search for: vfs1

...think. >> >> Regards, >> >> > > It seems to be treating computers as users (I could be barking up the > wrong tree here), can you post the contents > of /etc/hosts, /etc/hostname, /etc/resolv.conf and /etc/nsswitch.conf > from the domain member Here you go: (vfs1 pts6) # cat /etc/resolv.conf search kmg.mydomain.com mydomain.com nameserver 172.30.0.7 nameserver 10.224.135.7 (vfs1 pts6) # The 2 name server ip addresses are the 2 dc's. (vfs1 pts6) # cat /etc/hosts 127.0.0.1 localhost localhost.localdomain 172.30.0.8 vfs1.kmg.mydomain.com vfs1 (v...

...same windows box as a normal user who is a member of the Domain Users group, I am denied. I have setup a group called "Unix Admins" which is a member of the Domain Admins group. The Unix Admins and Domain users groups have unix gids assigned to them. Getent group shows the following: (vfs1 pts9) # getent group "SAMDOM\Domain Users" domain users:x:10000: (vfs1 pts9) # getent group "SAMDOM\Unix Admins" unix admins:x:10001: (vfs1 pts9) # Getent passwd shows the following: (vfs1 pts9) # getent passwd "SAMDOM\tuser" tuser:*:10001:10000:Test User:/home/samba/...

...e 'kmg.mydomain.com', > if it isn't, remove this nameserver. Yes, 10.224.135.7 is a DC. > >> >> The 2 name server ip addresses are the 2 dc's. >> >> # cat /etc/hosts >> >> 127.0.0.1 localhost localhost.localdomain >> 172.30.0.8 vfs1.kmg.mydomain.com vfs1 > > I would remove 'localhost.localdomain', there is no such thing as > 'localdomain' Done > >> >> >> # cat /etc/hostname >> vfs1.kmg.mydomain.com > > The hostname should just be 'vfs1', it shouldn't be th...

...line. I also take it that '10.224.135.7' is a DC in the 'kmg.mydomain.com', if it isn't, remove this nameserver. > > The 2 name server ip addresses are the 2 dc's. > > # cat /etc/hosts > > 127.0.0.1 localhost localhost.localdomain > 172.30.0.8 vfs1.kmg.mydomain.com vfs1 I would remove 'localhost.localdomain', there is no such thing as 'localdomain' > > ># cat /etc/hostname > vfs1.kmg.mydomain.com The hostname should just be 'vfs1', it shouldn't be the FQDN. > > # cat /etc/nsswitch.conf >...

...ove this nameserver. > > Yes, 10.224.135.7 is a DC. > > > > >> > >> The 2 name server ip addresses are the 2 dc's. > >> > >> # cat /etc/hosts > >> > >> 127.0.0.1 localhost localhost.localdomain > >> 172.30.0.8 vfs1.kmg.mydomain.com vfs1 > > > > I would remove 'localhost.localdomain', there is no such thing as > > 'localdomain' > > Done > > > > >> > >> > >> # cat /etc/hostname > >> vfs1.kmg.mydomain.com > > > > T...

Hi Rowland, On Sun, 15 Oct 2017, Rowland Penny via samba wrote: > On Sun, 15 Oct 2017 13:38:13 -0400 (EDT) > me at tdiehl.org wrote: > >> Yes I understand, however, there are 2 things I am concerned about. >> >> When the errors are spewing, winbind never goes to sleep and the load >> on the server runs somewhere between 6-8 constantly (as shown by >>

.... However I now have a new error: ==> samba/172.30.0.114.log <== [2017/10/26 00:24:12.116588, 1] ../source3/librpc/crypto/gse.c:646(gse_get_server_auth_token) gss_accept_sec_context failed with [Unspecified GSS failure. Minor code may provide more information: Request ticket server cifs/vfs1.kmg.mydomain.com at KMG.MYDOMAIN.COM not found in keytab (ticket kvno 2)] The above is showing up in the various samba logs for the machines that connect to the server. Given that there is no keytab on the machine, this error does not make any sense to me. Is there supposed to be a keytab? I do n...

Hi Tom, Small update. I'am also still looking into this but im not getting much futher.. I am just reading : https://blogs.msdn.microsoft.com/openspecification/2009/12/31/verifying-the-server-signature-in-kerberos-privilege-account-certificate/ Bit older but, im trying to understand more what happens here. And the only "guess" i can make here is . A kerberos ticket, with