search for: buero

On Tue, 11 Jul 2017 12:05:28 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 11:57 schrieb Rowland Penny: > > > Remove this local Unix group, you cannot have a group (or a user) > > in AD and /etc/group > > ok, done > > > Probably because '11029' isn't a 'RID', it will be a uidNumber. > >

...eturned. > > -- > > plus: please note that yesterday all users could work normally .... > > > Can you post the smb.conf from the DM (and the DC) > > DC: > > root at pre01svdeb02:~# cat /etc/samba/smb.conf > # Global parameters > [global] > workgroup = BUERO > realm = secret.AT > netbios name = DC > server role = active directory domain controller > idmap_ldb:use rfc2307 = yes > load printers = No > printcap name = /dev/null > log level = 2 > dns forwarder = 192.168.16.111 > > # lph > template shell = /bin/ba...

...2 share. Can someone explain me the difference of the v2 extension at the profile names and the roaming profile share? Following my settings: smb.conf: [global] logon path = \\%L\nt-profile logon home = \\%L\nt-profile [nt-profile] comment = Client Profiles path = /BUERO/samba/nt-profile/%u read only = No create mask = 0600 directory mask = 0700 [nt-profile.v2] comment = Client Profiles path = /BUERO/samba/nt-profile/%u read only = No create mask = 0600 directory mask = 0700 ls -l /BUERO/samba/nt-pr...

...ould only contain "new data" and the rest will be referenced via hardlinks (-link-dest) This was at least a simple enough scenario to achieve it with my pathetic scripting skills. This is what i came up with: #!/bin/sh # rsync copy script for rsync pull from FreeNAS to BackupNAS for Buero dataset # Set variables EXPIRED=`date +"%d-%m-%Y" -d "14 days ago"` # Copy previous timefile to timeold.txt if it exists if [ -f "/volume1/rsync/Buero/timenow.txt" ] then yes | cp /volume1/rsync/Buero/timenow.txt /volume1/rsync/Buero/timeold.txt fi # Create cu...

Am 2017-07-11 um 14:00 schrieb Rowland Penny: >> template homedir = /home/%U >> >> works for me in this context, right? > > That should work. edited accordingly, and rm-ed that idmap schema line on DM. I now have on the DM: [global] workgroup = BUERO realm = secret.AT netbios name = SERVER security = ADS map to guest = Bad User username map = /etc/samba/smbusers dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind enum users = Yes winbind enum gr...

...EST for 192.168.0.105 (192.168.0.1) from 88:71:b1:b4:3d:8e (UPC-TV-BOX-1) via home.lan > Aug 13 19:46:17 SAMBA dhcpd[21975]: DHCPACK on 192.168.0.105 to 88:71:b1:b4:3d:8e (UPC-TV-BOX-1) via home.lan > Aug 13 19:47:44 SAMBA dhcpd[21975]: Commit: IP: 192.168.0.120 DHCID: b0:6e:bf:5f:f1:46 Name: BUERO-PC > Aug 13 19:47:44 SAMBA dhcpd[21975]: execute_statement argv[0] = /usr/local/bin/dhcp-dyndns.sh > Aug 13 19:47:44 SAMBA dhcpd[21975]: execute_statement argv[1] = add > Aug 13 19:47:44 SAMBA dhcpd[21975]: execute_statement argv[2] = 192.168.0.120 > Aug 13 19:47:44 SAMBA dhcpd[21975]:...

...; > > This will check if it is a user. Did so, no entry returned. -- plus: please note that yesterday all users could work normally .... > Can you post the smb.conf from the DM (and the DC) DC: root at pre01svdeb02:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = BUERO realm = secret.AT netbios name = DC server role = active directory domain controller idmap_ldb:use rfc2307 = yes load printers = No printcap name = /dev/null log level = 2 dns forwarder = 192.168.16.111 # lph template shell = /bin/bash sdb:schema update allowed = no time server = yes...

On Wed, 24 May 2017 11:36:07 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > No big change here ... > > I can: > > * logon as BUERO\root > > * connect to the shares on \\dc > > * test other users via smbclient (auth works for them) > > But: > > * login as BUERO\Administrator just sits there and waits for > minutes ... no error message, no desktop ... I can cancel that via > CtrlAltDel > wh...

same user uses a share on one of the DCs (yes, I know ... administrative small share) there it is correctly displayed in smbstatus So I expect some wrong/outdated mapping on the DM/fileserver?

