search for: ntp_sign

...-0500 (CDT) > Mike Ray <mray at xes-inc.com> wrote: > >> >> idmap_ldb:use rfc2307 = yes >> >> ldap server require strong auth = no >> >> netbios name = dc5 >> >> ntp signd socket directory = /var/run/samba/ntp_signd >> > >> > Is the above different from the output of: >> > samba -b | grep 'NTP_SIGND_SOCKET_DIR' | awk '{print $NF}' >> > >> >> # samba -b | grep NTP_SIGND_SOCKET_DIR >> NTP_SIGND_SOCKET_DIR: /var/lib/samba/ntp_signd &g...

...warders are other internal servers. They provide connectivity to non-domain systems and the internet. >> idmap_ldb:use rfc2307 = yes >> ldap server require strong auth = no >> netbios name = dc5 >> ntp signd socket directory = /var/run/samba/ntp_signd > > Is the above different from the output of: > samba -b | grep 'NTP_SIGND_SOCKET_DIR' | awk '{print $NF}' > # samba -b | grep NTP_SIGND_SOCKET_DIR NTP_SIGND_SOCKET_DIR: /var/lib/samba/ntp_signd > If it isn't, you can remove that line, if it is, why ?...

...t1.ntp.br iburst prefer > > server b.st1.ntp.br iburst prefer > > server c.st1.ntp.br iburst prefer > > server d.st1.ntp.br iburst prefer > > > > driftfile       /var/lib/ntp/ntp.drift > > logfile         /var/log/ntpstats > > ntpsigndsocket  /var/lib/samba/ntp_signd/ > > > > # Access control > > # Default restriction: Allow clients only to query the time > > restrict default kod nomodify notrap nopeer mssntp > > > > # No restrictions for "localhost" > > restrict 127.0.0.1 > > > > # Enable the tim...

...P server? > > It might be Ubuntu's default time server, but it will not work on a > Samba DC, you must use ntp. > Try running 'sudo samba -b | grep 'SIGND', what are the first three > letters in the output ? Rowland, chrony should work fine with Samba as support for ntp_signed has been added with version 3.1. I've worked with the chrony developer implementing it. It would be great if someone could update the Time_Synchronisation tutorial with details for chrony as it seems it will replace ntpd. chrony with Samba support has also been added to RHEL 7.4. Andr...

...Wed, 24 Apr 2019 14:07:37 -0500 (CDT) Mike Ray <mray at xes-inc.com> wrote: > >> idmap_ldb:use rfc2307 = yes > >> ldap server require strong auth = no > >> netbios name = dc5 > >> ntp signd socket directory = /var/run/samba/ntp_signd > > > > Is the above different from the output of: > > samba -b | grep 'NTP_SIGND_SOCKET_DIR' | awk '{print $NF}' > > > > # samba -b | grep NTP_SIGND_SOCKET_DIR > NTP_SIGND_SOCKET_DIR: /var/lib/samba/ntp_signd > > > > If it...

...e network! > #disable auth > #broadcastclient > > interface listen lo > interface listen enp2s0 > #interface ignore wildcard > interface ignore ipv6 > > ###### Needed for Samba 4 ###### > # in the restrict -4 or -6 added mssntp at the end > # Location of the samba ntp_signed directory > ntpsigndsocket /var/lib/samba/ntp_signd > ####### NTP end > > Greetz, > > Louis > Hi Louis, The file seems similar to mine, so I guess I'm all set for the ntp, any way to test it? Moving forward to Winbindd config as describe here: https://wiki.samba.org/...

...t; applies to both servers and clients, so a configuration # that might be intended to block requests from certain clients could also end # up blocking replies from your own upstream servers. ###### Needed for Samba 4 ####### in the restrict -4 or -6 added mssntp at the end # Location of the samba ntp_signed directory ntpsigndsocket /var/lib/samba/ntp_signd # By default, exchange time with everybody, but don't allow configuration. restrict -4 default kod notrap nomodify nopeer noquery mssntp restrict -6 default kod notrap nomodify nopeer noquery mssntp # Local users may interrogate the ntp serv...

Hello, I have multiple samba DC for different domains running on a single box. I read a little bit up on time synchronisation and now configured it. It seems to work. My question is, what happens when multiple DCs go to the same ntp_signd/socket, will it work? Or should I configure one socket per DC instance? Cheers, Thomas

On Tue, 12 Sep 2017 14:41:42 -0300 Flávio Silveira via samba <samba at lists.samba.org> wrote: > > Ok, I understand now, one question though: if realm is > AD.TECNOPON.COM.BR, does domain need to be AD? No, you can use anything you like, provided it is one word, 15 characters or less, without punctuation. > If I understand > correctly, realm is "full domain with

Hai, ? Im setting up scripted samba4 installs to make things more uniform installations. It saves time, and errors, and it will be easier to trace bugs. ? This is the first one and more are comming. ? ? How does it work and what do you need and what do you get in the end. ? What you get. Debian wheezy, with sernet samba4.1 - server setup as AD-DC? ( the first server with samba4 )

Hai, ? Im trying to change the userhome folder, but im still not getting the path i want. ? getent passwd Administrator:x:0:100::/home/MATWS/Administrator:/bin/bash and i want Administrator:x:0:100::/home/users/Administrator:/bin/bash ? I did change the following. logon path = /home/samba/profiles logon home = /home/users My server is samba 4.0.10 DC as member of Win2008R2 domain. and i did

Hai, Sorry for the long responce on this one, had a few days off. Some importent extra info here. If you run systemctl status ntp, you wil see if ntp is running correctly. The PC's, wil get there time through samba AD ( via /var/lib/samba/ntp_signd ) Linux clients needs ntp, point to the AD server(s) Windows ( domain joined ) clients get time through AD. Windows standalone, you need to configure the ntp client in windows and point to AD DC. Run on linux : ntpq -qq Or ntpq -pn 127.0.0.1 or Other option is : apt-get install ntpstat Run...

