search for: herakles

On 24/06/2019 13:34, Stefan Froehlich via samba wrote: > Both of them, yes, and wbinfo(1) works as well: > > | sfroehli at herakles:~$ getent passwd test > | test:*:10001:10000:Max Mustermann:/home/test:/bin/bash > | sfroehli at herakles:~$ getent passwd SYNTHESIS\\test > | test:*:10001:10000:Max Mustermann:/home/test:/bin/bash > | sfroehli at herakles:~$ wbinfo --uid-info=10001 > | test:*:10001:10000:Max Musterm...

On 24/06/2019 12:41, Stefan Froehlich via samba wrote: > On Mon, Jun 24, 2019 at 10:22:41AM +0100, Rowland penny via samba wrote: >> On 24/06/2019 10:00, Stefan Froehlich via samba wrote: >>> On Mon, Jun 24, 2019 at 10:52:07AM +0200, Stefan Froehlich via samba wrote: >>>> <http://froehlich.priv.at/www/samba/> >>> Always try your own links before posting

On Sun, Jun 23, 2019 at 12:21:58PM +0100, Rowland penny via samba wrote: > You are coming from a PDC domain to an AD DC domain, easiest thing first, > you do not use 'wins' with an AD DC, you use 'dns'. I know the latter (had to delegate the zone in bind after all), but "wins support=yes" must have been created either by Debian or by "domain provision".

...me?). > > > >There must be some rather basic mistake left, I suppose, but which... > > > Does 'getent passwd test' or 'getent passwd SYNTHESIS\\test' > produce output when run on the fileserver ? Both of them, yes, and wbinfo(1) works as well: | sfroehli at herakles:~$ getent passwd test | test:*:10001:10000:Max Mustermann:/home/test:/bin/bash | sfroehli at herakles:~$ getent passwd SYNTHESIS\\test | test:*:10001:10000:Max Mustermann:/home/test:/bin/bash | sfroehli at herakles:~$ wbinfo --uid-info=10001 | test:*:10001:10000:Max Mustermann:/home/test:/bin/bash...

...h debugging. I created <http://froehlich.priv.at/samba/> with copies of my config files and LDAP-excerpts to avoid including them all in this mail. The profiles and users share look like this at the moment (I added a g+w to /home/profiles for testing purposes at some point of time): root at herakles:~# ls -al /home/profiles/ total 20 drwxrwx--T 5 root domain users 4096 Jun 21 15:59 . drwxr-xr-x 8 root root 4096 Jun 19 10:41 .. drwxr-xr-x 22 gk domain users 4096 Jun 12 15:04 gk.V2 drwxr-xr-x 2 sf domain users 4096 Jun 21 16:06 sf.V2 drwxr-xr-x 2 test domain users 4096 Jun 21 13:...

...rry but you have a MAJOR problem, you have this on the DC (note: it isn't a PDC, it is a DC): Hostname: controller DNS Domain: synth.intern FQDN: controller.synth.intern ipaddress: 192.168.1.11 ----------- Samba is running as an AD DC Then on the Unix domain member, you have this: Hostname: herakles DNS Domain: synthesis.synth.intern FQDN: herakles.synthesis.synth.intern ipaddress: 192.168.1.13 ----------- Samba is running as a Unix domain member They are not in the same DNS domain and they must be. I will continue examining the two new files. Rowland

...result set. Is there anything I could have missed? And another annoying issue popped up: At the fileserver I can wbinfo(1) my test account by name and by uid, I can chown(1) files to it, I can even su(1) or ssh(1) to it and work at the CLI. But if I want to connect to a share: | ~# smbclient //herakles/profiles/ -Utest | Enter SYNTHESIS\test's password: | session setup failed: NT_STATUS_ACCESS_DENIED The log file contains: | [2019/06/24 09:28:03.876063, 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) | Found account name from PAC: test [Max Mustermann] | [2019/06/24 09:28:03...

...(note: it > isn't a PDC, it is a DC): > > Hostname: controller > DNS Domain: synth.intern > FQDN: controller.synth.intern > ipaddress: 192.168.1.11 > ----------- > Samba is running as an AD DC > > Then on the Unix domain member, you have this: > > Hostname: herakles > DNS Domain: synthesis.synth.intern > FQDN: herakles.synthesis.synth.intern > ipaddress: 192.168.1.13 > ----------- > Samba is running as a Unix domain member > > They are not in the same DNS domain and they must be. > > I will continue examining the two new files. >...

...>questions with an empty result set. Is there anything I could have > >missed? > Which dns server are you using ? I tried my own dns first and switched to 8.8.8.8 afterwards. But as there are not even udp packets leaving the DC, there must be something else. > >| ~# smbclient //herakles/profiles/ -Utest > >| Enter SYNTHESIS\test's password: > >| session setup failed: NT_STATUS_ACCESS_DENIED > > > >The log file contains: > > > >| [2019/06/24 09:28:03.876063, 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) > >| Found accou...

