search for: lyne

...STATUS_ACCESS_DENIED -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Unencrypted messages have no legal claim to privacy Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

I have this on the DC smb4-1.brockley.harte-lyne.ca: samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=6, Children=0 SOA: serial=7, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=support.harte-l...

[root at smb4-1 ~ (master)]# samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=4, Children=0 SOA: serial=3, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=110, ttl=360...

..., GSSAPI_BUILTIN : on GSSAPI_MIT : off LDAP : on . . . NSUPDATE : off My smb4.conf file contains this: [global] bind interfaces only = Yes dns forwarder = 192.168.18.161 216.185.71.33 interfaces = lo0 localhost smb4-1 netbios name = SMB4-1 realm = BROCKLEY.HARTE-LYNE.CA server role = active directory domain controller workgroup = BROCKLEY idmap_ldb:use rfc2307 = yes vfs objects = dfs_samba4 zfsacl server services = -nbt rndc command = /usr/bin/true log level = 1 log file = /var/log/samba4/smbd.log max log size = 10000 debug timestamp = yes...

On 07.07.2020 21:14, Rowland penny via samba wrote: > On 07/07/2020 20:00, James B. Byrne via samba wrote: >> I have this on the DC smb4-1.brockley.harte-lyne.ca: >> >> samba-tool dns query localhost brockley.harte-lyne.ca >> brockley.harte-lyne.ca >> ALL -U administrator >> Password for [BROCKLEY\administrator]: >> ?? Name=, Records=6, Children=0 >> ???? SOA: serial=7, refresh=900, retry=600, expire=86400, mint...

.... . . dns update command = /usr/local/sbin/samba_dnsupdate nsupdate command = /usr/local/bin/samba-nsupdate -d -g And this is what results when I run: samba_dnsupdate --verbose -d8 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 (add) Starting GENSEC mechanism gssapi_krb5_sasl GSSAPI credentials for SMB4-1$@BROCKLEY.HARTE-LYNE.CA will expire in 35998...

I am testing DC administration using samba-4.10.15 on FreeBSD-12.1p6 and have run across this: [root at smb4-2 ~ (master)]# samba-tool domain join BROCKLEY.HARTE-LYNE.CA DC -U"BROCKLEY\administrator" INFO 2020-06-25 14:26:10,692 pid:47306 /usr/local/lib/python3.7/site-packages/samba/join.py #104: Finding a writeable DC for domain 'BROCKLEY.HARTE-LYNE.CA' INFO 2020-06-25 14:26:10,748 pid:47306 /usr/local/lib/python3.7/site-packages/samba/join.py...

This is all the diagnostic information I can think of at the moment: [root at smb4-1 ~ (master)]# klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: administrator at BROCKLEY.HARTE-LYNE.CA Issued Expires Principal Jul 2 10:35:11 2020 Jul 2 20:35:11 2020 krbtgt/BROCKLEY.HARTE-LYNE.CA at BROCKLEY.HARTE-LYNE.CA [root at smb4-1 ~ (master)]# grep nsup /usr/local/etc/smb4.conf dns update command = /usr/local/bin/nsupdate nsupdate command = /usr/...

Wed Jul 8 16:09:19 UTC 2020, Rowland penny wrote: > No, it is '@' for the name, not 'brockley.harte-lyne.ca' Previously I had tried that as well with similar results as shown below: [root at smb4-1 ~ (master)]# samba-tool dns help delete Usage: samba-tool dns delete <server> <zone> <name> <A|AAAA|PTR|CNAME|NS|MX|SRV|TXT> <data> [root at smb4-1 ~ (master)]# samba-to...

...Default: dns update command = ${prefix}/sbin/samba_dnsupdate > > Example: dns update command = /usr/local/sbin/dnsupdate > > You probably need both. > > Rowland If I use the -g option to nsupdate then I see this: update(nsupdate): A ForestDnsZones.brockley.harte-lyne.ca 192.168.18.161 Calling nsupdate for A ForestDnsZones.brockley.harte-lyne.ca 192.168.18.161 (add) Successfully obtained Kerberos ticket to DNS/SMB4-1.brockley.harte-lyne.ca as SMB4-1$ /usr/local/bin/nsupdate: cannot specify -g or -o, program not linked with GSS API Library Failed nsupdate: 1 Wh...

...hich nsupdate /usr/local/bin/nsupdate [root at smb4-1 ~ (master)]# grep nsupdate /usr/local/etc/smb4.conf dns update command = /usr/local/bin/nsupdate -g samba_dnsupdate --verbose -d4 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 (add) Successfully obtained Kerberos ticket to DNS/SMB4-1.brockley.harte-lyne.ca as SMB4-1$ Failed nsupdate: SRV _ldap._tcp...

...I am going to ask if any of you have gotten this set-up (Asterisk11 with Snom870s using TLS) to work and if so could you provide the details? I have this in Asterisk sip.conf (loaded through FreePBXs sip_general_additional.conf). tcpenable=yes tlsenable=yes tlscertfile=/etc/pki/asterisk/ca.harte-lyne.hamilton.asterisk.crt tlscafile=/etc/pki/tls/certs/ca-bundle.crt tlsdontverifyserver=yes tlscipher=ALL tlsclientmethod=tlsv1 And I have this for the test device context: [41712] deny=0.0.0.0/0.0.0.0 secret=NearlyANastyThat dtmfmode=rfc2833 canreinvite=no context=from-internal host=dynamic trustrp...

...3 - 216.185.71.34 DNS04 - 209.47.176.34 - offline DNS01 is a master DNS02-04 are slaves of 216.185.71.33 All are listed as authoritative for the zone test.com The following tests are run from a caching name server configured to forward queries as follows: /etc/resolv.conf search hamilton.harte-lyne.ca harte-lyne.ca harte-lyne.com halisp.net nameserver 0.0.0.0 nameserver 216.185.71.33 nameserver 209.47.176.33 Extract from /etc/named.conf ... forwarders { 216.185.71.33; 209.47.176.33; 216.185.71.34; 209.47.176.34;...

...> On 02/06/2020 16:03, James B. Byrne via samba wrote: >> Samba-4.11.8 on FreeBSd-12.1p5 >> >> How does one list all of the actual DNS records for Samba administered zones, >> forward and reverse? >> > Try: > > samba-tool dns query localhost brockley.harte-lyne.ca > brockley.harte-lyne.ca ALL -U administrator > I get the same result: samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=3, Children=0 SOA: serial=1, refresh=900, retry=600, expire...

On 07/07/2020 20:00, James B. Byrne via samba wrote: > I have this on the DC smb4-1.brockley.harte-lyne.ca: > > samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca > ALL -U administrator > Password for [BROCKLEY\administrator]: > Name=, Records=6, Children=0 > SOA: serial=7, refresh=900, retry=600, expire=86400, minttl=3600, > ns=SMB4-1.brockley.h...

Previously, when I did this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator Then I saw this: >> Password for [BROCKLEY\administrator]: Now I see this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator >> Cannot do GSSAPI to an IP address...

On Wed Jul 8 13:46:41 UTC 2020, Rowland penny wrote: > > This is because it is an 'A' record and not an 'NS' record. samba-tool dns delete localhost brockley.harte-lyne.ca brockley.harte-lyne.ca. A 192.168.216.162 -U administrator Password for [BROCKLEY\administrator]: ERROR(runtime): uncaught exception - (9701, 'WERR_DNS_ERROR_RECORD_DOES_NOT_EXIST') File "/usr/local/lib/python3.7/site-packages/samba/netcmd/__init__.py", line 185, in _run...

On 07.07.2020 22:14, Mani Wieser via samba wrote: > > On 07.07.2020 21:14, Rowland penny via samba wrote: >> On 07/07/2020 20:00, James B. Byrne via samba wrote: >>> I have this on the DC smb4-1.brockley.harte-lyne.ca: >>> >>> samba-tool dns query localhost brockley.harte-lyne.ca >>> brockley.harte-lyne.ca >>> ALL -U administrator >>> Password for [BROCKLEY\administrator]: >>> ?? Name=, Records=6, Children=0 >>> ???? SOA: serial=7, refresh=900, r...

Samba-4.11.8 on FreeBSd-12.1p5 How does one list all of the actual DNS records for Samba administered zones, forward and reverse? When I use the dns query option of samba-tool I get a summary but no detail: samba-tool dns query localhost brockley.harte-lyne.ca @ ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=3, Children=0 SOA: serial=1, refresh=900, retry=600, expire=86400, minttl=3600, ns=smb4-1.brockley.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=1, ttl=3600) NS: sm...

...ugh the book _Implementing Samba 4_ and revalidating my existing install. I am at the point where I need to check the contents of the ldap database. The instructions in the book say to do this: ldapsearch -x -h localhost -s base - \ Dcn=Administrator,cn=Users,dc=server-02,dc=domain-02,dc=harte-lyne,dc=ca -W Which produces this output: # extended LDIF # # LDAPv3 # base <> (default) with scope baseObject # filter: (objectclass=*) # requesting: - Dcn=Administrator,cn=Users,dc=server-02,dc=domain-02,dc=harte-lyne,dc=ca -W # # dn: # search result search: 2 result: 0 Success # numRespons...