search for: wenus

...html#samba-add-windows-active-directory > What version of Samba are you using and on what OS ? 4.21.2 > Have you raised the functional level to 2016 ? My level: 2016 >> . It seems to be added to the domain correctly. When I check with the >> command: nslookup -type=SRV _ldap._tcp.wenus.local, it shows all DCs, > Please do not use '.local' as a TLD, not even in sanitisation, it is > confusing because '.local' is reserved for mdns. I am aware of the .local domain. However, my implementation is over 15 years old, and back then, some guides recommended it. Cha...

...s/samba_add_windows_active_directory.html#samba-add-windows-active-directory What version of Samba are you using and on what OS ? Have you raised the functional level to 2016 ? > . It seems to be added to the domain correctly. When I check with the > command: nslookup -type=SRV _ldap._tcp.wenus.local, it shows all DCs, Please do not use '.local' as a TLD, not even in sanitisation, it is confusing because '.local' is reserved for mdns. > including the new one. However, when I query using the command: > Get-ADDomainController -Filter * | Select-Object Name, HostNam...

...erver 2022 DC to an AD based on a Samba DC according to https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_add_windows_active_directory.html#samba-add-windows-active-directory . It seems to be added to the domain correctly. When I check with the command: nslookup -type=SRV _ldap._tcp.wenus.local, it shows all DCs, including the new one. However, when I query using the command: Get-ADDomainController -Filter * | Select-Object Name, HostName, I don?t see the new controller. I also noticed that the SPN DNS/dc2022.wenus.local for the new DC hasn?t been created. I checked the replic...

...kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate ??????? workgroup = XXXX ??????? log level = 1 auth_audit:3@/var/log/samba/auth.log ??????? log file = /var/log/samba/%m.log [sysvol] ??????? path = /var/lib/samba/sysvol ??????? read only = No [netlogon] ??????? path = /var/lib/samba/sysvol/wenus.local/scripts ??????? read only = No W dniu 1.11.2024 o?01:48, Douglas Bagnall pisze: > On 1/11/24 04:06, Programnet via samba wrote: >> I just want to make sure that Samba LDAP does not support ntlmsspNegotiate authentication and I will have to switch to >> Windows Server? > Th...

...> ??????? workgroup = XXXX > ??????? log level = 1 auth_audit:3@/var/log/samba/auth.log > ??????? log file = /var/log/samba/%m.log > > [sysvol] > ??????? path = /var/lib/samba/sysvol > ??????? read only = No > > [netlogon] > ??????? path = /var/lib/samba/sysvol/wenus.local/scripts > ??????? read only = No > If you are going to sanitise your smb.conf, do it everywhere :-) If your TLD is '.local', then I take it you missed that it is reserved for Bonjour and Avahi, so if Avahi is running on the DC, you should turn it off (and everywhere else in...

On 1/11/24 04:06, Programnet via samba wrote: > I just want to make sure that Samba LDAP does not support ntlmsspNegotiate authentication and I will have to switch to > Windows Server? That sounds like an inaccurate conclusion. ntlmssp is not new. If you are looking at the conversation in Wireshark, you could tell us what the packets are actually saying, or you could show us your smb.conf