...<http://froehlich.priv.at/samba/> with copies of my config > files and LDAP-excerpts to avoid including them all in this mail. > The profiles and users share look like this at the moment (I added a > g+w to /home/profiles for testing purposes at some point of time): > > root at herakles:~# ls -al /home/profiles/ > total 20 > drwxrwx--T 5 root domain users 4096 Jun 21 15:59 . > drwxr-xr-x 8 root root 4096 Jun 19 10:41 .. > drwxr-xr-x 22 gk domain users 4096 Jun 12 15:04 gk.V2 > drwxr-xr-x 2 sf domain users 4096 Jun 21 16:06 sf.V2 > drwxr-xr-x 2 tes...

...r relevant right now is in log.nmbd on the fileserver: | [2019/06/13 19:14:02.586604, 0] | ../source3/nmbd/nmbd_serverlistdb.c:340(write_browse_list) | write_browse_list: Fatal error - cannot find my workgroup | SAMDOM But again, googling this did not enlighten me, escpecially as: | root at herakles:~# net ads workgroup | Workgroup: SAMDOM | root at fileserver:~# net ads testjoin | Join is OK Any hints are welcome... Bye, Stefan -- Die Macht des Wissens! Stefan, Trost in den Stunden des Zorns! Sloganizer, https://www.poetron-zone.de/

On Thu, Jun 13, 2019 at 08:10:01PM +0100, Rowland penny via samba wrote: > On 13/06/2019 19:57, Stefan Froehlich via samba wrote: > >On Thu, Jun 13, 2019 at 07:02:27PM +0100, Rowland penny via samba wrote: > >>On 13/06/2019 18:21, Stefan Froehlich via samba wrote: > >>>File server and Linux clients shall use the AD-backend, so I read > >>>and followed

...ou using ? > > > And another annoying issue popped up: > > At the fileserver I can wbinfo(1) my test account by name and by > uid, I can chown(1) files to it, I can even su(1) or ssh(1) to it > and work at the CLI. But if I want to connect to a share: > > | ~# smbclient //herakles/profiles/ -Utest > | Enter SYNTHESIS\test's password: > | session setup failed: NT_STATUS_ACCESS_DENIED > > The log file contains: > > | [2019/06/24 09:28:03.876063, 3] ../auth/kerberos/kerberos_pac.c:413(kerberos_decode_pac) > | Found account name from PAC: test [Max Mu...

So I did a fresh install today. Decided to go ahead and upgrade. Everything seems okay save for three problems. #1 - I get a message during boot saying that an Intel microcode update didn't work. Something about not being able to find /proc/microcode. #2 - I can't use the Firefox extension HTML Parser. Anyone use this. #3 - Off and on GDM crashes and I get dropped into a prompt. Any

...eone can explain this to me, I want to deploy a samba PDC in a larger environment, but I do not want a user to be able to see private resources just by knowing someone's username and pass, I want them to have to come from a trusted machine also. Here is my smb.conf [global] netbios name = HERAKLES workgroup = STS server string = Samba Server %v security = user encrypt passwords = yes username map = /etc/samba/smbusers smb passwd file = /etc/samba/private/smbpasswd add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u local master = yes os level = 65 preferred master =...

...fileserver: > > | [2019/06/13 19:14:02.586604, 0] > | ../source3/nmbd/nmbd_serverlistdb.c:340(write_browse_list) > | write_browse_list: Fatal error - cannot find my workgroup > | SAMDOM > > But again, googling this did not enlighten me, escpecially as: > > | root at herakles:~# net ads workgroup > | Workgroup: SAMDOM > | root at fileserver:~# net ads testjoin > | Join is OK > > Any hints are welcome... This is all very strange, lets start with the obvious, please post your smb.conf files and tell us what OS you are using. Rowland

Hello. I have Centos 4.4 with the NTFS read-only driver from http://www.linux-ntfs.org/content/view/135/71/ I would like know if someone who installed this can test if Centos 5 can read/write NTFS,. Thanks Josep --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y m?viles desde 1 c?ntimo por minuto. http://es.voice.yahoo.com -------------- next part

Hello, I see manage of firewall in CentOS (called security), and seems difficult to manage, not enough powerful. I am searching a middle term between scripts of iptables to manage and Security manager of CentOS. I know FireStarter, another similar? -- Devel in Precio http://www.pas-world.com

Think of this as a motion as one might move at a meeting. Discussion and refinement are in order. I don't understand the current rationale for a single CentOS users' list; probably in times past it was sensible, but I think the time has come for splitting the list by release. I'm speaking from my own perspective, but I'm sure others have similar stories. How many users use

...orry. > No problem, I just refreshed the old page I had open ;-) You have this on the DC: controller:~# vi /etc/network/interfaces iface enp1s0 inet static ??? address 192.168.1.11 ??? broadcast 192.168.122.255 ??? netmask 255.255.255.0 ??? gateway 192.168.1.1 And this on the fileserver: herakles:~# vi /etc/network/interfaces iface enp1s0 inet static ??? address 192.168.122.12 ??? broadcast 192.168.122.255 ??? netmask 255.255.255.0 ??? gateway 192.168.122.1 It might help if they were both in the same subnet. I install these packages: apt-get install samba acl attr winbind libpam-winb...