search for: lph

Hi LPH & David, Im also interested in using kerberos authentication and tried your hints. Im using Ubuntu 14.04.3 Server on this machine. On 04.11.2015 08:52, L.P.H. van Belle wrote: > Ok, do the following. > > Remove all you modifications from pam so its back to original. > > apt...

...ows AD domain -- so as far as rfc2307 attributes, I'm > not sure if they have been enabled in the AD to make things work . which > is wy I used the rid method for the idmap config. > > > On Wed, Nov 4, 2015 at 1:34 AM, Oliver Rath <rath at mglug.de> wrote: > >> Hi LPH & David, >> >> Im also interested in using kerberos authentication and tried your >> hints. Im using Ubuntu 14.04.3 Server on this machine. >> >> On 04.11.2015 08:52, L.P.H. van Belle wrote: >>> Ok, do the following. >>> >>> Remove all yo...

I did not enable kerberos auth in the sshd_config file.. I didn't think I needed to if my pam stack was set to use winbind On Wed, Nov 4, 2015 at 1:34 AM, Oliver Rath <rath at mglug.de> wrote: > Hi LPH & David, > > Im also interested in using kerberos authentication and tried your > hints. Im using Ubuntu 14.04.3 Server on this machine. > > On 04.11.2015 08:52, L.P.H. van Belle wrote: > > Ok, do the following. > > > > Remove all you modifications from pam so i...

..."ext3_fs.h" #include "xfs_sb.h" +#include "luks_fs.h" /* * Slightly cleaned up version of jfs_superblock to @@ -168,6 +169,19 @@ return 0; } +static int luks_image(const unsigned char *buf, unsigned long long *blocks) +{ + const struct luks_partition_header *lph = + (const struct luks_partition_header *)buf; + + if (!memcmp(lph->magic, LUKS_MAGIC, LUKS_MAGIC_L)) { + /* FSSIZE is dictated by the underlying fs, not by LUKS */ + *blocks = 0; + return 1; + } + return 0; +} + struct imagetype { off_t block; const char name[12]; @@ -179,6 +193,7 @@...

...in place? My AD is a pure windows AD domain -- so as far as rfc2307 attributes, I'm not sure if they have been enabled in the AD to make things work . which is wy I used the rid method for the idmap config. On Wed, Nov 4, 2015 at 1:34 AM, Oliver Rath <rath at mglug.de> wrote: > Hi LPH & David, > > Im also interested in using kerberos authentication and tried your > hints. Im using Ubuntu 14.04.3 Server on this machine. > > On 04.11.2015 08:52, L.P.H. van Belle wrote: > > Ok, do the following. > > > > Remove all you modifications from pam so i...

...d = ad) Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mathias dufresne > Verzonden: woensdag 22 juni 2016 15:31 > Aan: lingpanda101 at gmail.com > CC: samba > Onderwerp: Re: [Samba] Rights issue on GPO > > @LPH van Belle > I did tried (and still use) "acl_xattr:ignore system acls = yes" as shown > on the first mail of that thread. And even using that rights errors on GPO > files _are_ an issue. Otherwise that thread won't have been opened of > course : ) > > Regarding how...

On 18/07/2018 14:43, Rowland Penny wrote: > Go on, spoil us by actually giving us some information, such as what > distro is the DC running on ?, what is in smb.conf, what are your > clients running etc etc. > > Rowland > Hello Rowland, Gaiseric, LPH & Miguel, Thanks for all of your replies! Not having much time at the moment, but to answer some questions... The server is running Debian 9, our clients all are running Windows 10 Professional - there's 4 desktops altogether.  Two desktops are a couple of years old but very poor, they...

On Tue, 11 Jul 2017 12:05:28 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 11:57 schrieb Rowland Penny: > > > Remove this local Unix group, you cannot have a group (or a user) > > in AD and /etc/group > > ok, done > > > Probably because '11029' isn't a 'RID', it will be a uidNumber. > >

On 09.07.20 10:29, L.P.H. van Belle via samba wrote: > Hai Basti, > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >> basti via samba >> Verzonden: donderdag 9 juli 2020 10:20 >> Aan: samba at lists.samba.org >> Onderwerp: [Samba] AD Users on Linux Laptop >> >> Hello, >> I have setup

...gt;>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens mathias >> dufresne >>> Verzonden: woensdag 22 juni 2016 15:31 >>> Aan: lingpanda101 at gmail.com >>> CC: samba >>> Onderwerp: Re: [Samba] Rights issue on GPO >>> >>> @LPH van Belle >>> I did tried (and still use) "acl_xattr:ignore system acls = yes" as shown >>> on the first mail of that thread. And even using that rights errors on >> GPO >>> files _are_ an issue. Otherwise that thread won't have been opened of >>...

