search for: chrisstankevitz

I just created a windows domain. it is essentially empty except for a couple of users and an group policy related to windows update. I then configured samba to connect using ads. net ads join took > 5 minutes - but worked fine net ads testjoin takes ~5 minutes - shows a good join wbinfo -u takes ~5 minutes and shows the users During the long wbinfo pause, the log show: "Starting

On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > time net ads testjoin > Join is OK > > real 0m0.476s > user 0m0.108s > sys 0m0.008s Yes, I know... I have a similar setup (same version of samba, same hardware, same OS but a different windows domain on a different network) that is working fine. > Is the Windows AD

Hello, Can you recommend a first step in diagnosing these symptoms: The following operations are always fast: - browsing shared with osx/linux client - moving directories with osx/linux client The following operations are sometimes absurdly painfully slow: - browsing shared with windows 7 client - moving directories with windows 7 client Wireshark shows: - When using windows: Lots of ~10

On Tue, 31 Jan 2017 12:06:14 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 9:22 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > I would also expect to see at least something like this: > > > > idmap config SAMDOM : backend = rid > > idmap config SAMDOM : rang...

On Tue, 31 Jan 2017 14:24:09 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > time net ads testjoin > > Join is OK > > > > real 0m0.476s > > user 0m0.108s > > sys 0m0.008s > > Yes, I know...

On Thu, 2 Feb 2017 09:36:28 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 2:45 PM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > >> /etc/resolv.conf: > >> root at nickel:~ # cat /etc/resolv.conf > >> nameserver 192.168.11.5 > >> nameserver 192.168.1.4 > &...

On Wed, 1 Feb 2017 09:47:38 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > We are missing the content of /etc/nsswitch.conf > Can you post that also. > > But you probely see: > hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 > > i suggest > hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4 > > since your using

Hello, I am using AD authentication. When I setup samba on my new server, users could not access shares. However, the following command "fixed" the problem: net join -U XXXXX\\cstankevitz The command returned what appears to be an error: kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client not found in Kerberos database Failed to join domain: failed to connect to

...es at lists.samba.org] Namens Rowland Penny via > samba > Verzonden: dinsdag 31 januari 2017 23:45 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] net ads and wbinfo are painfully slow -- but they > work > > On Tue, 31 Jan 2017 14:24:09 -0800 > Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > > > On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > time net ads testjoin > > > Join is OK > > > > > > real 0m0.476s > > > user 0m0.108s > >...

On Tue, Jan 31, 2017 at 2:45 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: >> /etc/resolv.conf: >> root at nickel:~ # cat /etc/resolv.conf >> nameserver 192.168.11.5 >> nameserver 192.168.1.4 >> domain mydomain.local >> > > I take it at least one of the above nameservers is the AD DC, is the > other another AD DC ? If it isn't,

On Wed, 1 Feb 2017 07:30:19 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Wed, Feb 1, 2017 at 1:12 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > He is also unlikely to be running avahi, he is using Freebsd 10.3 > > truss (like strace) showed that wbinfo, net, and sshd were all hanging > after...

Hello, Last December I wrote to the list asking about obnoxiously long freezes when using Windows 7's "explorer" to browse a samba repository. While Windows was frozen, samba's log was filling with smbd_dirptr_get_entry messages -- one for each file in a particular directory. Since I had some directories with 10,000 files, this was a slow process. Amusingly, I was not

Hi, I use ads and have a windows domain with several domain controllers (dc1, dc2, dc3, etc). Winbind seems to "be connected" to one of these domain controllers: wbinfo -P checking the NETLOGON for domain[MYDOMAIN] dc connection to "dc1.mydomain.local" succeeded Presumably winbind learned that "dc1" was a domain controller by performing a DNS lookup of type SRV on

On Wed, Feb 1, 2017 at 8:19 AM, Rowland Penny via samba <samba at lists.samba.org> wrote: > There is definitely something strange going on here, if I flush > the winbind cache, then ask for a users info with getent, I get this: I suspect now that the problem is not getent/nsswitch/pam and that it is either winbindd/krb5/AD. I launched winbindd in debug99/foreground/no_cache mode. I

Hello, On machine 1, running Fedora 20, I can get "wbinfo -u" to provide a list of windows domain "MYCOMPANY.CORP" users by first launching winbindd and passing this three line conf file: [global] workgroup = MYCOMPANY security = ads Note that I am somewhat curious as to how wbinfo is able to obtain this user list even though nowhere do I supply a username or

On Thu, Mar 12, 2015 at 2:25 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: >> I'm sorry for being so daft, but I am asking you if I need/want to >> join the domain. I do not know the answer. Reminder of my scenario: >> samba is sharing files and users provide their Active Directory >> usernames and passwords to log into to samba. I will call this

Hello, I would like to get this question answered in support of a decision about whether or not to move some large shares from Windows Server to Samba. Windows Explorer has a feature called "Show pop-up description for folder and desktop items", which I will call SPD. SPD, which is enabled by default, shows a folder's contents and size when you hover your mouse cursor over it. It

Hello, Please consider a scenario in which samba is sharing files and users provide their Active Directory usernames and passwords to log into to samba. 1. Must "net join" be used? 2. Under what circumstances will samba (and family) require an explicit "net join"? 3. What technically is happening when samba/computer "joins" the domain? 3a. Is a file added to the

Rowland, Thank you. I read the Oreilly book chapter 10, but I am still unclear on the requirements. If you have an idea for another book/man to read, please let me know and I will read. On Mon, Apr 25, 2016 at 11:48 PM, Rowland penny <rpenny at samba.org> wrote: > You may however run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"