search for: arniekol

Am 23.11.2017 um 23:03 schrieb Rowland Penny via samba: > On Thu, 23 Nov 2017 21:46:17 +0000 > Arnab Roy <arniekol at gmail.com> wrote: > >> The systemd unit file looks like as follows: >> >> [Unit] >> Description=Winbindd Service >> After=syslog.target network.target >> >> [Service] >> Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba >> Type=notif...

The systemd unit file looks like as follows: [Unit] Description=Winbindd Service After=syslog.target network.target [Service] Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba Type=notify NotifyAccess=all PIDFile=/var/run/samba/ ExecStart=/usr/local/samba/sbin/winbindd -D ExecReload=/usr/bin/kill -HUP $MAINPID LimitCORE=infinity [Install] @Rowland I am not blaming samba at all, certainly is

...hardcoded during compile time. Why does samba hardcode this on all client applications is beyond my little knowledge :( Many Thanks Arnab On 3 Sep 2017 12:48 pm, "Rowland Penny via samba" <samba at lists.samba.org> wrote: > On Fri, 1 Sep 2017 23:30:53 +0100 > Arnab Roy <arniekol at gmail.com> wrote: > > > Hello Everyone, > > > > Thanks for your inputs I have followed whats here > > https://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind > > Apart from the different location for the directories. I have added > > the re...

...Nov 23, 2017 at 10:09 PM, Reindl Harald via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > > > Am 23.11.2017 um 23:03 schrieb Rowland Penny via samba: > > On Thu, 23 Nov 2017 21:46:17 +0000 > Arnab Roy <arniekol at gmail.com <mailto:arniekol at gmail.com>> wrote: > > The systemd unit file looks like as follows: > > [Unit] > Description=Winbindd Service > After=syslog.target network.target > > [Service] >...

...ve /var/run/samba/ , I spotted the error with not having an actual filename while I was posting this message. Does the pid file need to be in the same path as samba ? On Thu, Nov 23, 2017 at 10:04 PM, Sonic <sonicsmith at gmail.com> wrote: > On Thu, Nov 23, 2017 at 4:46 PM, Arnab Roy <arniekol at gmail.com> wrote: > > > > PIDFile=/var/run/samba/ > > > > Do you have "/var/run/samba" dir? > I use: > PIDFile=/usr/local/samba/var/run/winbindd.pid > > And even then I think I had to manually create the > "/usr/local/samba/var/run" d...

...indl Harald via samba < >> samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >> >> >> >> Am 23.11.2017 um 23:03 schrieb Rowland Penny via samba: >> >> On Thu, 23 Nov 2017 21:46:17 +0000 >> Arnab Roy <arniekol at gmail.com <mailto:arniekol at gmail.com>> wrote: >> >> The systemd unit file looks like as follows: >> >> [Unit] >> Description=Winbindd Service >> After=syslog.target network.target >> >>...

Hi , Any suggestions on the config I really need to get this working I am on fedora with samba 4.45 ? I know their is a probable way of getting this to work but not seen a complete example anywhere.. I have seen a commercial product which runs centos use samba and Kerberos across multiple disjoint domains. Your help would really appreciated. Many thanks Arnab On 21 May 2017 9:34 am,

Hello Everyone, Thanks for your inputs I have followed whats here https://wiki.freeradius. org/guide/Active-Directory-direct-via-winbind . Apart from the different location for the directories. I have added the recommended options in samba. However I cannot see why this would make a difference to performance. The guide for setting up a samba domain member seems more to be aimed at the whole

...o for a ldap(s) setup. just dont mixup these to : start_tls and tls_mode to connect to port 636 on a samba AD DC, you need : start_tls=no and tls_mode = yes   My preffered auth order if the app allows it. kerberos ldap(s) ntlm as last resort.   Best regards,   Louis       Van: Arnab Roy [mailto:arniekol at gmail.com] Verzonden: donderdag 8 juni 2017 15:07 Aan: L.P.H. van Belle Onderwerp: Re: [Samba] ntlm_auth and SMBv2/v3 Are their any plans finding a work around for this..as their tremendous amount of security paranoia related to smbv1 now... On 8 Jun 2017 13:54, "L.P.H. van Belle via s...

