search for: mulder

On 3/10/23 8:56 AM, Rowland Penny via samba wrote: > > > On 10/03/2023 15:46, David Mulder via samba wrote: >> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>> I have been testing a Debian 11 (i386) server with samba >>> 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. >>> This is >>> a stand-alone DC, meant for user...

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote: > Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD GPOs and to work it needs > oddjob-gpupdate and samba-gpupdate (command installed with samba). > > As I don't know the cause o...

...If you're working on a join implementation, make sure you pay close attention to the changes. Azure accepts just about any blob in the TransportKey field, and doesn't perform any validation on it. This only becomes obvious when future responses from Azure are garbled nonsense. -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com

...--------------------- > [ PermitRootLogon ] = yes > ------------------------------------------------------------------------------------- > ------------------------------------------------------------------------------------- See chapter 18 in the Group Policy book: https://dmulder.github.io/group-policy-book/openssh.html#client-side-extension-13 It should be creating the file in /etc/ssh/sshd_config.d/, but the contents of the cache will tell you exactly where. Have you configured automatic refresh, or manually applied the settings? https://dmulder.github.io/group-policy...

On 10/03/2023 15:58, David Mulder via samba wrote: > > On 3/10/23 8:56 AM, Rowland Penny via samba wrote: >> >> >> On 10/03/2023 15:46, David Mulder via samba wrote: >>> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>>> I have been testing a Debian 11 (i386) server with samba &...

...ed to > join the samba AD was sssd. > > The 22.04 ubuntu client has joined and everything is working fine except > for the GPOs for linux clients. > > I compiled and installed oddjob-gpupdate and also installed oddbjob as > recommended by the samba documentation ( > https://dmulder.github.io/group-policy-book/) > > I also installed samba version 4.15.3 with the command samba-gpupdate, when > I run the command samba-gpupdate --rsop with sssd working it reports these > errors: > > Traceback (most recent call last): > File "/usr/sbin/samba-gpupdate&...

https://bugs.freedesktop.org/show_bug.cgi?id=90632 Bug ID: 90632 Summary: DRI_PRIME=1 has no effect with GK106M Product: xorg Version: unspecified Hardware: x86-64 (AMD64) OS: Linux (All) Status: NEW Severity: normal Priority: medium Component: Driver/nouveau Assignee: nouveau

...s#L384 If you don't like this hacky approach, you could re-implement something using the same calls made by samba-tool: https://gitlab.com/samba-team/samba/-/blob/master/python/samba/netcmd/dns.py?ref_type=heads This is probably a more appropriate approach, but a bit more work. -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com

W dniu 19.04.2024 o?09:59, Jaros?aw K?opotek - INTERDUO via samba pisze: > W dniu 18.04.2024 o?18:11, David Mulder via samba pisze: >> On 4/18/24 1:03 AM, Jaros?aw K?opotek - INTERDUO via samba wrote: >>> Hi all, >>> >>> I run cmd: >>> samba-tool gpo manage scripts startup add \ >>> {31B2F340-016D-11D2-945F-00C04FB984F9} \ >>> /var/lib/samba/sysvol/far...

.... >>>> >>>> Best regards, >>>> >>>> Peter >>>> >>>> >>> This got my interest, so I did a little testing from a win10 VM and >>> (for myself) GPME works up to a point. >>> >>> I followed David Mulder's instructions, though there were a few >>> errors, I could easily set things in the GPME, but they didn't seem >>> to affect AD. I turned of password complexity and set min password >>> length to 8, this was not reflected in AD. >>> I then wondered if it...

...ands are creating > things on other DCs, then that isn't going to work. That's a good point. There was some progress fixing this at some point, but I don't recall what happened with that. I think perhaps you can force it to use the local host via the '-H' option. -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com

...ely runs with no issues. The SID is for the user (Peter) and the user can login over ssh. I can repost all the logs and configs here if needed. samba built from git master branch using bootstrap configure flags. tested both with built in heimdal and mit krb. after a bunch of testing with David Mulder, recommendation was to create a bug report: https://bugzilla.samba.org/show_bug.cgi?id=15225 What other troubleshooting steps / logging can I do to try and track down the issue. > source3/auth/token_util.c:562 > > ??????????????? pass = getpwuid_alloc(tmp_ctx, uid); > and pass is nu...

On 13/03/2023 17:05, David Mulder via samba wrote: > > On 3/13/23 10:54 AM, Rowland Penny via samba wrote: >> Glad it isn't just myself having problems understanding that code, it >> is horrible :-D >> >> If it is a machine, why is it trying to look up a uid ? I traced where >> the error m...

On 13/03/2023 17:19, David Mulder via samba wrote: > > On 3/13/23 11:14 AM, Rowland Penny via samba wrote: >> I was referring to: >> add_local_groups: SID S-1-5-21-2112549936-2540803609-4198596461-1600 >> -> getpwuid(3000148) failed, is nsswitch configured? >> >> Which is coming from source3...

On 18/04/2023 18:15, David Mulder via samba wrote: > I was able to get it to work by setting up a simple smb.conf, and doing > a `net ads join`. SSSD is still the auth provider. > > My simple smb.conf looks like this: > > dmulder at dmm-tw:~> cat /etc/samba/smb.conf > [global] > ?? ?idmap config * :...

...ve authenticated an SMB session, and your user is attempting to create a directory on the share, but is getting a permissions error. If this is happening for the Administrator, then you clearly have a permissions issue on your sysvol share. Try running `samba-tool ntacl sysvolreset`. -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com

W dniu 18.04.2024 o?18:11, David Mulder via samba pisze: > On 4/18/24 1:03 AM, Jaros?aw K?opotek - INTERDUO via samba wrote: >> Hi all, >> >> I run cmd: >> samba-tool gpo manage scripts startup add \ >> {31B2F340-016D-11D2-945F-00C04FB984F9} \ >> /var/lib/samba/sysvol/fartest.local/scripts/startup.b...

...24 10:10 PM, lists--- via samba wrote: > Thanks a lot, Kees! :) > > Any hint which package to download for Windows Server 2022? I always just download the latest Windows ADMX templates. I believe they are backwards compatible with previous versions (don't quote me on that). -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com

...regards, > >>>> > >>>> Peter > >>>> > >>>> > >>> This got my interest, so I did a little testing from a win10 VM > >>> and (for myself) GPME works up to a point. > >>> > >>> I followed David Mulder's instructions, though there were a few > >>> errors, I could easily set things in the GPME, but they didn't > >>> seem to affect AD. I turned of password complexity and set min > >>> password length to 8, this was not reflected in AD. > >>> I...

...ot so far > >> future. > >> > >> Best regards, > >> > >> Peter > >> > >> > > This got my interest, so I did a little testing from a win10 VM and > > (for myself) GPME works up to a point. > > > > I followed David Mulder's instructions, though there were a few > > errors, I could easily set things in the GPME, but they didn't seem > > to affect AD. I turned of password complexity and set min password > > length to 8, this was not reflected in AD. > > I then wondered if it was alterin...