search for: samba_domain_member_port_usag

I tried the following firewall-cmd --add-service=dns --permanent firewall-cmd --add-service=samba --permanent firewall-cmd --reload But was not able to connect until I disabled the iptables via iptables -P INPUT ACCEPT iptables -F then I was able to connect my windows 10 pro to my domain. So my question is what services or ports am I missing to open?

...an it not find a DC ? Is there a firewall or similar running ? > > > > I have opened the firewall on the DC. Which ports do I need to open > on the DM? Apparently I have nothing opened on the DM but I opened > the required ports according to > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage. > > [Sat Sep 09 13:56:22] [root at D01~/.bin$]./check_smb.sh > 148779 pts/1 S+ 0:00 /bin/bash ./check_smb.sh > 148781 pts/1 S+ 0:00 grep -E samba|smb|nmb|winbind > [Sat Sep 09 13:56:37] [root at D01~/.bin$]net ads join -U administrator > Password for [HOME\admin...

> Why can it not find a DC ? Is there a firewall or similar running ? > I have opened the firewall on the DC. Which ports do I need to open on the DM? Apparently I have nothing opened on the DM but I opened the required ports according to https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage. [Sat Sep 09 13:56:22] [root at D01~/.bin$]./check_smb.sh 148779 pts/1 S+ 0:00 /bin/bash ./check_smb.sh 148781 pts/1 S+ 0:00 grep -E samba|smb|nmb|winbind [Sat Sep 09 13:56:37] [root at D01~/.bin$]net ads join -U administrator Password for [HOME\administrator]: Failed to join doma...

...rvice=dns --permanent > firewall-cmd --add-service=samba --permanent > firewall-cmd --add-service=kerberos --permanent > firewall-cmd --reload > > I should have all the ports I need. > Thank you. > > > > > Domain members: > > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage > > > > > > Regards, > > Marc > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >

...l-cmd --add-service=samba --permanent >> firewall-cmd --add-service=kerberos --permanent >> firewall-cmd --reload >> >> I should have all the ports I need. >> Thank you. >> >> > >> > Domain members: >> > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage >> > >> > >> > Regards, >> > Marc >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >> > > > -- > To unsubscribe from...

...e a firewall or similar running ? > > > > > > > I have opened the firewall on the DC. Which ports do I need to open > > on the DM? Apparently I have nothing opened on the DM but I opened > > the required ports according to > > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage. > > > > [Sat Sep 09 13:56:22] [root at D01~/.bin$]./check_smb.sh > > 148779 pts/1 S+ 0:00 /bin/bash ./check_smb.sh > > 148781 pts/1 S+ 0:00 grep -E samba|smb|nmb|winbind > > [Sat Sep 09 13:56:37] [root at D01~/.bin$]net ads join -U administrator >...

...445"/> so by adding firewall-cmd --add-service=dns --permanent firewall-cmd --add-service=samba --permanent firewall-cmd --add-service=kerberos --permanent firewall-cmd --reload I should have all the ports I need. Thank you. > > Domain members: > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage > > > Regards, > Marc

...t;> firewall-cmd --add-service=kerberos --permanent > >> firewall-cmd --reload > >> > >> I should have all the ports I need. > >> Thank you. > >> > >> > > >> > Domain members: > >> > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage > >> > > >> > > >> > Regards, > >> > Marc > >> > >> -- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: https://lists.samba.org/mailman/options/samba > >> > &g...

On Sat, 9 Sep 2023 11:29:53 -0400 Rob Campbell via samba <samba at lists.samba.org> wrote: > > > > It looks like DNS is failing, does /etc/resolv.conf look like this: > > > > search home.rob-campbell.lan > > nameserver A.DC.IPADDRESS > > > > This is what it looks like in this order (if that matters) > nameserver 10.0.0.10 > nameserver

Rowland, OK. Should I delete these lines? diff yours mine 63d62 yours# -A ufw-after-logging-output -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] " 85,87d83 yours# -A ufw-before-logging-forward -m conntrack --ctstate NEW -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW AUDIT] " yours# -A ufw-before-logging-input -m conntrack

....168.0.100 to 192.168.0.0/24 port 3268 comment 'Allow out to LAN (AD-DC) GC (non-ssl) (port 3268)' ufw allow out on eno1 from 192.168.0.100 to 192.168.0.0/24 port 3269 comment 'Allow in from LAN (AD-DC) GC (ssl) (port 3269)'   Sources i've used: https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage  https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage   States : The range matches the port range used by Windows Server 2008 and later. Samba versions before 4.7 used the TCP ports 1024 to 1300 instead. To manually set the port range in Samba 4.7 and later, set the rpc server port parameter...