search for: thelibrarian

...the Debian >>>> distribution-specific installation. > > What 'Debian distribution-specific' installation did you follow ? The one linked to in AD DC wiki. > >>>> I removed the installer's smb.conf and ran the interactive >>>> provisioning.? TheLibrarian is already a >>>> >>>> I then figured I'd try the Create a reverse zone but that failed: >>>> >>>> # samba-tool dns zonecreate? DC1 1.168.192.in-addr.arpa -U >>>> Administrator >>>> Failed to connect host 192.168.1.13 on p...

...t;>> ??dsdb_password_json_audit: 5 >>> ??dsdb_transaction_audit: 5 >>> ??dsdb_transaction_json_audit: 5 >>> ??dsdb_group_audit: 5 >>> ??dsdb_group_json_audit: 5 >>> Processing section "[global]" >>> doing parameter netbios name = THELIBRARIAN >>> doing parameter realm = RAHIM-DALE.ORG >>> doing parameter workgroup = RAHIM-DALE >>> doing parameter security = ADS >>> doing parameter dns forwarder = 8.8.8.8 >>> doing parameter server role = active directory domain controller >>> doing p...

...>>> & paste to the Konsole session), and did the Debian >>> distribution-specific installation. What 'Debian distribution-specific' installation did you follow ? >>> I removed the installer's >>> smb.conf and ran the interactive provisioning.? TheLibrarian is >>> already a >>> >>> I then figured I'd try the Create a reverse zone but that failed: >>> >>> # samba-tool dns zonecreate? DC1 1.168.192.in-addr.arpa -U Administrator >>> Failed to connect host 192.168.1.13 on port 135 - >>>...

...?smb2: 5 ?smb2_credits: 5 ?dsdb_audit: 5 ?dsdb_json_audit: 5 ?dsdb_password_audit: 5 ?dsdb_password_json_audit: 5 ?dsdb_transaction_audit: 5 ?dsdb_transaction_json_audit: 5 ?dsdb_group_audit: 5 ?dsdb_group_json_audit: 5 Processing section "[global]" doing parameter netbios name = THELIBRARIAN doing parameter realm = RAHIM-DALE.ORG doing parameter workgroup = RAHIM-DALE doing parameter security = ADS doing parameter dns forwarder = 8.8.8.8 doing parameter server role = active directory domain controller doing parameter idmap_ldb:use rfc2307 = yes doing parameter allow dns updates = nonse...

...et past that, I seem to be able to manipulate the domain > accounts. > > Unfortunately I still can't access the shares. I can connect and > disconnect but I can't actually see the files. I get an error message > when I connect that says "Windows cannot access > \\TheLibrarian\Archives\? You do not have permission to access > \\TheLibrarian\Archives\. Contact your network administrator to request > access." > > The share permissions are: > >> drwxrwx---+ 39 root HOME\domain admins 4096 Nov 23 16:32 archives I will say it again, you are usin...

...t up a Debian/Stable VM with the backports in a minimal install. Then I added an ssh server and connected to it (so I can cut & paste to the Konsole session), and did the Debian distribution-specific installation. I removed the installer's smb.conf and ran the interactive provisioning.? TheLibrarian is already a I then figured I'd try the Create a reverse zone but that failed: # samba-tool dns zonecreate? DC1 1.168.192.in-addr.arpa -U Administrator Failed to connect host 192.168.1.13 on port 135 - NT_STATUS_CONNECTION_REFUSED Failed to connect host 192.168.1.13 (DC1) on port 135 - NT_S...

...kports in a minimal >> install. Then I added an ssh server and connected to it (so I can cut >> & paste to the Konsole session), and did the Debian >> distribution-specific installation. I removed the installer's >> smb.conf and ran the interactive provisioning.? TheLibrarian is >> already a >> >> I then figured I'd try the Create a reverse zone but that failed: >> >> # samba-tool dns zonecreate? DC1 1.168.192.in-addr.arpa -U Administrator >> Failed to connect host 192.168.1.13 on port 135 - >> NT_STATUS_CONNECTION_REFUSED...

