search for: domainusers

Hi there, I'm trying to get FreeRADIUS to authenticate against my Samba DC. It's Samba 4.7.6-ubuntu running on Ubuntu 18 (kernel version 4.15.0-66-generic). It came nicely packaged with Zentyal, which provides a nice GUI for managing a domain, as well as a CA and lots of cool small features. That same Zentyal also includes support for FreeRADIUS (3.0.16). This is my smb.conf:

Hi, I am running a Samba 2.2.7a on Redhat 7.3 in a NT domain. For authentication I am using the domainusers.This is done by Winbind 2.2.7a which verifies the existens of the users on the PDC. So I dont't have to create local users (/etc/passwd) for users who want to connect to the shares in the smb.conf. I authorise them by adding valid users = domain+domainuser to the smb.conf. This works very well....

Hai, Have you seen : https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory Test with : ntlm_auth --allow-mschapv2 --request-nt-key --domain=COMPANY --username=domainuser --password=userpassword Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oleg > Blyahher via samba > Verzonden:

Greetings, Rowland Penny! >>>> Is there at last a solution? I've only found questions, in the list, and on >>>> the network. >>>> >>>> The issue is that DC built on Samba4 does not report to network browsers >>>> neither it is participating in election to become browser itself. >>>> Consequently, it is not visible in the

...hing changes and the gid and uid are still different from the standalone server 4) to be honest all I need is that all the domain guid/uid on the new file server match exactly the domain guid/uid that are present in the old file server, whatever mechanism I have to use. For example , the AD group domainusers is defined as following into the Domain controller Samba4 AD DC: dn: CN=DomainUsers,CN=Users,DC=ccdc,DC=lan cn: DomainUsers description: Domain Users instanceType: 4 whenCreated: 20150713152248.0Z uSNCreated: 3780 name: DomainUsers objectGUID:: wzVim3m0yUiKEj7cF10BYA== objectSid:: AQUAAAAAAAUVAAA...

Hi, I am trying to mount fileserver (samba, 10.20.30.16) shares on a linux domain member server, where I logged on via ssh using AD my credentials. I am unable to get past the "mount error(126): Required key not available" error message. I have read and googled a lot, and could use some help. See this: > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & >

...ver.testdomain.org ### WINBIND CONFIG ### client schannel = no template shell = /bin/bash template homedir = /domainusers/%U winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes winbind cache time = 5 winbind use default domain = yes ### END WINBIND CONFIG ###...

Hi! I like to allow to several DomainUs admins to admin his virtual servers with a web interface, without contact with Domain0. This tool must be opensource, and allow shutdown, reboot and see the logs with a web user / pw. Perhaps too the memory, CPU, ,,, of the virtual server. Are there any tool some this? Any pointer will be welcomed. Regards, Agustin

It seems I have the same problem that was discussed briefly earlier on this list in a mail from Kris Kaido. I didn't see any solution, so I'm wondering if it's considered a bug that needs to be fixed or simply a configuration error. To be more specifc; I have joined a Win2008R2 Forest/Domain AD with my server running RHEL5.4 - samba-3.0.33-3.14.el5 without problems. I can view

On 03/04/15 13:05, Andrey Repin wrote: > Greetings, Ashish Yadav! > >>>> I'm trying to get the former PDC back into domain after performing a >>> classic >>>> migration. >>>> AD DC is running fine... if you can call it that. >>>> I've edited the smb.conf and nsswitch.conf as suggested in Wiki article, >>> and

On 03/04/15 21:29, Andrey Repin wrote: > Greetings, Rowland Penny! > >>>>>>>> I'm trying to get the former PDC back into domain after performing a >>>>>>> classic >>>>>>>> migration. >>>>>>>> AD DC is running fine... if you can call it that. >>>>>>>> I've edited the

On 03/04/15 19:33, Andrey Repin wrote: > Greetings, Rowland Penny! > >>>>>> I'm trying to get the former PDC back into domain after performing a >>>>> classic >>>>>> migration. >>>>>> AD DC is running fine... if you can call it that. >>>>>> I've edited the smb.conf and nsswitch.conf as suggested in

On 04/04/15 03:29, Andrey Repin wrote: > Greetings, Rowland Penny! > >>>>>>>>>> I'm trying to get the former PDC back into domain after performing a >>>>>>>>> classic >>>>>>>>>> migration. >>>>>>>>>> AD DC is running fine... if you can call it that.

...root account for anything. I've tried changing "root = Administrator" in /etc/samba/smbusers to "otheruser = Administrator" but that doesn't seem to do it. Question 2) Per the document about I have made the following permission changes to /home/samba: rwxrwxr-x 2 root domainusers 4096 2008-09-25 12:43 netlogon drwxrwxr-x 3 root domainusers 4096 2008-09-26 01:40 profiles I bet this would work if I added a user as a domainuser but domainadmins cannot store roaming profiles. How can I see it up so that I can have multiple domainadmins and domainusers (and not use root at all)...

Hai Mourik-Jan, Beste wensen he ;-) Lets start here.. A and PTR record exists for both servers? Does CIFS/spn and root/spn exist in the AD? In krb5.conf, set these : ; not used for nfs4 but cifs might need it. ; for Windows 2003 ; default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; permitted_enctypes = rc4-hmac

Greetings, Rowland Penny! >>>>> I'm trying to get the former PDC back into domain after performing a >>>> classic >>>>> migration. >>>>> AD DC is running fine... if you can call it that. >>>>> I've edited the smb.conf and nsswitch.conf as suggested in Wiki article, >>>> and >>>>> rejoined

I am having problems with samba 4 as Member Server. I have followed step-by-step tutorial "Setup a Samba AD Member Server" in samba wiki. In my smb.conf I have configured the entry "idmap config MYDOMAIN:range = 290000000-300000000", because this is my range for DomainUsers. The commands "kinit DomainUser" and "klist" are ok, this way I think that kerberos is ok. The commands "wbinfo -u" e "wbinfo -g" are ok, but the command "id DomainUser" don't show the domains users. In my /etc/nsswitch.conf, i added only &qu...

On 22/11/15 09:14, Andrey Repin wrote: > Greetings, Rowland Penny! > >>>>> Is there at last a solution? I've only found questions, in the list, and on >>>>> the network. >>>>> >>>>> The issue is that DC built on Samba4 does not report to network browsers >>>>> neither it is participating in election to become

Greetings, Rowland Penny! >>>>>>>>> I'm trying to get the former PDC back into domain after performing a >>>>>>>> classic >>>>>>>>> migration. >>>>>>>>> AD DC is running fine... if you can call it that. >>>>>>>>> I've edited the smb.conf and nsswitch.conf as

...using RH9.0 on Intel with samba-3.0.0-2_rh9 and OpenLDAP 2.0.27. When I do a "id -a username" the user is in all the necessary groups but when accessing shares the users' primary GID is used only. For example, uid=1001(jgray) gid=512(domainadmin) groups=512(domainadmin),0(root),513(domainusers),1536(SpiderAdmin) can only access shares that are defined this way: drwxrwx--- 2 jgray domainusers 48 Feb 5 18:12 test But not this way drwxrwx--- 2 root domainusers 48 Feb 5 18:12 test The user jgray should have access to the share as either root or domainuser but...