search for: posixoffset

...in Netbios[GVCC] DNS[gvcc.net] SID[S-1-5-21-1608159440-4144762864-1017073214] TrusteDomain: NetbiosName: KLINGONS DnsName: klingons.imp SID: S-1-5-21-3288560663-12659786-2782445548 Type: 0x2 (UPLEVEL) Direction: 0x3 (BOTH) Attributes: 0x8 (FOREST_TRANSITIVE) PosixOffset: 0x00000000 (0) kerb_EncTypes: 0x4 (RC4_HMAC_MD5) Namespaces[2] TDO[klingons.imp]: TLN: Status[Enabled] DNS[*.klingons.imp] DOM: Status[Enabled] DNS[klingons.imp] Netbios[KLINGONS] SID[S-1-5-21-3288560663-12659786-2782445548] Regards, Heinz

...ame[KRB.REALM] # samba-tool domain trust show KRB.REALM LocalDomain Netbios[AD] DNS[ad.domain] SID[S-1-5-21-611510720-3146064378-2947260547] TrustedDomain: NetbiosName:    KRB.REALM SID:            None Type:           0x3 (MIT) Direction:      0x2 (OUTBOUND) Attributes:     0x1 (NON_TRANSITIVE) PosixOffset:    0x00000000 (0) kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) However I have already noticed one thing that is broken... if I restart samba on the Samba DC after creating the realm trust, winbind immediately dies with the following (and I can't see a workaround -...

...TrustedDomain: > >> NetbiosName:    TESTAD1 >> DnsName:        testad1.company.com >> SID:            S-1-5-21-2509583006-2398556320-3264531554 >> Type:           0x2 (UPLEVEL) >> Direction:      0x3 (BOTH) >> Attributes:     0x4 (QUARANTINED_DOMAIN) >> PosixOffset:    0x00000000 (0) >> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >> root at testad2dc:/var/log/samba# wbinfo --online-status >> BUILTIN : active connection >> TESTAD2 : active connection >> TESTAD1 : active connection > >> root at...

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

Hi There seems to be a discrepancy in the s4 schema concerning security groups. Domain Users comes with gidNumber: 100. This is however contrary to what the schema allows. You can show this as follows: Create a new group. samba-tool group add mygroup. Use phpldapadmin to add the gidNumber attribute. There is an error because gidNumber is provided by the posixGroup class and that objectclass is

...7493-3366197983-1829854343] > TrustedDomain: > NetbiosName: TESTAD1 > DnsName: testad1.company.com > SID: S-1-5-21-2509583006-2398556320-3264531554 > Type: 0x2 (UPLEVEL) > Direction: 0x3 (BOTH) > Attributes: 0x4 (QUARANTINED_DOMAIN) > PosixOffset: 0x00000000 (0) > kerb_EncTypes: 0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > root at testad2dc:/var/log/samba# wbinfo --online-status > BUILTIN : active connection > TESTAD2 : active connection > TESTAD1 : active connection > root at testad2dc:/var/log/samba# wbi...

...t; DnsName:        testad1.company.com >>>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>> Type:           0x2 (UPLEVEL) >>>>> Direction:      0x3 (BOTH) >>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>> PosixOffset:    0x00000000 (0) >>>>> kerb_EncTypes:  0x18 >> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>>> BUILTIN : active connection >>>>> TESTAD2 : active connection &gt...

...;> NetbiosName:    TESTAD1 >>> DnsName:        testad1.company.com >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>> Type:           0x2 (UPLEVEL) >>> Direction:      0x3 (BOTH) >>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>> PosixOffset:    0x00000000 (0) >>> kerb_EncTypes:  0x18 (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>> root at testad2dc:/var/log/samba# wbinfo --online-status >>> BUILTIN : active connection >>> TESTAD2 : active connection >>> TESTAD1 : active connection &gt...

...> >>> DnsName:        testad1.company.com > >>> SID:            S-1-5-21-2509583006-2398556320-3264531554 > >>> Type:           0x2 (UPLEVEL) > >>> Direction:      0x3 (BOTH) > >>> Attributes:     0x4 (QUARANTINED_DOMAIN) > >>> PosixOffset:    0x00000000 (0) > >>> kerb_EncTypes:  0x18 > (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) > >>> root at testad2dc:/var/log/samba# wbinfo --online-status > >>> BUILTIN : active connection > >>> TESTAD2 : active connection > >>>...

...STAD1 >>>> DnsName:        testad1.company.com >>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>> Type:           0x2 (UPLEVEL) >>>> Direction:      0x3 (BOTH) >>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>> PosixOffset:    0x00000000 (0) >>>> kerb_EncTypes:  0x18 >>>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>> BUILTIN : active connection >>>> TESTAD2 : active connection >>&g...

...estad1.company.com >>>>>> SID:            S-1-5-21-2509583006-2398556320-3264531554 >>>>>> Type:           0x2 (UPLEVEL) >>>>>> Direction:      0x3 (BOTH) >>>>>> Attributes:     0x4 (QUARANTINED_DOMAIN) >>>>>> PosixOffset:    0x00000000 (0) >>>>>> kerb_EncTypes:  0x18 >>> (AES128_CTS_HMAC_SHA1_96,AES256_CTS_HMAC_SHA1_96) >>>>>> root at testad2dc:/var/log/samba# wbinfo --online-status >>>>>> BUILTIN : active connection >>>>>> TESTAD2 : a...