...t;>> >>> Any advice on how to proceed? >> >> Can we start with the smb.conf you are using now. > > Here's the part without the share definitions: > > # Global parameters > [global] > ??????? dns forwarder = 192.168.1.1 > ??????? netbios name = THELIBRARIAN > ??????? realm = HOME.RAHIM-DALE.ORG > ??????? server role = active directory domain controller > ??????? workgroup = HOME > ??????? idmap_ldb:use rfc2307 = yes See below about the following lines: > ??????? idmap config * : backend = tdb > ??????? idmap config * : range...

...be able to manipulate the >> domain accounts. >> >> Unfortunately I still can't access the shares. I can connect and >> disconnect but I can't actually see the files. I get an error message >> when I connect that says "Windows cannot access >> \\TheLibrarian\Archives\? You do not have permission to access >> \\TheLibrarian\Archives\. Contact your network administrator to >> request access." >> >> The share permissions are: >> >>> drwxrwx---+ 39 root HOME\domain admins 4096 Nov 23 16:32 archives > > I...

On 02/04/2023 04:54, Gary Dale via samba wrote: > I could, but that seems like overkill. A complete second (virtually > identical) system to administer and update just to hive off the > authentication task. > To be honest, I would run two DC's just for authentication and other Samba machines as Unix domain members. However, I cannot force you to do anything, all I can do is

...ce of >> https://wiki.samba.org/index.php/Distribution-specific_Package_Installation, >> below the installation report after I did a more thorough purging of >> Samba-related stuff. I took the further advice and changed the realm >> to HOME.RAHIM-DALE-ORG. The DC remains TheLibrarian. >> >> # apt install acl attr samba samba-dsdb-modules samba-vfs-modules >> winbind libpam-winbind libnss-win bind krb5-config krb5-user dnsutils > > I have updated that list. > >> >> Creating config file /etc/samba/smb.conf with new version > > This is...

...ce of >> https://wiki.samba.org/index.php/Distribution-specific_Package_Installation, >> below the installation report after I did a more thorough purging of >> Samba-related stuff. I took the further advice and changed the realm >> to HOME.RAHIM-DALE-ORG. The DC remains TheLibrarian. >> >> # apt install acl attr samba samba-dsdb-modules samba-vfs-modules >> winbind libpam-winbind libnss-win bind krb5-config krb5-user dnsutils > > I have updated that list. > >> >> Creating config file /etc/samba/smb.conf with new version > > This is...

...on how to proceed? >>> >>> Can we start with the smb.conf you are using now. >> >> Here's the part without the share definitions: >> >> # Global parameters >> [global] >> ???????? dns forwarder = 192.168.1.1 >> ???????? netbios name = THELIBRARIAN >> ???????? realm = HOME.RAHIM-DALE.ORG >> ???????? server role = active directory domain controller >> ???????? workgroup = HOME >> ???????? idmap_ldb:use rfc2307 = yes > > See below about the following lines: > >> ???????? idmap config * : backend = tdb >...

...> Can we start with the smb.conf you are using now. >>>> Here's the part without the share definitions: >>>> >>>> # Global parameters >>>> [global] >>>> dns forwarder = 192.168.1.1 >>>> netbios name = THELIBRARIAN >>>> realm = HOME.RAHIM-DALE.ORG >>>> server role = active directory domain controller >>>> workgroup = HOME >>>> idmap_ldb:use rfc2307 = yes >>> See below about the following lines: >>> >&g...

On 31/03/2023 22:38, Gary Dale via samba wrote: > Actually, I was probably a little optimistic in assessment. My network > shares are problematic. I tried using > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > to get the shares working but that let me down a rabbithole > > The basic problem is my Linux computers use NSF to connect to network >

...gt; https://wiki.samba.org/index.php/Distribution-specific_Package_Installation, >>> below the installation report after I did a more thorough purging of >>> Samba-related stuff. I took the further advice and changed the realm >>> to HOME.RAHIM-DALE-ORG. The DC remains TheLibrarian. >>> >>> # apt install acl attr samba samba-dsdb-modules samba-vfs-modules >>> winbind libpam-winbind libnss-win bind krb5-config krb5-user dnsutils >> >> I have updated that list. >> >>> >>> Creating config file /etc/samba/smb.conf wi...

On 11/04/2023 19:05, Gary Dale via samba wrote: >> I will say it again, you are using a Samba AD DC as a fileserver, this >> means that you must set the permissions from a Windows machine and >> those permissions are stored in an EA, what you see from 'ls' is >> irrelevant >> I will say this again, you will be better off running a separate >>