search for: rawi

Samba - General mailing list wrote > On Tue, 17 Jan 2017 03:03:28 -0800 (PST) > rawi via samba < > samba at .samba > > wrote: > >> Samba - General mailing list wrote >> >> Rowland, thank you >> >> Please note the comments starting with two '#'. They give info about >> erroneous behavior I encontered. >>...

...n. I also added then (to be sure ;) domain logons = YES. This seems now to work. I'll test tomorrow joins with another clients. What remains, is the question, why a "server role = active directory domain controller" doesn't enable "domain logons" by default? Regards rawi -- View this message in context: http://samba.2283325.n4.nabble.com/Difficulties-with-Windows-XP-failed-to-find-cifs-fileserver-y-z-Y-Z-in-keytab-arcfour-hmac-md5-tp4713385p4713527.html Sent from the Samba - General mailing list archive at Nabble.com.

Samba - General mailing list wrote > On Mon, 16 Jan 2017 09:07:35 -0800 (PST) > rawi via samba < > samba at .samba > > wrote: > >> Samba - General mailing list wrote >> >> [2017/01/11 16:42:34.522067, 1] >> >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) >> >> gss_accept_sec_context failed with...

On Tue, 17 Jan 2017 03:32:46 -0800 (PST) rawi via samba <samba at lists.samba.org> wrote: > Samba - General mailing list wrote > > On Tue, 17 Jan 2017 03:03:28 -0800 (PST) > > rawi via samba &lt; > > > samba at .samba > > > &gt; wrote: > > > >> Samba - General mailing list wrote...

...on both machines. winbind cache time = 300: I waited and hoped a long time but no change. I found recommendations to delete different cache files, but I'm not sure which ones and don't want to damage a long time configuration, learning by doing. What should I do? Thanks and best regards rawi -- View this message in context: http://samba.2283325.n4.nabble.com/Samba-4-3-11-Changing-GID-of-domain-users-wbinfo-shows-still-the-old-GID-tp4712996.html Sent from the Samba - General mailing list archive at Nabble.com.

...At the moment I think to try desperately either - to restrict the client max protocol to lower (NT1?), or - to set veto oplock files = /NTUSER.DAT/ntuser.ini for the Homes share ... unless someone of you knows the problem and has a probed solution. Please, what do you think about this? Thanks rawi -- View this message in context: http://samba.2283325.n4.nabble.com/4-3-11-Ubuntu-SMBD-keeps-Locks-on-NTUSER-DAT-and-ntuser-ini-after-logout-tp4714018.html Sent from the Samba - General mailing list archive at Nabble.com.

On Tue, 17 Jan 2017 04:30:31 -0800 (PST) rawi via samba <samba at lists.samba.org> wrote: > Samba - General mailing list wrote > > And there is your problem, AD lives (or dies) on DNS, unlike NT. You > > have this line 'dns-nameservers 127.0.0.1' in your smb.conf. It is > > useless, it is pointing to itself...

...eak encryption of the old WindowsXP I tried on the domain_member_file_server to put allow_weak_crypto = true ...in it's krb5.conf, but with no success. ON THE AD-DC # net ads enctypes list hg004$ no msDS-SupportedEncryptionTypes attribute found Did someone got around such a behavior? Thanks rawi -- View this message in context: http://samba.2283325.n4.nabble.com/Difficulties-with-Windows-XP-failed-to-find-cifs-fileserver-y-z-Y-Z-in-keytab-arcfour-hmac-md5-tp4713385.html Sent from the Samba - General mailing list archive at Nabble.com.

On Tue, 17 Jan 2017 05:54:41 -0800 (PST) rawi via samba <samba at lists.samba.org> wrote: > > No, I have dhcp and a full bind9 serving master zones forward and > reverse, with exception of the _msdcs... SOA, which I let only > forward and it seems enough... I have been using BIND_DLZ and DHCP updating the Samba AD databa...

