search for: pfew

Hi all, I have just tried with a fresh install and samba 4.5.7 on the domain member server: and it worked! The domain join succeeded, and krb5.keytab IS created. So what is going on here? MJ

Hai, Im missing at least one of these on the PC. Primary Dns Suffix  . . . . . . . :  DNS suffix search list       : Are you using DHCP server or static ips on the pc. Thats where this problem is, i dont think its the server (samba) setup. @Rowland, > smbclient -L localhost -U% -d3 Wont work, due to bug in smbclient thats tries smb1 first ( or something like that ) I suggest test like

Hello list members, Finaly I''m here after a week of trying to subscribe to this list... pfew... Anyway... I have a rather strange problem with tc. I am trying to police the ingress traffic into my network using the iptables MARK feature (in mangle table, PREROUTING) but it seems that tc filters ignore this marks and they don''t work at all for me. Let me explain a bit more in d...

If I want to learn how to set up a Samba Active Directory, where do I start? Tom Thomas Rieff GreenCare 1717 3rd Avenue Mankato, MN 56001

...password: Kinit for administrator at REALM to access member1.internal.domain.tld failed: Preauthentication failed session setup failed: NT_STATUS_LOGON_FAILURE So somewhere in 4.6 the output changed. And i would expect : NT_STATUS_WRONG_PASSWORD And not : NT_STATUS_LOGON_FAILURE @Rowland.. Pfew, you scarred me. Something wrong in my setup or packages.. :-/ your the joker aren't you. :-p ;-) Gr. Louis P.s. i dont have a original debian 4.6.5 running so cant test that one. Ow and -msmb2 or not result is the same. > -----Oorspronkelijk bericht----- > Van: samba [...

...that on my brand new Buster proxy servers, 2 > with keepalived. > > I'm almost done with this, you should only see hostname > IP's as differences... > > Virtual ips, firewalling, added winbind, nfs, strongswan, > kerberos SSO auths. > > Squid with 4 setups.. Pfew.. But guys, when done im posting > this howto also. > > With squid 4.8 on buster, ( hint : repo buster-squid48 ssl > enabled ) > > What a dragon this was, strongswan is last what im on now. > > If someone has a strongswan setup with user/ldap auth, pm > me your conf...

...> check-me.txt And check-me.txt I just did that on my brand new Buster proxy servers, 2 with keepalived. I'm almost done with this, you should only see hostname IP's as differences... Virtual ips, firewalling, added winbind, nfs, strongswan, kerberos SSO auths. Squid with 4 setups.. Pfew.. But guys, when done im posting this howto also. With squid 4.8 on buster, ( hint : repo buster-squid48 ssl enabled ) What a dragon this was, strongswan is last what im on now. If someone has a strongswan setup with user/ldap auth, pm me your config ;-) Ok, what you posted below. pre01svde...

...text): > Server (GC/name/dom at DOM) unknown > > On 2017-09-08 10:37, L.P.H. van Belle wrote: > > Hai Sven, > > > > Sorry for the long wait, i had some things todo first here. > > 's fine. It's not like I don't have other stuff to worry about either. Pfew, im thinging your just waiting for me ;-) > > >> -----Oorspronkelijk bericht----- > >>>>> I suggest the following, move fsmo roles to villach-dc and > >>>> check database replications. > >>>> > >>>> DB replication is alre...

...elnet dc 88 & 53 works fine (so TCP at least is OK). > > 53 isn't mandatory since AD zone is a delegation so clients never talk > to AD NS directly > Regards > > Le 29/03/2016 16:18, L.P.H. van Belle a écrit : > > I dont read any france but translators work ok. ;-) pfew.. > > > > Ok any firewalling on the DC's? if so, open TCP and UDP port 88. > > Or try short without firewalls on, on the DC's. > > > > Other options to try is recude the MaxPacketSize in windows. > > > > Looks like a to big package which is rejecte...

...-- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle > Verzonden: dinsdag 29 maart 2016 16:18 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission denied on GPT.ini (Event ID 1058) > > I dont read any france but translators work ok. ;-) pfew.. > > Ok any firewalling on the DC's? if so, open TCP and UDP port 88. > Or try short without firewalls on, on the DC's. > > Other options to try is recude the MaxPacketSize in windows. > > Looks like a to big package which is rejected. > > Ow and above is al...

