search for: sambatest

...mba AD DC (v4.3.5) on Centos Linux from source and am trying to add a service principal and generate a keytab containing the principal. However the principal entry does not appear in the keytab. Here's what I did: [root at bones ~]# samba-tool spn add GEMSTONE64/bunk.gemtalksystems.com at SAMBATEST.GEMTALKSYSTEMS.COM normg [root at bones ~]# samba-tool spn list normg normg User CN=normg,CN=Users,DC=sambatest,DC=gemtalksystems,DC=com has the following servicePrincipalName: GEMSTONE64/bunk.gemtalksystems.com at SAMBATEST.GEMTALKSYSTEMS.COM Ok, so it appears to be there under user normg. No...

Hi all, I'm using the VFS sbadow_copy2 module, and I think I've hit a bug. This config works: mattcen at adam:SambaTest$ cat works3/smb.conf [SambaTest] comment = SambaTest writable = yes path = /srv/SambaTest/share #vfs objects = shadow_copy vfs objects = shadow_copy2 shadow:snapdir = /mnt/dates shadow:basedir = /srv mattcen at adam:SambaTest$ ls /srv S...

...ttempting to use idmap backend = rid to predictably generate UID/GID mappings by winbind across machines, for failover purposes. EXPERIMENT: we have a brand new machine configured as described above. The share we are working with is called 'osxtest'. The share begins with no ACLs: [root@sambatest shares]# ls -l total 4 drwxr-xr-x 2 root root 4096 Apr 24 10:19 osxtest [root@sambatest shares]# getfacl osxtest/ # file: osxtest # owner: root # group: root user::rwx group::r-x other::r-x As an domain administrator (admbky), I wish to create a directory called 'test' and set an acl allow...

...ndows server, files and folders owned by ad users show the correct user and group names so mapping appears to be working, I can su to ad accounts but I am unable to ssh into the system as a AD user. Relevant config files: cat /etc/samba/smb.conf [global] debug hires timestamp = yes workgroup = SAMBATEST security = ADS winbind use default domain = true realm = SAMBATEST.LOCAL server string = Samba file and print server log level = 3 max log size = 4192 printcap name = cups idmap config SAMBATEST : backend = ad idmap config SAMBATEST : range = 10000-10020 idmap config SAMBATEST : schema_m...

...t least in terms of wbinfo working) but now I am not able to get any data from winbind. The server is running and the logs don't report any errors. I had done several 'make uninstall' while compiling/recompiling with different options. Could the problem somehow be related? [root at sambatest samba]# bin/wbinfo -u Error looking up domain users [root at sambatest samba]# bin/wbinfo --ping Ping to winbindd failed could not ping winbindd! [root at sambatest samba]# ps -ef | grep winbin root 3743 1 0 10:19 ? 00:00:00 sbin/winbindd -D root 3744 3743 0 10:19 ?...

...ver to a network that has access to domain controllers in GODMZ, but not GOCORP, I can authenticate (using ntlm_auth), but cannot get user info (id GOCORP\\me). Interestingly, wbinfo -n GOCORP\\me works. I realize this is a pretty odd setup, but any way to make this work? Thanks, Elijah [root at sambatest ~]# wbinfo -t checking the trust secret for domain GODMZ via RPC calls succeeded [root at sambatest ~]# net ads testjoin Join is OK [root at sambatest ~]# ntlm_auth --domain=GOCORP --username=me password: NT_STATUS_OK: Success (0x0) [root at sambatest ~]# wbinfo -n GOCORP\\me S-1-5-21-906331755-3...

...pen - thus our 'paranoia' in the code we CAN control ;->. Hope this helps, Don -----Original Message----- From: toni.niemi@swisslog.com [mailto:toni.niemi@swisslog.com] Sent: Wednesday, May 29, 2002 6:09 To: samba@lists.samba.org Subject: [Samba] annoying authentication failure problem: sambatest[hostname] Hello, I have a little problem which appeared when I installed first 2.2 generation sambaserver on linux and same effect when updated 2.0.3 to 2.2.2 on hp-ux. The actual problem is that my security servers log (NT4 server) get's failure message every time someone connects to samba...

...from nt eventviewer security log: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 29.5.2002 Time: 12:32:50 User: NT AUTHORITY\SYSTEM Computer: [COMPUTERNAME] Description: Logon Failure: Reason: Unknown user name or bad password User Name: SAMBATEST[SAMBASERVERNAME] Domain: CIMCORP Logon Type: 3 Logon Process: KSecDD Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Workstation Name: \\[SAMBASERVERNAME] Best regards, Toni Niemi

...enLDAP 2.2.23-8, smbldap-tools 0.8.7-4 ( I tried with 0.9.x version also) It isn't the first time I install a system like this but this time I encountered a problem never seen: during user insert I have an error because of smbldap-tools do not find indicated group (but group exists!). So: SambaTesting:~/install# smbldap-groupshow Admins dn: cnmins,ou=Groups,dc=Duet,dc=it objectClass: posixGroup,sambaGroupMapping cn: Admins gidNumber: 200 sambaSID: S-1-5-21-2275038829-2173144163-3767808964-1401 sambaGroupType: 2 displayName: Admins SambaTesting:~/install# smbldap-useradd -a -g 200 uten...