On 06/22/2016 02:44 PM, lingpanda101 at gmail.com wrote: > Why is is when I do a getfacl I do not see the mapping of BUILTIN like > others? do you have winbind in /etc/nsswitch.conf? mj

This seems to be common thread on the list, but I'm pulling my hair out and have to ask.. I've been following a couple of guides and using AD to authenticate users on my linux system. These include the ubuntu guide -- https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto - https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member -

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins" /srv/share 3) chown -R "<DOMAIN>\Administrator" /srv/share I'm leaning towards 2, but would like a better idea of pros and cons so I may complete the wiki. Rowland: Fro...

...gt; > Verzonden: woensdag 22 juni 2016 15:31 > Aan: lingpanda101 at gmail.com > <mailto:lingpanda101 at gmail.com> > CC: samba > Onderwerp: Re: [Samba] Rights issue on GPO > > @LPH van Belle > I did tried (and still use) "acl_xattr:ignore system > acls = yes" as shown > on the first mail of that thread. And even using that > rights errors on > > GPO > >...

...juni 2016 15:31 >>> Aan: lingpanda101 at gmail.com >>> <mailto:lingpanda101 at gmail.com> >>> CC: samba >>> Onderwerp: Re: [Samba] Rights issue on GPO >>> >>> @LPH van Belle >>> I did tried (and still use) "acl_xattr:ignore system >>> acls = yes" as shown >>> on the first mail of that thread. And even using that >>> rights errors on >>> >&...

Hi LPH, > Drawbacks for RID, yes, multiple, but maybe it does not apply for you. > > Read the Advantages and Disadvantages > https://wiki.samba.org/index.php/Idmap_config_ad > https://wiki.samba.org/index.php/Idmap_config_rid > > My reason for NOT using RID on FILESERVER setups. &gt...

...gt; Sorry for the delayed response, and top posting. > > To recap: > I'd like to complete the member server wiki so that ACLs can be set from > windows without taking undocumented steps. > > The three ways I've found to do this are: > > 1) map root to administrator. (LPH VanBelle's script uses this option.) This is the way that I have be using for some time, it works, but is it the best way ? You are making the windows Administrator have exactly the same powers that 'root' has, do you want/need to do this ? > > 2) chmod 0775 then chgrp "&...

Am 2017-05-24 um 13:33 schrieb L.P.H. van Belle via samba: > Debian 4.2.14.. Hmmm. This is why i make the 4.5.x and 4.6.x packages. > > I suggest, or wait (few hours) and upgrade to my 4.6.4 package or get the 4.5.8 package for my apt now. > I'll do the 4.5.10 after the 4.6.4, im moving in office to 4.6.4 due to the many bugfixes ive seen. > > I'll post on the list

...01svdeb02:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = BUERO realm = secret.AT netbios name = DC server role = active directory domain controller idmap_ldb:use rfc2307 = yes load printers = No printcap name = /dev/null log level = 2 dns forwarder = 192.168.16.111 # lph template shell = /bin/bash sdb:schema update allowed = no time server = yes usershare path = [netlogon] path = /var/lib/samba/sysvol/secret.at/scripts read only = No acl_xattr:ignore system acls = Yes [sysvol] path = /var/lib/samba/sysvol read only = No acl_xattr:ignore system acls = Ye...

...../source3/winbindd/winbindd_group.c:45(fill_grent) Dez 11 20:00:16 backup winbindd[1390]: Failed to find domain 'NT AUTHORITY'. Check connection to trusted domains! This line repeated within seconds after reboot (reconnect with DM?), after that no more. DC, samba 4.6.11, debian 9.3 (LPH packages): # smb.conf (again): [global] workgroup = ARBEITSGRUPPE realm = arbeitsgruppe.hidden.tld netbios name = BACKUP server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 10.0.0.254 [netlogon] path = /var/lib/samba/sysvol/hidden.tld/scripts r...