search for: zs24

...a samba wrote: >Hi Rowland, > >Thanks for your quick response. > >Yes, it's Samba+sssd+krb5+AD. So many technologies wrapped together, > and I don't know which part can go wrong. We managed to make them work >together with the full domain name format such as yu.yale.edu\zs24. >But it didn't work with short format as YALE\zs24. When I did this >in a Windows computer, it reported "We can't sign you in with this >credential because your domain isn't available." >This seems a DNS issue, because it cannot convert 'YALE' to its full...

Hi Rowland, Thanks for your quick response. Yes, it's Samba+sssd+krb5+AD. So many technologies wrapped together, and I don't know which part can go wrong. We managed to make them work together with the full domain name format such as yu.yale.edu\zs24. But it didn't work with short format as YALE\zs24. When I did this in a Windows computer, it reported "We can't sign you in with this credential because your domain isn't available." This seems a DNS issue, because it cannot convert 'YALE' to its full name 'yu.yal...

...access it, but as it seems to how to use Samba with sssd, I suppose it uses their 'sss' idmap backend. > It works well in most > cases but has some issues. When user tries to mount a share from > his/her PC, he/she must use the long format of domain name, such as > yu.yale.edu\zs24. It works but most users don't like it. Instead, all > users prefer to use the short format like YALE\zs24, but this doesn't > work anymore. Here, YALE is a short format of yu.yale.edu. This short > format works well in Redhat 7.4 with Samba 4.6.2. But we have to > upgrade Redha...

...s is a Redhat 8.4 machine with Samba 4.13.3. We setup Samba according to Redat document https://access.redhat.com/solutions/3802321 .It works well in most cases but has some issues. When user tries to mount a share from his/her PC, he/she must use the long format of domain name, such as yu.yale.edu\zs24. It works but most users don't like it. Instead, all users prefer to use the short format like YALE\zs24, but this doesn't work anymore. Here, YALE is a short format of yu.yale.edu. This short format works well in Redhat 7.4 with Samba 4.6.2. But we have to upgrade Redhat 7.x to 8.x. I won...

...grade the old system. But this will not be finished with short time. After reading many old emails in this forum, I made some changes in our Samba settings. First, we turned on winbind and added all necessary packages and setup for winbind. Finally, we can login with the short format, such as YALE\zs24. Thanks a lot for everyone in this forum. However, I meet with another very strange problem in the Samba. I can map most shares from this server, but some folders cannot be accessed. I compare this with other folders, and find these folders have special permissions. One example is the folder /data...

On Tue, 7 May 2024 22:19:38 +0000 "Sun, Zhongdong" <zhongdong.sun at yale.edu> wrote: > Hi Rowland, > > You are right. We are running some old software here, such as NIS. > All these started in 20 years ago when I joined the group and we had > about 20-30 workstations running Linux. NIS was chosen at that time > to manage user accounts. Some users were not

...dicated Samba server, which serves about 200-300 users. > However, neither the file systems nor the user accounts are in this > Samba server. The file systems are in several other NFS servers, and > user accounts are in another NIS server. However, user accounts are > their netids (like zs24) which are authenticated again Yale central > AD. This is the only reason why the Samba server must join AD, i.e. to > authenticate user. It sounds like you are sharing NFS shares via Samba, for various reasons this is not a good idea. Your other problem is that NIS, for all intents and purp...