search for: linforpros

...en authenticated and gained accessed to a share? I would like to test several users from one and the same windows workstation and do not know how to log-off after successfully accessing a share. Samba 4.5 standalone Workstation working from a domain account or from a local account. best regards linforpros

Hi, The following problem: [root]#kinit administrator kinit: Cannot contact any KDC for realm 'DC-STATIC.LUUFORPROS.COM' while getting initial credentials A restart of samba.service finally starts krb5kdc: [root]#systemctrl restart samba [root]# ps axf |grep krb 1249 pts/0 S+ 0:00 \_ grep --color=auto krb 1212 ? S 0:00 | \_ /usr/sbin/krb5kdc -n

...10. Wil they "see" the standalone server while still being under the Win DC control? 3. Do the workstations have to somehow "leave" the Windows AD DC first in order to start using the standalone samba server? If yes then how one does do that? Thanks for any hints best regards linforpros

There are two ubuntu 16.04 samba 4.5 servers. Ubuntu ADDC and a Member (ubuntu-dm1) >From Member "wbinfo -u" shows shows users of ADDC >From Member "net ads join -U administrator" was successfull with no errors. The dns A record was added in ADDC. But getent passwd <user> shows no results. DMember's /etc/nsswitch.conf passwd: compat winbind group:

Hello, ldbsearch -H .... fails with a message that samba_dsdb is not found and LDB_MODULES_PATH needs to be set. Fixing it temporarily with: export LDB_MODULES_PATH=/usr/lib64/samba/ldb allows ldbseach command to work. Is it critical for ADDC operation though? [root at feddc ~]# rpm -q samba libldb ldb-tools samba-dc samba-4.7.0-12.fc27.x86_64 libldb-1.2.2-1.fc27.x86_64

Both ubuntu machines have iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination And the windows server firewall off How can that happen to me... I am speechless Lin

...her name and add all the future users to that group? In the back of my head I may consider converting this standalone srv into a Domain Member. Do you have an advice what to do in this case? Besides: groupadd "Domain Users" produces a warning - not a valid group name Lin best regards linforpros

On Fri, 17 Feb 2017 07:02:23 -0600 Lin Pro <linforpros at gmail.com> wrote: > Hi, thank for the reply. Here is the smb.conf on the Domain Member > [global] > > idmap uid = 10000-20000 > idmap gid = 10000-20000 Remove the above lines, they are replaced by the 'idmap config' lines and you shouldn't have both. > clien...

On Fri, 17 Feb 2017 12:04:43 -0600 Lin Pro <linforpros at gmail.com> wrote: > >>> You are using the winbind 'ad' backend, do your users have a > 'uidNumber' attribute containing a unique number inside the range > '10000-999999' ? > Does 'Domain Users' have a 'gidNumber' attribute inside t...

On Fri, 17 Feb 2017 15:37:27 -0600 Lin Pro <linforpros at gmail.com> wrote: > ////ldbsearch does though, or ADUC on a windows version less than > 10//// > > Are you saying then that the problem would be in the group ID numbers > and user ID numbers in the case that I'm describing? What I am saying is that it looks like your use...

Is using ADUC from a windows machine a complete substitute of what the wiki below explains? https://wiki.samba.org/index.php/LDB#ldbmodify Just curiuos because it seems beyond me at the moment to dig into it. Regards

...and Domain Admins But the Member Server has that permission granted only to BUILTIN\Administrators. Why? Is this normal? Should the permissions be set on the member server instead, not on the ADDC? or whould they propagate across from ADDC to Member Server...? thank for hints -- best regards linforpros

Thank you for your guidance. I must have something seriously wrong in the settings. Here is the eACL share: root at ubuntu-dm1:~# ls -l /srv/samba/eACLshare/ -d drwxr-xr-x 2 root domain admins 4096 Feb 21 09:00 /srv/samba/eACLshare/ >From Windows as an administrator of the domain, Comp Management - Connect to another computer -> System Tools I get UBUNTU-DM1 cannot be connected.... But

root at ubuntu-dm1:~# getent group Domain\ Admins domain admins:x:10004:

On Tue, 21 Feb 2017 14:58:34 -0600 Lin Pro <linforpros at gmail.com> wrote: > Here are ADDC files you requested to help me out: OK, make /etc/krb5.conf on both machines look like this: [libdefaults] default_realm = SIOUXFALLS.SAMDOM.ORG dns_lookup_realm = false dns_lookup_kdc = true On the domain member smb.conf, move: vfs objects = acl_x...

I made the changes you proposed but still my system must be messed up. Please have a look at the screenshots below... may be you or some other guru would know how to come out of this mess. http://pasteboard.co/Ba9Ex0NQD.png http://pasteboard.co/3Iq39El98.png By the way, is there a clean way to reset ADDC and DM so that I could start fresh? those two virt machines are just lab machines. I can do

On Tue, 21 Feb 2017 16:25:24 -0600 Lin Pro <linforpros at gmail.com> wrote: > I made the changes you proposed but still my system must be messed up. > Please have a look at the screenshots below... may be you or some > other guru would know how to come out of this mess. > > > http://pasteboard.co/Ba9Ex0NQD.png > http://pasteb...

Hi, Just curious if fedora samba packages which are curently at version 4.5.5 are AD DC and can be used as Ubuntu 4.3.11 as AD DC? -- best regards linforpros

On Tue, 26 Sep 2017 20:19:03 +0200 Marc Muehlfeld <mmuehlfeld at samba.org> wrote: > Hi, > > As you said: It's Fedora 27 _rawhide_. You should report a bug: > https://bugzilla.redhat.com/ > Please don't forget to attach logs, etc. Ok, I just opened a bug over there. But in the meantime found out that: Systemctl status samba.service shows the following as well:

...amba.org] Namens > Rowland Penny via samba > Verzonden: donderdag 28 september 2017 9:59 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] ldbsearch fails due to > LDB_MODULES_PATH not set, is it critical for ADDC operation? > > On Thu, 28 Sep 2017 01:20:28 -0500 > LinforPros IT Solutions via samba <samba at lists.samba.org> wrote: > > > Hello, > > ldbsearch -H .... fails with a message that samba_dsdb is not found > > and LDB_MODULES_PATH needs to be set. > > > > Fixing it temporarily with: > > export LDB_MODULES_PATH=/us...