search for: memberservers

Hi, I am trying to mount fileserver (samba, 10.20.30.16) shares on a linux domain member server, where I logged on via ssh using AD my credentials. I am unable to get past the "mount error(126): Required key not available" error message. I have read and googled a lot, and could use some help. See this: > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & >

Hai Mourik-Jan, Beste wensen he ;-) Lets start here.. A and PTR record exists for both servers? Does CIFS/spn and root/spn exist in the AD? In krb5.conf, set these : ; not used for nfs4 but cifs might need it. ; for Windows 2003 ; default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; permitted_enctypes = rc4-hmac

As stated in subject. I suppose in 'DC mode' no, but as DM i can define an alias for the machine? Looking at: https://bugzilla.samba.org/show_bug.cgi?id=1703 seems 'yes' to me... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078

On Tue, 2017-12-05 at 16:14 +0100, mj via samba wrote: > We haved used it on a domain member server, yes. > > Only one thing: when you have a compteraccount memberserver$ in your AD, > you cannot use "memberserver" as an alias on another machine) And you should register any such alias as a servicePrincpalName. Andrew Bartlett -- Andrew Bartlett

Dear Dev's, The release notes highlight the improvements of winbindd for the AD-DC. But I wonder: is there any impact on the configuration of a member server? TIA & Best regards Peter

Hi, we are using a samba domain which is distrubuted by UCS (ww.univention.de). A w2k3 Server RC2 is configured as a memerserver. Authentication on its resources controlled by samba via ldap is functional. Right now we have the Problem of getting members to logon to that server using terminal services . I created a group in which all domain users are gathered who should have access. This

Hello! I have 2 Samba 4 server (4.3.3) as VC and other Samba 4 (4.3) as Fileserver, until now all ok, but I'm one doubts, how to validate that in both servers the domain IDs of the users of this identical, a simple way to do this validation? I wanted to make sure it is a DC die fileserver has to go 100%. thank you

Hello, I'm following along with the wiki(Setup a Samba AD Member Server) and I have a question after reading the 'Set up a basic smb.conf' section. Do I need to extend the schema in order for my member server to successfully join and service file shares? Do I need to configure a krb5.conf file? Thanks. -- -James

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello James, Am 31.12.2014 um 15:48 schrieb James:> Hello, > > I'm following along with the wiki(Setup a Samba AD Member Server) > and I have a question after reading the 'Set up a basic smb.conf' > section. Please show us your smb.conf Do I need to extend the schema in order for my member server to > successfully

Has anyone tried this to setup a AD DC and Memberserver on one machine? https://wiki.samba.org/index.php/Multiple_Server_Instances Is it possible to provision a domain in one instance to have a DC? Sounds interesting to me.

> Comment from Rowland: > [...]an AD user without a uidNumber is merely a windows user Hi Rowland, just for my understanding, I have a question. If a domain user in my samba4 AD domain does not have been assigned with a "uid" on the [UNIX Attribute] tab of my ADUC tool, that user in general *cannot* access any of the shares of that particular member server? Is that correct? My

Hello Stefan, I learned the hard way about .local. I understand going forward. I do have an issue with the member server. Following along with the wiki I get stuck at 'Testing the Winbind user/group mapping'. Wbinfo works as expected but not #*id DomainUser* #*getent passwd* #*getent group* #*chown DomainUser:DomainGroup file* #*chgrp DomainGroup file* etc. I receive

I run a very small Samba AD, consisting of a Samba AD DC and a Samba AD Member Server, acting as file server. Today, I added a new user to the AD but I simply can't manage to get access to the file server - only for this user, all others are working fine. My AD is rfc2307 based, so I manually have to add UID's. I did so for the new user, the ID is within range and not in use. I double

Hi I am running a Samba PDC and a Samba member server in his domain. The member server acts as a file server with unix acl's working. Is it possible to get these acl's working under samba to? The docs seem to say, that acl's are only possible if samba is a memberserver in an NT-Domain using winbind. In my case the PDC acts as a LDAP Server and the Member server is gets the unix

Hello Stefan, Yes I'm using Samba4 as my DC's. I also provisioned my DC's with RFC2307. [global] netbios name = PFMS1 workgroup = DOMAIN security = ADS realm = DOMAIN.LOCAL encrypt passwords = yes vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes idmap config *:backend = tdb idmap config *:range = 70001-80000

After tried to solve the problem with "getent", I found another problem with the Member server. The member server works well, but the "uid" and "gid" mapping for users its incorrect. In the DC the "UID" "GID" its around 3000085 In the Member Server its around 2000 - 3000 For example: ADDC Server. --------------------- root at ACDC:/# wbinfo

Hello all... I'm having a serious problem after a Samba upgrade from 3.0.20 to 3.0.23c. A bit of background: I have a network with a Samba PDC and several member servers running Windows 2000 server. I upgraded my PDC from Mandrivalinux to RHEL5, which (obviously) included a Samba upgrade. I renamed the old server to a different hostname and IP address, and disabled Samba on it, then I copied

Hi, i am at the end of my knowledge. Our PDC works fine all user can access the Samba Shares, Windows Logins are Working, all fine. But our Member Server makes me ($=%§=(%(§=. When i join the Domain all is fine and all Shares are working net rpc join -S DOMAINSERVER -U Administrator Using short domain name -- DOMAIN Joined 'SERVER1' to domain 'DOMAIN' net rpc testjoin -S

Hai Rowland. What you tried is ok, or im misunderstanding you. For me : All members give me. getent passwd myuser myuser:*:10002:10000::/home/users/myuser:/bin/bash id myuser uid=10002(myuser) gid=10000(domain users) the memberservers are or sernet samba 4.2.7 or debian samba 4.1.17 and on the DCs. ( only sernet samba 4.2.7 ) getent passwd myuser myuser:*:10002:10000:L.P.H. van Belle:/home/users/ myuser:/bin/bash id myuser uid=10002(myuser) gid=10000(domain users) forgot to mention 1 restriction. In the DC's i also...

Hi, Playing around with winbind, i noticed the follewing option: wbinfo --dc-info=DOMAIN According the the manual: --dc-info=domainname Find the currently known DCs When I run it on a domain member server, it reports only one DC, instead of the three I would expect. I guess this means winbind doesn't know about the existance of two of our three DCs...? Does it return all DCs for