search for: myorg

I am trying to get puppet to manage my LDAP users but I don''t appear to be having much success. What I have in puppet.conf is this [puppetmasterd] ldapserver=ldap.myorg.company.com ldapbase=dc=myorg,dc=org ldapuser=cn=admin,dc=myorg,dc=org ldappassword=mysecret ldapparentattr=dc=myorg,dc=org I added the ldapparentattr in desperation and doubt if it''s actually required. Now I have a class which says user { "my...

...domain master = no preferred master = no security = user encrypt passwords = yes domain logons = yes logon path = smb passwd file = /etc/samba/smbpasswd unix password sync = yes passwd chat = *password* %n\n *password* %n\n *successfull* pam password change = yes ldap admin dn = cn=Administrator,dc=myorg,dc=org ldap server = workstation1.myorg.org ldap suffix = dldap filter = "(&(uid=%u)(objectclass=sambaAccount))" [test] comment = Test path = /tmp/test browseable = yes writable = yes [homes] comment = Home Directories browseable = no...

...both machines are correct 3. checked resolv.conf 3. samba_dnsupdate (on both machines) 4. synced the /var/lib/samba/sysvol/ between both machines (rsync) 5. samba-tool ntacl sysvolcheck But the error still persist. Here is my smb.conf (it is same on both computers): ---- [global] workgroup = MYORG realm = MYORG.SI netbios name = SRV01 wins support = yes server role = active directory domain controller tls enabled = yes tls cafile = tls/MyorgCA.crt tls certfile = tls/srv01.myorg.si.crt tls keyfile = tls/srv01.myorg.si.key tls dh params file = tls/dcdhparams.pem dns forwar...

...ypo onto it at /blog/. Ive got the running using the symlink method but apache/fastcgi are clunky to say the least so I want to move typo over to lighttpd. Ive got this all working and Im now trying to get a proxy working through from apache. Im using this: RewriteRule ^/blog/?(.*)$ http://blog.myorg.net:8080/$1 [P] This is working fine apart from Rails thinks its at the root of the site so all the links (from link_to etc) come out as /articles/whatever instead of /blog/articles/whatever. Does anyone know of a way around this or even an alternative set up which might work. I would even consi...

...his server holds a few shares for several different groups in my organization. each share is writable for members of that group, and readable for the rest. this is accomplished by the following setup (a sniplet from my smb.conf regargding the "_creative" share): [global] workgroup = MyOrg winbind separator = + winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes template homedir = /mnt/usersdata/_users/%U security = domain encrypt passwords = yes dos filemode = yes # security mask = 00...

...h-rsa,ssh-dss" but that seems to be wrong, because ssh only uses RSA-Keys in my .ssh/known_hosts if I explicitly set the parameter with "ssh-rsa,ssh-dss". If the parameter remains commented out, ssh doesn't use the already known RSA key: WARNING: RSA key found for host somehost.myorg in /home/somebody/.ssh/known_hosts:1 RSA key fingerprint d9:ea:ea:c6:10:ab:59:92:87:c9:f0:40:d4:b7:9b:77. The authenticity of host 'somehost.myorg (192.168.0.22)' can't be established, but keys of different type are already known for this host. DSA key fingerprint is 14:cc:25:36:17:77:a...

...name', 'city', etc. I thought about it a lot and also did a lot of reading and research in the list archives but couldn't come up with any way of passing this information from the built pages to the database. I was hoping I could store this in meta tags, like: <meta name="myorg.item.type" content="event" /> <meta name="myorg.item.category" content="theatre" /> <meta name="myorg.item.name" content="The Nutcracker Suite" /> <meta name="myorg.item.start_date" content="2007-02-10" /&g...

...mapped properly. File access through samba works. What I can't seem to figure out how to do is have a functional kerberos configuration with a keytab entry at the same time I have samba working - Samba wants to join the domain using a machine account and assigns the principal host/hostname.myorg.com and I don't see any way of getting that same information exported into the krb5.keytab so I can run kinit -k to get the proper host credentials. And I need the same host/hostname.myorg.com principal to be set on the account that is mapped to the system. AD isn't terribly happy about...

...24717 Primary group is 12000 and contains 4 supplementary groups Group[ 0]: 1000000 Group[ 1]: 1000001 Group[ 2]: 1000003 Group[ 3]: 1001 I appreciate any hint ;) My smb.conf: ------------- #======================= Global Settings ======================= [global] workgroup = MYORG server string = Samba Server Version %v dns proxy = no kernel oplocks = no lock spin time = 2000 #### Debugging/Accounting #### log file = /var/log/samba/log.%m #log level = 1 log level = 9 max log size = 20480 syslog = 0 panic action = /usr/share/samba/pani...

