamente alla persona o Ente/Azienda in >>>> indirizzo. Le >>>>>> informazioni contenute nella presente comunicazione ed in >>>>>> ogni eventuale >>>>>> file allegato non sono da considerarsi comunicazioni >>>>>> personali, quindi >>>>>> eventuali risposte potranno essere conosciute da persone >>>>>> appartenenti ad >>>>>> Estar. La diffusione, distribuzione e/o copiatura del documento >>>>>> trasmesso da parte di persona diversa dal destinatario è >>>> proibita ai >>>>>> sensi dell'art. 616 c.p. I dati forniti verranno >> trattati ai sensi >>>>>> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >>>>>> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >>>>>> 2016. Se >>>>>> ha ricevuto per errore questa comunicazione, La invitiamo a >>>>>> distruggerla >>>>>> e ad informare immediatamente il mittente. / >>>>>> >>>>>> >>>>>> -- >>>>>> To unsubscribe from this list go to the following URL >> and read the >>>>>> instructions:https://lists.samba.org/mailman/options/samba >>>>>> >>>> -- >>>> -------------------------------------------------------------- >>>> ---------- >>>> *Alberto Maria Fiaschi* >>>> /UOC: / Reti e Sistemi Area Nord-Ovest >>>> /Dip.to: / Tecnologie Informatiche >>>> >>>> */ESTAR / * >>>> /c/o / Azienda Ospedaliero Universitaria Pisana >>>> Presidio Ospedaliero Spedali Riuniti Santa Chiara >>>> Via Roma, 67 - 56126 Pisa, Italy >>>> /Tel.: / +39 050 99 3117 >>>> /Fax: / +39 050 99 3396 >>>> /mail:/alberto.fiaschi at estar.toscana.it >>>> <mailto:alberto.fiaschi at estar.toscana.it> >>>> /profilo su http://it.linkedin.com/pub/alberto-fiaschi/ >>>> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >>>> -------------------------------------------------------------- >>>> ---------- >>>> >>>> /Le informazioni contenute nella presente comunicazione ed in ogni >>>> eventuale file allegato possono essere riservate e sono comunque >>>> destinate esclusivamente alla persona o Ente/Azienda in >> indirizzo. Le >>>> informazioni contenute nella presente comunicazione ed in >>>> ogni eventuale >>>> file allegato non sono da considerarsi comunicazioni >>>> personali, quindi >>>> eventuali risposte potranno essere conosciute da persone >>>> appartenenti ad >>>> Estar. La diffusione, distribuzione e/o copiatura del documento >>>> trasmesso da parte di persona diversa dal destinatario è >> proibita ai >>>> sensi dell'art. 616 c.p. I dati forniti verranno trattati ai sensi >>>> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >>>> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >>>> 2016. Se >>>> ha ricevuto per errore questa comunicazione, La invitiamo a >>>> distruggerla >>>> e ad informare immediatamente il mittente. / >>>> >>>> >>> >> -- >> -------------------------------------------------------------- >> ---------- >> *Alberto Maria Fiaschi* >> /UOC: / Reti e Sistemi Area Nord-Ovest >> /Dip.to: / Tecnologie Informatiche >> >> */ESTAR / * >> /c/o / Azienda Ospedaliero Universitaria Pisana >> Presidio Ospedaliero Spedali Riuniti Santa Chiara >> Via Roma, 67 - 56126 Pisa, Italy >> /Tel.: / +39 050 99 3117 >> /Fax: / +39 050 99 3396 >> /mail:/alberto.fiaschi at estar.toscana.it >> <mailto:alberto.fiaschi at estar.toscana.it> >> /profilo su http://it.linkedin.com/pub/alberto-fiaschi/ >> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >> -------------------------------------------------------------- >> ---------- >> >> /Le informazioni contenute nella presente comunicazione ed in ogni >> eventuale file allegato possono essere riservate e sono comunque >> destinate esclusivamente alla persona o Ente/Azienda in indirizzo. Le >> informazioni contenute nella presente comunicazione ed in >> ogni eventuale >> file allegato non sono da considerarsi comunicazioni >> personali, quindi >> eventuali risposte potranno essere conosciute da persone >> appartenenti ad >> Estar. La diffusione, distribuzione e/o copiatura del documento >> trasmesso da parte di persona diversa dal destinatario è proibita ai >> sensi dell'art. 616 c.p. I dati forniti verranno trattati ai sensi >> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >> 2016. Se >> ha ricevuto per errore questa comunicazione, La invitiamo a >> distruggerla >> e ad informare immediatamente il mittente. / >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > >-- Dr. Christian Naumer Research Scientist Plattform-Koordinator Bioprozesstechnik B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.de, homepage www.brain-biotech.de fon +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, Ludger Roedder Aufsichtsratsvorsitzender: Dr. Ludger Mueller
