search for: precreate

...eb Rowland Penny via samba: > On Thu, 10 Jan 2019 16:23:06 +0100 > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > >> Hi folks, >> >> we'd like to provision new Samba servers (file sharing only) with the >> system keytab. It will precreated by some other process (msktutil) >> because we don't have direct access to a domain admin account. Is >> there any degragation in functionality by not using "secrets and >> keytab" and not doing "net ads join"? >> >> This is somewhat similiar t...

Hi folks, we'd like to provision new Samba servers (file sharing only) with the system keytab. It will precreated by some other process (msktutil) because we don't have direct access to a domain admin account. Is there any degragation in functionality by not using "secrets and keytab" and not doing "net ads join"? This is somewhat similiar to my question from 2017-11 [1] where I wa...

...019 16:23:06 +0100 >>> "Osipov, Michael via samba" <samba at lists.samba.org> wrote: >>> >>>> Hi folks, >>>> >>>> we'd like to provision new Samba servers (file sharing only) with >>>> the system keytab. It will precreated by some other process >>>> (msktutil) because we don't have direct access to a domain admin >>>> account. Is there any degragation in functionality by not using >>>> "secrets and keytab" and not doing "net ads join"? >>>> &gt...

...cause 1) that's what kubevirt people had asked for and 2) it already *mostly* worked for tap devices, so most of the work was related to macvtap (my memory is already fuzzy, but I think there were a couple privileged operations we still tried to do for standard tap devices even if they were precreated (standard disclaimer: I often misremember, so this memory could be wrong! But definitely precreated tap devices do work). I think though that when someone from kubevirt actually tried using a precreated macvtap device, they found that their precreated device wasn't visible at all to the u...

with samba 3.5.1 if I were to join a server to the domain and specify an OU to create the computer object in, i get Failed to join domain: failed to precreate account in ou (null): Out of memory However, if I run the same command with samba 3.4.5 it works. Did the syntax change? I cannot see anything about it net ads join createcomputer="Linux_Servers" -U <user>%<pass> -n core278468 here is a -d 3 Failed to join domain: failed...

...ipov, Michael via samba" <samba at lists.samba.org> wrote: >>>>> >>>>>> Hi folks, >>>>>> >>>>>> we'd like to provision new Samba servers (file sharing only) with >>>>>> the system keytab. It will precreated by some other process >>>>>> (msktutil) because we don't have direct access to a domain admin >>>>>> account. Is there any degragation in functionality by not using >>>>>> "secrets and keytab" and not doing "net ads join&quot...

...9;s what kubevirt people had asked for and 2) it > already *mostly* worked for tap devices, so most of the work was related > to macvtap (my memory is already fuzzy, but I think there were a couple > privileged operations we still tried to do for standard tap devices even > if they were precreated (standard disclaimer: I often misremember, so > this memory could be wrong! But definitely precreated tap devices do work). > It's been a while since I've started this thread, but lately I've understood better how tap devices work, and that new insight makes me wonder about a co...

...t;> "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > >>> > >>>> Hi folks, > >>>> > >>>> we'd like to provision new Samba servers (file sharing only) with > >>>> the system keytab. It will precreated by some other process > >>>> (msktutil) because we don't have direct access to a domain admin > >>>> account. Is there any degragation in functionality by not using > >>>> "secrets and keytab" and not doing "net ads join"? > &...

...hine name as the user, and the one-time-password given to it? > The only reason I'm using adcli at all is the preset-computer option > which I couldn't find an analogue to in 'net ads'. > > I have never tried this, but there is the 'createcomputer=OU' option: Precreate the computer account in a specific OU. The OU string read from top to bottom without RDNs and delimited by a '/'. E.g. "createcomputer=Computers/Servers/Unix" NB: A backslash '\' is used as escape at multiple levels and may need to be doubled or even quadrupled. It is not...

...t; On Thu, 10 Jan 2019 16:23:06 +0100 > > "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> we'd like to provision new Samba servers (file sharing only) with > >> the system keytab. It will precreated by some other process > >> (msktutil) because we don't have direct access to a domain admin > >> account. Is there any degragation in functionality by not using > >> "secrets and keytab" and not doing "net ads join"? > >> > >> Th...

