search for: debnet

...you do use dhcp, you must ensure that the dhcp server sends the > correct info. Okay, well they do resolve via dynamic DNS to a hostname. That was working prior to the move to ActiveDirectory. > To show this, from this netbook that uses dhcp and is joined to a domain: > > rowland at debnet:~$ getent hosts debnet > 192.168.0.128 debnet.samdom.example.com Now this might be a fly in the ointment. For us, the DHCP domain is dhcp.office.example.com, whereas the active directory domain is activedirectory.office.example.com. DHCP/DNS there is traditional ISC DHCPd/ISC BIND. I suppo...

Hi all, We're in the process of rolling out Samba4 on our network, with Active Directory and I've been re-configuring the Linux workstations that currently were joined to the old NT4-style domain. It hit me in particular when I read this bit: > Local hostname resolution > > During the Domain join, Samba tries to register/update the hosts name and IP in your AD DNS. This

>> what is in '/usr/bin/dhcpd-update-samba-dns.sh' ? # will receive addresses from this DHCP server. Instructions are found here: # https://wiki.archlinux.org/index.php/Samba_4_Active_Directory_Domain_Controller#DHCP sleep 5 checkvalues() { [ -z "${2}" ] && echo "Error: argument '${1}' requires a parameter." && exit 1 case ${2} in -*) echo

...their dns info, you need the line in /etc/hosts if they use a fixed ip, but if they get their dns info from dhcp, you don't. If you do use dhcp, you must ensure that the dhcp server sends the correct info. To show this, from this netbook that uses dhcp and is joined to a domain: rowland at debnet:~$ getent hosts debnet 192.168.0.128 debnet.samdom.example.com and /etc/hosts only contains this: rowland at debnet:~$ cat /etc/hosts 127.0.0.1 localhost # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2 ip6-...

...users from /etc/passwd then there is something > else I need to do to get linux logins to work again? > > Cheers > > Chris > Hi, if you run Samba as an AD DC, this is where your users will exist, for instance, this is my linux laptop that is joined to an AD domain: rowland at debnet:~$ getent passwd rowland rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash As you can see, I am know to linux, *but* rowland at debnet:~$ cat /etc/passwd | grep rowland rowland at debnet:~$ Returns nothing, I do not exist in /etc/passwd I would suggest that you start here: https://wi...

...t: >> SMB1 root @: / home / adminlocal # wbinfo -P >> checking the NETLOGON for domain [SAMDOM] dc connection to "" failed >> wbcPingDc2 (SAMDOM): error code Was NT_STATUS_USER_SESSION_DELETED >> (0xc0000203) >> > > This works for me: > > root at debnet:/home/rowland/ # wbinfo -P > checking the NETLOGON dc connection to "dc1.samdom.example.com" succeeded > > Rowland > > > > -- k Alexis RIES Service informatique Tel : 04.22.32.97.26 Fax : 04.84.25.27.40 Email : alexis.ries at kinaxia.fr http://www.kinaxia.fr --...

On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: > On 27/01/16 01:03, Henry McLaughlin wrote: > >> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >> >> On 26/01/16 20:54, Henry McLaughlin wrote: >>> >>> [root at centos7member ~]# net rpc rights list accounts >>>>

...& > GIDs in ADUC as these were auto calculated based upon the sid. Accordingly > I have assigned NO unix attributes in ADUC. Quite correct, but you still shouldn't be getting a response from 'getent' for administrator, if run getent on a domain member I get this: rowland at debnet:~$ getent passwd administrator rowland at debnet:~$ Whilst on a DC, I get this: root at dc1:~# getent passwd administrator SAMDOM\administrator:*:0:10000::/home/administrator:/bin/bash root at dc1:~# As you can see, Administrator has a UID of '0' and this is also the UID of root. This...

On 16/02/16 08:38, Rowland penny wrote: > You are not going to like this, but I am going to say it anyway: > > *Remove* any users that are in AD from /etc/passwd (the same goes for > groups) > > All your users & groups should now only exist in AD, you do not need > or can have, users & groups in AD *and* /etc/passwd & /etc/group. > > Your users will only have

...re auto calculated based upon the sid. Accordingly >> I have assigned NO unix attributes in ADUC. >> > > Quite correct, but you still shouldn't be getting a response from 'getent' > for administrator, if run getent on a domain member I get this: > > rowland at debnet:~$ getent passwd administrator > rowland at debnet:~$ > > Whilst on a DC, I get this: > > root at dc1:~# getent passwd administrator > SAMDOM\administrator:*:0:10000::/home/administrator:/bin/bash > root at dc1:~# > > As you can see, Administrator has a UID of '0'...

