search for: fondation

...ber of the organizing comity of the French Statistics Association (SFdS)'s conference. We are looking for sponsors. Some software (SAS, RITME, ...) are represented. Do you know if there is any possibility to be sponsored by R (or by an association close to R)? Do you think I can ask to the R fondation? Sincerely Christophe -- Christophe Genolini Maître de conférences en bio-statistique Vice président Communication interne et animation du campus Université Paris Ouest Nanterre La Défense [[alternative HTML version deleted]]

...e rights. We use it to deploy printers to user accounts. Some post talk about updating the ADMX files on the AD, but I would like to have your advices first. Thanks in advance (and sorry for my english faults). Cheers -- ----------------------- *** Olivier BILHAUT *** Service Informatique *** Fondation de la Mis?ricorde *** Email : o.bilhaut at fondation-misericorde.fr *** Tel : 02.31.38.50.50 *** Fax : 02.31.38.50.00

...them again, we successfully did with no errors : * ./samba-tool dbcheck --cross-ncs --fix * ./samba-tool ntacl sysvolreset We don't really understand how to check and correct sysvol issues. Any advice is welcome. Cheers. -- ----------------------- *** OB *** Service Informatique *** Fondation de la Mis?ricorde

On 16-05-2024 18:46, Rowland Penny via samba wrote: > On Thu, 16 May 2024 17:40:45 +0200 > Olivier BILHAUT <obilhaut at fondation-misericorde.fr> wrote: > >> Thanks Rowland for once again, an analysis that looks good. >> >> To you, >> is there a workaround at this stage ? > Not from myself,it has been years since I looked into this and only > really got has far as mapping the sysvol directo...

...I could imagine is our fairly ancient cups on the system (1.2.7) and that maybe 3.6.1 doesn't support some legacy CUPS API stuff that 3.5.5 still did. That's the only straw I'm holding onto. Can anyone help out here? Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R?seau T?l?informatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signatu...

Has anyone managed to create an encrypted disk partition with CentOS 8 kickstart? 1 reqpart --add-boot 2 part /boot --fstype ext3 --size=1024 --ondrive=sda 3 part pv.1 --size=1 --grow --ondrive=sda --encrypted --pashphrase="bla" 4 volgroup vol0 pv.100000 5 logvol / --vgname=vg_00 --name=lv_root --size=102400 --fstype=ext4 ... No matter what I specify in line 3, the installer bombs out.

...and the ID numbers will be allocated for you. > > Rowland > > Content-Transfer-Encoding: 7bit > From: Andrew Bartlett <abartlet at samba.org> > Precedence: list > MIME-Version: 1.0 > Cc: samba <samba at lists.samba.org> > To: Olivier BILHAUT <obilhaut at fondation-misericorde.fr> > References: <54f3ed5e7fe98f6c98775fdc7578e2f1 at fondation-misericorde.fr> > In-Reply-To: <54f3ed5e7fe98f6c98775fdc7578e2f1 at fondation-misericorde.fr> > Date: Sun, 08 Feb 2015 20:53:02 +1300 > Message-ID: <1423381982.13498.6.camel at jesse> >...

Hi All ! Using Samba Version 4.1.12, updated from source from 4.0beta1 I've created a user, let say kerbuser, for a web server to authenticate with kerberos and provide SSO to the end-users. In my example, my domain is MYDOMAIN.LOCAL, the apache server is webserver.mydomain.local and the AD user is kerbuser I've added a principal on the user and exported everything in a keytab so

Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain and joined the XP machine to it. When I run the gpmc on the XP Pro machine and select: Forest: <domain name> -> Domains -> <domain name> -> Group Policy Objects -> Default Domain

Hi Rowland, Yes, I read this documentation carefully. I have two working Apache2 with kerberos authentication working. My question is more about troubleshooting a keytab. If I need to test manually a keytab file chalenging a specific principal, what's the prefered method ? I thougt that a kinit could be done using a principal name, but I am unable to kinit with somehting else than the

Hi Rowland, Thanks for your help again. I understand the difference between the UPN (User Principal Name) and the SPN (Service Principal Name). But in your second exemple, you never mention the SPN, neither in the keytab export or in the kinit command. Does that means that there is no kinit possible using the SPN? So I am worried of what is the benefice of adding a SPN to a user instead of

Hi Andrew, Hi Sam, Many thanks for your quick replies, we already worked on this doc page but due to the lack of smart card reader/writer, we did not finished the setup. We'll buy some hadware and create a testing S4 lab to finish this config. What about biometry ? Is there a way to store any biometrical information into the ldap backend ? Is there by any chance any other third-party

Hi list :) I am looking for the right command to achieve my goal. I would like to remove the account expiry date of an ACCOUNT with a samba-tool command (account never expires) Options of "samba-tool user setexpiry" are : --filter=FILTER LDAP Filter to set password on --days=DAYS Days to expiry --noexpiry Unfortunately, the "noexpiry" parameter just set another option

Hi Rowland and list, I allow myself to give a UP to my message in case someone has an idea. Thanks, --Oliver Le 2023-05-24 15:55, Olivier BILHAUT via samba a ?crit : > Hi Rowland, and many thanks for fast reply, > > When using --noexpiry, > the userAccountControl is set to 66048, which disable expiry for > password as well (in MS console, "password never

Hi All, We wonder about the possibility to use the primary group of a user as argument in the "valid users" option, in the share section of the "smb.conf". I explain : In an AD schema, you're primary group could be, for example, 530 (Domain Users), you're not "memberof" the "Domain users" group in the LDAP schema. So winbind and/or NSS seems

Hi Rowland, Hi looks like the "-c" option is optional. My problem is not really the kerberos cache file, but the "principal" linked to the user kerbuser. The principal is HTTP/webserver.MYDOMAIN.LOCAL at MYDOMAIN.LOCAL I would like to use kinit and give this principal as parameter. something like : > kinit -k -t /root/my.keytab HTTP/webserver.MYDOMAIN.LOCAL at

Hi Samba List, hope you're doing well all. We have realized a security audit of our Samba4 Active Directory. It returns that the security descriptors options of all our GPO objects are wrong. They should be : SE_DACL_AUTO_INHERITED SE_DACL_PRESENT instead of this, the options are by default : SE_DACL_PROTECTED SE_DACL_PRESENT We can change the options, but the "sysvolreset"

Hi Rowland, and many thanks for fast reply, When using --noexpiry, the userAccountControl is set to 66048, which disable expiry for password as well (in MS console, "password never expires" is now checked). This means that the password expiry (let say, every 6 month) will never popup again to the user, which is in my sense a wrong behaviour. Is there a way to change ONLY

Hi friends. This morning waking up is painfull. We've got a great CUPS+Samba+Winbind print server sharing 30+ printers to our windows clients. Until this morning no issue, used on production for a couple of weeks. Today, the printer shares became unbrowsable from windows. We can see the printers names from samba share : "\printserver", but when we click on the "Show

Hi ! I bounce on the Mr Sloop's post ([Samba] DDNS / DHCPd && Internal DNS or BIND_DLZ) to ask what's the easiest way to allow Linux clients to update themself their DNS record in the Samba4 AD server (with BIND_DLZ Dns server). It works well with windows clients, but with Linux clients joined to the domain, with a valid Kerberos ticket, the client receive a error