search for: rwk

...thwhile updating the wiki (or I will if it's publically updatable). Current wiki suggestion is to add the following to /etc/apparmor.d/local/usr.sbin.named /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, /usr/local/samba/private/named.conf r, /usr/local/samba/private/dns/** rwk, I found I needed to add the following /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab rk, /usr/local/samba/private/named.conf r, /usr/local/samba/private/dns/** rwk, /usr/local/samba/etc/smb.conf r, /var/tmp/** rw, /var/tmp/ rw, FYI /var/tmp is where the .jnl is being written, p...

..._with_AppArmor_or_SELinux) is to add the following to /etc/apparmor.d/local/usr.sbin.named # Samba4 DLZ and Active Directory Zones (default source installation) /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, /usr/local/samba/private/named.conf r, /usr/local/samba/private/dns/** rwk, # Ubuntu /var/tmp/** rwmk, I found I needed to add an extra line for bind to start. /usr/local/samba/etc/smb.conf r, Regards Fred.

...var/cache/bind/ rw, > > > > # gssapi > > /etc/krb5.keytab kr, > > /etc/bind/krb5.keytab kr, > > /var/lib/samba/lib/** rm, > > /var/lib/samba/private/dns.keytab r, > > /var/lib/samba/private/named.conf r, > > /var/lib/samba/private/dns/** rwk, # THIS DOES NOT EXIST I changed above line to. /var/lib/samba/bind-dns/** rwk, Or should it be? /var/lib/samba/bind-dns/dns/** rwk, > > /var/lib/samba/etc/smb.conf r, > > > > I rebooted just to be sure. However, I still get client update denied. >...

..._bind_service, capability setgid, capability setuid, capability sys_chroot, capability sys_resource, /etc/bind/** r, /var/lib/bind/** rw, /var/lib/bind/ rw, /var/cache/bind/** lrw, /var/cache/bind/ rw, # Database file used by allow-new-zones /var/cache/bind/_default.nzd-lock rwk, # gssapi /etc/krb5.keytab kr, /etc/bind/krb5.keytab kr, # gssapi /var/lib/sss/pubconf/krb5.include.d/** r, /var/lib/sss/pubconf/krb5.include.d/ r, /var/lib/sss/mc/initgroups r, /etc/gss/mech.d/ r, # ldap /etc/ldap/ldap.conf r, /{,var/}run/slapd-*.socket rw, # dynamic up...

I don't know if this is a bug or a limitation in ssh2 but I am unable to get get an xdm (or gdm) login on my machine at home through an ssh tunnel through our firewall at work. Should this be possible using ssh port forwarding? Please reply to me at: rwk at americom.com Thanks, Dick

...map segment from shared object" -- i add group-owner "Bind" to File dlz_bind9_9.so nothing Change. -- also add: root at X200:/etc/apparmor.d/local# cat usr.sbin.named /var/lib/samba/** r, /var/lib/samba/private/dns.keytab r, /etc/bind/named.conf r, /var/lib/samba/private/dns/** rwk, /etc/samba/smb.conf r, /var/lib/samba/bind-dns/named.conf r, /var/lib/samba/bind-dns/** rwk, /etc/samba/smb.conf r, /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so rm, -- and i add the Bind Zone string to /etc/bind/named.conf dlz "AD DNS Zone" { # For BIND 9.11.0 databa...

...> >   # gssapi > > >   /etc/krb5.keytab kr, > > >   /etc/bind/krb5.keytab kr, > > >   /var/lib/samba/lib/** rm, > > >   /var/lib/samba/private/dns.keytab r, > > >   /var/lib/samba/private/named.conf r, > > >   /var/lib/samba/private/dns/** rwk,      # THIS DOES NOT EXIST > > I changed above line to. >      /var/lib/samba/bind-dns/** rwk, > Or should it be? >       /var/lib/samba/bind-dns/dns/** rwk, > > > >   /var/lib/samba/etc/smb.conf r, > > > > > > I rebooted just to be sure.  However, I st...

...orward updates but the reverse doesn't . The DHCP server has the following ddns-rev-domainname "in-addr.arpa."; /etc/apparmor.d/local/usr.sbin.named /var/lib/samba/lib/** rm, /var/lib/samba/private/dns.keytab r, /var/lib/samba/private/named.conf r, /var/lib/samba/private/dns/** rwk, /var/lib/samba/etc/smb.conf r, /var/tmp/** rwmk, /dev/urandown rw, # Samba4 DLZ and Active Directory Zones (default source installation) # bind support before samba 4.9 /var/lib/samba/private/dns/** rwmk, /var/lib/samba/private/dns.keytab r, /var/lib/samba/private/named.conf r, /var/lib/samba/pri...

...** r, /var/lib/bind/** rw, /var/lib/bind/ rw, /var/cache/bind/** lrw, /var/cache/bind/ rw, # gssapi /etc/krb5.keytab kr, /etc/bind/krb5.keytab kr, /var/lib/samba/lib/** rm, /var/lib/samba/private/dns.keytab r, /var/lib/samba/private/named.conf r, /var/lib/samba/private/dns/** rwk, # THIS DOES NOT EXIST /var/lib/samba/etc/smb.conf r, I rebooted just to be sure. However, I still get client update denied. This is in /etc/bind/ drwxr-sr-x 2 root bind 4096 May 15 10:38 ./ drwxr-xr-x 99 root root 4096 May 3 11:13 ../ -rw-r--r-- 1 root root 2761 Apr 24 04:04 b...

...}lib/@{multiarch}/samba/bind9/*.so rm, /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm, /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm, /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm, /var/lib/samba/bind-dns/dns.keytab rk, /var/lib/samba/bind-dns/named.conf r, /var/lib/samba/bind-dns/dns/** rwk, /var/lib/samba/private/dns.keytab rk, /var/lib/samba/private/named.conf r, /var/lib/samba/private/dns/** rwk, /etc/samba/smb.conf r, /dev/urandom rwmk, Then try again. Source : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928398 Greetz, Louis > -----Oorspronkelijk beric...