Am 30.01.19 um 11:37 schrieb Rowland Penny via samba: > You will have to sync sysvol AFTER the join > The join will create the kerberos ticket (unless you are actually > referring to /etc/krb5.conf) and smb.conf. > /etc/resolv.conf needs to point to DC1 before the join and itself after > the join. phew! I didn't have that on the radar, good that I asked ... No problem to

...11:55 schrieb Rowland Penny: > > On Wed, 24 May 2017 11:36:07 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > > > >> No big change here ... > >> > >> I can: > >> > >> * logon as BUERO\root > >> > >> * connect to the shares on \\dc > >> > >> * test other users via smbclient (auth works for them) > >> > >> But: > >> > >> * login as BUERO\Administrator just sits there and waits for > >> minutes ... no...

Stefan... You changed the user his password while, I said, change the Adminisitrator password. Let him logout and login again or you monitor his event logs remotely and see what happens if you change the Administrator password. And try this. !root = BUERO\Administrator BUERO\administrator Last question that share, any special settings? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: dinsdag 6 augustus 2019 15:54 > Aan:...

...ession setup failed: NT_STATUS_UNSUCCESSFUL >> >> >> > > Restart all the Samba binaries on the DM > > Then check that the OS knows your user with: > > getent passwd sgw DM restarted, no change. [global] netbios name = SERVER realm = SECRET.AT workgroup = BUERO logon home = "" logon path = "" load printers = No printcap name = /dev/null dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab map to guest = Bad User map untrusted to domain = Yes security = ADS username map = /etc/samba/smbusers template...

...xplain in some way why some users work and others not? > And why that worked yesterday? Could be. > > > Of course, using the 'rid' backend means that you do not need to add > > anything to AD and you do not need this line in smb.conf: > > > > idmap config BUERO:schema_mode = rfc2307 > > > > Or you could just change 'idmap config BUERO:backend = rid' to > > 'idmap config BUERO:backend = ad' and use the rfc2307 attributes in > > AD. > > I would prefer not to have to decide this. You understand? ;-) I think th...

...ould make a "call waiting indication". (The same behaviour is when i am dialing the phone (in idle) from extern without making an "exten => s,x,Answer".) greeting nicolas SIP/2.0 100 Trying Via: SIP/2.0/UDP 190.100.200.18:5060;branch=z9hG4bK-kcw3axoq8oei From: "Astrid Buero" <sip:200@190.100.200.1>;tag=g8uj4z79n7 To: <sip:101@190.100.200.1;user=phone;intercom=true>;tag=as30cdf7be Call-ID: 3c28f81360e9-30j4vfzyh0vq@190-100-200-18 CSeq: 2 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: <sip:101@190.100.200.1&g...

...erver/drsuapi/writespn.c:235(dcesrv_drsuapi_DsWriteAccountSpn) Jul 11 17:16:25 pre01svdeb02 samba[4657]: Failed to modify SPNs on CN=PC-2016-03,OU=secret-Computer,DC=secret,DC=at: acl: spn validation failed for spn[TERMSRV/PC-2016-03.secret.at] uac[0x1000] account[PC-2016-03$] hostname[PC-2016-03.BUERO] nbname[BUERO] ntds[(null)] forest[secret.at] domain[secret.at] Could that be related? On another PC that user works correctly. We try a rejoin now ... Everything else *seems* to look good now ...

Am 22.07.19 um 10:39 schrieb Stefan G. Weichinger via samba: > Am 20.07.19 um 11:54 schrieb Joachim Lindenberg via samba: >> I figured it out myself. The kerberos configuration on the old dc cobra was bad ? no clue why it worked at all until yesterday. >> >> After fixing it, testing with kinit, and restarting the dc processes it resumed replication. > > pls show how you

...Penny: > > >> template homedir = /home/%U > >> > >> works for me in this context, right? > > > > That should work. > > edited accordingly, and rm-ed that idmap schema line on DM. > > I now have on the DM: > > [global] > workgroup = BUERO > realm = secret.AT > netbios name = SERVER > > security = ADS > map to guest = Bad User > username map = /etc/samba/smbusers > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind refresh tickets = yes > > winbind truste...

Am 2017-07-11 um 13:37 schrieb Stefan G. Weichinger: >> Having everything in AD, gives you the possibility of using different >> Unix home dirs etc per person. > > Not needed. I am the only UNIX user there. > > I only need separate [home] dirs for a group of users: > > some customers of my customer come by to do some work with a specific > software and I want

...displayed in smbstatus >> >> So I expect some wrong/outdated mapping on the DM/fileserver? >> >> >> > On a Unix domain member, this could only be in a user.map, so check this. username map = /etc/samba/smbusers root at pre01svdeb01:/etc/samba# cat smbusers !root = BUERO\Administrator BUERO\administrator Administrator administrator I could remove that for a test ... > I would also get the user to log into another PC and connect to another > fileserver and see what happens. That will have to wait until I am there. Very busy guy without patience.