search for: lillimoth

Displaying 14 results from an estimated 14 matches for "lillimoth".

2013 Feb 12
1
Can't get working nsswitch, specifically "wbinfo -u"
...I attached excerpt from wbinfo -u strace. There are timeouts accessing /usr/local/samba/var/lib/winbindd_privileged (socket exists and after samba restart is created again) What's wrong with that? Where to search for a problem? I think I have similar problem with post <50EE8D9D.2000707 at lillimoth.com> from 2013-01-10, only there were waiting time for a couple of seconds, mine are couple of minutes and I don't get user list. May it be, because of more than 1000 AD users we have? Sig. -------------- next part -------------- 15:19:55.446218 read(3, "/usr/local/samba/var/lib/wi...
2013 Jan 10
1
Slow winbind lookups
Hi all, I have a Samba 4.0.0 domain running on a Gentoo box with a 3.7.0 kernel. I have added 'winbind' to the passwd and group lines in /etc/nsswitch.conf wbinfo -t returns immediately saying trust checking succeeded. wbinfo -g returns immediately with a list of groups wbinfo -u takes a long time to return a list of users # time wbinfo -u | wc -l 336 real 0m4.211s user 0m0.000s
2012 Dec 05
1
Remove dead server from domain.
Hiya, I have an S4 domain running that I added another S4 machine to as an extra domain controller. That machine, unfotunately died (quite spectacularly I must say, think magic blue smoke). I would like to remove the dead domain controller from the domain. In ADUC I can see the DC under 'Domain Controllers' but when I try to delete it (having ticked the 'permanently offline'
2013 Jan 10
1
ACL on GPO directory does not match expected value from GPO object. AGAIN.
Hi all, Some (then all) of our workstations were complaining about incorrect ACLs on GPOs and were unable to read the gpt.ini to apply the GPOs. So I did a sysvolcheck and sure enough I'd lost the ACLs when I moved our sysvol share to a new location on the server (whoops, mea culpa). I ran a sysvolreset which took a long time to return (some 5 minutes, please see my post on slow winbind
2013 May 07
2
many smbd processes when sync'ing sysvol
Hi there, I have three S4 servers running as AD DCs. In order to keep the sysvol share in sync I'm using crontab to run the following command: /usr/bin/rsync -PavAX --delete root@<masterPDC>:/var/lib/samba/sysvol/ /var/lib/samba/sysvol/ However everytime this command is run a couple of extra smbd processes are started on the <masterPDC> (between 2 and 5 processes) which never
2013 May 09
0
Weird issue when accessing a samba4 domain member by IP vs hostname
Hi all, I seem to be posting a lot recently. I have just set up an S4 member server to a S4 AD DC. When trying to access from a windows XP client via \\xen-arch-s3-01 I get a username+password box which doesn't accept my credentials. If I try to access via \\192.168.0.111 I get straight on, no questions asked. Doing a loglevel 10 I see the following differences: \\xen-arch-s3-01 =
2013 May 31
1
'Administrator' account (UID 0) on Samba member of a Samba4 AD DC
Hi all, I have a samba server as member of an AD DC. In said AD DC there is the 'administrator' user which has the default UID of 0 (the same as root) from the ADDC: # id administrator uid=0(root) gid=513(SMC\Domain Users) groups=0(root),513(SMC\Domain Users),3000005(SMC\Group Policy Creator Owners),3000009(SMC\Enterprise Admins),512(SMC\Domain Admins),3000007(SMC\Schema Admins) from
2013 Oct 15
0
sysvol as a DFS Proxy share
Hi all, Is there any reason not to set the [sysvol] share up in the following way on secondary DCs: [global] host msdfs = yes [sysvol] msdfs root = yes msdfs proxy = \primary-ad\sysvol Thanks, Alex
2013 Oct 22
0
Timestamps on -d 10 output from samba-tool
Hi all, Is there a way of getting the same timestamps (hires if possible) on output to stdout/stderr that appear in the log files? For example, running: samba-tool ntacl sysvolreset -d 10 gives me level 10 debugging output but doesn't timestamp the lines. I have all the timestamp options enable in my smb.conf and my log-files have timestamps. Thanks, Alex
2013 Oct 17
1
How to profile a samba function
Hi all, I am trying to track down what is causing the slow running of sysvolreset on my system. I am aware that I have a great deal of files in my 'netlogon' directory which is why the problem is so apparent for me. sysvolreset takes approx 5+ minutes to complete. Tracing out samba-tool shows that the slowdown is caused by the samba function 'set_nt_acl'. This function takes
2013 May 08
1
Is nss_winbind required?
Hi all, Is it a necessity to use the winbind nss module? I have run a few tests and having it enabled creates a massive bottleneck. It's not nss_winbind itself that is the bottleneck but something in the background (I'm guessing uid/rid->username code). If I disable winbind in nsswitch.conf what impact will it have? Will the system continue to work? eg: #nss_winbind enabled on
2012 Oct 21
2
DNS Domain Name vs Samba4 Domain Name vs NT4 Domain Name
Hi, I am unclear on the relationship between the hostname, DNS domain, server's FQDN, NT4 domain name, etc. Quoting the HOWTO: "For the rest of the HOWTO we will assume that your DNS domain name is samdom.example.com, your short (also known as NT4) domain name is samdom, your Samba server's hostname is samba and the IP Address of your Samba server is 192.168.1.2." What is
2012 Oct 24
3
SYSVOL ACLs and GPOs
Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain and joined the XP machine to it. When I run the gpmc on the XP Pro machine and select: Forest: <domain name> -> Domains -> <domain name> -> Group Policy Objects -> Default Domain
2013 Oct 09
2
GPO Permissions _AGAIN_
Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have