search for: ruebner

Hi, I am trying to address some error messages that are hitting the log files for two 4.9.5-Debian file servers in our all-Samba AD domain. Most prominently "connect to service Profiles initially as user MYDOMAIN\tc-mj00y2ps$ (uid=11128, gid=10515) (pid 1634)" "../source3/smbd/uid.c:453(change_to_user_internal)" "change_to_user_internal: chdir_current_service()

Hi, For starters I would like to send 'auth_audit:3' output to a separate log file than general debug messages, which should go to 'system.log'. I went through several iterations with the 'logging' switch, but none of them appears to work. The best I could come up with so far is 'logging = syslog' with 'log level = 1 auth_audit:3'. This sends messages

On 02/01/2020 05:30, Mike Ruebner via samba wrote: > Hi, > > I am trying to address some error messages that are hitting the log files > for two 4.9.5-Debian file servers in our all-Samba AD domain. Most > prominently > > "connect to service Profiles initially as user MYDOMAIN\tc-mj00y2ps$ > (uid=11128,...

Does the built-in Samba 4.5 Heimdal KDC use a principal database, or is everything Kerberos stored in LDAP? I am trying to add a service/host alias via 'kadmin.heimdal -l' but a database 'dump' results in 'hdp_open: opening /var/lib/heimdal-kdc/heimdal: No such file or directory'. I know just enough Kerberos to be dangerous, so some background on what I am trying to

Hi, I came across the 'CTDB_CAPABILITY_LMASTER=no' and 'CTDB_CAPABILITY_RECMASTER=no' options in my quest to salvage a rather poorly performing CTDB cluster over Ceph(fs). Unfortunately, the docs provide not enough information for a clustering noop like myself. Would there be any benefit to disabling those options for a branch office node on a high-latency WAN connection?

Greetings, I am running audits on a restricted file share for smbd 4.9.5-Debian. Messages go to syslog via local5. I am mostly interested in file access and modification, plus the occasional failed connect. The only operations that yield any results appear to be 'opendir' and 'open'. Unfortunately, 'open' is chatty to an extend as to render logging useless. I am getting