search for: gpmv

...ivate/tls/key.pem tls certfile = /var/lib/samba/private/tls/cert.pem tls cafile = /var/lib/samba/private/tls/ca.pem tls verify peer = no_check server signing = auto ldap server require strong auth = no raw NTLMv2 auth = yes client ipc signing = auto client ldap sasl wrapping = plain idmap config GPMV : backend = ad idmap config GPMV : range = 1000-9999999 map untrusted to domain = Yes winbind enum groups = yes winbind enum users = yes store dos attributes = yes kerberos method = secrets and keytab usershare max shares = 0 encrypt passwords = yes password server = pdc.biuro.domain [netlogon]...

...kerberos throws in auth.log when I try to log in with a > > win2008 client: > > > > Apr 23 09:17:38 pdc kadmind[610]: closing down fd 31 > > Apr 23 09:17:55 pdc krb5kdc[643]: AS_REQ (6 etypes {18 17 23 24 -135 > > 3}) > > 192.168.0.139: CLIENT_NOT_FOUND: qubix at GPMV for krbtgt/GPMV at GPMV, > > Client > > not found in Kerberos database > > Apr 23 09:17:55 pdc krb5kdc[643]: closing down fd 15 > > Apr 23 09:17:56 pdc krb5kdc[643]: TGS_REQ (5 etypes {18 17 23 24 > > -135}) > > 192.168.0.139: PROCESS_TGS: authtime 0, <unknow...

...mba wrote: > this is what kerberos throws in auth.log when I try to log in with a > win2008 client: > > Apr 23 09:17:38 pdc kadmind[610]: closing down fd 31 > Apr 23 09:17:55 pdc krb5kdc[643]: AS_REQ (6 etypes {18 17 23 24 -135 > 3}) > 192.168.0.139: CLIENT_NOT_FOUND: qubix at GPMV for krbtgt/GPMV at GPMV, > Client > not found in Kerberos database > Apr 23 09:17:55 pdc krb5kdc[643]: closing down fd 15 > Apr 23 09:17:56 pdc krb5kdc[643]: TGS_REQ (5 etypes {18 17 23 24 > -135}) > 192.168.0.139: PROCESS_TGS: authtime 0,  <unknown client> for > krbtgt/B...

OK, I've deleted everything what Rowland suggested. THANKS Now smb.conf looks like this [global] workgroup = GPMV realm = BIURO.domain netbios name = PDC server role = active directory domain controller dns forwarder = 192.168.0.252 max open files = 57000 full_audit:prefix = %u|%I|%m|%S full_audit:success = mkdir rename unlink rmdir pwrite full_audit:failure = none full_audit:facility = local7 full_audit:prio...

...the Samba AD DC > with samba-tool ? > this was working before upgrade so I did not join AD DC using samba-tool again. If everything else fails I will do it, but: # samba-tool domain info pdc Forest : biuro.gpm-vindexus.pl Domain : biuro.gpm-vindexus.pl Netbios domain : GPMV DC name : pdc.biuro.gpm-vindexus.pl DC netbios name : PDC Server site : Default-First-Site-Name Client site : Default-First-Site-Name (pdc is the dns name of the server)

...owser, eventlog6, backupkey, dnsserver, winreg, srvsvc client use spnego = yes map acl inherit = Yes hosts allow = ALL server signing = auto raw NTLMv2 auth = yes client ipc signing = auto client ldap sasl wrapping = plain idmap config GPMV : backend = ad idmap config GPMV : range = 1000-9999999 map untrusted to domain = Yes store dos attributes = yes kerberos method = secrets and keytab usershare max shares = 0 encrypt passwords = yes password server = pdc.biuro.domain Change t...

...g.tdb not initialised This is normal if an SMB client has never connected to your server. [/CODE] [LIST] [*] I cannot find locking.tdb in any of the samba directories, [*] locking is enabled in smb.conf [/LIST] I've tried googling, with no results. My smb.conf: [CODE][global] workgroup = GPMV realm = my.realm.dot.com netbios name = PDC server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 192.168.0.252 server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, dns, smb dcerpc endpoint...

.... If everything else fails I will do it, but: > > No, I meant originally, do not run the join command again. > > > > > # samba-tool domain info pdc > > Forest : biuro.gpm-vindexus.pl > > Domain : biuro.gpm-vindexus.pl > > Netbios domain : GPMV > > DC name : pdc.biuro.gpm-vindexus.pl > > DC netbios name : PDC > > Server site : Default-First-Site-Name > > Client site : Default-First-Site-Name > > > > (pdc is the dns name of the server) > > OK, but calling an AD DC 'PDC'...

yes, I tried working with samba wiki and quad-verifying what is recommended to be checked. OK, I'll try to join using 18.04. the samba_dnsupdate tool does not have the --use-samba-tool option in ubuntu 16.04 2018-04-25 22:47 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 25 Apr 2018 22:32:10 +0200 > Jakub Kulesza <jakkul+samba at gmail.com> wrote: