search for: onthef

Interesting, I'm getting the same error using the LDB tools: ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H ldap://localhost ERROR(ldb): uncaught exception - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: Operation unavailable without authentication> <> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", li...

...pr 7, 2019 at 2:17 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > > On Sun, 7 Apr 2019 13:45:11 -0400 > Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > > > Interesting, I'm getting the same error using the LDB tools: > > > > ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H > > ldap://localhost > > Does the DC use itself as its first nameserver in /etc/resolv.conf ? > if it does, it should work without authentication: > > root at dc4:~# samba-tool user list -H ldap://localhost > testuse...

On Sun, 7 Apr 2019 13:45:11 -0400 Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > Interesting, I'm getting the same error using the LDB tools: > > ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H > ldap://localhost Does the DC use itself as its first nameserver in /etc/resolv.conf ? if it does, it should work without authentication: root at dc4:~# samba-tool user list -H ldap://localhost testuser groupuser2 User27 ....... .......

Thanks for the example, Rowland. Does ldb work against remote servers as well? I thought it was only for local, file-based access. In general, I just wanted to use my Samba AD as an environment to learn more about writing software against using LDAP. There are a few applications I'm planning to develop, and I'd like to use actual LDAP so they could be applicable to Samba or Microsoft AD

...ce a series of blog posts that are guaranteed to work (on Debian 9 at least) and produce the ultimate Samba-powered Active Directory environment. On Fri, Mar 1, 2019 at 9:04 AM L.P.H. van Belle via samba <samba at lists.samba.org> wrote: [snip] > few minor points. > > REALM="ad.onthefive.com" > Realm always in CAPS, this prevens problems with other programs. Most program's expect REALM in CAPS. > For example postfix expect REALM in CAPS. I agree with you, however: 1) The Samba Wiki [1] uses lowercase: > Realm --realm Kerberos realm. This is also used as...

Hello, I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab environment, set up like this: https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up-a-samba-4-domain-controller-on-debian-9/ I would now like to configure this server to enable login via domain credentials. I'm aware that the Samba wiki recommends the following: -

On Sat, 2 Mar 2019 17:57:41 -0500 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > On Fri, Mar 1, 2019 at 9:04 AM L.P.H. van Belle via samba > <samba at lists.samba.org> wrote: > [snip] > > few minor points. > > > > REALM="ad.onthefive.com" > > Realm always in CAPS, this prevens problems with other programs. > > Most program's expect REALM in CAPS. For example postfix expect > > REALM in CAPS. > > I agree with you, however: > > 1) The Samba Wiki [1] uses lowercase: It doesn't any m...

...(no subject) > > Hello, > > I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab > environment, set up like this: > https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up- > a-samba-4-domain-controller-on-debian-9/ few minor points. REALM="ad.onthefive.com" Realm always in CAPS, this prevens problems with other programs. Most program's expect REALM in CAPS. For example postfix expect REALM in CAPS. I suggest you add a note here that the DNS-domain and REALM are 2 differnt things. And the other sidenote on this is, often the dns-do...