search for: hqkontrast

Hi Rowland here is it: [global] netbios name = ID-175 security = ADS workgroup = HQKONTRAST realm = HQ.KONTRAST dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind cache time = 300...

On 11/03/16 09:40, Oliver Werner wrote: > Haha, really? :D > > It should be possible without reboot not? > > OLIVER WERNER > System-Administrator > > > > > > Yes, remove the kdc lines :-D Rowland

...wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows information of the user and its groups smb.conf for samba member: [global] netbios name = PL0024 security = ADS workgroup = HQKONTRAST realm = hq.kontrast log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = ye...

On Fri, 30 Sep 2016 12:24:25 +0200 Oliver Werner via samba <samba at lists.samba.org> wrote: > Hi Louis, > > i have checked my /var/tmp > > But there is nothing like host_ or other for kerberos inside. > > ls -lisa /var/tmp/ > 2 4 drwxrwxrwt 3 root root 4096 Sep 25 08:39 . > 2 4 drwxr-xr-x 13 root root 4096 Jun 20 2013 .. > 11 16 drwx------ 2 root

...gt; > <https://vimeo.com/kontrastcs> <http://instagram.com/kontrast_de> > > > Am 11.03.2016 um 10:52 schrieb Oliver Werner > <oliver.werner at kontrast.de>: > > > > Ok, now my smb.con on DCs looks > > > > [global] > > workgroup = HQKONTRAST > > realm = HQ.KONTRAST > > netbios name = VL0227 > > server role = active directory domain controller > > idmap_ldb:use rfc2307 = yes > > interfaces = eth0:35 > > bind interfaces only=yes > > log level = 3 > > > > tls enabled =...

Ok, now my smb.con on DCs looks [global] workgroup = HQKONTRAST realm = HQ.KONTRAST netbios name = VL0227 server role = active directory domain controller idmap_ldb:use rfc2307 = yes interfaces = eth0:35 bind interfaces only=yes log level = 3 tls enabled = yes tls keyfile = /var/lib/samba/private/tls/key.pem tls certfile = /var/...

...ner <oliver.werner at kontrast.de <mailto:oliver.werner at kontrast.de>> wrote: > >> Ok now i have leave and join the Domain with my member (Debian 8 - >> Samba 4.5.0 deb-pkg) >> >> smb.conf DCs (i have two): >> >> [global] >> workgroup = HQKONTRAST >> realm = HQ.KONTRAST >> netbios name = VL0227 >> interfaces = eth0:35 >> bind interfaces only = yes >> server role = active directory domain controller >> idmap_ldb:use rfc2307 = yes >> >> ldap server require strong auth = no >> ntl...

...d/winbindd_dual.c:512(child_process_request) child_process_request: request fn NDRCMD [2016/10/03 17:50:03.311015, 10, pid=26714, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_dual_ndr.c:315(winbindd_dual_ndrcmd) winbindd_dual_ndrcmd: Running command WBINT_LOOKUPNAME (HQKONTRAST) [2016/10/03 17:50:03.311064, 10, pid=26714, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cache.c:467(fetch_cache_seqnum) fetch_cache_seqnum: success [HQKONTRAST][4294967295 @ 1475509803] [2016/10/03 17:50:03.311081, 3, pid=26714, effective(0, 0), real(0, 0), class=wi...

...irm your idea of this problem? OLIVER WERNER System-Administrator > Am 09.01.2017 um 17:52 schrieb Oliver Werner via samba <samba at lists.samba.org>: > > Hi Rowland here is it: > > [global] > netbios name = ID-175 > security = ADS > workgroup = HQKONTRAST > realm = HQ.KONTRAST > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > > winbind trusted domains only = no > winbind use default domain = yes > winbind enum users = yes > winbind enum groups...

Hi, i have a new Samba Fileserver. The problem is with a folder permissions the folder permissions are 1596981296 4 drwxr-x--- 6 oliver.werner it_secuirity 4096 Jan 3 2014 Security In this folder are some other folders and files I can open this folder but looks empty in explorer on windows or finder on macOS. when i change the

...ting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$ [2016/09/22 08:58:56.928361, 3] ../source3/smbd/service.c:907(make_connection_snum) 192.168.111.159 (ipv4:192.168.111.159:45070) connect to service IPC$ initially as user HQKONTRAST\pl0024$ (uid=3000085, gid=3000015) (pid 3755) [2016/09/22 17:21:05.879733, 3] ../source3/smbd/smb2_server.c:3097(smbd_smb2_request_error_ex) smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NETWORK_SESSION_EXPIRED] || at ../source3/smbd/smb2_server.c:2415 [2016/09/...

