search for: koozali

Is it possible to change the DNS listening IP? I'd like to run a dnscache service for primary LAN queries, but the only way to do this with Samba seems to be iptables preroute configuration to redirect port 53 requests. Thanks, -- Greg J. Zartman Board Member, and Developer Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...like to run a dnscache service for primary LAN queries, but the > only way to do this with Samba seems to be iptables preroute > configuration to redirect port 53 requests. > > Thanks, > Just run Bind9 and use this as the Samba dns server instead: rowland at devstation:~$ dig www.koozali.org ; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> www.koozali.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57529 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 13, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: versio...

When you first provision an AD DC, is there a way to control where samba-tool puts all of the AD data files? -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

...-L localhost -U 'zartman/admin' Enter zartman/admin's password: Domain=[ZARTMAN] OS=[Unix] Server=[Samba 3.6.18] tree connect failed: NT_STATUS_PIPE_BROKEN I'm having a hard time troubleshooting this to figure out where the problem lies. Thanks, -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...l users, you do not need to add (and in fact should not) the > 'posixAccount' objectClass'. Yup, I did find this objectClass, which I have been using to delineate Centos (SME Server) users from other users in the active directory. Thanks Rowland. -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...groups the user is a member of. I'm wondering if their is a mechanism in Samba AD that sets on of these if the other is set? That is, if I set all user members for a given group, will active directory update the user "memberOf" attribute? Thanks, -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

What is the best way to store file system quotas for users in the Active Directory? I'm not seeing any standard attributes for this, so it looks like the best way is to extend the schema. Is this correct? Thanks, Greg -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...This is what I suspected. Thanks for confirming. I was able to rebuild the COS 7 RPM with the ldb-tools that work fine with active directory. I just wanted to make sure that the upstream tools would not work, and you have confirmed they won't. Thank you -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...e tools to add an attribute to the Active Directory schema using : --option="dsdb:schema update allowed"=true' The stand alone tools say they don't know that this --options input means. Is there a difference syntax for these stand alone tools? -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...ternal_ldb 1 +Requires: libldb -Requires: pyldb +#Requires: pyldb -%{_libdir}/samba/libldb-cmdline.so +#%{_libdir}/samba/libldb-cmdline.so +%{_libdir}/samba/libldb-cmdline-samba4.so +%{_libdir}/samba/libpyldb-util.so.1 +%{_libdir}/samba/libpyldb-util.so.1.1.20 -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...ig ZARTMAN.LOCAL:schema_mode = rfc2307 idmap config ZARTMAN.LOCAL:range = 10000-99999 winbind nss info = rfc2307 winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind refresh tickets = Yes -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...s to be doing some kind of watered down or modified version of Samba 4 with some of the tools disabled. Are they still holding off from full AD implementation in their packages because of the MIT Kerberos issues identified in previous discussions? Thanks! -- Greg J. Zartman Board Member for the Koozali SME Server Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

...s uses Samba 4 on *nix file servers don't talk about this more. What I'm doing does work in a sense, but I'm wondering what the proper way to manage quotas on a Samba 4 file server? So far, I've not found an answer to this questions. Thanks, -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...with disk quotas for users and have seen some who have extended the Samba 4 AD schema to include a quota attribute. For example, I found this schema extension here: http://fossies.org/linux/quota/ldap-scripts/quota.schema Is there a common method for doing this? -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...hings. I'm wondering if there is something like samba-tool for query user from the AD other than just the username? I see that I can use and LDAP perl module to query the LDAP side of the AD, but wanted to see if Samba has a utility for doing this. Thanks! -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

...307 idmap config ZARTMAN:range = 10000-99999 One more thing is that it's not recommended to have a .local domain realm. Have a look at this above glibc... https://wiki.samba.org/index.php/Samba_Troubleshooting Regards Tim Am 24. Februar 2015 07:28:11 MEZ, schrieb Greg Zartman <gzartman at koozali.org>: >I'm working to setup Samba as a domain member to a Windows Server >active >directory, and I keep hitting road blocks. There's some real >terminology >hurdles in the wiki. > >In a nutshell, my problem is this: I setup a Windows 2012 Essentials >ADS >dom...

...itor" tap where you can look at all attributes and edit the "UIDnumber" I just want to verify that you need to set the "UIDnumber" in the Attribute Tab??? I'm doing some trouble shooting and want to eliminate problems. Thanks! Greg -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

I'm installing sernet samba4 packages with active directory support on RHEL 6. Is it required that I install kerebros packages seperately? Kerebros does t seem to be an Install require . I wasn't sure if sernet had somehow rolled sernet with kerebros??.?. Any help greatly appreciated. Greg

Greg, > Unfortunately, these attributes do not exist as standard, so you would > either have to add a user with ADUC or manually add them yourselves with > ldbedit. As standard on windows, they both start at '10000', though you > can set them to whatever you require, just make sure that they do not > interfere with any local Unix users. If you like to manage Unix users

...want to do; but the primary source of info seems to be this list. I feel like every question I ask is taken as a stupid one. This makes it very difficult to deploy Samba 4 I've been examining portions of the Samba 4 python code, but progress is very slow. -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000