Run : net cache flush then on both servers and restart samba/winbind and test again. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens rawi via samba > Verzonden: woensdag 4 januari 2017 12:40 > Aan: samba at lists.samba.org > Onderwerp: [Samba] [Samba 4.3.11] Changing GID of "domain users" - wbinfo > shows still the old GID > > Hi > > working on Ubuntu server 16.04.1 with Samba Version 4.3.11-Ubuntu...

On Mon, 16 Jan 2017 09:07:35 -0800 (PST) rawi via samba <samba at lists.samba.org> wrote: > Samba - General mailing list wrote > >> [2017/01/11 16:42:34.522067, 1] > >> ../source3/librpc/crypto/gse.c:496(gse_get_server_auth_token) > >> gss_accept_sec_context failed with [ Miscellaneous failure (see >...

On Tue, 17 Jan 2017 03:03:28 -0800 (PST) rawi via samba <samba at lists.samba.org> wrote: > Samba - General mailing list wrote > > Rowland, thank you > > Please note the comments starting with two '#'. They give info about > erroneous behavior I encontered. > > The manual says that "domain master...

Samba - General mailing list wrote > On Tue, 17 Jan 2017 04:30:31 -0800 (PST) > rawi via samba &lt; > samba at .samba > &gt; wrote: > >> Oh and I forgot, I am running a DNS server on the DC, on the right >> port and with all my clients are needing. >> They are only not served trough samba but directlly by bind. If they >> (clients) would...

...39;t support officially Windows working flawlessly with Samba in place of it's own servers, but we are doing this all the time ;) When I'll reach a stable situation for the clients I have now, I'll freeze the installation for another couple of years and live happily with it. Regards rawi -- View this message in context: http://samba.2283325.n4.nabble.com/Difficulties-with-Windows-XP-failed-to-find-cifs-fileserver-y-z-Y-Z-in-keytab-arcfour-hmac-md5-tp4713385p4713554.html Sent from the Samba - General mailing list archive at Nabble.com.

...39;ll stay so for the next 10 years - for fear to break something. All the above is for all of you common knowledge. This were now discoveries for me after sleeping the last 12 years behind an old samba NT domain :) Thanks to all samba team and forum helpers for making it happen again and again. rawi -- View this message in context: http://samba.2283325.n4.nabble.com/WINBIND-UID-and-GID-false-mappings-on-domain-member-tp4706553p4706722.html Sent from the Samba - General mailing list archive at Nabble.com.

> Just provisioning with --rfc2307 isn't enough, you personally need to > add any required RFC2307 attributes. But you see my test user has his attributes. From samba-tool. Do you mean the basic objects, the templates for the user and group? If yes, how to do it? > Can I suggest you put dnsupdate back and then setup bind9 on the DC > correctly. I will... > You must be

...t running (from the domain member), but the home was not bound to the HOMEDIR. This could happen, because at that time the UID came correctly and matched the old UID of the user. I got today a kernel update.... and the situation changed, like I said... Now I get GID but no UID. Somehow spooky... rawi -- View this message in context: http://samba.2283325.n4.nabble.com/WINBIND-UID-and-GID-false-mappings-on-domain-member-tp4706553p4706560.html Sent from the Samba - General mailing list archive at Nabble.com.

Hello, Am 15.03.2016 um 15:28 schrieb rawi: > Trying to fulfill the recommendation to separate the domain controller from > the file server and needing roaming profiles, I do not understand where I > have to declare and locate the Profiles and Home shares. > > Is it possible to declare the profiles and homes on the DC (smb.c...

On 16/03/16 13:34, rawi wrote: > Marc, thank you very much! > > Yes, I saw many tutorials, but many are showing how to set a DC and also the > shares on it self; what it is not recommended. > Others are showing how to manage Users with Windows tools. > >> If you set the attributes in the user objec...

Hello, Am 16.01.2017 um 18:07 schrieb rawi via samba: > I discovered, that the generated smb.conf was not enough for an AD-DC. > > Despite having: > > server role = active directory domain controller > > ... the default settings for: > > domain logons = no (?) > domain master = auto (aka equally NO) > lo...