...t;>> The only reason I'm using adcli at all is the preset-computer option >>> which I couldn't find an analogue to in 'net ads'. >>> >>> >> >> I have never tried this, but there is the 'createcomputer=OU' option: >> >> Precreate the computer account in a specific OU. >> The OU string read from top to bottom without RDNs >> and delimited by a '/'. >> E.g. "createcomputer=Computers/Servers/Unix" >> NB: A backslash '\' is used as escape at multiple >> levels and may need...

...mba works fine but deleting the AD service principal and samba/private files to reconfigure, the net join fails: # net ads join createupn='CIFS/smbtest.uk.domain.com' createcomputer='MITKerberos/Services' -U myadlogin Enter myadlogin's password: Failed to join domain: failed to precreate account in ou MITKerberos/Services: Invalid DN syntax The OU exists in AD (and works for earlier samba versions). Looking at net ads join output with -d 99, it looks like the net command isn't passing the netbios name through? [2012/02/09 15:45:29.014700, 1] libnet/libnet_join.c:1978() libnet...

...uot; <samba at lists.samba.org> wrote: > >>>>> > >>>>>> Hi folks, > >>>>>> > >>>>>> we'd like to provision new Samba servers (file sharing only) > >>>>>> with the system keytab. It will precreated by some other > >>>>>> process (msktutil) because we don't have direct access to a > >>>>>> domain admin account. Is there any degragation in > >>>>>> functionality by not using "secrets and keytab" and not doing > &gt...

...ote: > >>>>>>> > >>>>>>>> Hi folks, > >>>>>>>> > >>>>>>>> we'd like to provision new Samba servers (file sharing only) > >>>>>>>> with the system keytab. It will precreated by some other > >>>>>>>> process (msktutil) because we don't have direct access to a > >>>>>>>> domain admin account. Is there any degragation in > >>>>>>>> functionality by not using "secrets and keytab&quot...

...t;>>>>>> >>>>>>>>>> Hi folks, >>>>>>>>>> >>>>>>>>>> we'd like to provision new Samba servers (file sharing only) >>>>>>>>>> with the system keytab. It will precreated by some other >>>>>>>>>> process (msktutil) because we don't have direct access to a >>>>>>>>>> domain admin account. Is there any degragation in >>>>>>>>>> functionality by not using "secrets and ke...

Hi all, I'm aware that it is possible to plug pre-created macvtap devices to libvirt guests - tracked in RFE [0]. My interpretation of the wording in [1] and [2] is that it is also possible to plug pre-created tap devices into libvirt guests - that would be a requirement to allow kubevirt to run with less capabilities in the pods that encapsulate the VMs. I took a look at the libvirt code

...the preset-computer option >>>>> which I couldn't find an analogue to in 'net ads'. >>>>> >>>>> >>>> >>>> I have never tried this, but there is the 'createcomputer=OU' option: >>>> >>>> Precreate the computer account in a specific OU. >>>> The OU string read from top to bottom without RDNs >>>> and delimited by a '/'. >>>> E.g. "createcomputer=Computers/Servers/Unix" >>>> NB: A backslash '\' is used as escape at multi...

...ne-time-password given to it? >> The only reason I'm using adcli at all is the preset-computer option >> which I couldn't find an analogue to in 'net ads'. >> >> > > I have never tried this, but there is the 'createcomputer=OU' option: > > Precreate the computer account in a specific OU. > The OU string read from top to bottom without RDNs > and delimited by a '/'. > E.g. "createcomputer=Computers/Servers/Unix" > NB: A backslash '\' is used as escape at multiple > levels and may need to be doubled or ev...

On Thu, 10 Jan 2019 16:23:06 +0100 "Osipov, Michael via samba" <samba at lists.samba.org> wrote: > Hi folks, > > we'd like to provision new Samba servers (file sharing only) with the > system keytab. It will precreated by some other process (msktutil) > because we don't have direct access to a domain admin account. Is > there any degragation in functionality by not using "secrets and > keytab" and not doing "net ads join"? > > This is somewhat similiar to my question from...

...ople had asked for and 2) it > > already *mostly* worked for tap devices, so most of the work was related > > to macvtap (my memory is already fuzzy, but I think there were a couple > > privileged operations we still tried to do for standard tap devices even > > if they were precreated (standard disclaimer: I often misremember, so > > this memory could be wrong! But definitely precreated tap devices do work). > > > > It's been a while since I've started this thread, but lately I've > understood better how tap devices work, and that new insight m...