search for: ad2008

Hi Fran, this is not a dovecot problem, thats a pure dns problem and can only be fixed in your dns environment. referrals are propagated in a "special" dns design in SRV records. so the ldap client performs a dns lookup for this names and this is the point of hanging (as in most "hanging cases", its dns). see: https://technet.microsoft.com/en-us/library/cc978014.aspx

On 9/12/2015 12:31 AM, Mark Foley wrote: > Hmmm, I've not heard of "Active Directory 2003" or 2008. The year numbers > indicated to me you might be talking about Windows Small Business Server 2003 or > 2008. Is your AD Server Windows? Linux? Something else? I'm using Samba4 AD/DC > on Linux. The OP probably is referring to AD functional levels:

...;m not sure how often you check the list and I'm down to hanging by my last fingernail on this project. I have some preliminary questions interspersed below. Thanks, --Mark -----Original Message----- > Subject: Re: My dovecot works fine against Active Directory 2003, but not > against AD2008 > To: dovecot at dovecot.org > From: Fran <cumc-4361-2 at chguadalquivir.es> > Date: Thu, 10 Sep 2015 13:26:21 +0200 > > Hi Mark, > > when I say AD 2003/8 I mean Active Directory 2003/8. Hmmm, I've not heard of "Active Directory 2003" or 2008. The year num...

I have a Samba server, its joinning on AD2008, the commands bellow has sucess when I test: # net ads testjoin Join is OK # wbinfo -t checking the trust secret via RPC calls succeeded # wbinfo -u # wbinfo -g # net ads user # net ads group # net ads user info administrator # wbinfo -u # wbinfo -g However, I need to open your share on the Windo...

Hi, I am still struggling with the printing in a AD2008 R2 environment I changed to 3.2.15 by now. Still very slow, I am running on solaris 10. Not sure if my clients are so chatty by now but it is really killing any performance. Using truss I see loads of: 19702: fcntl(17, F_SETLKW64, 0xFFBFE640) = 0 19702: fcntl(17, F_SETLKW64, 0xF...

...amic port range is 1024-5000, which looks mostly coherent with a quick tcpdump analysis. However it seems like there are also some connection in the upper range or MS-RPC 49152-65535. It seems that the lower range would be for AD2003 according to kb832017, and that the upper range would be for AD2008 and up [2]. So my question is, what is the range that is used? Actually, I grep'ing in the source code was quite unlucky because I didn't even found where it was defined in samba source code... And I guess there aren't any smb.conf parameter to control those values? I was digging i...

hi, check your /etc/openldap/ldap.conf for REFERRALS off I had this errors with "referrals on" in misconfigured dns environments. you can debug the dns packets by strace-ing the auth process On Tue, 8 Sep 2015 11:00:37 +0200 Fran <cumc-4361-2 at chguadalquivir.es> wrote: > Hello, > > my dovecot installation has been working fine against AD till we >

Hi Matthias, thank you very much! that fixed the problem. I had workaround the problem by using "base = ou=xxxx, dc=dom", instead of "base = dc=dom" in the dovecot-ldap.conf.ext file, because that also worked (I don't know why, but the problem happen if you use as base just the domain, but not if you add a second level). But that forced to me to use several userdb/passdb

...ook? --Mark -----Original Message----- > Date: Wed, 9 Sep 2015 17:22:34 +0200 > From: Matthias Lay <matthias.lay at securepoint.de> > To: Dovecot Mailing List <dovecot at dovecot.org> > Subject: Re: My dovecot works fine against Active Directory 2003, but not > against AD2008 > > > hi, > > check your > > /etc/openldap/ldap.conf > > for > > REFERRALS off > > I had this errors with "referrals on" in misconfigured dns environments. > > > you can debug the dns packets by strace-ing the auth process > > > &g...

...ich may or may not be related to the DNS problem: - I cannot open Group Policy Editor, it says "the server cannot perform the requested operation". Existing GPOs seem to work. - dcdiag fails the test VerifyReferences, complaining like [1] Problem: Missing Expected Value Base Object: CN=AD2008,OU=Domain Controllers,DC=abc,DC=com Base Object Description: "DC Account Object" Value Object Attribute Name: msDFSR-ComputerReferenceBL Value Object Description: "SYSVOL FRS Member Object" Recommended Action: Please See Knowledge Base Article Q312862 - FRS Service is disabled,...

...uestion is: why doesn't smbd pick up changes in the ctdb registry? TIA, Paul --- additional info --- ctdb_diagnostics - temporarily - available on http://tebokkel.com/~tebokkel/ctdb.log VMware virtual machines, RHEL 5.4, "experimental" Samba 3.3.5, free disk space, integrated with AD2008, GFS2 on SAN. ctdb-1.0.82-1.el5 samba3x-3.3.5-0.40.el5 samba3x-client-3.3.5-0.40.el5 samba3x-common-3.3.5-0.40.el5 samba3x-winbind-3.3.5-0.40.el5 [root at TFILE001 ~]# lsof|grep registry winbindd 6665 root mem REG 253,0 53248 163921 /var/lib/samba/registry.tdb winbindd 6665 root 7u REG 253,0 5324...

Hello, my dovecot installation has been working fine against AD till we upgrade from AD 2003 to AD 2008. As http://wiki2.dovecot.org/AuthDatabase/LDAP said, now I'm not able to connect AD through 389 port. The port 3268 works fine though. (...) Sep 7 19:02:05 <dovecotServer> dovecot: imap-login: Error: master(imap): Auth request timed out (received 0/12 bytes) Sep 7 19:02:05