search for: otherdomain

...viously reported (Bug# 5551) but the issue is still happening in my servers. I have an ftp server (vsftpd), configured to use pam_winbind with krb5_auth and I see some random disconnects and my users cant login. My samba servers are member of a Windows 2003 domain. The relevant lines on my log.wb-OTHERDOMAIN are saying that the write to the socket failed because the connection was reset by peer, this happened also on 3.0.28, i was hoping that 3.0.31 fix this issue. Im including my configuration and my log files. This happens only when pam_winbind authenticates users of other domains, sometimes it gets...

...y.pem tls certfile = tls/cert.pem tls cafile = tls/ca.pem [netlogon] path = /var/lib/samba/sysvol/<mydomain>.corp/scripts read only = Yes [sysvol] path = /var/lib/samba/sysvol read only = Yes Also see below resolv.conf search mydomain.corp otherdomain.corp otherdomain.net otherdomain.co.za mydomain.co.za nameserver DC2 nameserver DC3 nameserver DC1 nameserver DC5 nameserver DC6 nameserver DC4 Regards On Fri, Feb 28, 2020 at 11:07 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 28/02/2020 08:46, Eben Victor via samb...

...all, I just installed dovecot-1.0_beta2 and love it! However, I've run into issues using multiple authentication databases. I use both pam (for users on my system) and sql (for virtual users). I've noticed that if I have system user "userabc" and virtual user "userabc at otherdomain.com" (two distinct users) and my "auth default" section contains these passdb/userdb entries in this order (the order in the example config): passdb pam passdb sql userdb pam userdb sql then when userabc at otherdomain.com logs in, he'll get the system user userabc'...

...p://forums.fedoraforum.org/showthread.php?t=313554 however this does not allow the password to be set if it has expired. smbpasswd works on 2 of my 3 networks. I was hoping there might be some way to get it working without port 139 (echo -e 'oldpasswd\nnewpasswd\nnewpasswd')|smbpasswd -r otherdomain -U user -D 10 INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 sc...

...e = 3000-7999 ----------> If I > remove the > > portion I get errors -> idmap range not specified for domain '*' > Yes, I know, remove the line and ignore the error, it is > meaningless ;-) > > Also see below resolv.conf > > > > search mydomain.corp otherdomain.corp otherdomain.net > > <http://otherdomain.net> otherdomain.co.za > <http://otherdomain.co.za> > > mydomain.co.za <http://mydomain.co.za> > Remove all domains except for the AD dns domain > > nameserver DC2 > > nameserver DC3 > > nameserver...

...screpancy between Samba Version 3.0.28a and Version 3.0.24 in relation to Winbind rid idmap and trusted domains behaviour. I have an environment with 2 domains linked via a trust, an Active Directory domain and an NT4 domain. On 3.0.24 the rid backend seems to work fine, but on 3.0.28a it shows OTHERDOMAIN\domain admins instead of the primary domain's domain admins in uid/name mapping on files. Below is a relevant snippet of the identical samba configuration on both machines: allow trusted domains = no idmap backend = rid idmap config PRIMARYDOMAIN:range = 10000-19999 idmap config OTHERDOMAIN...

...solve order = host bcast map untrusted to domain = Yes ntlm auth = Yes security = ADS socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 winbind refresh tickets = Yes winbind use default domain = Yes dns proxy = No idmap config otherdomain:range = 480000-509999 idmap config otherdomain:backend = rid idmap config ourdomain:range = 30000-59999 idmap config ourdomain:backend = rid idmap config *:range = 2000-29999 full_audit:priority = NOTICE full_audit:facility = local6 full_audit...

...e = 3000-7999 ----------> If I > remove the > > portion I get errors -> idmap range not specified for domain '*' > Yes, I know, remove the line and ignore the error, it is > meaningless ;-) > > Also see below resolv.conf > > > > search mydomain.corp otherdomain.corp otherdomain.net > > <http://otherdomain.net> otherdomain.co.za > <http://otherdomain.co.za> > > mydomain.co.za <http://mydomain.co.za> > Remove all domains except for the AD dns domain > > nameserver DC2 > > nameserver DC3 > > nameserver...

...x log size = 50 smb passwd file = /etc/samba/smbpasswd winbind uid = 10000-20000 winbind gid = 10000-20000 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins server = X.X.X.X dns proxy = no #The share : [Share_name] comment = MyShare path = /home/to/my/folder write list = @"OtherDomain\Some_Group" @"OtherDomain\Other_group" "OtherDomain\SomeUser" @"MyDomain\Domain Admins" writable = no browseable = yes In my log.machine: [2003/08/19 11:54:57, 0] smbd/service.c:make_connection(349) Couldn't find account Otherdomain\someuser [2003/08/1...

