search for: rednsx

On Thu, Apr 7, 2016 at 11:00 AM, Sketch <smblist at rednsx.org> wrote: > My guess would be not much, because BIND9_DLZ exists and (mostly) gives you > the best of both worlds. If you want to use bind with MS DNS servers, then > you have to go that route, but it's not necessary with Samba 4 and > BIND9_DLZ. That's clear but I was th...

...at all. > > "Please wait" lasts relatively long. "Welcome" too followed by black screen with mouse cursor only. No roaming profiles, no folder redirection. > > Event logs seem to offer nothing. > > Am 27. Februar 2015 14:27:03 MEZ, schrieb Sketch <smblist at rednsx.org>: >> On Fri, 27 Feb 2015, Tim wrote: >> >>> And this can cause such behaviour? >> No, SSSD is only used for local authentication on the machine. Samba 4 >> as >> an AD DC is only going to be serving information from it's own LDAP >> database....

On Thu, 7 Apr 2016, Sonic wrote: > On Wed, Apr 6, 2016 at 5:29 PM, Sketch <smblist at rednsx.org> wrote: >> There's no need to repoint clients to AD DNS servers if you don't want >> dynamic DNS registration. > > Dynamic DNS registration works with the clients pointing to the > Unbound cache (at an account with a Windows AD server). The clients > must be d...

On Mon, Oct 3, 2016 at 10:39 AM, Sketch <smblist at rednsx.org> wrote: > > The standalone tools (as packaged by CentOS) don't have all of the > extensions that are built when you build a Samba DC. If you have already > rebuilt CentOS Samba packages with DC support, you need to add samba's ldb > modules to ldb's module path....

On Wed, Apr 13, 2016 at 10:29 AM, Sketch <smblist at rednsx.org> wrote: > My understanding of Unbound is that designed as a caching nameserver, not an > authoratative nameserver. It's supposed to serve DNS to clients from > another server, such as BIND or Samba's internal DNS server. Pointing it to > your domain's authoratative...

On Thu, Apr 7, 2016 at 10:34 AM, Rowland penny <rpenny at samba.org> wrote: > First and foremost, this is your domain, so you can do what you want with > it, but I wouldn't use anything that didn't rely on the dns info stored in > AD. I would also point out, that website is not a Samba or Microsoft website > and as such I cannot recommend using it. Microsoft does have

On Thu, Apr 7, 2016 at 11:00 AM, Sketch <smblist at rednsx.org> wrote: > My guess would be not much, because BIND9_DLZ exists and (mostly) gives you > the best of both worlds. Which does bring up a question. It seems that outside of a feature or two and some added flexibility that there is, at the core, no difference between Samba's internal...

On Mon, Oct 3, 2016 at 12:10 PM, Sketch <smblist at rednsx.org> wrote: > > I would assume they would work if you built Samba against them so that > it's ldb modules were built for the same version. But that seems like a > lot of work when you can just use the CentOS ldb-tools package. > Well the ldb-tools package from COS doesn...

On Fri, 27 Feb 2015, Tim wrote: > And this can cause such behaviour? No, SSSD is only used for local authentication on the machine. Samba 4 as an AD DC is only going to be serving information from it's own LDAP database. BTW, I use SSSD on my domain controllers with no issues. > Am 27. Februar 2015 11:01:15 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>:

...newly installed, 0 to remove and 0 not upgraded. Should I just rename the files? If the database is corrupt my only recourse is to follow the restore guidelines in the Samba wiki and roll back to a previous version of the db, correct? JS On Mar 3, 2016 7:40 AM, "Sketch" <smblist at rednsx.org> wrote: > I'd remove the distro packages providing those libs in /usr/lib, as they > could possibly cause problems. One more I forgot, which might possibly be > responsible for corrupting your ldb database if the wrong one is loaded by > samba at runtime, is libldb. > &g...

On Wed, 6 Apr 2016, Rowland penny wrote: > Your DC needs to be authoritative for your AD domain, this is *not* a Samba > thing, it is an AD thing. What you can do, is to do what is recommended, make > your AD domain a subdomain of your domain i.e. if your domain name is > 'domain.tld', use 'internal.domain.tld' for your AD domain. > > Your AD DC will then be

...this is going to break anything or not. @mathias, I didn't forgot to join, otherwise the DC wouldn't work. The DC2 *seems* to be working just fine. showrepl doesn't popup any error and is listed as a Domain Controller on ADUC. On Tue, Oct 13, 2015 at 11:10 AM, Sketch <smblist at rednsx.org> wrote: > On Tue, 13 Oct 2015, Guilherme Boing wrote: > > I should also mention that Samba 4.3.0 was installed from tarball, I >> compiled it myself. >> >> DC2 does not have the /var/lib/samba/private/sam.ldb file. Also it did not >> return any result on DC1...

