search for: fahimi

When I enable server signing in Samba (server signing = mandatory), I can still join a Window 7 machine to the domain but I am no longer able to log on into the domain using a domain user. Is this normal? I am using Samba 3.6.3 on Linux 12.04. Is there anything that needs to be configured on the Windows machine? Thanks, Ali

...the netlogon process to break since it does not support signing. The e-mail chain you reference does not make it clear if the samba instance is a domain controller or a standalone server. You may want to increase logging level and look through the samba logs. On 01/08/15 07:39, ali-reza.fahimi at schneider-electric.com wrote: > > In this mailing chain, Volker states that in order to enable server > signing, I simply need to set server signing = mandatory. > I do not understand why I cannot use it? > > https://lists.samba.org/archive/samba/2010-November/159265.html >...

I have not tried with a Samba 4.x DC. As far as I know Samba 4.x does not have this limitation. On 01/06/15 04:10, ali-reza.fahimi at schneider-electric.com wrote: > > Does this mean that we cannot use mandatory server signing in Samba 3? > What about the later versions? The problem is that lack of server > signing is considered a security hole. > > > Inactive hide details for Gaiseric Vandal ---01/05/2...

Hello, The only way I have come up so far to rename the domain is by re-provisioning Samba using the samba-tool utility. This, however, requires to remove the sam configuration file and the entire database file. This is definitely not very convenient as all the objects including the users, groups, and GPOs and their links will be destroyed. My question: Is there a better way to rename the