search for: itadmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hey, I am trying to get spf working and it just doesn't want to take. On my Tiny/DJB server it was easy. Anyway here is my entry. $ORIGIN net. itadmins 14400 IN SOA ns1.itadmins.net. hostmaster.itadmins.net. ( 2012102201 16384 2048 1048576 2560 ) 14400 IN A 178.15.51.221 14400 IN MX 10 mail.itadmins.net. 14400 IN NS ns1.itadmins.net. 14400 IN...

...ter is looking in a different subdirectory (I think is the domain subfolder) than the actuallly used i.e., The following error message is constant: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Aug 12 12:07:58 mail dspam[4540]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory Aug 12 12:07:58 mail dspam[4541]: Unable to open file for reading: /var/spool/dspam/data/local/itadmin/itadmin.sig/48a1c36c24 9461173910573.sig: No such file or directory ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The...

...e shell = /bin/bash client use spnego = yes client ntlmv2 auth = yes encrypt passwords = yes winbind use default domain = yes restrict anonymous = 2 [test] path = /home/2CP/darmstrong valid users = 2CP\darmstrong,2CP\buexec,2CP\test,itadmin write list = 2CP\darmstrong,2CP\buexec,2CP\test,itadmin read list = David Armstrong Database Administrator MOCA THE MUSEUM OF CONTEMPORARY ART

...using the walk through you gave me. > Ensure that 'Domain Admins' has the 'SeDiskOperatorPrivilege' privilege, > this must be granted on the Unix domain member, or to put it another > way, the command must be run on the Unix domain member that holds the > share. > itadmin at john:~$ net rpc rights list privileges SeDiskOperatorPrivilege -U "INTERNAL\administrator" Enter INTERNAL\administrator's password: SeDiskOperatorPrivilege: INTERNAL\Domain Admins BUILTIN\Administrators > Ensure the share directory belongs to 'root:Domain Admins' w...

...keytab was empty. I fixed the permissions on the folder using the steps in here https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End and restarted both bind9 and named and the problem got a little better, but still no actual contact with the outside world. Before fixing the permissions I got: itadmin at dc02:$ nslookup twitter.com ;; connection timed out; no servers could be reached Now I get: itadmin at dc02:/var/lib/samba$ nslookup twitter.com Server: 192.168.4.6 Address: 192.168.4.6#53 ** server can't find twitter.com: SERVFAIL so I ran named-checkconf and found that i...

On 03/09/2020 20:57, Peter Pollock wrote: > Ubuntu 20.4 and whatever Samba it installs (sorry, I'm not in front?of > the server right now). 4.11. x if I remember correctly, so okay to start with, but can I introduce to Louis Van Belle's repo: http://apt.van-belle.nl/ Once you get up and running, you can use the packages there to keep current. > > Bind 9.16 (although there

...he form "S-1-5-21-4167008922-1292391803-4044586981-[unique number]", which is generated according to the rules the smbldap tools use. 8) testparm on sl1 returns the following: Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processing section "[itadmins]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = CHEMBMB server string = %h server (Samba, Ubuntu) map to guest = Bad User obey pam restrictions = Yes passdb backend = ldapsam:ldaps://multivac.chem.umass.e...

...2.168.4.6 The gateway is ar 192.168.4.1 If I set /etc/resolv.conf to nameserver 192.168.4.6 nameserver 192.168.4.1 search internal.kcs I get no internal or external name resolution. Trying to ping anything gives me: ping: google.com: Temporary failure in name resolution Dig gives me this error: itadmin at dc02:~$ dig dc01.internal.kcs ; <<>> DiG 9.16.1-Ubuntu <<>> dc01.internal.kcs ;; global options: +cmd ;; connection timed out; no servers could be reached Digging from DC01 works fine though itadmin at dc01:/$ dig dc02.internal.kcs ; <<>> DiG 9.16.1-Ubunt...

...ermissions on the folder using the steps in here > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End and restarted > both bind9 and named and the problem got a little better, but still no > actual contact with the outside world. Before fixing the permissions I > got: > > itadmin at dc02:$ nslookup twitter.com <http://twitter.com> > ;; connection timed out; no servers could be reached > > Now I get: > > itadmin at dc02:/var/lib/samba$ nslookup twitter.com <http://twitter.com> > Server: ? ? ? ? 192.168.4.6 > Address: ? ? ? ?192.168.4.6#53 &gt...

...: sambalist > Onderwerp: Re: [Samba] Changing IP Scope on a Samba DC > > On 04/09/2020 00:11, Peter Pollock wrote: > > Samba seems to have provisioned OK, but kinit cannot find the realm > > and I have some records missing that I don't know how to fix: > > > > itadmin at dc01:~$ kinit administrator at INTERNAL.KCS > > kinit: Cannot find KDC for realm "INTERNAL.KCS" while > getting initial > > credentials > > itadmin at dc01:~$ host -t SRV _ldap._tcp.internal.kcs > > Host _ldap._tcp.internal.kcs not found: 3(NXDOMAIN) > &...