...onnection to "" failed >>>>>> wbcPingDc2 (SAMDOM): error code Was >>>>>> NT_STATUS_USER_SESSION_DELETED (0xc0000203) >>>>>> >>>>> >>>>> This works for me: >>>>> >>>>> root at debnet:/home/rowland/ # wbinfo -P >>>>> checking the NETLOGON dc connection to "dc1.samdom.example.com" >>>>> succeeded >>>>> >>>>> Rowland >>>>> >>>>> >>>>> >>>>> >>&gt...

I put the usermapping but this does not solve the problem. I do not use libpam_winbind and libpam-krb5 because I did not need to log in server using domain accounts, it seems to me that this is not mandatory, you confirm ? Here are the permissions of the file /etc/krb5.keytab: root at smb1:/home/adminlocal# ls -l /etc/krb5.keytab -rw------- 1 root root 2312 Jun 7 14:44 /etc/krb5.keytab Avahi

...rver deliver the required info? > > Does 'hostname -d' return the fully qualified domain name of the client? > > Is there a firewall running on the client? if so, try turning it off. > > If you follow the Samba wiki, I can assure you that it does work: > > rowland at debnet:~/Downloads$ sudo net rpc info -Uadministrator > [sudo] password for rowland: > Enter administrator's password: > Domain Name: SAMDOM > Domain SID: S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx > Sequence number: 1 > Num users: XXXXX > Num domain groups: XXXX > Num local gro...

...DAP. This is strange, just logging in shouldn't create a user in AD and when you see MYDOMAIN\chris this is just winbind i.e. This is on a DC: root at dc1:~# getent passwd rowland SAMDOM\rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash and this is on a domain member: rowland at debnet:~$ getent passwd rowland rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash > Another issue is that having now successfully logged in using the > credentials for chris I seem to be viewed as being MYDOMAIN\chris. > This is a problem at the very least because MYDOMAIN\chris is...

.../ adminlocal # wbinfo -P >>> checking the NETLOGON for domain [SAMDOM] dc connection to "" failed >>> wbcPingDc2 (SAMDOM): error code Was NT_STATUS_USER_SESSION_DELETED >>> (0xc0000203) >>> >> >> This works for me: >> >> root at debnet:/home/rowland/ # wbinfo -P >> checking the NETLOGON dc connection to "dc1.samdom.example.com" >> succeeded >> >> Rowland >> >> >> >> > > >

.../ adminlocal # wbinfo -P >>> checking the NETLOGON for domain [SAMDOM] dc connection to "" failed >>> wbcPingDc2 (SAMDOM): error code Was NT_STATUS_USER_SESSION_DELETED >>> (0xc0000203) >>> >> >> This works for me: >> >> root at debnet:/home/rowland/ # wbinfo -P >> checking the NETLOGON dc connection to "dc1.samdom.example.com" >> succeeded >> >> Rowland >> >> >> >> > > > How did you obtain the three files you attached ? what command(s) did you run ? Are you us...

Okay, but my great doubt, the problems that have different Ids? thank you Em 01-02-2016 16:35, Rowland penny escreveu: > On 01/02/16 17:41, Carlos A. P. Cunha wrote: >> Hello! >> And my DCs now the station Ids equal, in my Fileserver this way: >> >> DC01: >> wbinfo -i userteste01 >> SERVERAD \ userteste01: *: 3000367: 100: userteste01: / home / >>

...;>> checking the NETLOGON for domain [SAMDOM] dc connection to "" failed >>>> wbcPingDc2 (SAMDOM): error code Was NT_STATUS_USER_SESSION_DELETED >>>> (0xc0000203) >>>> >>> >>> This works for me: >>> >>> root at debnet:/home/rowland/ # wbinfo -P >>> checking the NETLOGON dc connection to "dc1.samdom.example.com" >>> succeeded >>> >>> Rowland >>> >>> >>> >>> >> >> >> > > How did you obtain the three files you...

...l return a reply. Does your dhcp server deliver the required info? Does 'hostname -d' return the fully qualified domain name of the client? Is there a firewall running on the client? if so, try turning it off. If you follow the Samba wiki, I can assure you that it does work: rowland at debnet:~/Downloads$ sudo net rpc info -Uadministrator [sudo] password for rowland: Enter administrator's password: Domain Name: SAMDOM Domain SID: S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx Sequence number: 1 Num users: XXXXX Num domain groups: XXXX Num local groups: XXXX If you are having any problem...

...;>> checking the NETLOGON for domain [SAMDOM] dc connection to "" failed >>>> wbcPingDc2 (SAMDOM): error code Was NT_STATUS_USER_SESSION_DELETED >>>> (0xc0000203) >>>> >>> >>> This works for me: >>> >>> root at debnet:/home/rowland/ # wbinfo -P >>> checking the NETLOGON dc connection to "dc1.samdom.example.com" >>> succeeded >>> >>> Rowland >>> >>> >>> >>> >> >> >> > Alexis can you run 'net ads testjoin -...