search for: cloudian

...e added automatically, > you must add them manually. > And on the subject of the '1000-9999' range, do you not have any Unix > users other than the system users ? > > Rowland > > -- Gestione problematica Andrea Cucciarrè Technical Support Engineer | EMEA acucciarre at cloudian.com

Sorry my bad, thanks for spotting it. Should that explains also the failure to grab the mutex? Andrea Il 3/12/2019 12:14 PM, Rowland Penny via samba ha scritto: > On Tue, 12 Mar 2019 12:01:08 +0100 > Andrea Cucciarre' <acucciarre at cloudian.com> wrote: > >> The OS is OmniOS, the DC is Windows Server (not sure about the >> release), and below the smb.conf. >> I have also noted that they have more trusted domains, but since they >> configured ad idmap only for one domain, then all the other domains >>...

...t even clear to me why sids_to_unixids sometimes returns NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND. Any explanation would be appreciated. Thanks Andrea Il 3/12/2019 12:57 PM, Rowland Penny via samba ha scritto: > On Tue, 12 Mar 2019 12:47:48 +0100 > Andrea Cucciarre' <acucciarre at cloudian.com> wrote: > >> Sorry my bad, thanks for spotting it. >> Should that explains also the failure to grab the mutex? >> > Possibly, but you need to fix the smb.conf and then test again. > > Rowland >

The OS is OmniOS, the DC is Windows Server (not sure about the release), and below the smb.conf. I have also noted that they have more trusted domains, but since they configured ad idmap only for one domain, then all the other domains use tdb idmap [global] client ldap sasl wrapping = plain dedicated keytab file = /etc/krb5.keytab disable spoolss = yes host msdfs = no idmap config * : backend

...store dos attributes = Yes load printers = no ===================== If I remove in the smb.conf the entries "idmap config HYPERFILE ...", it works. Any help would be appreciated. Regards Andrea -- Gestione problematica Andrea Cucciarrè Technical Support Engineer | EMEA acucciarre at cloudian.com

I'm not sure I have understood, I'm mounting the share as "urca" user, which is not a known user. Although I'm setting smb.conf so that for guest user it uses the privileges of the known user "andrea" Could you please advice on what I should set for "guest account" in smb.conf? Thanks Andrea Il 1/23/2019 5:15 PM, Rowland Penny via samba ha scritto:

My customer complain that in the AD DC they see the following insecure communication coming from the Samba server (DC member): "The following client performed a SASL (Negotiate/Kerberos/NTLM/Digest) LDAP bind without requesting signing (integrity verification), or performed a simple bind over a cleartext (non-SSL/TLS-encrypted) LDAP connection." So Samba does an insecure LDAP bind and

Hello, Does Samba support XAT_OFFLINE and XAT_ONLINE extended attribute? I have enabled "ea support = yes" but it seems to have no effect on that. Thanks Andrea

Thanks for the suggestion Jeremy, we are going to build our own module Andrea Il 3/5/2019 8:28 PM, Jeremy Allison ha scritto: > On Tue, Mar 05, 2019 at 01:14:00PM +0100, Andrea Cucciarre' wrote: >> My goal is to use the Offline file attribute of Windows when sharing with >> Samba: >> >>

Hello, I'm trying to configure a Samba server for SMB sharing with Persistent Handles. I have viewed the youtube? video https://youtu.be/fA78hdeYi6k However, it's not clear to me how to enable it in Samba, and if any setting is needed in smb.conf (I have already set up Samba, gluster and ctdb) I'm running Samba 4.11.. Could you please advice? -- Regards Andrea Cucciarre'

Hello Ralph, thanks for the info. I have find out that "durable handles" should be available in Samba 4.11, and actually it seems to recognize the share option: durable handles = yes Do you know if any other steps are needed to setup that feature, or could you point me any doc that help to achieve that? Regards Andrea Cucciarre' On 12/12/2019 11:04 AM, Ralph Boehme wrote:

Yes, I saw that they are different I was just willing to test something similar. Actually, I'm searching for a Samba feature that allow transparent failover, or continuos availablity in a cluster setup (Samba + ctbd + gluster) Based on the following link my understanding is that such feature is not currently available in Samba:

Hello, Is there a way to provide a list of DC that Samba should try to join? I know that in command "net ads join" I can use "-S" to select with DC to use, but it seems it doesn't accept list, only one single server. Regards Andrea

Does the "password server" setting in the smb.conf achieve it? Regards Andrea On 4/20/2020 6:40 PM, Andrea Cucciarre' wrote: > Hello, > > Is there a way to provide a list of DC that Samba should try to join? > I know that in command "net ads join" I can use "-S" to select with DC > to use, but it seems it doesn't accept list, only one single

Hello Rowland, One of my customer is reporting that sometime intermittently they can't access the share. When the issue appear the "wbinfo ping-dc"? and "net ads info" show the following: # /opt/samba/bin/wbinfo --ping-dc checking the NETLOGON for domain[FLEET] dc connection to "" failed failed to call wbcPingDc: WBC_ERR_DOMAIN_NOT_FOUND # /opt/samba/bin/net

Hello, is there any documented procedure to configure a samba domain member (AD windows domain) to use LDAPS instead of LDAP Thanks Andrea

I will provide the whole smb.conf, but I can anticipate that I don't have any setting for server schannel, while client ldap sasl wrapping = plain Regards Andrea Cucciarre' On 11/9/2020 3:48 PM, cn--- via samba wrote: > Am 09.11.20 um 15:42 schrieb cn--- via samba: >> What version of Samba is this and do you have "server schannel = no" >> set in its

Hello, I have a customer that complains that Samba (as DC member) uses UDP during? AD authentication when clients mount a share. I have run a test and traced network packet and it seems UDP is used by the CLDAP (Samba server is 10.50.50.35, AD is 10.50.50.85) Frame 1: 133 bytes on wire (1064 bits), 133 bytes captured (1064 bits) on interface vmxnet3s0, id 0 Ethernet II, Src:

Hello, I have just realized that winbind rid idmapping create the following idmapping for user, below an example: # id HYPERFILE\\simone *uid=11663*(HYPERFILE\simone) gid=10513(HYPERFILE\domain users) groups=10513(HYPERFILE\domain users),*11663*(HYPERFILE\simone),3011(BUILTIN\users) I'm confused about group mapping 11663(HYPERFILE\simone), winbind created a mapping for a group that has

Hello, I had a problem with Samba winbind id-mapping  on a system that is part of an AD domain. In the smb.conf I have the following setting: idmap config <domain> : backend = rid idmap config <domain> : range = 1000000-3000000 idmap config <domain> : schema_mode = rfc2307 winbindd was failing to convert some user SID to UID and in the idmap logs I have the following error: