search for: memberserv

...mba, 10.20.30.16) shares on a linux domain member server, where I logged on via ssh using AD my credentials. I am unable to get past the "mount error(126): Required key not available" error message. I have read and googled a lot, and could use some help. See this: > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & > [1] 2178 > domainuser at memberserver-45:~$ id -u > 2028 > domainuser at memberserver-45:~$ id -g > 513 > domainuser at memberserver-45:~$ klist > Ticket cache: FILE:/tmp/krb5cc_2028 > Default principal: domainuser at SAMBA.COMPANY...

...erver, where I logged on via ssh using AD my > credentials. > > I am unable to get past the "mount error(126): Required key not > available" error message. I have read and googled a lot, and > could use > some help. > > See this: > > > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & > > [1] 2178 > > domainuser at memberserver-45:~$ id -u > > 2028 > > domainuser at memberserver-45:~$ id -g > > 513 > > domainuser at memberserver-45:~$ klist > > Ticket cache: FILE:/tmp/krb5cc_2028 > > Defaul...

As stated in subject. I suppose in 'DC mode' no, but as DM i can define an alias for the machine? Looking at: https://bugzilla.samba.org/show_bug.cgi?id=1703 seems 'yes' to me... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078

On Tue, 2017-12-05 at 16:14 +0100, mj via samba wrote: > We haved used it on a domain member server, yes. > > Only one thing: when you have a compteraccount memberserver$ in your AD, > you cannot use "memberserver" as an alias on another machine) And you should register any such alias as a servicePrincpalName. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.or...

Dear Dev's, The release notes highlight the improvements of winbindd for the AD-DC. But I wonder: is there any impact on the configuration of a member server? TIA & Best regards Peter

Hi, we are using a samba domain which is distrubuted by UCS (ww.univention.de). A w2k3 Server RC2 is configured as a memerserver. Authentication on its resources controlled by samba via ldap is functional. Right now we have the Problem of getting members to logon to that server using terminal services . I created a group in which all domain users are gathered who should have access. This

Hello! I have 2 Samba 4 server (4.3.3) as VC and other Samba 4 (4.3) as Fileserver, until now all ok, but I'm one doubts, how to validate that in both servers the domain IDs of the users of this identical, a simple way to do this validation? I wanted to make sure it is a DC die fileserver has to go 100%. thank you

Hello, I'm following along with the wiki(Setup a Samba AD Member Server) and I have a question after reading the 'Set up a basic smb.conf' section. Do I need to extend the schema in order for my member server to successfully join and service file shares? Do I need to configure a krb5.conf file? Thanks. -- -James

...f' > section. Please show us your smb.conf Do I need to extend the schema in order for my member server to > successfully join and service file shares? No, you dont have to. Do I need to configure a > krb5.conf file? Thanks. If your DC is a samba4 DC just copy krb5.conf to your new memberserver > Stefan - -- Stefan Kania Landweg 13 25693 St. Michaelisdonn Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie ihre E-Mail. Weiter Informationen unter http://www.gnupg.org Mein Schl?ssel liegt auf hkp://subkeys.pgp.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYE...

Has anyone tried this to setup a AD DC and Memberserver on one machine? https://wiki.samba.org/index.php/Multiple_Server_Instances Is it possible to provision a domain in one instance to have a DC? Sounds interesting to me.

...of this thread :-) As you said one shouldn't assign a uid to the MYDOM\Administrator account (because he looses its special permissions and thus will be converted to a 'normal' UNIX user on the member server), I am still wondering myself: Is MYDOM\Administrator therefore *useless* on a memberserver? I cannot use that account for accessing shares on the member server, right? (assuming I didn't have assigned a UID to him, as you suggested). Thanks and greetings, Mirco

...your smb.conf > > Do I need to extend the schema in order for my member server to >> successfully join and service file shares? > No, you dont have to. > > Do I need to configure a >> krb5.conf file? Thanks. > If your DC is a samba4 DC just copy krb5.conf to your new memberserver > Stefan > > - -- > Stefan Kania > Landweg 13 > 25693 St. Michaelisdonn > > > Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie ihre > E-Mail. Weiter Informationen unter http://www.gnupg.org > > Mein Schl?ssel liegt auf > > hkp://subkeys.pgp...

...correct information, the new user is there. Using kinit I can request a Kerberos ticket for him. I'm not sure if it matters but if I run wbinfo -U on the DC, it will put the realm in front of the username, i.e. SAMDOM\user. On the member server, the realm is not shown. Running smbclient -L \\MEMBERSERVER -Unewuser -N on the member server works fine. But if I run the same command without the -N switch, I get session setup failed: NT_STATUS_ACCESS_DENIED I really don't know where else to look. I rebooted the two servers, updated Samba to its latest version (4.6.5), ran sysvolreset.. all to no...

Hi I am running a Samba PDC and a Samba member server in his domain. The member server acts as a file server with unix acl's working. Is it possible to get these acl's working under samba to? The docs seem to say, that acl's are only possible if samba is a memberserver in an NT-Domain using winbind. In my case the PDC acts as a LDAP Server and the Member server is gets the unix account information from Ldap. I am running samba 3.0.4 and had no sucesse with this setup. The windows client shows acls not as for the domain\user but for the memberserver\user He...

...your smb.conf > > Do I need to extend the schema in order for my member server to >> successfully join and service file shares? > No, you dont have to. > > Do I need to configure a >> krb5.conf file? Thanks. > If your DC is a samba4 DC just copy krb5.conf to your new memberserver > Stefan > > - -- > Stefan Kania > Landweg 13 > 25693 St. Michaelisdonn > > > Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie ihre > E-Mail. Weiter Informationen unter http://www.gnupg.org > > Mein Schl?ssel liegt auf > > hkp://subkeys.pgp...

...t;UID" "GID" its around 3000085 In the Member Server its around 2000 - 3000 For example: ADDC Server. --------------------- root at ACDC:/# wbinfo --user-info=Prueba KENNEDY\prueba:*:3000022:100:Prueba:/home/KENNEDY/prueba:/bin/false MEMBER SERVER ----------------------- root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba prueba:*:2451:2004:Prueba:/home/KENNEDY/prueba:/bin/false Any way to solve this.

...rpc user delete machinename I added the server back into the domain, and it's all exactly the same. These servers were running throughout the upgrade process, if that makes a difference. Finally, the output of pdbedit -L is quite different than what I'm used to: [root@PDC ~]# pdbedit -L MEMBERSERVER$ WARNING: The "printer admin" option is deprecated INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: Fa...

...heck_ntlm_password: Authentication for user [PC1$] -> [PC1$] FAILED with error NT_STATUS_NO_SUCH_USER the only thing what then works is to rejoin the domain net rpc join -S DOMAINSERVER -U Administrator after that all Shares work again, but that is not a solotuin to work with. smbclient -L \\memberserver -N Anonymous login successful Domain=[DOMAIn] OS=[Windows 6.1] Server=[Samba 4.5.0] Sharename Type Comment --------- ---- ------- dev Disk Develop IPC$ IPC IPC Service (Samba Server Version 4.5.0)...

Hai Rowland. What you tried is ok, or im misunderstanding you. For me : All members give me. getent passwd myuser myuser:*:10002:10000::/home/users/myuser:/bin/bash id myuser uid=10002(myuser) gid=10000(domain users) the memberservers are or sernet samba 4.2.7 or debian samba 4.1.17 and on the DCs. ( only sernet samba 4.2.7 ) getent passwd myuser myuser:*:10002:10000:L.P.H. van Belle:/home/users/ myuser:/bin/bash id myuser uid=10002(myuser) gid=10000(domain users) forgot to mention 1 restriction. In the DC's i al...

..., it reports only one DC, instead of the three I would expect. I guess this means winbind doesn't know about the existance of two of our three DCs...? Does it return all DCs for others here..? Could someone try for me? I think all my three DCs have registered the SRV records: > root at memberserver:/etc# host -t SRV _ldap._tcp.dc._msdcs.samba.company.com > _ldap._tcp.dc._msdcs.samba.company.com has SRV record 0 100 389 dc2.samba.company.com. > _ldap._tcp.dc._msdcs.samba.company.com has SRV record 0 100 389 dc3.samba.company.com. > _ldap._tcp.dc._msdcs.samba.company.com has SRV reco...