search for: middleearth

...My examples of hostnames in here and related are in my sandbox, so they are fun names :) On to the questions. I cannot seem to find a good answer to these. First, When doing a join of the Secondary to the domain created by the Primary, (using this command): samba-tool domain join hobbiton.shire.middleearth DC -U"HOBBITON\Administrator" --dns-backend=BIND9_DLZ --server bagend.shire.middleearth does this type of join command automatically create this Seconday as kerberos slave? The reason I want a slave is so that I have some redundancy in the network, where Primary (bagend) lives on one VM...

...ated are in my sandbox, so > they are fun names :) > > On to the questions. I cannot seem to find a good answer to these. > > First, When doing a join of the Secondary to the domain created by the > Primary, (using this command): > > samba-tool domain join hobbiton.shire.middleearth DC > -U"HOBBITON\Administrator" --dns-backend=BIND9_DLZ --server > bagend.shire.middleearth > > does this type of join command automatically create this Seconday as > kerberos slave? No, as I said above, all DCs are equal. > The reason I want a slave is so that I ha...

...they are fun names :) > > > > On to the questions. I cannot seem to find a good answer to these. > > > > First, When doing a join of the Secondary to the domain created by the > > Primary, (using this command): > > > > samba-tool domain join hobbiton.shire.middleearth DC > > -U"HOBBITON\Administrator" --dns-backend=BIND9_DLZ --server > > bagend.shire.middleearth > > > > does this type of join command automatically create this Seconday as > > kerberos slave? > > No, as I said above, all DCs are equal. > > > T...

...rges intervals Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: critical Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: trever at middleearth.sapphiresunday.org Please consider the following rules: oifname "ppp0" ip saddr { 10.0.0.0/23, 10.1.1.0/24 } counter packets 76 bytes 4704 masquerade oifname "ppp0" ip saddr 10.1.1.0/25 counter packets 0 bytes 0 masquerade oifname "ppp0" ip sa...

Hello, I'm using Samba3Beta1 and i try to map group. I create a posix group in my ldap: dn: cn=Administrateurs du domaine,ou=Groups,dc=middleearth,dc=ring objectClass: posixGroup cn: Administrateurs du domaine memberUid: root memberUid: administrateur gidNumber: 1000 And I try to map this group with the nt group : Domain Admins net groupmap add ntgroup="Domain Admins" unixgroup="Administrateurs du domaine" But it didn&...

...hecked in LDAP using pam_ldap.so. That all works like a charm. I thought I could use the same trick for authenticating the samba users, but that seems to be a lot more difficult than I thought... conf files always help a lot: my smb.conf: [global] workgroup = OFFICE netbios name = MIDDLEEARTH server string = Middleearth Samba Server security = share obey pam restrictions = yes encrypt passwords = no [share] path = /share valid users = jan,jeff,joe,john,alice read only = No force user = nobody force create mode = 06...

...? I also cross-checked this with our windows AD (same client) and I get an AES only ticket/key: <...> Ticket etype: aes256-cts-hmac-sha1-96, kvno 2 Ticket length: 2278 <...> Any other ideas? Bye, Marcel -----Ursprüngliche Nachricht----- Von: Trever L. Adams [mailto:trever at middleearth.sapphiresunday.org] Gesendet: Mittwoch, 19. August 2015 05:55 An: Ritter, Marcel (RRZE) <marcel.ritter at fau.de>; samba at lists.samba.org Betreff: Re: [Samba] Samba 4 DC - no AES kerberos tickets - only arcfour On 08/18/2015 02:28 PM, Ritter, Marcel (RRZE) wrote: > Hi, > > I’ve b...

With a recent update, I started seeing this: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 14: ssl_cert: Can't open file /etc/letsencrypt/live/SERVER/fullchain.pem: Permission denied 1 4 * * * vmail /usr/bin/doveadm expunge -A mailbox MAILBOXINQUESTION savedbefore 1w is one of the crontab entries I am seeing this for. Is there an option to keep doveadm

Citeren "Trever L. Adams" <trever at middleearth.sapphiresunday.org>: > With a recent update, I started seeing this: > > doveconf: Fatal: Error in configuration file > /etc/dovecot/conf.d/10-ssl.conf line 14: ssl_cert: Can't open file > /etc/letsencrypt/live/SERVER/fullchain.pem: Permission denied > > 1 4 * * * v...

2015-07-04 1:04 GMT+02:00 Trever L. Adams < trever at middleearth.sapphiresunday.org>: > Hello, > > I have a DC that sits on a different subnet from the CUPS server that I > would like to use. I would rather not install CUPS on the DC. > > Is it possible to change the server name away from localhost for the > CUPS backend and have it conn...