...he intetion of use it as file share for a NT Domain. I have also an interest to the use of extended ACL so I recompiled the kernel (2.4.20) with the acl patch and I added to my system acl, attr, e2fsprogs and fileutils packages. After all I join the samba server into the NT domain: smbpasswd -j SAMBATEST -r SAMBA-SRV -U Administrator where SAMBATEST is the NT domain and SAMBA-SRV is the PDC . Then I configured winbind and pam to permit of use domain user on the file sharing system. So, if I log on to an NT4 workstation with the domain user Mauro which is not administrator and I create a file nam...

...31.183.22. \ 131.183.23. \ 131.183.117. 127.0.0.1 deadtime = 0 # idle time out getwd cache = yes create mode = 0600 log file = /servers/sambatest/%v/var/logs/%m max log size = 1000 # KB utmp = true utmp directory = /var/adm/ wtmp directory = /var/adm/ lock directory = /servers/sambatest/%v/var/locks/ pid directory = /servers/sambatest/%v/var/ encrypt passwords...

...deqp/Samba_Login.png My current build options for samba are: http://pastebin.com/tEb1Pk5H I am currently using SambaDC (although my computer is not connected to the samba domain). My Samba configuration is below. # Global parameters [global] netbios name = IP-12-0-1-194 realm = SAMBATEST.NET server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = SAMBATEST server role = active directory domain controller idmap_ldb:use rfc2307 = yes # Shares [netlogon] path = /usr/local/samba/var/locks...

...ing to their respective areas, as per the permissions in Linux. The problem we have is that any permissions that users have wrt secondary groups are not being carried forward to the windows machines, and not recognised. we have tried to test this with a user whose primary group allows to go to sambatest, as defined below, but if another user has the same group but as a secondary group, this person cannot read/write/mount the share. My smb.conf is below, (with replaced/<snipped> sensitive information) regards, Arif workgroup = DOMAIN password server = <snip> <snip>...

...seems to work fine: matching of UID/GID is working which can be tested with ... wbinfo -i <username> wbinfo -n <username> wbinfo -s SID ... BUT it takes about 1 min until a connection to the samba server can be established or until the available samba shares are listed: net use x: \\sambatest\sharename (takes about 1 min) or net view \\sambatest (takes about 1 min) Here is the part from smb.conf which configures the WINBIND connection. ????? ... ?????? template shell = ?????? winbind enum users = Yes ?????? winbind enum groups = Yes ?????? winbind use default domain = Yes ?????? win...

...domain. I'm using samba-4.1.4 as an AD server. When I join and leave and join and leave after a while this error comes up: Failed to join domain: failed to join domain 'AIIAS' over rpc: NT_STATUS_IO_TIMEOUT And when I look at the logs it says: Failed to re-index objectSid in CN=sambatest,CN=Computers,DC=aiias,DC=edu - ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=sambatest,CN=Computers,DC=aiias,DC=edu - ../l I went to debug the samba server and I discovered that it was having conflicts with the SID of another user. Meaning the newly created dn for the...

I have a different Unix userid for each project I'm working on, so I need to provide a different userid/password combination for each drive I map to my NT 4.0 SP3 system. But, whenever I try to supply a different userid in the "Connect As" box and hit "OK", I get the message: The credentials supplied conflict with an existing set of credentials Something I read in the

...he AD DC, so the issue is not related to a wrong networking configuration or port mapping (which does not apply to macvlan anyway). This is how this can be reproduced within a docker container: docker pull jgoerzen/debian-base-security docker run -d --privileged --name samba-ad-dc-test --hostname sambatest --network vlan_server jgoerzen/debian-base-security docker exec -i -t samba-ad-dc-test /bin/bash // Note: The issue is not related to "macvlan". It also happens with Docker's default "bridge" network # apt-get update && apt-get install -y samba smbclient # samba-to...

Hi, I have a problem of using samba on a windows xp client. When i'll try to connect to the domain and create a machine account all works. But when i'm rebooting the system and try to logon there appears an error. log.smbd tells me the following error: sambatest has user sid S-1-5-21-............................(the dots are for the long code ;)) but group sid S-1-5-21-................................................... The conflicting domain portions are not supported for NETLOGON calls. So then i'll tryed "net groupmap lits | sort" and t...

...success with samba-3.25[a-c] under solaris10 amd64 using 'unix password sync=yes' option? % smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the password change: Error was : RAP86: The specified password is invalid. Password changed for user sambatest debugging reveals the following condition: [2007/09/13 22:05:15, 3] smbd/chgpasswd.c:chat_with_program(430) chat_with_program: Dochild for user sambatest (uid=0,gid=0) (as_root = Yes) [2007/09/13 22:05:15, 3] smbd/chgpasswd.c:dochild(200) could not read default terminal attributes on pty [200...

...success with samba-3.25[a-c] under solaris10 amd64 using 'unix password sync=yes' option? % smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the password change: Error was : RAP86: The specified password is invalid. Password changed for user sambatest debugging reveals the following condition: [2007/09/13 22:05:15, 3] smbd/chgpasswd.c:chat_with_program(430) chat_with_program: Dochild for user sambatest (uid=0,gid=0) (as_root = Yes) [2007/09/13 22:05:15, 3] smbd/chgpasswd.c:dochild(200) could not read default terminal attributes on pty [200...