...ess_request) >> child_process_request: request fn NDRCMD [2016/10/03 17:50:03.311015, >> 10, pid=26714, effective(0, 0), real(0, 0), >> class=winbind] ../source3/winbindd/winbindd_dual_ndr.c:315(winbindd_dual_ndrcmd) >> winbindd_dual_ndrcmd: Running command WBINT_LOOKUPNAME (HQKONTRAST) >> [2016/10/03 17:50:03.311064, 10, pid=26714, effective(0, 0), real(0, >> 0), >> class=winbind] ../source3/winbindd/winbindd_cache.c:467(fetch_cache_seqnum) >> fetch_cache_seqnum: success [HQKONTRAST][4294967295 @ 1475509803] >> [2016/10/03 17:50:03.311081, 3, pid=2...

...put > > wbinfo -g takes 3 seconds and show my groups > > id user.name takes 20 seconds and shows information of the user and its groups > > > smb.conf for samba member: > > [global] > netbios name = PL0024 > security = ADS > workgroup = HQKONTRAST > realm = hq.kontrast > > log file = /var/log/samba/%m.log > log level = 1 > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > winbind refresh tickets = yes > > winbind trusted domain...

...pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [oliver.werner] [2016/10/10 11:31:28.920051, 6, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth) check_samstrict_security: HQKONTRAST is not one of my local names (ROLE_DOMAIN_MEMBER) [2016/10/10 11:31:28.920075, 10, pid=3809, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: sam had nothing to say [2016/10/10 11:31:28.920100, 10, pid=3809, effective(0, 0), real(0...

...nd enum users = yes winbind enum groups = yes winbind cache time = 300 winbind refresh tickets = yes # Default idmap config used for BUILTIN and local accounts/groups idmap config *:backend = tdb idmap config *:range = 500-1023 # idmap config for domain HQKONTRAST idmap config HQKONTRAST:backend = ad idmap config HQKONTRAST:schema_mode = rfc2307 idmap config HQKONTRAST:range = 1024-99999 # Use settings from AD for login shell and home directory winbind nss info = rfc2307 [Customers] comment = deleted daily path = /d...

...winbind enum users = yes winbind enum groups = yes winbind cache time = 300 winbind refresh tickets = yes # Default idmap config used for BUILTIN and local accounts/groups idmap config *:backend = tdb idmap config *:range = 500-1023 # idmap config for domain HQKONTRAST idmap config HQKONTRAST:backend = ad idmap config HQKONTRAST:schema_mode = rfc2307 idmap config HQKONTRAST:range = 1024-99999 # Use settings from AD for login shell and home directory winbind nss info = rfc2307 [Customers] comment = deleted daily path = /data/cus...

...tp://www.linkedin.com/company/kontrast-communication-services-gmbh> <https://vimeo.com/kontrastcs>     <http://instagram.com/kontrast_de> Am 11.03.2016 um 10:52 schrieb Oliver Werner <oliver.werner at kontrast.de>: Ok, now my smb.con on DCs looks [global]  workgroup = HQKONTRAST  realm = HQ.KONTRAST  netbios name = VL0227  server role = active directory domain controller  idmap_ldb:use rfc2307 = yes  interfaces = eth0:35  bind interfaces only=yes  log level = 3  tls enabled  = yes  tls keyfile  = /var/lib/samba/private/tls/key.pem  tls certfile = /var/lib/samba/private/tl...

...c:512(child_process_request) > child_process_request: request fn NDRCMD [2016/10/03 17:50:03.311015, > 10, pid=26714, effective(0, 0), real(0, 0), > class=winbind] ../source3/winbindd/winbindd_dual_ndr.c:315(winbindd_dual_ndrcmd) > winbindd_dual_ndrcmd: Running command WBINT_LOOKUPNAME (HQKONTRAST) > [2016/10/03 17:50:03.311064, 10, pid=26714, effective(0, 0), real(0, > 0), > class=winbind] ../source3/winbindd/winbindd_cache.c:467(fetch_cache_seqnum) > fetch_cache_seqnum: success [HQKONTRAST][4294967295 @ 1475509803] > [2016/10/03 17:50:03.311081, 3, pid=26714, effective(0, 0...

Hi, i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. Also same problem with winds client that running 24x7. After few days i can not logged in. i think thats a problem with kerberos tickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my

...ss_request: request fn NDRCMD [2016/10/03 17:50:03.311015, >>>> 10, pid=26714, effective(0, 0), real(0, 0), >>>> class=winbind] >> ../source3/winbindd/winbindd_dual_ndr.c:315(winbindd_dual_ndrcmd) >>>> winbindd_dual_ndrcmd: Running command WBINT_LOOKUPNAME (HQKONTRAST) >>>> [2016/10/03 17:50:03.311064, 10, pid=26714, effective(0, 0), real(0, >>>> 0), >>>> class=winbind] >> ../source3/winbindd/winbindd_cache.c:467(fetch_cache_seqnum) >>>> fetch_cache_seqnum: success [HQKONTRAST][4294967295 @ 1475509803] >&g...