...urity = domain allow trusted domains = yes add user script = /usr/sbin/pw useradd %u -m -Y -M 755 When a Windows user MYDOMAIN\john connects to the samba server, he is mapped to the Unix user john. If there is no Unix user "john", it is created by the add user script. How will the users OTHERDOMAIN\otheruser and especially OTHERDOMAIN\join be mapped/created? If OTHERDOMAIN\join is mapped to the same Unix user as MYDOMAIN\join, it's a big security hole. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov at sibptus.tomsk.ru

...- EMP: /archiv/net/dovecot^M KOP: <some_recipient>^M OEM: dovecot at dovecot.org^M ABS: ricardomachini at gmail.com (Ricardo Machini Barbosa)^M WAB: dovecot-bounces at dovecot.org^M BET: Header search on Dovecot with SOLR^M ROT: perth.mydomain.de!localhost!perth.hirmke.de!aqua.hirmke.de!elvis.otherdomain.de!rachael.otherdomain.de!talvi.dovecot.org!talvi.dovecot.org!mail-qk1-x72e.google.com!smtp.gmail.com!DESKTOP4CIJMB3^M MID: 078901d61d7e$0964bcd0$1c2e3670$@gmail.com^M EDA: 20200428165659W-03^M LEN: 6112^M MAILER: Microsoft Outlook 16.0^M X-XP-Boundary: ----=_NextPart_000_078A_01D61D64.E4184820^M M...

...e = 3000-7999 ----------> If I > remove the > > portion I get errors -> idmap range not specified for domain '*' > Yes, I know, remove the line and ignore the error, it is > meaningless ;-) > > Also see below resolv.conf > > > > search mydomain.corp otherdomain.corp otherdomain.net > > <http://otherdomain.net> otherdomain.co.za > <http://otherdomain.co.za> > > mydomain.co.za <http://mydomain.co.za> > Remove all domains except for the AD dns domain > > nameserver DC2 > > nameserver DC3 > > nameserver...

...uot;joe" Mail is stored in Maildirs, and the user account information is all in MySQL. Delivery is handled by Postfix. Everything seems nice and clean, except ... If I create multiple accounts that all use the same Maildir for delivery (i.e. joe_smith at domain.com, js at domain.com, js at otherdomain.com) it seems to work well. Except that the user can _only_ log in as the first record in the database via IMAP. (i.e. in the example above, the user could log in as joe_smith at domain.com, but not the others) Logging in as the others does not produce any erros (that I can find, anyway) but the...

...192.168.101.55 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 0.354/0.357/0.361/0.019 ms But when a try to stablish the relationship, it simply cannot find the PDC or the other domain, when issuing the command: net rpc trustdom establish OTHERDOMAIN Samba quits saying it can't find the other domain PDC, so i supposed it is a wins problem. Any suggestion? Best Regards Vic.

...nested groups = Yes winbind nss info = template winbind refresh tickets = No winbind offline logon = No We have tried this with both "security = domain" and "security = ADS" - no difference. "finger myDomain\\username" works, but "finger otherDomain\\username" immediately fails, with log.wb-otherDomain reporting error getting user info for sid S-1-5-21-1644491937-1078081533-682003330-6760 ...and yet "wbinfo --sid-to-name" maps that back to the correct username, and "wbinfo --name-to-sid" maps the username to the same...

...bind' is from the Samba suite. OpenVPN is just passing on the authentication decision to Samba. However, I was expecting to just use the group name without the domain name since I have 'winbind use default domain = yes' in smb.conf. Maybe the fact that I initially used: idmap config OTHERDOMAIN : backend = rid idmap config OTHERDOMAIN : range = 1000000-9999999 in Samba 4.11.9 on this new server screwed this up (now they are commented out). I might need to "leave" the domain, remove the tlb files and re-join (with the OTHERDOMAIN entries in smb.conf commented out)? I'm as...

Hi all I got a vps setup amazingly fast using the deprec recipes on Ubuntu edgy, but now I''m having a minor issue where my site loads for the main domain when I only want it accessible from the subdomain. This is a pretty typical setup, apache 2.2.3 -> mongrel_proxy_balancer -> mongrel cluster. I''m sure I''m missing something obvious in the config... I have the

Hello All, I hope you can assist me, I'm running Bind DLZ with our Samba AD DC environment Bind: BIND 9.11.4-P2-RedHat-9.11.4-9.P2.el7 (Extended Support Version) Samba: Version 4.11.6-SerNet-RedHat-9.el7 OS: Red Hat Enterprise Linux Server release 7.7 (Maipo) My DNS queries seems to be hanging intermittently, taking anything from 1sec - 15sec or even timing out. I'm been monitoring the

...mba4 ad and dns: Actually we have a dnsmasq server with dhcp/dns services for users on the lan, if we start to using the internal samba4 dns server to resolv names on the zone of DC server example mydomain.test.com we can use the actual dnsmasq to server another domains that we need ?, for example otherdomain.testing.com.ar If that is correct we need to include the parameter dns forwarder = dnsmasq-ip-server on the smb.conf ? so what samba asking dnsmasq to resolv the name. Regards.

Hello, I use both ser/asterisk . In fact i wish asterisk to forward all the sip requests which are not handled by domain=domain.tld in sip.conf Here is a diagram: The sip agents use the Sip proxy as an outbound sip proxy and domain=domain.tld . When the sip agents dial sip:user@otherdomain.tld so the request is sent to sip proxy and so to Asterisk. I wish Asterisk to Look up the domain's part of the uri. if the domain is not equal to domain.tld the request is sent back to the sip proxy. Is it possible ? ASTERISK | | | | ==SIP proxy===sip agents Thanks for h...