Anyone on how to get libwbclient some kind of runtime parameter from smb conf? On 3 Sep 2017 23:22, "Arnab Roy" <arniekol at gmail.com> wrote: > > > Wouldn't it be nice if the end user had a choice . Why would it be unsafe > considering all the info is in smb.conf and it just needs to read like all > other samba processes like smbd or nmbd? > > The problem I have got here is that my radius...

...d in the water :( after a little careful attention I was missing ntlm auth = mschapv2-and-ntlmv2-only which is why I was upgrading samba in the first place to get rid of NTLMv1. Thanks again for your help and apologies once again. Many Thanks Arnab On Wed, Nov 22, 2017 at 7:03 PM, Arnab Roy <arniekol at gmail.com> wrote: > Hi Rowland, > > I will not argue with you but in our case 4.5.x worked with those > parameters as we have multiple winbind instances and the pipe was used by a > customised ntlm_auth. Looks like we will be stuck on 4.5 for the > foreseeable future. >...

On Thu, Nov 23, 2017 at 4:46 PM, Arnab Roy <arniekol at gmail.com> wrote: > > PIDFile=/var/run/samba/ > Do you have "/var/run/samba" dir? I use: PIDFile=/usr/local/samba/var/run/winbindd.pid And even then I think I had to manually create the "/usr/local/samba/var/run" dir.

On Thu, 23 Nov 2017 21:46:17 +0000 Arnab Roy <arniekol at gmail.com> wrote: > The systemd unit file looks like as follows: > > [Unit] > Description=Winbindd Service > After=syslog.target network.target > > [Service] > Environment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba > Type=notify > NotifyAccess=all > PIDFile=/v...

...from an rpm install of samba from fedora. Thanks Arnab On Thu, Nov 23, 2017 at 10:09 PM, Reindl Harald via samba < samba at lists.samba.org> wrote: > > > Am 23.11.2017 um 23:03 schrieb Rowland Penny via samba: > >> On Thu, 23 Nov 2017 21:46:17 +0000 >> Arnab Roy <arniekol at gmail.com> wrote: >> >> The systemd unit file looks like as follows: >>> >>> [Unit] >>> Description=Winbindd Service >>> After=syslog.target network.target >>> >>> [Service] >>> Environment=KRB5CCNAME=FILE:/run/samba/k...

Hi , I just need some clarification ; We currently use ntlm_auth + winbind for AD auth on Freeradius, will disabling SMBv1 break authentication for ntlm_auth + Freeradius ? Many Thanks Arnab

Hi Rowland, No I am running samba as a member, purely using it for ntlm_auth for freeradius. If i run it manually i.e. /usr/local/samba/sbin/winbindd -D it starts up and stays up no issues. Yes selinx is disabled sestatus SELinux status: disabled Any pointers...? Many Thanks Arnab On Thu, Nov 23, 2017 at 8:34 PM, Rowland Penny via samba < samba at lists.samba.org> wrote:

Hi , I have just upgraded samba from 4.5.10 to 4.7.3 and my NTLM auth is completely broken on starting winbind its complaining about Unknown parameter encountered: "winbindd privileged socket directory" Ignoring unknown parameter "winbindd privileged socket directory" In our case it needs to be specified on startup via smb.conf and not at compile time. This was working fine

Hi All, I am using winbind and ntlm auth in Freeradius. At the moment that seems to be a major bottleneck. It seems like the ntlm_auth execution is taking a while , what all options can improve this . For starters adding TCP_NODELAY in smb.conf seems to have helped a little. Many Thanks

Hi , I need to use ntlm_auth across two different AD domains and their is no trust between the 2 domains. I followed the post http://samba-multiple-domains.blogspot.co.uk/2010/03/how-to-join-one-linux-box-to-two.html <https://deref-mail.com/mail/client/44YIgEylY9w/dereferrer/?redirectUrl=http%3A%2F%2Fsamba-multiple-domains.blogspot.co.uk%2F2010%2F03%2Fhow-to-join-one-linux-box-to-two.html>

Thanks Michael, after starting the service within a few secs it dies in my case with this error samba winbind Got sig[15] terminate (is_parent=1) Let me know if you need any further information. Many Thanks On Thu, Nov 23, 2017 at 4:54 PM, Michael Wandel <m.wandel at t-online.de> wrote: > On 23.11.2017 17:49, Arnab Roy wrote: > > Hi Michael, > > > > I didnt change