Alberto Maria Fiaschi
2019-Jan-11 10:27 UTC
[Samba] [SOLVED] upgrade to 4.8.3 authentication not work without specifying domain
put map untrusted to domain = yes in smb.conf and strarted winbind. Now work !!! nice -n '-20' yes 'thanks a lot' Buda Il 11/01/19 10:56, Christian Naumer via samba ha scritto:> How about setting: > > map untrusted to domain = yes > > The default changed here. But it would still help if we could see the > smb.conf as the big difference with 4.8 is that winbind needs to run > now. This might also do something like this. > > Regards > > > Christian > > > Am 11.01.19 um 10:46 schrieb L.P.H. van Belle via samba: >> I gave you the most simple option. >> >> And the difference is. >> >> myserverdomain\username works only on that server. (myserverdomain) >> .\username works on any server where the loginname and password are the same. >> >> There is NO other option for you that i know off. (sorry) >> Yes.. the other option is, setup an AD domain. >> >> >> Greetz, >> >> Louis >> >> >> 11 >>> -----Oorspronkelijk bericht----- >>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >>> Alberto Maria Fiaschi via samba >>> Verzonden: vrijdag 11 januari 2019 10:40 >>> Aan: samba at lists.samba.org >>> Onderwerp: Re: [Samba] upgrade to 4.8.3 authentication not >>> work without specifying domain >>> >>> >>> Il 11/01/19 10:25, L.P.H. van Belle via samba ha scritto: >>>> If the clients login locally and not in a domain. >>>> >>>> Then tell you users to use .\loginname >>> It is a solution equivalent to telling him to log in with myserverdomain \ username. >>> This is what I wanted to avoid considering the average computer literacy of my group of users >>> >>> thanks, >>> >>> Buda >>> >>>> Greetz, >>>> >>>> Louis >>>> >>>> >>>> >>>>> -----Oorspronkelijk bericht----- >>>>> Van: Alberto Maria Fiaschi >>> [mailto:alberto.fiaschi at estar.toscana.it] >>>>> Verzonden: vrijdag 11 januari 2019 10:16 >>>>> Aan: L.P.H. van Belle >>>>> CC: samba at lists.samba.org >>>>> Onderwerp: Re: [Samba] upgrade to 4.8.3 authentication not >>>>> work without specifying domain >>>>> >>>>> thanks, but this solution is not applicable to my reality. >>>>> Unfortunately, the clients are not in a domain and in addition, >>>>> currently I do not have any deployment tools. >>>>> A historically bad context ... >>>>> >>>>> Buda >>>>> >>>>> Il 11/01/19 10:06, L.P.H. van Belle via samba ha scritto: >>>>>> >>>>>> >>>>>>> -----Oorspronkelijk bericht----- >>>>>>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >>>>>>> Alberto Maria Fiaschi via samba >>>>>>> Verzonden: vrijdag 11 januari 2019 9:32 >>>>>>> Aan:samba at lists.samba.org >>>>>>> Onderwerp: [Samba] upgrade to 4.8.3 authentication not work >>>>>>> without specifying domain >>>>>>> >>>>>>> I updated a centos 7 without changing the samba >>>>> configuration. Before >>>>>>> authentication worked even without having to specify the >>>>> domain to the >>>>>>> logon. After the update, on the other hand, it is >>>>> mandatory to specify the domain. >>>>>> Updated from version to version? ( os and samba please ) >>>>>> >>>>>> Yes as MS also changed in windows its default. >>>>>> >>>>>>> user password: not work. >>>>>>> domain \ user password work. >>>>>>> I have 5000 windows (xp / 7/10) clients not in domain. >>>>>>> Client workgroups are varied. >>>>>>> Users are not expert at all and are not able to change >>>>> their habits. >>>>>> Ok, now are you using "WorkGroup" or an DOMAIN? >>>>>> In case of domain, you cat pre-set the DOMAIN through GPO. >>>>>> I have also user that wont change ther habits.. ;-) >>>>>> >>>>>> Set it in the computer GPO at templates/system/logon >>> DefaultDomain. >>>>>> Example >>>>> :http://www.grouppolicy.biz/2010/06/group-policy-setting-of-th >>>>> e-week-29-assign-a-default-domain-for-logon/ ) >>>>>>> Please help me !! >>>>>> Hope it helps you a bit. >>>>>> >>>>>>> tanks >>>>>>> >>>>>>> Buda >>>>>>> >>>>>>> -- >>>>>>> -------------------------------------------------------------- >>>>>>> ---------- >>>>>>> *Alberto Maria Fiaschi* >>>>>>> /UOC: / Reti e Sistemi Area Nord-Ovest >>>>>>> /Dip.to: / Tecnologie Informatiche >>>>>>> >>>>>>> */ESTAR / * >>>>>>> /c/o / Azienda Ospedaliero Universitaria Pisana >>>>>>> Presidio Ospedaliero Spedali Riuniti Santa Chiara >>>>>>> Via Roma, 67 - 56126 Pisa, Italy >>>>>>> /Tel.: / +39 050 99 3117 >>>>>>> /Fax: / +39 050 99 3396 >>>>>>> /mail:/alberto.fiaschi at estar.toscana.it >>>>>>> <mailto:alberto.fiaschi at estar.toscana.it> >>>>>>> /profilo suhttp://it.linkedin.com/pub/alberto-fiaschi/ >>>>>>> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >>>>>>> -------------------------------------------------------------- >>>>>>> ---------- >>>>>>> >>>>>>> /Le informazioni contenute nella presente comunicazione >>> ed in ogni >>>>>>> eventuale file allegato possono essere riservate e sono comunque >>>>>>> destinate esclusivamente alla persona o Ente/Azienda in >>>>> indirizzo. Le >>>>>>> informazioni contenute nella presente comunicazione ed in >>>>>>> ogni eventuale >>>>>>> file allegato non sono da considerarsi comunicazioni >>>>>>> personali, quindi >>>>>>> eventuali risposte potranno essere conosciute da persone >>>>>>> appartenenti ad >>>>>>> Estar. La diffusione, distribuzione e/o copiatura del documento >>>>>>> trasmesso da parte di persona diversa dal destinatario è >>>>> proibita ai >>>>>>> sensi dell'art. 616 c.p. I dati forniti verranno >>> trattati ai sensi >>>>>>> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >>>>>>> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >>>>>>> 2016. Se >>>>>>> ha ricevuto per errore questa comunicazione, La invitiamo a >>>>>>> distruggerla >>>>>>> e ad informare immediatamente il mittente. / >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> To unsubscribe from this list go to the following URL >>> and read the >>>>>>> instructions:https://lists.samba.org/mailman/options/samba >>>>>>> >>>>> -- >>>>> -------------------------------------------------------------- >>>>> ---------- >>>>> *Alberto Maria Fiaschi* >>>>> /UOC: / Reti e Sistemi Area Nord-Ovest >>>>> /Dip.to: / Tecnologie Informatiche >>>>> >>>>> */ESTAR / * >>>>> /c/o / Azienda Ospedaliero Universitaria Pisana >>>>> Presidio Ospedaliero Spedali Riuniti Santa Chiara >>>>> Via Roma, 67 - 56126 Pisa, Italy >>>>> /Tel.: / +39 050 99 3117 >>>>> /Fax: / +39 050 99 3396 >>>>> /mail:/alberto.fiaschi at estar.toscana.it >>>>> <mailto:alberto.fiaschi at estar.toscana.it> >>>>> /profilo su http://it.linkedin.com/pub/alberto-fiaschi/ >>>>> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >>>>> -------------------------------------------------------------- >>>>> ---------- >>>>> >>>>> /Le informazioni contenute nella presente comunicazione ed in ogni >>>>> eventuale file allegato possono essere riservate e sono comunque >>>>> destinate esclusivamente alla persona o Ente/Azienda in >>> indirizzo. Le >>>>> informazioni contenute nella presente comunicazione ed in >>>>> ogni eventuale >>>>> file allegato non sono da considerarsi comunicazioni >>>>> personali, quindi >>>>> eventuali risposte potranno essere conosciute da persone >>>>> appartenenti ad >>>>> Estar. La diffusione, distribuzione e/o copiatura del documento >>>>> trasmesso da parte di persona diversa dal destinatario è >>> proibita ai >>>>> sensi dell'art. 616 c.p. I dati forniti verranno trattati ai sensi >>>>> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >>>>> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >>>>> 2016. Se >>>>> ha ricevuto per errore questa comunicazione, La invitiamo a >>>>> distruggerla >>>>> e ad informare immediatamente il mittente. / >>>>> >>>>> >>> -- >>> -------------------------------------------------------------- >>> ---------- >>> *Alberto Maria Fiaschi* >>> /UOC: / Reti e Sistemi Area Nord-Ovest >>> /Dip.to: / Tecnologie Informatiche >>> >>> */ESTAR / * >>> /c/o / Azienda Ospedaliero Universitaria Pisana >>> Presidio Ospedaliero Spedali Riuniti Santa Chiara >>> Via Roma, 67 - 56126 Pisa, Italy >>> /Tel.: / +39 050 99 3117 >>> /Fax: / +39 050 99 3396 >>> /mail:/alberto.fiaschi at estar.toscana.it >>> <mailto:alberto.fiaschi at estar.toscana.it> >>> /profilo su http://it.linkedin.com/pub/alberto-fiaschi/ >>> <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> >>> -------------------------------------------------------------- >>> ---------- >>> >>> /Le informazioni contenute nella presente comunicazione ed in ogni >>> eventuale file allegato possono essere riservate e sono comunque >>> destinate esclusivamente alla persona o Ente/Azienda in indirizzo. Le >>> informazioni contenute nella presente comunicazione ed in >>> ogni eventuale >>> file allegato non sono da considerarsi comunicazioni >>> personali, quindi >>> eventuali risposte potranno essere conosciute da persone >>> appartenenti ad >>> Estar. La diffusione, distribuzione e/o copiatura del documento >>> trasmesso da parte di persona diversa dal destinatario è proibita ai >>> sensi dell'art. 616 c.p. I dati forniti verranno trattati ai sensi >>> dell'art. 5 del Regolamento Generale sulla protezione dei dati UE >>> 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile >>> 2016. Se >>> ha ricevuto per errore questa comunicazione, La invitiamo a >>> distruggerla >>> e ad informare immediatamente il mittente. / >>> >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >>-- ------------------------------------------------------------------------ *Alberto Maria Fiaschi* /UOC: / Reti e Sistemi Area Nord-Ovest /Dip.to: / Tecnologie Informatiche */ESTAR / * /c/o / Azienda Ospedaliero Universitaria Pisana Presidio Ospedaliero Spedali Riuniti Santa Chiara Via Roma, 67 - 56126 Pisa, Italy /Tel.: / +39 050 99 3117 /Fax: / +39 050 99 3396 /mail:/alberto.fiaschi at estar.toscana.it <mailto:alberto.fiaschi at estar.toscana.it> /profilo su http://it.linkedin.com/pub/alberto-fiaschi/ <http://it.linkedin.com/pub/alberto-fiaschi/38/783/a5> ------------------------------------------------------------------------ /Le informazioni contenute nella presente comunicazione ed in ogni eventuale file allegato possono essere riservate e sono comunque destinate esclusivamente alla persona o Ente/Azienda in indirizzo. Le informazioni contenute nella presente comunicazione ed in ogni eventuale file allegato non sono da considerarsi comunicazioni personali, quindi eventuali risposte potranno essere conosciute da persone appartenenti ad Estar. La diffusione, distribuzione e/o copiatura del documento trasmesso da parte di persona diversa dal destinatario è proibita ai sensi dell'art. 616 c.p. I dati forniti verranno trattati ai sensi dell'art. 5 del Regolamento Generale sulla protezione dei dati UE 2016/679 del Parlamento Europeo e del Consiglio del 27 aprile 2016. Se ha ricevuto per errore questa comunicazione, La invitiamo a distruggerla e ad informare immediatamente il mittente. /
Rowland Penny
2019-Jan-11 10:36 UTC
[Samba] [SOLVED] upgrade to 4.8.3 authentication not work without specifying domain
On Fri, 11 Jan 2019 11:27:35 +0100 Alberto Maria Fiaschi via samba <samba at lists.samba.org> wrote:> put map untrusted to domain = yes in smb.conf and strarted winbind. > Now work !!! > > nice -n '-20' yes 'thanks a lot' >Have you tried running 'testparm' ? It was starting winbind that 'fixed' it, but you haven't really fixed it, you have just temporarily moved the disaster down the line, sooner or later, it will break again and this time, you might not be able to 'fix' it. It is your mess, you need to fix it. Rowland
Reasonably Related Threads
- upgrade to 4.8.3 authentication not work without specifying domain
- upgrade to 4.8.3 authentication not work without specifying domain
- upgrade to 4.8.3 authentication not work without specifying domain
- upgrade to 4.8.3 authentication not work without specifying domain
- upgrade to 4.8.3 authentication not work without specifying domain