search for: hg004

....pem tls certfile = tls/myCert.pem tls cafile = # [netlogon] is on the member server and defined in the user's object # I let sysvol here, as I don't understand it's role [sysvol] path = /var/lib/samba/sysvol read only = No ### DOMAIN MEMBER root at hg004:/etc/samba# cat smb.conf netbios name = HG004 server string = Fileserver HG004 - Samba 4.3.9-Ubuntu security = ADS workgroup = HUMGEN realm = HUMGEN.0ZONE server role = member server server services = -dnsupdate -dns interfaces = bond0, lo bind interfaces only = yes domain master = no local mast...

...I suggest you put it back > # I let sysvol here, as I don't understand it's role I suggest you find out, it is rather important, I will give you a hint, GPOs > [sysvol] > path = /var/lib/samba/sysvol > read only = No > > ### DOMAIN MEMBER > root at hg004:/etc/samba# cat smb.conf > netbios name = HG004 > server string = Fileserver HG004 - Samba 4.3.9-Ubuntu > security = ADS > workgroup = HUMGEN > realm = HUMGEN.0ZONE > server role = member server > > server services = -dnsupdate -dns You do not need these lines on a domain...

...et an error on the domain_member_file_server in the file <IP-address-of-client.log> saying: >>> [2017/01/11 16:42:34.522067, 1] ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2017/01/11 16:42:34.522095, 1] ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2017/01/11 16:42:34.525704, 1] ../lib/param/lo...

...ember with regard to the Geckos On the ad-dc: HUMGEN\test:*:9439:5000: WT. Test --given-name=Want To:/home/HUMGEN/test:/bin/false The Geckos on ad-dc are composed from initials + surname + givenName. On the domain member (real Geckos field or may be description) : test:*:9439:5000:Want to Test://hg004.humgen.0zone/test/linhome:/bin/bash The Geckos from the ad-dc will be sent as FullName to a joined Windows 8.1 computer. The fields (I gave them to samba-tool by creating the test user) surname and givenName are not visible in the output of ldbsearch. So, how would one modify the surname after a...

Samba - General mailing list wrote >> [2017/01/11 16:42:34.522067, 1] >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) >> gss_accept_sec_context failed with [ Miscellaneous failure (see text): >> Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) in keytab >> MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] >> [2017/01/11 16:42:34.522095, 1] >> ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit) >> SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE > > L...

...org> wrote: > Samba - General mailing list wrote > >> [2017/01/11 16:42:34.522067, 1] > >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) > >> gss_accept_sec_context failed with [ Miscellaneous failure (see > >> text): Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) > >> in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] > >> [2017/01/11 16:42:34.522095, 1] > >> ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit) > >> SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_...

...ad-dc: > HUMGEN\test:*:9439:5000: WT. Test --given-name=Want > To:/home/HUMGEN/test:/bin/false > > The Geckos on ad-dc are composed from initials + surname + givenName. > > On the domain member (real Geckos field or may be description) : > test:*:9439:5000:Want to > Test://hg004.humgen.0zone/test/linhome:/bin/bash > > The Geckos from the ad-dc will be sent as FullName to a joined > Windows 8.1 computer. This is a known problem, winbindd on the DC only extracts uidNumber & gidNumber attributes, I just wish somebody would fix this. > > The fields (I ga...

> Just provisioning with --rfc2307 isn't enough, you personally need to > add any required RFC2307 attributes. But you see my test user has his attributes. From samba-tool. Do you mean the basic objects, the templates for the user and group? If yes, how to do it? > Can I suggest you put dnsupdate back and then setup bind9 on the DC > correctly. I will... > You must be

...> Samba - General mailing list wrote >> >> [2017/01/11 16:42:34.522067, 1] >> >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) >> >> gss_accept_sec_context failed with [ Miscellaneous failure (see >> >> text): Failed to find cifs/hg004.humgen.0zone at HUMGEN.0ZONE(kvno 1) >> >> in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] >> >> [2017/01/11 16:42:34.522095, 1] >> >> ../auth/gensec/spnego.c:541(gensec_spnego_parse_negTokenInit) >> >> SPNEGO(gse_krb5) NEG_TOKEN_INIT failed:...