...r/local/samba/lib/private/libtdb-wrap-samba4.so /usr/local/samba/lib/private/libtdb.so.1 /usr/local/samba/lib/private/libtdb.so.1.3.7 I also noticed that I've got a log.smbd in /usr/local/samba/var: http://www.anonpaste.net/?p=bdfa3 JS On Wed, Mar 2, 2016 at 9:00 PM, Sketch <smblist at rednsx.org> wrote: > Also check for pytalloc|libtalloc and libtdb. > > > On Wed, 2 Mar 2016, IT Admin wrote: > > I poked around the system using locate, I don't think there are any >> packages installed on this system other than those associated with the >> 4.3.3 buil...

...use the option "winbind use default domain = yes" for one thing. I'm not sure if you need enumeration but I like seeing domain users and groups with getent so I have the options winbind enum users = yes winbind enum groups = yes On Mon, May 2, 2016 at 6:11 AM, Sketch <smblist at rednsx.org> wrote: > On Mon, 2 May 2016, Andrew Bartlett wrote: > > On Mon, 2016-05-02 at 07:44 +1000, John Gardeniers wrote: >> >>> Hi Andrew, >>> >>> Please elaborate, as we're about to put it on Samba 4.2. Thanks. >>> >> >> Please d...

2015-06-23 20:47 GMT+02:00 Daniel Carrasco Mar?n <danielmadrid19 at gmail.com>: > > El 23/6/2015 8:33 p. m., "Sketch" <smblist at rednsx.org> escribi?: > > > > On Tue, 23 Jun 2015, Rowland Penny wrote: > > > >> On 23/06/15 18:58, Daniel Carrasco Mar?n wrote: > >>> > >>> Hi, > >>> > >>> I've sucessfull created a secondary DC using the wiki manual ( &g...

On Tue, 23 Jun 2015, Rowland Penny wrote: > On 23/06/15 18:58, Daniel Carrasco Mar?n wrote: >> Hi, >> >> I've sucessfull created a secondary DC using the wiki manual ( >> https://wiki.samba.org/index.php/Join_a_domain_as_a_DC), and is working >> perfectly, user and groups are synced on both and I can use any of them >> for >> login using

...ised, anywhere. If you were having several DC perhaps you would not have the whole AD broken but only one DC broken and the other(s) one(s) working well. This was already explained to you today, I was just insisting a little bit : ) > On Mar 3, 2016 7:40 AM, "Sketch" <smblist at rednsx.org> wrote: > > > I'd remove the distro packages providing those libs in /usr/lib, as they > > could possibly cause problems. One more I forgot, which might possibly > be > > responsible for corrupting your ldb database if the wrong one is loaded > by > > sa...

...Daniel Carrasco Marín <danielmadrid19 at gmail.com > >: > > > > > > > 2015-06-23 20:47 GMT+02:00 Daniel Carrasco Marín < > danielmadrid19 at gmail.com > > >: > > > >> > >> El 23/6/2015 8:33 p. m., "Sketch" <smblist at rednsx.org> escribió: > >> > > >> > On Tue, 23 Jun 2015, Rowland Penny wrote: > >> > > >> >> On 23/06/15 18:58, Daniel Carrasco Marín wrote: > >> >>> > >> >>> Hi, > >> >>> > >> >>&gt...

...ll permissions through ACLs in both DCs for every share. P.S.: By using ldbsearch over idmap.ldb I noticed that xidNumber attribute is the same for cchavarrias user in both, 1st and 2nd DC, so I guess xidNumbers match correctly. Am I right? On Thu, Apr 28, 2016 at 12:12 PM, Sketch <smblist at rednsx.org> wrote: > On Thu, 28 Apr 2016, Jason Voorhees wrote: > >> Now I can barely understand what the problem might be. I'll take a >> look at the wiki page to better understand what's wrong and how to fix >> it. > > > I believe this is the part you're l...

On Sun, 19 Feb 2017, Jeff Sadowski via samba wrote: > I was never able to build it in a way I feel comfortable on Fedora. I would > want to build it using an RPM build process. I think I want an MIT build > but I don't know what all I would need to build either way. I thought it What do you hope to gain from an MIT build? The MIT kerberos user tools (kinit, etc) operate just fine