...e map = /usr/local/etc/smbusers.map log file = /var/log/samba/smb.log debug uid = Yes domain logons = Yes os level = 255 preferred master = Yes domain master = Yes passdb backend = ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap admin dn = cn=samba,ou=serviceAccounts,o=myorg ldap suffix = o=myorg ldap machine suffix = ou=computers ldap user suffix = ou=users ldap group suffix = ou=groups [Public] path = /export/public/%G read only = No create mask = 0755 directory mask = 0775 force user = %U Thanks for your help, -- Pierre-Francois...

Hi guys, I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 Samba4 DC's all joined to the same AD domain myorg.local My client wants me to disable all USB ports for all the users joined to the domain. Is it possible to do this via a group policy so that users logging onto any of the DC's will not be able to use their USB ports? I currently admin my AD with a combination of the samba-tool as well as t...

...AD unable to save drawing as it is being accessed by another session". Obviously, this is false: there is no other session accessing the file. By the way, other kind of file, like Word, Excel, PDF, etc. don't show this issue. My smb.conf:: # Global parameters [global] workgroup = MYORG realm = MYORG.LOCAL netbios name = FILESERVER server role = active directory domain controller dns forwarder = 8.8.8.8 [netlogon] path = /usr/local/samba/var/locks/sysvol/myorg.local/scripts read only = No [sysvol] path = /usr/local/samba/var/locks...

...anged* unix password sync = Yes log level = 2 log file = /opt/local/samba/var/log.%m max log size = 50 domain admin group =?smbadm domain logons = Yes os level = 80 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes ldap server = 192.168.1.1 ldap port = 389 ldap suffix = o=myorg,o=root ldap admin dn = uid=admin,ou=People,o=myorg,o=root ldap ssl = no hosts allow = 192.168.1.0/255.255.255.0 profile acls = Yes ? [homes] comment = Home Directories valid users = %S read only = No browseable = No ? [netlogon] comment = Network Logon Service path = /opt/samba/lib/netlogon guest...

...ch configuration/testing as I can myself; but I am now confused. (I am running 4.2.0 throughout). I have successfully set up and configured a member server with the following smb.conf (sanitised for the list): [global] workgroup = MY-DOMAIN security = ADS realm = MY-DOMAIN.MYORG.CO.UK dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab idmap config *:backend = tdb idmap config *:range = 900000-999999 idmap config MY-DOMAIN:backend = rid idmap config MY-DOMAIN:range = 4000000-4999999 winbind u...

...t; <nkadel at gmail.com> escribi?: > > On Wed, May 20, 2015 at 6:10 AM, Neil <nwilson123 at gmail.com> wrote: > > Hi guys, > > > > I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > > Samba4 DC's all joined to the same AD domain myorg.local > > > > My client wants me to disable all USB ports for all the users joined to the > > domain. > > Has your client thought carefully about possible interference with > smart phone tethering, recharging, keyboards and mice? With wifi > network devices or in-offic...

...anged* unix password sync = Yes log level = 2 log file = /opt/local/samba/var/log.%m max log size = 50 domain admin group =?smbadm domain logons = Yes os level = 80 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes ldap server = 192.168.1.1 ldap port = 389 ldap suffix = o=myorg,o=root ldap admin dn = uid=admin,ou=People,o=myorg,o=root ldap ssl = no hosts allow = 192.168.1.0/255.255.255.0 profile acls = Yes ? [homes] comment = Home Directories valid users = %S read only = No browseable = No ? [netlogon] comment = Network Logon Service path = /opt/samba/lib/netlogon guest...

...> >Verzonden: woensdag 20 mei 2015 12:10 > >Aan: samba > >Onderwerp: [Samba] Samba4 Disable USB ports > > > >Hi guys, > > > >I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > >Samba4 DC's all joined to the same AD domain myorg.local > > > >My client wants me to disable all USB ports for all the users > >joined to the > >domain. > > > >Is it possible to do this via a group policy so that users > >logging onto any > >of the DC's will not be able to use their USB ports? &g...

Hi, I want to use Dovecot LDA (or rather LMTP) use as local deliver with Postfix MTA. Users are in LDAP DB with structure as: dn: cn=username, ou=rank, o=myorg cn: username objectClass: Person gidNumber: uNNN uidNumber: gNNN userPassword: (somehow hashed, can only bind verification) homeDirectory: /Home/$rank/$username mailActive: 0/1 mail: usera at OneDomain mail: userb at SecDomain (not all users have 2+ addresses] uid: username gr...

...> Aan: samba > >>> Onderwerp: [Samba] Samba4 Disable USB ports > >>> > >>> Hi guys, > >>> > >>> I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > >>> Samba4 DC's all joined to the same AD domain myorg.local > >>> > >>> My client wants me to disable all USB ports for all the users > >>> joined to the > >>> domain. > >>> > >>> Is it possible to do this via a group policy so that users > >>> logging onto any > &g...

Hi all, after upgrading a FC3 box to FC4 which comes with Samba 3.0.23a rpm's, I have the really strange effect that /only/ "admin users" can print to printers shared by the Samba server. Even a double click on the printer in Win gives an "access denied". The access to "normal" shares (homes etc.) still works fine. Any idea what went wrong? How could I debug