search for: setting_up_samba_as_an_act

(@Rowland) > Whilst it is quite correct to say that the REALM isn't the same as a > DNS domain, there is a correlation between them. The REALM must be the > DNS domain in uppercase, so this: > > SAMBA_PRINCIPAL=dehydrated-service at YOUR.DOMAIN No, you can have your.primayDNSdomain.tld and have REALM = SOMEREALM.TLD Its not obligated to have REALM the same as the DnsDomain.

...> Hi, > thanks for the reply. > > > Why ? profiles is a windows thing and NFS isn't > > The Samba-AD is virtualized, therefore the storage is an a > different machine. > > > I take you haven't read this: > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active > _Directory_Domain_Controller#Using_the_Domain_Controller_as_a_ > File_Server Specifically this: > > the auto-enabled acl_xattr virtual file system (VFS) object > enables you to only configure shares with Windows access > control lists (ACL). > > Running shares with...

...his means the realm must be > > > the same as the forest dns domain. As Samba AD doesn't > (yet) support > > > subdomains, the domain will be the same as the forest domain. > > > There is a line here: > > > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active > > > _Directory_Domain_Controller > > > > > > Under 'Preparing the installation' > > > > > > Select a DNS domain for your AD forest. The name will also be used > > > as the AD Kerberos realm. > > > > Hmm, here i have s...

...ain. > > We are talking a Samba AD DC here and this means the realm must be the > same as the forest dns domain. As Samba AD doesn't (yet) support > subdomains, the domain will be the same as the forest domain. > There is a line here: > > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active > _Directory_Domain_Controller > > Under 'Preparing the installation' > > Select a DNS domain for your AD forest. The name will also be used as > the AD Kerberos realm. Hmm, here i have something the for you, i'll pm it to you. > > >Its also not oblig...

...ing bind9 as a DNS backend: *ii bind9 1:9.11.5.P4+dfsg-5.1+deb10u1 armel Internet Domain Name Server* Provisioning went smooth and all is working. I can login to the domain on the windows boxes and the DNS verification described in https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller works as it should. I am trying to use this machine as an adblocker as well, so I have read https://www.it-dan.com/blog/block-ads-linux-and-bind9 and added this to my configuration. I have an named.conf.ads containing all sites I want blocked; example: *zone "s...

Hello, again I'd like to get help from this list. After setting up the server, I'd like to store data an user profiles on an nfs-server. The share is writeable by the user, I can create files and directories. But - by syncing the user profile to that share i stops, telling me that my user profile is only synced partly. In the log on the WS there is a "1509" noted. Only

...9 > 1:9.11.5.P4+dfsg-5.1+deb10u1 armel > Internet Domain Name Server* > > Provisioning went smooth and all is working. I can login to > the domain on > the windows boxes and the DNS verification described in > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active > _Directory_Domain_Controller > works as it should. > > I am trying to use this machine as an adblocker as well, so I > have read > https://www.it-dan.com/blog/block-ads-linux-and-bind9 and > added this to my > configuration. > > I have an named.conf.ads contai...

Hi, thanks for the reply. > Why ? profiles is a windows thing and NFS isn't The Samba-AD is virtualized, therefore the storage is an a different machine. > I take you haven't read this: > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Using_the_Domain_Controller_as_a_File_Server Specifically this: > the auto-enabled acl_xattr virtual file system (VFS) object enables you to only configure shares with Windows access control lists (ACL). > Running shares with POSIX ACLs on a Samba DC is not sup...

...sets of docs to cover the vast > majority of users. > > Could you supply a link to the Samba dns page you refer to ? > > The page in question isn't actually about DNS but it is the > main Samba > AD installation tutorial here: > > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active > _Directory_Domain_Controller > > This is the main page for Samba AD installation and wants to be split > into at least 2 further pages IMHO to avoid confusion > > 1) Samba AD installation with SAMBA_INTERNAL backend > > 2) Samba AD installation using BIND backend &g...

On Tue, 26 Mar 2019 13:08:25 +0000 Stephen via samba <samba at lists.samba.org> wrote: > Go on, I give in, what is wrong with the official Samba documentation? > > Off the top of my head: > 1) Your (ie Samba project) docs are structured a little poorly and > actually pretty hard to follow - eg a single article describes > setting up Samba both with SAMBA_INTERNAL and

...windows clients. Then, i say > >>> yes, setup an AD DC as fileserver. > >> Do you have any pointers on which wiki tutorial I should follow to > >> get things started? > >> > > Follow the DC wiki page: > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller > > > > There is even a section: Using the Domain Controller as a File > > Server > > > > This will send you to: > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > > > > Where you will n...

...main "VIDROESTE.IND": Internal error. I can see that the XP machine account was created in AD but it is disabled. In this AD account, there is no information at the "DNS name" property. All the tests suggested in wiki where successfully executed https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Verifying_DNS For samba AD-DC, I'm using: - OpenSuSE Leap 15.0 - no AppArmor or SELinux active - Samba version is Version 4.7.11-git.153.b36ceaf2235lp150.3.14.1-SUSE-oS15.0-x86_64 - using Bind9 Does someone passed on something similar? Thanks in advance. My sm...