search for: ldapclient

....com.pk.gethostent vlv_index Entry created tipu.com.pk.getnetent vlv_index Entry created tipu.com.pk.getpwent vlv_index Entry created tipu.com.pk.getrpcent vlv_index Entry created tipu.com.pk.getspent vlv_index Entry created idsconfig: Setup of iDS server train01 is complete. After This when i run ldapclient it's giving me the following error ldapclient init -v -a proxydn=cn=proxyagent,ou=profile,dc=tipu,dc=com,dc=pk -a domainname=tipu.com.pk -a proxypassword=proxy 192.168.1.23 findDN: begins findDN: calling __ns_ldap_default_config() found 2 namingcontexts findDN: __ns_ldap_list(NULL, "(&am...

On 16/02/2020 15:03, Paul Littlefield via samba wrote: > 1) finding a way for ALL 70+ desktops to look up the DCs properly and switch to a running one if one is not available (otherwise what's the point right?) Hello Samba Mailing List, Just to be clear, I am using Ubuntu Server 18.04.4 LTS running Samba 4.7.6 on both DCs. Is this the Samba version I should be using for this

...I selected LDAP options in the "authconfig-tui" application, per the documentation here: http://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html when I try to query the directory for user information though, I get no results using the ldapsearch command [root at ldapclient ~]# ldapsearch -x uid=crichards # extended LDIF # # LDAPv3 # base <> with scope subtree # filter: uid=crichards # requesting: ALL # # search result search: 2 result: 0 Success # numResponses: 1 I'm not quite sure what I'm missing, as I can manually query the directory for, say...

Hi all, I''m trying to figure out if I can serve a certain template that matches a hostname or serve the default like I could if this was just a file. Works: file { ''/etc/yum.conf'': ensure => file, source => ["puppet://puppet/yum/yum.conf.$hostname", "puppet://puppet/yum/yum.conf"], } Trying to figure out:

Hi, In a file resource I want to be able to specify multiple template contents. If the 1st template doesn''t exist use the 2nd listed and so on. Much like how the source attribute works. Basically this: file { "/tmp/somefile.txt": ensure => present, content => [ template("somefile-$fqdn.erb"),

...LL # # batch1.phy.bnl.gov, Hosts, phy.bnl.gov dn: cn=batch1.phy.bnl.gov,ou=Hosts,dc=phy,dc=bnl,dc=gov objectClass: device objectClass: ipHost objectClass: puppetClient objectClass: top cn: batch1.phy.bnl.gov ipHostNumber: 130.199.22.134 puppetclass: basicsystem puppetclass: cupsserver puppetclass: ldapclient parentnode: basenode # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 -------------------------------------- I think I have a hint as to the actual problem. I tried to add the above node definition directly in my site.pp like: node batch1.phy.bnl.gov { # <...

...2.168.0.218 and > 192.168.0.219 and they both work as nameservers perfectly. This might be a problem down the road. The Samba Internal DNS does NOT round-robin -- it will always return your list of DC's in the same order, so requests usually go to the first result. If you have any simple ldapclients (PHP clients, for example), it will query in order. I don't know if the ldapclient is smart enough to look at a 2nd DNS response if the 1st doesn't respond, but probably not -- further implied by "password server = <dc1> <dc2>" and failover/redundancy is handled sequ...

Does this mean that my samba is ready to connect to LDAP server? root at webdev # ./smbd -b |grep LDAP HAVE_LDAP_H HAVE_LDAP HAVE_LDAP_ADD_RESULT_ENTRY HAVE_LDAP_INIT HAVE_LDAP_INITIALIZE HAVE_LDAP_SET_REBIND_PROC HAVE_LIBLDAP LDAP_SET_REBIND_PROC_ARGS root at webdev # Thanks! Paras.

Hi all, I am experimenting with samba 4. I have existing data on NTFS partition and want to share them via samba. But I have problems with permissions (ACL). There is an option: ntvfs handler that tells how mapping of permissions between unix and windows world shall behave. But there is lack of documentation. So I tried posix, simiple but in either case I wasnot able to write even set permissions

...e svcadm refresh idmap > > > At this point smb/server and idmap should be able to look up AD users > and map them to a local user whose username is the same as the user's > CN field in AD. We then populate all of the AD users in the local > nsswitch database by running "ldapclient" and telling it which AD > attributes to map to each property in the nsswitch database: > https://docs.oracle.com/cd/E23824_01/html/821-1455/clientsetup-49.html If Opensolaris is like Linux, you will not need local users, as your windows users can be made to be Unix users as well. &gt...