Hai Rowland, Im pretty sure this is a bug in the DC part. I'll show. On the DC. dc1:~# getent passwd winadmin NTDOM\winadmin:*:10000:100::/home/users/winadmin:/bin/bash wbinfo --group-info="Domain Users" NTDOM\domain users:x:100: id winadmin uid=10000(NTDOM\winadmin) gid=100(users) groups=100(users),3000004(BAZRTD\group policy creator owners),3000008(NTDOM\domain admins)

...) unknown >> >> On 2017-09-08 10:37, L.P.H. van Belle wrote: >>> Hai Sven, >>> >>> Sorry for the long wait, i had some things todo first here. >> >> 's fine. It's not like I don't have other stuff to worry about >> either. > Pfew, im thinging your just waiting for me ;-) > >> >>>> -----Oorspronkelijk bericht----- >>>>>>> I suggest the following, move fsmo roles to villach-dc >>>>>>> and >>>>>> check database replications. >>>>>...

Complete event id of : > But still, events log show a warning about kerberos ticket from LsaSrv > source and right after a permission denied on GPT.ini And a getfacl of the problem GPO SID please, i'll check. And a output of ipconfig /all on the problem pc. And question, dedicated IP or dhcp IP? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba

I dont read any france but translators work ok. ;-) pfew.. Ok any firewalling on the DC's? if so, open TCP and UDP port 88. Or try short without firewalls on, on the DC's. Other options to try is recude the MaxPacketSize in windows. Looks like a to big package which is rejected. Ow and above is also needed on the DNS port 53. Open tcp a...

....samba.org] Namens L.P.H. van > Belle > >> Verzonden: dinsdag 29 maart 2016 16:18 > >> Aan: samba at lists.samba.org > >> Onderwerp: Re: [Samba] Permission denied on GPT.ini (Event ID 1058) > >> > >> I dont read any france but translators work ok. ;-) pfew.. > >> > >> Ok any firewalling on the DC's? if so, open TCP and UDP port 88. > >> Or try short without firewalls on, on the DC's. > >> > >> Other options to try is recude the MaxPacketSize in windows. > >> > >> Looks like a to...

...[mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle >> Verzonden: dinsdag 29 maart 2016 16:18 >> Aan: samba at lists.samba.org >> Onderwerp: Re: [Samba] Permission denied on GPT.ini (Event ID 1058) >> >> I dont read any france but translators work ok. ;-) pfew.. >> >> Ok any firewalling on the DC's? if so, open TCP and UDP port 88. >> Or try short without firewalls on, on the DC's. >> >> Other options to try is recude the MaxPacketSize in windows. >> >> Looks like a to big package which is rejected. >...

...; >> > >> 53 isn't mandatory since AD zone is a delegation so clients never talk > >> to AD NS directly > >> Regards > >> > >> Le 29/03/2016 16:18, L.P.H. van Belle a écrit : > >>> I dont read any france but translators work ok. ;-) pfew.. > >>> > >>> Ok any firewalling on the DC's? if so, open TCP and UDP port 88. > >>> Or try short without firewalls on, on the DC's. > >>> > >>> Other options to try is recude the MaxPacketSize in windows. > >>> > &...

...> >>>> Verzonden: dinsdag 29 maart 2016 16:18 > >>>> Aan: samba at lists.samba.org > >>>> Onderwerp: Re: [Samba] Permission denied on GPT.ini (Event ID 1058) > >>>> > >>>> I dont read any france but translators work ok. ;-) pfew.. > >>>> > >>>> Ok any firewalling on the DC's? if so, open TCP and UDP port 88. > >>>> Or try short without firewalls on, on the DC's. > >>>> > >>>> Other options to try is recude the MaxPacketSize in windows. >...

...821322978-3959480180-962995944-513 wbinfo -G 10000 S-1-22-2-10000 S1-22-2-10000 Is the unix group with uid 10000 ( with is also in my case "Domain Users" ) But how this maps again in samba, that i really dont know. Arg, very confusion all.. Well, at least we now know this by design. Pfew.. Thanks for all the info guys. Greetz, Louis

Hai Sven, > -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: dinsdag 5 september 2017 17:13 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): > Server (GC/name/dom at DOM) unknown > > On