Ah, ok, my thats where its different here. My setup is AD-DNS => eth0 Server_split_DNS (Proxy) eth1 => internet > -----Oorspronkelijk bericht----- > Van: Joachim Lindenberg [mailto:samba at lindenberg.one] > Verzonden: dinsdag 30 juli 2019 10:44 > Aan: 'L.P.H. van Belle'; samba at lists.samba.org > Onderwerp: AW: [Samba] split horizon and authoritative answers..?

...or.d/* > athena:~# egrep -ri "samba|winbind" /etc/apparmor.d/* > /etc/apparmor.d/abstractions/authentication:? # winbind > /etc/apparmor.d/abstractions/authentication:? #include > <abstractions/winbind> > /etc/apparmor.d/abstractions/smbpass:? /var/lib/samba/*.[lt]db rwk, > /etc/apparmor.d/abstractions/samba:? /etc/samba/* r, > /etc/apparmor.d/abstractions/samba:? /usr/lib*/samba/ldb/*.so mr, > /etc/apparmor.d/abstractions/samba:? /usr/share/samba/*.dat r, > /etc/apparmor.d/abstractions/samba: > /usr/share/samba/codepages/{lowcase,upcase,valid}.dat...

...d group-owner "Bind" to File dlz_bind9_9.so nothing Change. > > -- > > also add: > root at X200:/etc/apparmor.d/local# cat usr.sbin.named > > /var/lib/samba/** r, > /var/lib/samba/private/dns.keytab r, > /etc/bind/named.conf r, > /var/lib/samba/private/dns/** rwk, > /etc/samba/smb.conf r, > /var/lib/samba/bind-dns/named.conf r, > /var/lib/samba/bind-dns/** rwk, > /etc/samba/smb.conf r, > /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so rm, > > -- > > and i add the Bind Zone string to /etc/bind/named.conf > > dlz "A...

...ena:~# egrep -ri "samba|winbind" /etc/apparmor.d/* >> /etc/apparmor.d/abstractions/authentication:? # winbind >> /etc/apparmor.d/abstractions/authentication:? #include >> <abstractions/winbind> >> /etc/apparmor.d/abstractions/smbpass:? /var/lib/samba/*.[lt]db rwk, >> /etc/apparmor.d/abstractions/samba:? /etc/samba/* r, >> /etc/apparmor.d/abstractions/samba:? /usr/lib*/samba/ldb/*.so mr, >> /etc/apparmor.d/abstractions/samba:? /usr/share/samba/*.dat r, >> /etc/apparmor.d/abstractions/samba: >> /usr/share/samba/codepages/{lowcase...

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

...found this, taken from https://2stech.ca/index.php/linux/linuxtutotials/tutorials/234-samba-active-directory-with-bind-dns-backend-on-ubuntu-1404 /var/lib/samba/private/krb5.conf r, /var/lib/samba/private/dns.keytab r, /var/lib/samba/private/named.conf r, /var/lib/samba/private/dns/** rwk, /usr/lib/x86_64-linux-gnu/samba/** m, /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/** m, This dated recipe works for me where newer ones did not.  BIND 9.10.6 is happy again.  YMMV Dale

...> > /etc/krb5.keytab kr, > > > > /etc/bind/krb5.keytab kr, > > > > /var/lib/samba/lib/** rm, > > > > /var/lib/samba/private/dns.keytab r, > > > > /var/lib/samba/private/named.conf r, > > > > /var/lib/samba/private/dns/** rwk, # THIS DOES NOT EXIST > > > > I changed above line to. > > /var/lib/samba/bind-dns/** rwk, > > Or should it be? > > /var/lib/samba/bind-dns/dns/** rwk, > > > > > > /var/lib/samba/etc/smb.conf r, > > > > > > > &g...

...files: cd /sys/fs/cgroup/devices/libvirt/lxc echo "c 10:200 rwm" > devices.allow echo "c 10:200 rwm" > depot/devices.allow echo a > depot/devices.allow ... and I see the successful results in depot/devices.list, but no success. 2) I inserted a line "/dev/net/tun rwk," into /etc/apparmor.d/abstractions/lxc/container-base - no change. (I know, it seems kind of pointless - because it's about permissions to a device, not a path. You may deduce my desperation from this ... SELinux is not active. Mounts on /dev look normal to me: devfs on /dev type tmpfs...

...-ad-dc Add: [Unit] After=network.target network-online.target bind9.service systemctl edit bind9 Add: [Service] ExecReload= > /var/lib/samba/private/krb5.conf r, > /var/lib/samba/private/dns.keytab r, > /var/lib/samba/private/named.conf r, > /var/lib/samba/private/dns/** rwk, Also add in advanced for 4.9+ and apparmor. And if you look in that apparmor file, you will see : # Site-specific additions and overrides. See local/README for details. #include <local/usr.sbin.named> So use the local/usr.sbin.named file, that tracking changes more easy. /var/lib/s...

...tutotials/tutorials/234-samba-active-directory-with-bind-dns-backend-on-ubuntu-1404> > >   /var/lib/samba/private/krb5.co <http://krb5.co>nf r, >   /var/lib/samba/private/dns.keytab r, >   /var/lib/samba/private/named.conf r, >   /var/lib/samba/private/dns/** rwk, >   /usr/lib/x86_64-linux-gnu/samba/** m, >   /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/** m, > > This dated recipe works for me where newer ones did not. BIND > 9.10.6 is happy again.  YMMV > > Dale > > -- > To unsubscribe from this list...