...running samba 3.0.22 on Solaris 10 x86, using a Sun Directory Server as ldapsam backend. The samba schema used is the recent version from .22, and I am using the IDEALX smbldap-tools 0.9.2. I split users, computers and groups into 3 different OUs and configured samba, smbldap-tools and Solaris ldapclient respectively. smb.conf: ldap suffix = dc=new10,dc=com ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap machine suffix = ou=Computers add machine script = /opt/IDEALX/sbin/smbldap-useradd -t 0 -w "%u" (I also tried -w "%m") smbldap.conf: suffi...

We have a central LDAP server for our enterprise on a Linux box. I have installed Samba 3.4.4 server on an AIX server and trying to get users authenticated via LDAP server. So far my efforts have been unsuccessful. Here is my ldap section of the smb.conf file: passdb backend = ldapsam:ldaps://<company_ldap_server>/ ldap ssl = start tls ldap suffix = dc=xxx,dc=yyy,dc=zzz ldap delete dn =

...lv.conf shows 2ndary DNS servers, which in turn sync data from the AD Domain controllers. I don't think this is a DNS issue since "net join" and "net ads join" are locating the AD domain controllers. /etc/krb5/krb5.conf is set up for the MYDOMAIN realm. I can use the ldapclient and kinit to join the machine to the MYDOMAIN AD realm for "Unix" level user and group lookups (via ldap) and kerberos authentication. I did find that Solaris "native" kerberos and Samba expect krb5.keytab files in different locations , which I resolved with a sym link be...

...ory_based_mapping=astring: name svcadm refresh idmap At this point smb/server and idmap should be able to look up AD users and map them to a local user whose username is the same as the user's CN field in AD. We then populate all of the AD users in the local nsswitch database by running "ldapclient" and telling it which AD attributes to map to each property in the nsswitch database: https://docs.oracle.com/cd/E23824_01/html/821-1455/clientsetup-49.html We have two problems, both of which I think may be related to the same underlying issue of not being able to communicate with the Samba...

Hi List, I created a domain member server in my samba domain. I start to realize that there are some issues when colleagues could not access some folders in the their shares. After searching for a solution I found that on that member server I have no "samba" groups available. First of all my setup: Domain controller: CentOS 6.2 x86_64, latest updates installed Samba 3.5.10 (from

Not sure if this is where I should ask about this, but if I try to run any of the smbldap-* scripts, I get the following kind of output: oink:/usr/local/sbin # ./smbldap-populate Using builtin directory structure erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol 'tcp') at /usr/local/sbin//smbldap_tools.pm line 153. I feel like this must be from a typo

...ain controllers. I don't think this is a DNS issue > since "net join" and "net ads join" are locating the AD domain > controllers. Try pointing the nameservers directly at the DCs. > > /etc/krb5/krb5.conf is set up for the MYDOMAIN realm. I can use the > ldapclient and kinit to join the machine to the MYDOMAIN AD realm for > "Unix" level user and group lookups (via ldap) and kerberos > authentication. I did find that Solaris "native" kerberos and > Samba expect krb5.keytab files in different locations , which I > resolve...

...t # other password required pam_dhkeys.so.1 other password requisite pam_authtok_get.so.1 other password requisite pam_authtok_check.so.1 other password required pam_authtok_store.so.1 server_policy ksh uname -a SunOS V01 5.10 Generic_150400-15 sun4u sparc SUNW,SPARC-Enterprise ===== ldapclient list NS_LDAP_FILE_VERSION= 2.0 NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=evolium,dc=com NS_LDAP_BINDPASSWD= {NS1}ecc423aad0 NS_LDAP_SERVERS= V01 NS_LDAP_SEARCH_BASEDN= dc=evolium,dc=com NS_LDAP_AUTH= tls:simple NS_LDAP_SEARCH_REF= FALSE NS_LDAP_SEARCH_SCOPE= one NS_LDAP_SEARCH_TIME= 30...

...this same Mac OS X 10.4.x Server running Open Directory (Open LDAP wrapped in nice Apple packaging, as I understand it!) When a client attempts to map shares from the Sun x4200 fileserver, all authentication credentials come from the Open LDAP Mac OS X Server it has been bound to (by using ldapclient -manual commands). In it's current state, it works. ...however... I'd very much like to run samba on this Solaris fileserver, so that my windows clients can connect to it, as my Mac clients currently do over NFS. So, some questions: 1. How do I install a "sane" samba ont...

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 2:23:02 AM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Mon, 9 Oct 2017 18:04:45 -0500 (CDT) > Mike Ray via samba <samba at lists.samba.org> wrote: >