search for: cucciarr

The DC is a Windows AD DC. Could you please clarify why i should change setting in the Windows DC instead of the Samba server, which is the one that does the insecure ldap bind? Regards Andrea Cucciarre' On 11/9/2020 3:13 PM, Rowland penny via samba wrote: > On 09/11/2020 13:28, Andrea Cucciarre' wrote: >> My customer complain that in the AD DC they see the following >> insecure communication coming from the Samba server (DC member): >> >> "The following...

...r schannel = no" set > in its smb.conf? It might also be some thing like this option "client ldap sasl wrapping". So it would really help to see the entire smb.conf Regards Christian > > > Regards > > Christian > > Am 09.11.20 um 15:31 schrieb Andrea Cucciarre' via samba: >> The DC is a Windows AD DC. >> Could you please clarify why i should change setting in the Windows DC >> instead of the Samba server, which is the one that does the insecure >> ldap bind? >> >> Regards >> Andrea Cucciarre' >>...

...n-SSL/TLS-encrypted) LDAP connection." So Samba does an insecure LDAP bind and they are asking how to change Samba so that it does it in a secure way. Any tuning or suggestion to achieve it? Thanks Andrea On 11/9/2020 1:03 PM, Rowland penny via samba wrote: > On 09/11/2020 11:45, Andrea Cucciarre' via samba wrote: >> >> is there any documented procedure to configure a samba domain member >> (AD windows domain) to use LDAPS instead of LDAP > The only documentation I know of is here: > > https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_S...

...have find out that "durable handles" should be available in Samba 4.11, and actually it seems to recognize the share option: durable handles = yes Do you know if any other steps are needed to setup that feature, or could you point me any doc that help to achieve that? Regards Andrea Cucciarre' On 12/12/2019 11:04 AM, Ralph Boehme wrote: > Am 12/11/19 um 5:47 PM schrieb Andrea Cucciarre' via samba: >> I'm trying to configure a Samba server for SMB sharing with Persistent >> Handles. >> I have viewed the youtube? video >> >> https://youtu.be...

...r continuos availablity in a cluster setup (Samba + ctbd + gluster) Based on the following link my understanding is that such feature is not currently available in Samba: https://wiki.samba.org/index.php/SMB3_kernel_status#Durable_handle_cross-node Is my understanding correct? Regards Andrea Cucciarre' On 12/12/2019 12:05 PM, Ralph Boehme wrote: > Am 12/12/19 um 12:00 PM schrieb Andrea Cucciarre': >> thanks for the info. >> I have find out that "durable handles" should be available in Samba >> 4.11, and actually it seems to recognize the share option: &g...

On 20/04/2020 17:49, Andrea Cucciarre' via samba wrote: > Does the "password server" setting in the smb.conf achieve it? No, you shouldn't use this, you should allow Samba to choose the best DC to use. > > On 4/20/2020 6:40 PM, Andrea Cucciarre' wrote: >> Hello, >> >> Is there a way to...

...Handles. I have viewed the youtube? video https://youtu.be/fA78hdeYi6k However, it's not clear to me how to enable it in Samba, and if any setting is needed in smb.conf (I have already set up Samba, gluster and ctdb) I'm running Samba 4.11.. Could you please advice? -- Regards Andrea Cucciarre'

I will provide the whole smb.conf, but I can anticipate that I don't have any setting for server schannel, while client ldap sasl wrapping = plain Regards Andrea Cucciarre' On 11/9/2020 3:48 PM, cn--- via samba wrote: > Am 09.11.20 um 15:42 schrieb cn--- via samba: >> What version of Samba is this and do you have "server schannel = no" >> set in its smb.conf? > It might also be some thing like this option "client ldap sasl &...

...share) and the transfer speed is stable, about 404KB/sec which is three time quicker then the overage speed in the Samba share. So is there any tuning that I can add to the smb.conf to speed up the performance when copying a directory that contains many small files (8-18KB)? -- Regards Andrea Cucciarre'

Hello, Is there a way to provide a list of DC that Samba should try to join? I know that in command "net ads join" I can use "-S" to select with DC to use, but it seems it doesn't accept list, only one single server. Regards Andrea

...020 03:59:19 EDT KDC server: 10.5.2.11 Server time offset: 0 Last machine account password change: Tue, 03 Mar 2020 11:48:12 EST # /opt/samba/bin/wbinfo --ping-dc checking the NETLOGON for domain[FLEET] dc connection to "vspwad01p.FLEET.AD" succeeded Regards Andrea Regards Andrea Cucciarre' On 4/20/2020 7:01 PM, Rowland penny via samba wrote: > On 20/04/2020 17:49, Andrea Cucciarre' via samba wrote: >> Does the "password server" setting in the smb.conf achieve it? > No, you shouldn't use this, you should allow Samba to choose the best > DC to...