...ion is a little slow. I'm looking into why that is and tried an ns lookup for google.com and got the answer SERVFAIL on my AD server. The query was then passed to my next nameserver (google's own dns), which handled the query. Is this correct behaviour? I've not seen SERVFAIL before itadmin at dc02:~$ nslookup google.com ;; Got SERVFAIL reply from 192.168.4.5, trying next server Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: Name: google.com Address: 216.58.195.78 ;; Got SERVFAIL reply from 192.168.4.5, trying next server Name: google.com Address: 26...

...# disable spoolss = yes # printing = bsd [data] path = /hdd/shares read only = no [home] path = /home/users/%U read only = no [old-profiles] path = /hdd/roaming read only = no [archive] path = /hdd/archive read only = no and here's the getfacl of the folder in question: itadmin at john:~$ getfacl /hdd/roaming getfacl: Removing leading '/' from absolute path names # file: hdd/roaming # owner: domain\040admins # group: domain\040admins user::rwx user:root:rwx group::rwx group:adm:rwx group:domain\040admins:rwx mask::rwx other::rwx default:user::rwx default:user:root...

...gt; > Ensure that 'Domain Admins' has the 'SeDiskOperatorPrivilege' > privilege, > this must be granted on the Unix domain member, or to put it another > way, the command must be run on the Unix domain member that holds > the share. > > > ?itadmin at john:~$ net rpc rights list privileges > SeDiskOperatorPrivilege -U "INTERNAL\administrator" > Enter INTERNAL\administrator's password: > SeDiskOperatorPrivilege: > ? INTERNAL\Domain Admins > ? BUILTIN\Administrators > > > Ensure the share directory bel...

> Which smb version are you using (mount option)? Support for DFS on smb2+ > was only added in linux 4.11. smbstatus shows the connection as NT1. DFS links do work like this: serverA_msdfsrootYES => serverB_msdfsrootNO But not like this: serverA_msdfsrootYES => serverB_msdfsrootYES Somehow the destination having 'msdfsroot yes' prevents the cifs kernel module from

...sing the steps in here > > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End and restarted > > both bind9 and named and the problem got a little better, but still no > > actual contact with the outside world. Before fixing the permissions I > > got: > > > > itadmin at dc02:$ nslookup twitter.com <http://twitter.com> > > ;; connection timed out; no servers could be reached > > > > Now I get: > > > > itadmin at dc02:/var/lib/samba$ nslookup twitter.com <http://twitter.com> > > Server: 192.168.4.6 > >...

...lookup for google.com and got >> the answer SERVFAIL on my AD server. >> >> The query was then passed to my next nameserver (google's own dns), which >> handled the query. >> >> Is this correct behaviour? I've not seen SERVFAIL before >> >> itadmin at dc02:~$ nslookup google.com >> ;; Got SERVFAIL reply from 192.168.4.5, trying next server >> Server: 8.8.8.8 >> Address: 8.8.8.8#53 >> >> Non-authoritative answer: >> Name: google.com >> Address: 216.58.195.78 >> ;; Got SERVFAIL r...

...Xid: 35209 with uid: 1494 [...] /linux-4.9.30/fs/cifs/dir.c: parent inode = 0xffff893b14d610a8 name is: \smb03.physics.wisc.edu\smb\instr_files and dentry = 0xffff893b79dda3c0 [...] /linux-4.9.30/fs/cifs/dir.c: name: /\smb03.physics.wisc.edu\smb\instr_files [...] /linux-4.9.30/fs/cifs/dir.c: name: /itadmin/\smb03.physics.wisc.edu\smb\instr_files [...] /linux-4.9.30/fs/cifs/dir.c: NULL inode in lookup [...] /linux-4.9.30/fs/cifs/dir.c: Full path: //smb.physics.wisc.edu/smb/itadmin/\smb03.physics.wisc.edu\smb\instr_files inode = 0x (null) Note the weird looking path: //smb.physics.wisc.edu...

Samba seems to have provisioned OK, but kinit cannot find the realm and I have some records missing that I don't know how to fix: itadmin at dc01:~$ kinit administrator at INTERNAL.KCS kinit: Cannot find KDC for realm "INTERNAL.KCS" while getting initial credentials itadmin at dc01:~$ host -t SRV _ldap._tcp.internal.kcs Host _ldap._tcp.internal.kcs not found: 3(NXDOMAIN) itadmin at dc01:~$ host -t SRV _kerberos._udp.interna...

...://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory) bouncing around all the links to install and configure Bind9. I've built it on ubuntu 22.04 Jammy with the addition of the repos from Michael Tokarev. I've started Samba..... and it errors out on replication: itadmin at dc05:/etc$ sudo samba-tool drs showrepl Global parameter server services found in service section! ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to dc05.internal.mydomain failed - drsException: DRS connection to dc05.internal.mydomain failed: (3221226038, 'The t...

I just installed a samba4 dc and I see that Power Users group is missing, is possible to create that group so that a workstation joined in the domain can install software using users belonging to that group and how it can be done? actually simply creating a group with that name doesn't get any privilege to that group users.