...you need. *( you need to change eth0 to your interface name) > # Optional, define which interface ntp could/should use > interface listen lo > interface listen eth0 > #interface ignore wildcard > interface ignore ipv6 > # > EOF > systemctl restart ntp > > # create the ntp_signd folder if not exists. > if [ ! -d /var/lib/samba/ntp_signd/ ]; then > mkdir -p /var/lib/samba/ntp_signd/ > chmod 750 /var/lib/samba/ntp_signd > chown root:ntp /var/lib/samba/ntp_signd > Fi > # check name group > if [ "$(stat -c "%G" /var/lib/samba...

On Sun, Jun 3, 2018 at 4:51 PM Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Sun, 3 Jun 2018 16:29:04 +0300 > Alexei Rozenvaser via samba <samba at lists.samba.org> wrote: > > > Hi > > > > I'm running samba 4.7.6 on ubuntu 18.04 as (backup / secondary) domain > > controller > > No your not, you are just running Samba as

...F >> /etc/ntp.conf # Enable the interaced you need. *( you need to change eth0 to your interface name) # Optional, define which interface ntp could/should use interface listen lo interface listen eth0 #interface ignore wildcard interface ignore ipv6 # EOF systemctl restart ntp # create the ntp_signd folder if not exists. if [ ! -d /var/lib/samba/ntp_signd/ ]; then mkdir -p /var/lib/samba/ntp_signd/ chmod 750 /var/lib/samba/ntp_signd chown root:ntp /var/lib/samba/ntp_signd Fi # check name group if [ "$(stat -c "%G" /var/lib/samba/ntp_signd/)" != "ntp"...

...you might need. #apt install binutils ldb-tools smbclient #apt install libpam-krb5 systemctl disable nmbd smbd winbind systemctl stop nmbd smbd winbind systemctl unmask samba-ad-dc systemctl enable samba-ad-dc --------------------- Setup NTP cp /etc/ntp.conf{,.backup} mkdir -p /var/lib/samba/ntp_signd/ chmod 750 /var/lib/samba/ntp_signd chown root:ntp /var/lib/samba/ntp_signd cat << EOF >> /etc/ntp.conf # ###### Needed for Samba 4 ###### # extra info, in the restrict -4 or -6 added mssntp. # Location of the samba ntp_signed directory ntpsigndsocket /var/lib/samba/ntp_signd # EOF...

...> #apt install libpam-krb5 > > > systemctl disable nmbd smbd winbind > systemctl stop nmbd smbd winbind > systemctl unmask samba-ad-dc > systemctl enable samba-ad-dc > > --------------------- > Setup NTP > cp /etc/ntp.conf{,.backup} > mkdir -p /var/lib/samba/ntp_signd/ > chmod 750 /var/lib/samba/ntp_signd > chown root:ntp /var/lib/samba/ntp_signd > > cat << EOF >> /etc/ntp.conf > # > ###### Needed for Samba 4 ###### > # extra info, in the restrict -4 or -6 added mssntp. > # Location of the samba ntp_signed directory > n...

...w is my ntp.conf after running the script on a DC ! Member server ntp.conf is bit different And from a default/clean/unmodded ntp.conf. ! Review it or run the script. ( more about these scripts https://secure.bazuin.nl/scripts/ ) If reviewed manualy, dont forget the rights on /var/lib/samba/ntp_signd drwxr-x--- 2 root ntp 4096 Oct 16 16:58 ntp_signd # /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help driftfile /var/lib/ntp/ntp.drift # Enable this if you want statistics to be logged. #statsdir /var/log/ntpstats/ statistics loopstats peerstats clocks...

...amba: task[dreplsrv] 9425 ? S 0:00 \_ samba: task[winbindd_parent] 9427 ? S 0:00 | \_ samba: tfork waiter process 9428 ? Ss 0:00 | \_ /usr/sbin/winbindd -D --option=server role check:inhibit=yes --foreground 9426 ? S 0:00 \_ samba: task[ntp_signd] 9429 ? S 0:00 \_ samba: task[kccsrv] 9430 ? S 0:00 \_ samba: task[dnsupdate] Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > L.P.H. van Belle via samba > Verzonden: woensdag 9 mei 2018 1...

...ptions are: lo eth(0..9) wildcard ipv6 ## (default is ok, if you interface name is eth0 and you dont use ipv6. ) NTPD_RESTRICT_INTERFACE="lo eth0" NTPD_RESTRICT_INTERFACE_IGNORE="wildcard ipv6" ## default for sernet samba and debian samba ( should normaly not be changed ) SAMBA_NTP_SIGNPATH="/var/lib/samba/ntp_signd" ## debian default, leave it as is. NTPD_GROUP="ntp" ########### NTP apt-get -y --no-install-recommends install ntp cp /etc/ntp.conf /etc/ntp.conf.backup echo " " >> /etc/ntp.conf for x in 0 1 2 3 ; do sed -i "s]server ${x...