search for: abartlet

I need to allow [read] access to a Samba server using both IP filtering & UserIDs . For a given list of IP subnets, any user should have access. Outside these 'trusted' subnets, I need to do User authentication. I can handle the User authentication OK in several ways. However, I don't see any way to do the 'short circuit' allow for some IPs, then use User authentication

...ation issue we experience since one week. > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns Do that again with --local and we should get a better set of info in the logs. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -------------- next part -------------...

Hi All, I would like to know if this is possible and if possible what is the complexity. Consider a CIFS client, SAMBA Server1 and Samba Server2. Say a session is established between a CIFS client and SAMBA server1. Is it possible for the SAMBA server1 to transfer/redirect/reestablish the connection to SAMBA server2 without the CIFS client knowing about this? The session between the CIFS

...but the error remains the same. Alexander On 8. February 2020 at 01:38:25, Alexander Harm (alexander.harm at apfel-q.de) wrote: Hi Andrew, you can use my name if you want (Alexander Harm). I will try and build with your patch. Alexander On 8. February 2020 at 00:30:02, Andrew Bartlett (abartlet at samba.org) wrote: Thanks. At this stage is looks like a bug in the repl_meta_data module. Try the attached patch. Can I name you in the bug and is there any affiliation (eg employer) you would like named? I've filed a bug and will file a merge request once I have a test to confirm this....

...t as a user is added to more groups, they loose access to folders they previously had access too. Attached is a total hack that appears to resolve the issue, but the real fix needs to be in glibc or the kernel. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -------------- next part -------------- A non-text attachment was scrubbed... Name: setgroups.patch Type: text/x-patch Size: 1954 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20130424/8de0ad4e...

...om --sync-all --local -d 9 However, if I run samba-tool drs showrepl it shows me a result 1326 (WERR_LOGON_FAILURE) and also samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync fails with the same error. How can I fix this? On 3. March 2020 at 04:23:02, Andrew Bartlett (abartlet at samba.org) wrote: I think I have this finally fixed here: https://gitlab.com/samba-team/samba/-/merge_requests/1189 https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch Thanks for your patience, Andrew Bartlett On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote:...

...om --sync-all --local -d 9 However, if I run samba-tool drs showrepl it shows me a result 1326 (WERR_LOGON_FAILURE) and also samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync fails with the same error. How can I fix this? On 3. March 2020 at 04:23:02, Andrew Bartlett (abartlet at samba.org) wrote: I think I have this finally fixed here: https://gitlab.com/samba-team/samba/-/merge_requests/1189 https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch Thanks for your patience, Andrew Bartlett On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote:...

I am running several samba servers (2.2.3a and 2.2.7) in various places as pdcs. Everything seems to be running smoothly, but I can't find any way of restricting access to only those uses who have logged on to the domain. Is this possible? ie at the moment, any user can map a drive to \\server\share, put in a valid user/password pair and have access to that share without going through any

Any update on this one? Is there anything I can do from my side? I?m prepared to nuke my Samba DC?s and start afresh if necessary. Currently I have three sites not picking up changes so I?m getting a bit anxious here? On 10. February 2020 at 19:52:02, Andrew Bartlett (abartlet at samba.org) wrote: Thanks. This is a different issue. I'll continue the thread on-list once I get to work. Andrew Bartlett On Mon, 2020-02-10 at 19:14 +0100, Alexander Harm wrote: > OK, I only received a message the first time about a size and not a general limitation. Find atta...

...ainController, it also has both NtlmMinClientSec and NtlmMinServerSec set to 0x00080000 (to permit only NTLMv2 session security). I just cannot map a drive from W2k client to the Samba server running Solaris 8. Thanks a lot in advance. Dan -----Original Message----- From: Andrew Bartlett [mailto:abartlet@samba.org] Sent: Saturday, October 25, 2003 11:29 PM To: Chu, Dan [IT] Cc: 'samba@lists.samba.org' Subject: Re: [Samba] NTLMv2 in Samba 3.0 On Fri, 2003-10-24 at 06:53, Chu, Dan [IT] wrote: > Hello, > Has anyone successfully configured Samba 3.0 to authenticate using NTLMv2 > onl...

...t 1326 (WERR_LOGON_FAILURE) > > and also > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > fails with the same error. > > How can I fix this? > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > (abartlet at samba.org) wrote: > > I think I have this finally fixed here: > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > Thanks for your patience, > > Andrew Bartlett > &g...

...t; > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > > > fails with the same error. > > > > How can I fix this? > > > > > > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > > (abartlet at samba.org) wrote: > > > > I think I have this finally fixed here: > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > > > Thanks for your patience, >...

Greetings everyone I finally succeeded in doing the seemingly most difficult thing, "following directions." I got my act together configuring the smb.conf and migrating using net rpc vampire into tdbsam. There are issues with this migration in which computer netbios names which are obviously all uppercase were not being created in /etc/passwd. I put my C cap on and converted the computer

I have 3.0.2a (with about 75 machines/users) installed as a PDC for my Win2k users and found an oddity. (waiting for a bin version of 3.0.3 for RH8.0) All was fine before I left 2.2.8.... But now when users hit <CTL>-<ALT>-<DEL> and change the password, they get "domain not available". When they log in, they get the logon scripts to execute, and anything else I do to

When BDC will not make any changes in ldap, is it safe to not set any *script paramater in smb.conf? --beast

...> > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > > > G'Day Alexander, > > > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > > ends of the lines. Those have the critical (groan...) details of what >...

So, for now, should I work my way through the DNS manager and delete any references for the old dc manually or just leave it alone? On Thu, Mar 8, 2018 at 6:16 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Thu, 2018-03-08 at 17:49 -0600, Robert Wooden via samba wrote: > > Will these DNS listings clear themselves with time or do I have a problem > > here? > > They won't clear themselves, but Samba 4.9 in September will have tools > to clear thi...

I don't want to use a VPN to solve this one. I am really wondering with (samba 3.x) when the linux box become part of The AD domain does it get a special privileges? > > Hi,i am not sure if i understand yor needs, but maybe this helps > this links guide you to setup a pptp server an client for linux > http://www.poptop.org/ > http://pptpclient.sourceforge.net/ > there

I can't seem to be able to mount any windows shares all I get is this error smbfs: can't get handle to requester (no /dev/nsmb* device) a quick search on google leads me to believe it is broken, can anyone help me get this fixed?

Hi, i was searching in the source code, but i didn't find any MAX_MPX or something like that. How can i change MAX_MPX_REQUESTS that smbd can handle?