search for: zartman

I'm working to setup Samba as a domain member to a Windows Server active directory, and I keep hitting road blocks. There's some real terminology hurdles in the wiki. In a nutshell, my problem is this: I setup a Windows 2012 Essentials ADS domain and I ended up with zartman.local for my "domain" in Windows. So, I've got a dns zone in windows server that is domain.local and my netbios domain for ADS membership is zartman.local. On the Samba side, I'm not sure what needs to be specified for "realm" and "workgroup". If I set wor...

I would say that workgroup = ZARTMAN should be right. Workgroups normally don't have dots in their name. Than you should also try: idmap config ZARTMAN:backend = ad idmap config ZARTMAN:schema_mode = rfc2307 idmap config ZARTMAN:range = 10000-99999 One more thing is that it's not recommended to have a .local domain realm. Ha...

I'm playing around with Domain Membership to a WIndows 2012 AD Server. It appears I'm able to join the AD domain, but the domain member doesn't seem to authenticate anything against the DC once joined. Here is my smb.conf netbios name = Member workgroup = ZARTMAN security = ADS realm = ZARTMAN.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab idmap config *:backend = tdb idmap config *:range = 2000-9999 idmap config SAMDOM:backend = ad idmap config SAMDOM:schema_mode = rfc2307 idmap config SAMDOM:ran...

When you first provision an AD DC, is there a way to control where samba-tool puts all of the AD data files? -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

...'t make sense. They seems to be doing some kind of watered down or modified version of Samba 4 with some of the tools disabled. Are they still holding off from full AD implementation in their packages because of the MIT Kerberos issues identified in previous discussions? Thanks! -- Greg J. Zartman Board Member for the Koozali SME Server Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

Additional Info... I am beginning to think that a file called 'secrets.tdb' might be what I am looking for. Inside that file is something mentioning SID. Of course, it also mentions the name of the PDC. If that is the file I am supposed to copy over. Then it is done. However, I still need a little more input for setting up a Samba BDC. With a Samba BDC, should I leave the

..., if I try to use these tools to add an attribute to the Active Directory schema using : --option="dsdb:schema update allowed"=true' The stand alone tools say they don't know that this --options input means. Is there a difference syntax for these stand alone tools? -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

On Mon, Dec 1, 2014 at 11:09 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > NO NO I can't take anymore :-D > > Please read the rest of the thread, it will explain all. People seriously use this in a production environment? The lack of documentation and confusion surrounding pretty basic posix auth is extremely surprising. I'm no noob at *nix admin and

On 01/12/14 17:09, steve wrote: > On 01/12/14 17:31, Greg Zartman wrote: >> On Mon, Dec 1, 2014 at 1:33 AM, Rowland Penny >> <rowlandpenny at googlemail.com> >> wrote: >> >>> >>>> I do what windows does, it ignores the RID (what you call 'the last >>>> set >>> of digits from SID') a...

...Of" to record the groups the user is a member of. I'm wondering if their is a mechanism in Samba AD that sets on of these if the other is set? That is, if I set all user members for a given group, will active directory update the user "memberOf" attribute? Thanks, -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

What is the best way to store file system quotas for users in the Active Directory? I'm not seeing any standard attributes for this, so it looks like the best way is to extend the schema. Is this correct? Thanks, Greg -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...9;s module path. > This is what I suspected. Thanks for confirming. I was able to rebuild the COS 7 RPM with the ldb-tools that work fine with active directory. I just wanted to make sure that the upstream tools would not work, and you have confirmed they won't. Thank you -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

Can anyone share any insight as to why Vista RC2 can't delete directories on a Samba 3.0.10 share? No problem delete directories using a windows XP client. Thank you. Greg -- Greg J. Zartman, P.E. President Logging Engineering International, Inc. 1243 West 7th Avenue Eugene, Oregon 97402 Voice 541-683-8383 Fax 541-683-8144 www.leiinc.com

I'm installing sernet samba4 packages with active directory support on RHEL 6. Is it required that I install kerebros packages seperately? Kerebros does t seem to be an Install require . I wasn't sure if sernet had somehow rolled sernet with kerebros??.?. Any help greatly appreciated. Greg

...AD and list various things. I'm wondering if there is something like samba-tool for query user from the AD other than just the username? I see that I can use and LDAP perl module to query the LDAP side of the AD, but wanted to see if Samba has a utility for doing this. Thanks! -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

...ldb 0 +%global with_internal_ldb 1 +Requires: libldb -Requires: pyldb +#Requires: pyldb -%{_libdir}/samba/libldb-cmdline.so +#%{_libdir}/samba/libldb-cmdline.so +%{_libdir}/samba/libldb-cmdline-samba4.so +%{_libdir}/samba/libpyldb-util.so.1 +%{_libdir}/samba/libpyldb-util.so.1.1.20 -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

...4 on SME Server, but some of this basic posix auth is a bit confusing. The trick is writing an API to interact with Samba 4 and deploy a config on SME Server that just works. We don't want everyone who picks up SME Server to have to come over here and ask the same questions I am. -- Greg J. Zartman SME Server user and community member since 2000

...API with users who are created using tools outside of *nix. For example if a user were created using the windows administration tools. Are there any triggers in Samba that could be set to let the system know a new user was created by tools other than those provided by Samba? Thanks, -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

On Mon, Dec 1, 2014 at 1:33 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > >> I do what windows does, it ignores the RID (what you call 'the last set > of digits from SID') and uses a builtin mechanism to store the next uid & > gidNumber. The builtin users/groups use the RID for the GID/UID. If you create a user and then goto to the

On 01/12/14 17:16, steve wrote: > On 01/12/14 18:11, Rowland Penny wrote: >> On 01/12/14 17:09, steve wrote: >>> On 01/12/14 17:31, Greg Zartman wrote: >>>> On Mon, Dec 1, 2014 at 1:33 AM, Rowland Penny >>>> <rowlandpenny at googlemail.com> >>>> wrote: >>>> >>>>> >>>>>> I do what windows does, it ignores the RID (what you call 'the last >>>&g...