search for: ourrealm

Ok after installing libpam-winbind etc I had someone try to connect from a MacOS and they got: [2023/04/13 15:50:50.002773,? 1] ../../source3/auth/auth_generic.c:211(auth3_generate_session_info_pac) ? auth3_generate_session_info_pac: Unexpected PAC for [testuser at OURREALM.REALM] in standalone mode - NT_STATUS_BAD_TOKEN_TYPE [2023/04/13 15:50:50.002891,? 3] ../../source3/smbd/smb2_server.c:3961(smbd_smb2_request_error_ex) ? smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_BAD_TOKEN_TYPE] || at ../../source3/smbd/smb2_sesssetup.c:147...

...5060>;tag=be7edc2ddb To: <sip:5441 at 10.100.250.10:5060>;tag=as0913c4d5 Call-ID: 22fd19f44649a42f CSeq: 26366 REGISTER User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces WWW-Authenticate: Digest algorithm=MD5, realm="ourrealm.net", nonce="71fd68ea" Content-Length: 0 REGISTER sip:10.100.250.10:5060 SIP/2.0 Via: SIP/2.0/UDP 172.16.99.161;branch=z9hG4bK46044b1bcfd826368 Max-Forwards: 70 From: <sip:5441 at 10.100.250.10:5060>;tag=be7edc2ddb To: <sip:5441 at 10.100.250.10:5060> Call-ID: 2...

...fine. But if we want to use our SFU Users it fails. We believe getpwnam() on AIX is faulty. "id username" and login works for all users local and AD! Any ideas how to handle, get around this,or solve it differently ? Best Dan smb.conf: [global] workgroup = WG realm = WG.OURREALM.COM server string = host_name (Samba Server) security = ADS idmap backend = idmap_ad username map = /etc/samba/smbusers winbind use default domain = Yes winbind trusted domains only = yes log level = 5 log.smbd: [2006/03/17 14:10:09, 4] lib/...

...or us with 500-1600 users per ?samba? it happens regularly. Every day at 17:00 and 03:00 (we restart smbd&winbindd at 07:00). Without this watchdog smbd would refuse new connections for 1-15 minutes (or more) which isn?t good :-) Samba 4.12.5, FreeBSD 11.3 & 12.1 From krb5.conf: [realms] OURREALM = { kdc = server1 kdc = server2 kdc = server3 kdc = server4 } It was ?server1? that was being moved. ? Peter Eriksson <pen at lysator.liu.se>

...------------------ smb: \> server# testparm Load smb config files from /etc/samba/smb.conf Processing section "[testshare]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] workgroup = REALM realm = OURREALM.CH server string = "Test Datenserver" security = ADS use kerberos keytab = Yes log level = 2 log file = /var/log/smbd.log max log size = 0 load printers = No local master = No domain master = No wins server =...

...= /liu/var/samba/cache state directory = /liu/var/samba/state ncalrpc dir = /liu/var/samba/ncalrpc ;; Network interfaces bind interfaces only = true interfaces = lagg0 ;; Server names server string = ServerName File Server netbios name = ServerName ;; Security type security = ADS realm = OurRealm workgroup = AD ;; ID Mappings idmap config * : backend = tdb idmap config * : range = 2000000001-2100000000 idmap config AD : backend = ad idmap config AD : range = 1-2000000000 idmap config AD : schema_mode = rfc2307 idmap config AD : unix_primary_group = yes ;; Enable shared robust mutexes dbw...

Upgraded to Samba 4.11.2 and I?ve now too started seeing the message: get_share_mode_lock: get_static_share_mode_data failed: NT_STATUS_NO_MEMORY A lot. I modified the source in source3/locking/share_mode_lock.c a bit in order to print out the values of the service path, smb_fname & old_write_time when it fails and it seems they are all NULL? [2019/11/14 14:24:23.358441, 0]