...henticating using Kerberos or Kerberos/PAM. This needs to stay in place. Can anyone suggest how I might go about changing my setup to work? My current ldap setup is as follows (the directories, user id, etc are set statically in the configuration elsewhere): tls = yes hosts = MAILSERVER base = dc=middleearth,dc=sapphiresunday,dc=org ldap_version = 3 user_attrs = userPrincipalName=user user_filter = (&(objectClass=person)(|(mail=%u)(sAMAccountName=%u)(userPrincipalName=%u))) # For using doveadm -A: iterate_attrs = userPrincipalName=user iterate_filter = (objectClass=person) Thank you, Trever Adams...

Hi, I've installed Command & Conquer 3: Kane's wrath on my PC, using Wine 0.9.59. It works, but I cannot see the mouse cursor, so it's not possible to play. Does anybody know, how to solve this problem?? I tried all of the possible choices of DirectX setup (in Wine), but it didn't have any effect.

...smb -dns -s3fs dcerpc endpoint servers = +winreg +srvsvc Then when a windows users creates a file using samba on my server then the files are created using that users, uid. If I remove those lines (excep the -dns) when the windows users create the file it is created with a uid of 300000: middleearth:/home/samba/public$ ls -l total 503608 ... drwxr-sr-x 2 dumaresq users 4096 Dec 8 11:47 New folder drwxrwsrwx+ 2 3000000 users 4096 Dec 8 11:55 New folder (2) ... The first file was created with server services = +smb -dns -s3fs dcerpc endpoint servers = +winreg +srvs...

I am not sure how to get the symbols necessary, however the following is the backtrace (this is Fedora 19 latest everything): Jul 8 03:23:02 MX dovecot: auth: Fatal: block_alloc(2147483648): Out of memory Jul 8 03:23:02 MX dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x5f437) [0x7f97a952f437] -> /usr/lib64/dovecot/libdovecot.so.0(+0x5f4fe) [0x7f97a952f4fe] ->

...f" but a fix to handle the permissions correctly would be nicer wouldn't you say! ;-) My smb.conf (have a look at the "root" share): # Samba config file created using SWAT # from Albatros.cod.ie (192.168.1.2) # Date: 2000/05/05 21:45:52 # Global parameters [global] workgroup = MIDDLEEARTH netbios name = HOBBITON server string = %L server running Samba %v username map = /etc/smbusers log file = /var/log/samba/log.%m.log max log size = 1000 socket options = TCP_NODELAY IPTOS_LOWDELAY os level = 34 preferred master = Yes domain master = Yes wins support = Yes hosts allow = 1...

...bles Version: CVS (please indicate timestamp) Hardware: x86_64 OS: All Status: NEW Severity: major Priority: P5 Component: iptables Assignee: netfilter-buglog at lists.netfilter.org Reporter: trever at middleearth.sapphiresunday.org >From a script that works with plain iptables: iptables -A INPUT -i \!ppp0 -p udp --destination-port 53 -j ACCEPT # iptables-nft -A INPUT -i \!ppp0 -p tcp --destination-port 53 -j ACCEPT does not work! In part it yields: iifname "!ppp0" ip protocol tcp counter p...

...of these errors in them: [2004/01/26 07:34:33, 0] smbd/service.c:make_connection_snum(627) Can't become connected user! My smb.conf looks like this: # Samba config file created using SWAT # from 192.168.0.5 (192.168.0.5) # Date: 2004/01/12 09:20:40 # Global parameters [global] workgroup = MIDDLEEARTH server string = hobbiton passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELA...

Hello, I have a DC that sits on a different subnet from the CUPS server that I would like to use. I would rather not install CUPS on the DC. Is it possible to change the server name away from localhost for the CUPS backend and have it connect to that other server to get the printers (load printers = yes) and print to that server? Must I have a CUPS installation on the DC? Thank you, Trever

Hi, > > Why don't you create a Member server with cups installed?. I suppose > that you have a gateway between both subnets, right? > > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server > https://wiki.samba.org/index.php/Samba_as_a_print_server > > With that, the cups server can authenticate the users using the DC > server and you just need to print

Hi, I’ve been running a samba 4 DC for quite some time now, and while testing some kerberos related stuff, I noticed that all kerberos tickets I can get from the DC are of encryption type ?arcfour-hmac-md5“: # kinit testuser1 testuser1 at S4DOM.TEST's Password: # klist -v Credentials cache: FILE:/tmp/krb5cc_0 Ticket etype: arcfour-hmac-md5, kvno 1 I can create keytabs containing