search for: a_usernam

...leave -U Administrator > > after successful leave I rm-ed /var/lib/samba (I only left the subdir > private there) then rejoined the ADS domain. > > Now winbindd -i -d10 looks very different ;-) > > "wbinfo -u" brings users now. Next step, does 'getent passwd a_username' show anything ? > > *phew* > > Thanks all for the help so far, could have thought of doing so > earlier (well, I did, but did it wrong ...) > > I test things now. > > Thanks again @ Rowland, Louis, etc No problem > > - > > Maybe I come back with...

I have done the nsswitch config (https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind) wbinfo -u show the users getent passwd doesn't I also run pam-auth-update On 22.08.2016 17:13, Rowland Penny via samba wrote: > On Mon, 22 Aug 2016 16:33:38 +0200 > basti via samba <samba at lists.samba.org> wrote: > >> >> >> On 22.08.2016

...e next time this happens. But WHY is samba getting stuck in the first place? We are getting the following unusual in the logs on all three DCs: > ../source4/rpc_server/drsuapi/getncchanges.c:1961: DsGetNCChanges 2nd replication on DN DC=samba,DC=company,DC=com older highwatermark (last_dn CN=a_username,CN=Users,DC=samba,DC=company,DC=com) > ../source4/rpc_server/drsuapi/getncchanges.c:1961: DsGetNCChanges 2nd replication on DN DC=samba,DC=company,DC=com older highwatermark (last_dn CN=Schema Admins,CN=Users,DC=samba,DC=company,DC=com) > ../source4/rpc_server/drsuapi/getncchanges.c:1961...

Am 2016-12-31 um 13:14 schrieb Rowland Penny via samba: >> "wbinfo -u" brings users now. > > Next step, does 'getent passwd a_username' show anything ? yes! On the member server: main ~ # grep ads1 /etc/passwd main ~ # getent passwd ads1 ads1:*:13112:10513::/home/ARBEITSGRUPPE/ads1:/bin/false This is a newly created user in the AD. As mentioned old users are in /etc/passwd on the member server from the time when it was t...

On Sat, 31 Dec 2016 11:31:26 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2016-12-30 um 18:31 schrieb Rowland Penny via samba: > >> remember: server "main" was nt4-pdc ~~ and we only replaced > >> smb.conf and joined etc etc // maybe too bold? ;-) > > > > Oh definitely, you will probably have to empty

...=0(root),15001(BUILTIN\users) > > But 'getent pass' and 'getent group' not work , running for a various > second and only get users/groups locals. It doesn't matter if 'getent passwd' and 'getent group' do not work, just so long that 'getent passwd a_username' and 'getent group a_groupname' do and the latter does, as shown above. Rowland

...WHY is samba getting stuck in the first place? > > We are getting the following unusual in the logs on all three DCs: >> ../source4/rpc_server/drsuapi/getncchanges.c:1961: DsGetNCChanges 2nd >> replication on DN DC=samba,DC=company,DC=com older highwatermark >> (last_dn CN=a_username,CN=Users,DC=samba,DC=company,DC=com) >>   ../source4/rpc_server/drsuapi/getncchanges.c:1961: DsGetNCChanges >> 2nd replication on DN DC=samba,DC=company,DC=com older highwatermark >> (last_dn CN=Schema Admins,CN=Users,DC=samba,DC=company,DC=com) >>   ../source4/rpc_server...

Ok, know from desktop logon apparently the user logon right, look user 'policia\gafranchello' granted access on the trace below, but still tel me "Invalid password please try again" Jul 2 16:15:03 samba-cliente polkitd(authority=local): Unregistered Authentication Agent for unix-session:c6 (system bus name :1.231, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale

On Sun, 1 Jan 2017 11:51:26 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2016-12-31 um 13:14 schrieb Rowland Penny via samba: > > >> "wbinfo -u" brings users now. > > > > Next step, does 'getent passwd a_username' show anything ? > > yes! On the member server: > > main ~ # grep ads1 /etc/passwd > > main ~ # getent passwd ads1 > ads1:*:13112:10513::/home/ARBEITSGRUPPE/ads1:/bin/false Are these the numbers you want to use ? I ask this because you are using the 'rid' backe...

...) > > > > But 'getent pass' and 'getent group' not work , running for a various > > second and only get users/groups locals. > > It doesn't matter if 'getent passwd' and 'getent group' do not work, > just so long that 'getent passwd a_username' and 'getent group > a_groupname' do and the latter does, as shown above. > > Rowland > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >

The proxy already is into domain "wbinfo -u" returns all users from the AD, the kinit command with -t /etc/squid/PROXY.keytab is working great, but the NTLM phase into the squid log is the same ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }} are in recent versions some changes about the NTLM or NT