search for: fqdns

...check where to apply that > GPO, computer or user ...). > > While debugging that I find in log.smbd on the member server: > > [2017/07/10 11:22:20.290018, > 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts > file may be broken! Full qualified domain names (FQDNs) should not be > specified as an alias in /etc/hosts. FQDN should be the first name > prior to any aliases. > [2017/07/10 11:23:15.561739, > 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts > file may be broken! Full qualified domain names (FQDNs) should not...

...or helps (I still have to check where to apply that GPO, computer or user ...). While debugging that I find in log.smbd on the member server: [2017/07/10 11:22:20.290018, 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts file may be broken! Full qualified domain names (FQDNs) should not be specified as an alias in /etc/hosts. FQDN should be the first name prior to any aliases. [2017/07/10 11:23:15.561739, 1] ../source3/lib/util.c:1974(name_to_fqdn) WARNING: your /etc/hosts file may be broken! Full qualified domain names (FQDNs) should not be specif...

On Tue, 11 Jul 2017 11:59:24 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 11:43 schrieb Rowland Penny: > > On Tue, 11 Jul 2017 10:21:37 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> Am 2017-07-11 um 09:34 schrieb Stefan G. Weichinger via samba: > >> >

Am 2017-07-11 um 12:16 schrieb Rowland Penny: > Try running this: > > ldbsearch -H /path/to/sam.ldb -b "dc=secret,dc=at" -s sub > "(&(objectclass=user)(uidnumber=11029))" > > This will check if it is a user. Did so, no entry returned. -- plus: please note that yesterday all users could work normally .... > Can you post the smb.conf from the DM

Am 2017-07-11 um 12:51 schrieb Rowland Penny: > Well, that explains where '11029' is coming from, you are using the > 'rid' backend. The users (or group) ID will be calculated using this > formula: > > ID = RID - BASE_RID + LOW_RANGE_ID > > BASE_RID is by default '0', so it becomes: > > ID = RID + LOW_RANGE_ID > > So, in your case it

On Tue, 11 Jul 2017 14:19:09 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 14:00 schrieb Rowland Penny: > > >> template homedir = /home/%U > >> > >> works for me in this context, right? > > > > That should work. > > edited accordingly, and rm-ed that idmap schema line on DM. > > I now have on

On Tue, 11 Jul 2017 14:47:50 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 14:40 schrieb Rowland Penny: > > >> Restarted winbind, did "killall -HUP" on smbd and nmbd. > >> > >> still can't login to DM via smbclient and that mentioned user. > >> > >> I assume I need to restart all the

On Tue, 11 Jul 2017 16:47:14 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 14:57 schrieb Rowland Penny: > > On Tue, 11 Jul 2017 14:47:50 +0200 > > "Stefan G. Weichinger" <lists at xunil.at> wrote: > > > >> Am 2017-07-11 um 14:40 schrieb Rowland Penny: > >> > >>>> Restarted winbind,

On Tue, 11 Jul 2017 17:33:51 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 14:57 schrieb Rowland Penny: > > >> # smbclient \\\\server\\daten -Usgw%PW > >> session setup failed: NT_STATUS_UNSUCCESSFUL > > > > Restart all the Samba binaries on the DM > > > > Then check that the OS knows your user with:

Formerly, I could connect to my CentOS 7.5 servers using \\server<file://server> but after upgrading to 4.8.3, now I must used \\server.my.domain<file://server.my.domain>. What happened and how can I fix it? --Eric Disclaimer : This email and any files transmitted with it are confidential and intended solely for intended recipients. If you are not the named addressee you should

[2017/07/11 10:28:51.553290, 3] ../source3/auth/auth.c:249(auth_check_ntlm_password) check_ntlm_password: winbind authentication for user [mueller] succeeded [2017/07/11 10:28:51.553324, 2] ../source3/auth/auth.c:305(auth_check_ntlm_password) check_ntlm_password: authentication for user [mueller] -> [mueller] -> [mueller] succeeded [2017/07/11 10:28:51.553493, 1]

