search for: gzartman

When you first provision an AD DC, is there a way to control where samba-tool puts all of the AD data files? -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

I'm installing sernet samba4 packages with active directory support on RHEL 6. Is it required that I install kerebros packages seperately? Kerebros does t seem to be an Install require . I wasn't sure if sernet had somehow rolled sernet with kerebros??.?. Any help greatly appreciated. Greg

On Mon, 3 Oct 2016 09:49:32 -0700 Greg Zartman <gzartman at koozali.org> wrote: > To clarify, the ldb tools I built work. The ones in the ltb-tools > package in the centos repos does not work > As I said, Centos doesn't (yet) have packages from which you can create an AD DC, it therefore seems likely that the ldb-tools package you fo...

I'm working on building some perl code to query a Samba AD and list various things. I'm wondering if there is something like samba-tool for query user from the AD other than just the username? I see that I can use and LDAP perl module to query the LDAP side of the AD, but wanted to see if Samba has a utility for doing this. Thanks! -- Greg J. Zartman Board Member Koozali Foundation,

On Sun, Oct 26, 2014 at 11:37 PM, Greg Zartman <gzartman at koozali.org> wrote: > I'm workign to setup Samba4 and my current centos server deployment uses > TinyDNS/DNSCache for the DNS. Understanding that it is best to use Sambas > internal DNS for AD, I'm wondering how others are doing DNS? I really > don't want to use BIN...

..._mode = rfc2307 idmap config ZARTMAN:range = 10000-99999 One more thing is that it's not recommended to have a .local domain realm. Have a look at this above glibc... https://wiki.samba.org/index.php/Samba_Troubleshooting Regards Tim Am 24. Februar 2015 07:28:11 MEZ, schrieb Greg Zartman <gzartman at koozali.org>: >I'm working to setup Samba as a domain member to a Windows Server >active >directory, and I keep hitting road blocks. There's some real >terminology >hurdles in the wiki. > >In a nutshell, my problem is this: I setup a Windows 2012 Essentials >...

Does anyone know what Red Hat/Centos is going with Samba 4? I've looked at their packages in COS 6.5 and 7 and it doesn't make sense. They seems to be doing some kind of watered down or modified version of Samba 4 with some of the tools disabled. Are they still holding off from full AD implementation in their packages because of the MIT Kerberos issues identified in previous

I'm playing around with Domain Membership to a WIndows 2012 AD Server. It appears I'm able to join the AD domain, but the domain member doesn't seem to authenticate anything against the DC once joined. Here is my smb.conf netbios name = Member workgroup = ZARTMAN security = ADS realm = ZARTMAN.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and

I'm working with the Centos 7 packages for Samba 4.2.10 and I note that the stock packages don't include the ldb tools (eg, ldbmodify, ldbsearch, etc). I did find a stand along centos package that contains these tools from here: https://wiki.samba.org/index.php/LDB However, the stand along tools don't seem to be aware of the Active Directory schema. For example, if I try to use

I'm working to setup Samba as a domain member to a Windows Server active directory, and I keep hitting road blocks. There's some real terminology hurdles in the wiki. In a nutshell, my problem is this: I setup a Windows 2012 Essentials ADS domain and I ended up with zartman.local for my "domain" in Windows. So, I've got a dns zone in windows server that is domain.local

I note from the man pages, that idmap_ad will only map users/groups IF you set the UIDnumber in the active directory. In lookin in my active directory, there is a "Unix Attributes" tab with "UID" in that tab that you can set. There is also and "Attributes Editor" tap where you can look at all attributes and edit the "UIDnumber" I just want to verify that

On Mon, Dec 1, 2014 at 9:09 AM, steve <steve at steve-ss.com> wrote: > > Not in any domain we've ever seen. The RID of BUILTIN\Admins is 300000? Where are you seeing this in the Samba 4 active directory? I don't have my development box in front of me, but the "Administrator" account is showing with an ID = 514 or similar. It's something in the low 500s. Greg

On Mon, Dec 1, 2014 at 11:19 AM, Jeremy Allison <jra at samba.org> wrote: > > Reporting bugs and helping us fix them is a great > help there, thanks. > I don't believe this is an issue of code not working correctly, but documentation. It is very difficult to know what all of these pieces in Samba 4 are doing. I know as a developer, this is the last thing you guys want to

On Mon, Dec 1, 2014 at 2:05 AM, Lars Hanke <debian at lhanke.de> wrote: > > If you like to manage Unix users from the Unix side and ldbedit seems too > awkward, you might try my Python script: https://github.com/laotse/ > SambaPosix > > I appreciate comments, experiences, and contributions to make it a useful > tool. > Thanks Lars. I'm working on building a

I'm wanting to change group members by writing to the Active Directory using perl Net::LDAP. I noticed that AD groups have the LDAP objects "member" to list the user who is a member of this group. The user object then has the LDAP object "memberOf" to record the groups the user is a member of. I'm wondering if their is a mechanism in Samba AD that sets on of these if

What is the best way to store file system quotas for users in the Active Directory? I'm not seeing any standard attributes for this, so it looks like the best way is to extend the schema. Is this correct? Thanks, Greg -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

On Mon, Oct 3, 2016 at 10:39 AM, Sketch <smblist at rednsx.org> wrote: > > The standalone tools (as packaged by CentOS) don't have all of the > extensions that are built when you build a Samba DC. If you have already > rebuilt CentOS Samba packages with DC support, you need to add samba's ldb > modules to ldb's module path. > This is what I suspected.

I'm working to setup a Samba 4 AD DC and ran through the howto on the wiki. https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO What type of database backend is Samba using? Is it using the LDAP server internal to Samba or a tdb database? The man page for smb.conf says that the default passdb backend is tdb, so I was curious what Samba-Tool is going. Thanks, -- Greg

In the configuration parameters created by samba-tool interactive, I get passdb backend = samba_dsdb, but I have no idea what kind of backend this is. It also doesn't seem to be documented anywhere. Further down the config, it mentions tdb as the backend for winbind. It's a little unclear to me if Samba 4 uses LDAP auth out of the gate or you have to do something to configure it. Greg

What does the smb server service option do? Does anyone know if there are any docs for the different server service options? Thanks, -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000