What version of Samba is this and do you have "server schannel = no" set in its smb.conf? Regards Christian Am 09.11.20 um 15:31 schrieb Andrea Cucciarre' via samba: > The DC is a Windows AD DC. > Could you please clarify why i should change setting in the Windows DC > instead of the Samba server, which is the one that does the insecure > ldap bind? > > Regards > Andrea Cucciarre' > > > On 11/9/2020 3:13 P...

On Mon, 4 Mar 2019 10:25:59 -0800 Jeremy Allison via samba <samba at lists.samba.org> wrote: > On Mon, Mar 04, 2019 at 04:48:56PM +0100, Andrea Cucciarre' via samba > wrote: > > Hello, > > > > Does Samba support XAT_OFFLINE and XAT_ONLINE extended attribute? > > I have enabled "ea support = yes" but it seems to have no effect on > > that. > > Googling for XAT_OFFLINE or XAT_ONLINE doesn't r...

...06 PM, Jeremy Allison via samba ha scritto: > On Mon, Mar 04, 2019 at 06:39:21PM +0000, Rowland Penny wrote: >> On Mon, 4 Mar 2019 10:25:59 -0800 >> Jeremy Allison via samba <samba at lists.samba.org> wrote: >> >>> On Mon, Mar 04, 2019 at 04:48:56PM +0100, Andrea Cucciarre' via samba >>> wrote: >>>> Hello, >>>> >>>> Does Samba support XAT_OFFLINE and XAT_ONLINE extended attribute? >>>> I have enabled "ea support = yes" but it seems to have no effect on >>>> that. >>> Googling...

...yes winbind expand groups = 4 winbind normalize names = Yes winbind nss info = rfc2307 winbind refresh tickets = Yes winbind use default domain = no workgroup = BITINTRA Thanks Andrea Il 3/12/2019 11:48 AM, Rowland Penny via samba ha scritto: > On Tue, 12 Mar 2019 11:32:46 +0100 > Andrea Cucciarre' via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> I have Samba 4.6 as AD domain member and sometime the users fails to >> login, the issue disappear after some minutes. >> I have enabled log leve 10 and I can see the following errors: >&gt...

Hello, Does Samba support XAT_OFFLINE and XAT_ONLINE extended attribute? I have enabled "ea support = yes" but it seems to have no effect on that. Thanks Andrea

Thanks for the suggestion Jeremy, we are going to build our own module Andrea Il 3/5/2019 8:28 PM, Jeremy Allison ha scritto: > On Tue, Mar 05, 2019 at 01:14:00PM +0100, Andrea Cucciarre' wrote: >> My goal is to use the Offline file attribute of Windows when sharing with >> Samba: >> >> https://docs.microsoft.com/en-us/dotnet/api/system.io.fileattributes?redirectedfrom=MSDN&view=netframework-4.7.2 >> >> It works when I share ZFS filesyst...

Hello, is there any documented procedure to configure a samba domain member (AD windows domain) to use LDAPS instead of LDAP Thanks Andrea

...2e360, ff22f8f4, ff3b837c, ff222da4, 4e768, 1) libnsl.so.1`svc_run+0x84(1, ff227070, 2e008, ff222da4, 4ea00, 0) main+0x2cc(1, 0, 30318, 2ed3c, 1, 2ec00) _start+0x108(0, 0, 0, 0, 0, 0) May be that I miss some concept that explain this behaviour. Could you advice? -- /\ Andrea Cucciarre'' \\ \ Systems Engineer \ \\ / / \/ / / Sun Microsystems Italia SpA / / \//\ Viale Fulvio Testi, 327 \//\ / / 20162 Milano / / /\ / / \\ \ phone: 800 605228 \ \\ e-mail: andrea.cucciarre at Sun.COM...

Sorry my bad, thanks for spotting it. Should that explains also the failure to grab the mutex? Andrea Il 3/12/2019 12:14 PM, Rowland Penny via samba ha scritto: > On Tue, 12 Mar 2019 12:01:08 +0100 > Andrea Cucciarre' <acucciarre at cloudian.com> wrote: > >> The OS is OmniOS, the DC is Windows Server (not sure about the >> release), and below the smb.conf. >> I have also noted that they have more trusted domains, but since they >> configured ad idmap only for one domain, th...