Am 2017-07-11 um 13:37 schrieb Stefan G. Weichinger: >> Having everything in AD, gives you the possibility of using different >> Unix home dirs etc per person. > > Not needed. I am the only UNIX user there. > > I only need separate [home] dirs for a group of users: > > some customers of my customer come by to do some work with a specific > software and I want

Am 2017-07-11 um 11:43 schrieb Rowland Penny: > On Tue, 11 Jul 2017 10:21:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 2017-07-11 um 09:34 schrieb Stefan G. Weichinger via samba: >> >>> [2017/07/11 09:31:17.790046, 2] >>> ../source4/dns_server/dns_query.c:1019(dns_server_process_query_send)

Am 2017-07-11 um 13:28 schrieb Rowland Penny: >>> Of course, using the 'rid' backend means that you do not need to add >>> anything to AD and you do not need this line in smb.conf: >>> >>> idmap config BUERO:schema_mode = rfc2307 >>> >>> Or you could just change 'idmap config BUERO:backend = rid' to >>> 'idmap

Hi, I''ve set up puppet to get node definitions from LDAP as per the docs. It''s been working well, but I now want to use fully qualified domain names instead of simple domain-less hostnames for the node name. I replaced the ou=Hosts entries with equivalent ones using FQDNs, restarted the puppetmasterd, and tried a "puppetd --test" from one of the nodes. However, I get the following error message: info: Allowing batch1.phy.bnl.gov(130.199.22.134) trusted access to puppetmaster.getconfig debug: Our client is remote err: Could not find configuration fo...

Am 2017-07-11 um 14:00 schrieb Rowland Penny: >> template homedir = /home/%U >> >> works for me in this context, right? > > That should work. edited accordingly, and rm-ed that idmap schema line on DM. I now have on the DM: [global] workgroup = BUERO realm = secret.AT netbios name = SERVER security = ADS map to guest = Bad User username map = /etc/samba/smbusers

On Tue, 11 Jul 2017 10:36:08 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > [2017/07/11 10:28:51.553290, 3] > ../source3/auth/auth.c:249(auth_check_ntlm_password) > check_ntlm_password: winbind authentication for user [mueller] > succeeded [2017/07/11 10:28:51.553324, 2] > ../source3/auth/auth.c:305(auth_check_ntlm_password)

Am 2017-07-11 um 14:57 schrieb Rowland Penny: > On Tue, 11 Jul 2017 14:47:50 +0200 > "Stefan G. Weichinger" <lists at xunil.at> wrote: > >> Am 2017-07-11 um 14:40 schrieb Rowland Penny: >> >>>> Restarted winbind, did "killall -HUP" on smbd and nmbd. >>>> >>>> still can't login to DM via smbclient and that

...ntation uses >DHCP option 66 over BOOTP field siaddr. > >-- >-Gene Gene, Using DHCP option 66 is more maintainable than BOOTP field siaddr in a large enterprise PXE deployment scheme. In DHCP option 66, you can use either a FQDN or a (textual representation of) an IP address. Using FQDNs is what simplifies migration (& thus, what enterprise sysadmins would prefer). Here's why. Regardless of which way I go, I have to put in a DNS change request. I'll have to put in the DNS change request anyway, because I'm pointing my FQDN to a new IP address. Even if I decomm t...

Am 2017-07-11 um 09:04 schrieb Stefan G. Weichinger via samba: > Am 2017-07-10 um 13:08 schrieb Stefan G. Weichinger via samba: > >> And what does this tell me, please: >> >> [2017/07/10 13:07:48.593400, 1] >> ../source3/auth/token_util.c:430(add_local_groups) >> SID S-1-5-21-2940660672-4062535256-4144655499-1008 -> getpwuid(11008) >> failed