search for: stankevitz

Hello, Can you recommend a first step in diagnosing these symptoms: The following operations are always fast: - browsing shared with osx/linux client - moving directories with osx/linux client The following operations are sometimes absurdly painfully slow: - browsing shared with windows 7 client - moving directories with windows 7 client Wireshark shows: - When using windows: Lots of ~10

Hello, I am using AD authentication. When I setup samba on my new server, users could not access shares. However, the following command "fixed" the problem: net join -U XXXXX\\cstankevitz The command returned what appears to be an error: kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client not found in Kerberos database Failed to join domain: failed to connect to AD: Client not found in Kerberos database ADS join did not work, falling back to RPC... Unable to fin...

I just created a windows domain. it is essentially empty except for a couple of users and an group policy related to windows update. I then configured samba to connect using ads. net ads join took > 5 minutes - but worked fine net ads testjoin takes ~5 minutes - shows a good join wbinfo -u takes ~5 minutes and shows the users During the long wbinfo pause, the log show: "Starting

Hi, I have been using this setup for years: mail_home = /var/mail/vhosts/%d/%n mail_location = maildir:~ I have since learned that mail_home and mail_location should be different. I plan to use this: mail_home = /var/mail/vhosts/%d/%n mail_location = maildir:~/mail I would like the transition to be transparent for my email clients. I don't want mail/directories/sieve_scripts to

On Wed, 1 Feb 2017 07:30:19 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Wed, Feb 1, 2017 at 1:12 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > He is also unlikely to be running avahi, he is using Freebsd 10.3 > > truss (like strace) showed that wbinfo, net, and sshd were al...

...run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something that requires authentication. Please consider this use case: $ grep -e security -e username\ map /etc/samba/smb.conf username map = /etc/samba/DomainToLocalMapping.txt security = ads $ grep cstankevitz /etc/samba/DomainToLocalMapping.txt cstankevitz = DOMAIN.TLD\cstankevitz DOMAIN\cstankevitz A linux client connects to the samba server and specifies a username of "DOMAIN\cstankevitz" and a password that matches the password stored on a Microsoft Windows AD Server. 12. Does the use ca...

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"

On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > time net ads testjoin > Join is OK > > real 0m0.476s > user 0m0.108s > sys 0m0.008s Yes, I know... I have a similar setup (same version of samba, same hardware, same OS but a different windows domain on a different network) that is working fine. > Is the Windows AD

On 26/01/15 20:27, Chris Stankevitz wrote: > Hello, > > On machine 1, running Fedora 20, I can get "wbinfo -u" to provide a > list of windows domain "MYCOMPANY.CORP" users by first launching > winbindd and passing this three line conf file: > > [global] > workgroup = MYCOMPANY >...

Hello Chris, Am 10.03.2015 um 18:26 schrieb Chris Stankevitz: > Please consider a scenario in which samba is sharing files and users > provide their Active Directory usernames and passwords to log into to > samba. > > 1. Must "net join" be used? If you want to join the domain, yes. > 2. Under what circumstances will samba (an...

On 12/03/15 16:39, Chris Stankevitz wrote: > On Thu, Mar 12, 2015 at 2:25 AM, Rowland Penny > <rowlandpenny at googlemail.com> wrote: >>> I'm sorry for being so daft, but I am asking you if I need/want to >>> join the domain. I do not know the answer. Reminder of my scenario: >>> samba is...

On 25/04/16 21:38, Chris Stankevitz wrote: > Hello, > > I have these questions regarding samba running in ads mode such that > users are authenticated against active directory: > > 1. What is the role of 'kinit'? Basically to create a kerberos ticket for a user > > 2. How often must 'kinit user a...

On 26/04/16 19:14, Chris Stankevitz wrote: > On Tue, Apr 26, 2016 at 10:33 AM, Rowland penny <rpenny at samba.org> wrote: >> Can I suggest you browse the Samba wiki: >> https://wiki.samba.org/index.php/Main_Page > I will... thank you. > >> I would suggest you stop using the username map for this, if a...

On Tue, 31 Jan 2017 12:06:14 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 9:22 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > I would also expect to see at least something like this: > > > > idmap config SAMDOM : backend = rid > > idmap...

On Tue, 31 Jan 2017 14:24:09 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > time net ads testjoin > > Join is OK > > > > real 0m0.476s > > user 0m0.108s > > sys 0m0.008s &g...

On Thu, 2 Feb 2017 09:36:28 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Tue, Jan 31, 2017 at 2:45 PM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > >> /etc/resolv.conf: > >> root at nickel:~ # cat /etc/resolv.conf > >> nameserver 192.168.11.5 > >> nameserve...

Hi, I use ads and have a windows domain with several domain controllers (dc1, dc2, dc3, etc). Winbind seems to "be connected" to one of these domain controllers: wbinfo -P checking the NETLOGON for domain[MYDOMAIN] dc connection to "dc1.mydomain.local" succeeded Presumably winbind learned that "dc1" was a domain controller by performing a DNS lookup of type SRV on

On Wed, 1 Feb 2017 09:47:38 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > We are missing the content of /etc/nsswitch.conf > Can you post that also. > > But you probely see: > hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 > > i suggest > hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4 > > since your using

...lto:samba-bounces at lists.samba.org] Namens Rowland Penny via > samba > Verzonden: dinsdag 31 januari 2017 23:45 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] net ads and wbinfo are painfully slow -- but they > work > > On Tue, 31 Jan 2017 14:24:09 -0800 > Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > > > On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > time net ads testjoin > > > Join is OK > > > > > > real 0m0.476s > > > user...

Hello, On machine 1, running Fedora 20, I can get "wbinfo -u" to provide a list of windows domain "MYCOMPANY.CORP" users by first launching winbindd and passing this three line conf file: [global] workgroup = MYCOMPANY security = ads Note that I am somewhat curious as to how wbinfo is able to obtain this user list even though nowhere do I supply a username or