similar to: https

Hello, I am using winbindd to map users via the idmap_ad backend from a Samba 4.2.2 AD to another machine in the network. Everything works fine unless I shutdown the DC. I would expect winbindd to realize the DC is offline and shutdown or something, however instead of realizing something is wrong It goes into some kind of reconnection loop and makes the whole system unuseable. As soon as I kill

Although I know the basics about getting and installing web and mail server ssl certs, I haven't had to "purchase" and do it "myself" for some time. i always had someone else dealing with it. I am wondering what you folks on the list are using on your centos web and mail servers :-) Are you making your own or are you purchasing them from godaddy, thawte, geotrust,

Hi Rowland, I had to split smbd and winbindd config to work around some bugs in credentials offline caching. I have a separate winbindd.conf, it looks like this: [global] ### Network ### netbios name = Fileserver server string = Fileserver (%h V:%v) ### ad member ### workgroup = INTRANET realm = INTRANET.MYCOMPANY.DE security = ADS kerberos method = secrets and

Hello, I occasionally need to remove the write permissions from directories inside a share to prevent users from accidentally deleting files inside that directory. My problem is that I neither can view nor can change the permissions of directories on my shares. Curiously enough viewing and changing permissions of files in the same shares works without a problem. Is there anything I

Hi Rowland, yes I do have two separate config files for smbd/nmbd and winbindd. You can tell winbindd to load a separate config file via the "-s" command line switch. Therefore I set "WINBINDD_EXTRA_OPTS" in "/etc/default/sernet-samba" to "-s /etc/samba/winbindd.conf". The "cached_login" option for pam is also set and working. The problem was

Would appreciate some suggestions for ecommerce hosting. Been using, cough, cough, godaddy, for about 5 or 6 yrs but in the last year or so, they really suck. Did the hosting myself for a while prior to going with godaddy but I don't have time to babysit. Seems godaddy would rather spend millions advertising during the Super Bowl than put that money to good use. TIA!!

Hi Rowland, when saying 'I' I theoretically meant any user that has write access to the share. It should be possible to right click the directory in windows, the go to security tab and remove the write permissions on the directory. This behaviour already works with files, I'm trying to figure out how to make it also work for directories. Greetings, Felix -----Ursprüngliche

Hi Rowland, my users are known to the OS, they also have the correct permissions to alter the settings. Doing so on the CLI does work when logged in via SSH. When opening the Security Tab the users and groups are displayed, only on directories there are no checkmarks under Read, Write etc. I also cannot set any checkmarks for Read, Write etc. When viewing the Security Tab of a file everything

OK, I am confused and DNS is the reason. So, Comcast, 13 public IP's bound to my modem. Each public IP has a DNS name from comcast (they assign it automatically) like: 173.13.167.209 --> 173-13-167-209-sfba.hfc.comcastbusiness.net I created a DNS entry at GoDaddy for 173.13.167.209 that is 'inhouse.theindiecompanyllc.com' When eth0 is alive, I see that it tells me my name

Hello, I'm trying to authenticate to a Samba file server version 3.6.6 which is joined to a samba AD version 4.1.17. The problem is that I can't seem to login using smbclient -L //172.16.0.229/itdev -U shemgp tothe file server and the server displays the error: winbind authentication for user [shemgp] FAILED with error NT_STATUS_WRONG_PASSWORD even if I use the correct password.

Hi all, I have a domain member server 3.6.6 running on debian7, authenticating against another debian7 + samba 3.6.6 in DC-mode. Both servers have user-accounts and groups on LDAP and resolve posix users using libnss-ldap. The groupmap is living on LDAP as well. The domain member server serves a share with ACL enabled. I got the upgrade to 3.6.X and idmap-updates working, but the old

dovecot --version = 1.2.11 dovecot -n: http://pastebin.com/ahCpdC0F I have a user that has no problem viewing email from roundcube (webmail) but Outlook 2010 doesn't seem to download random messages for a day or two, then they suddently show up. I saw the wiki had some suggestions for older versions of Outlook to fix other problems, but I didn't really see anything like this. Any help

http://help.godaddy.com/article/1054 "# Set up SSL protection on your website." is it an inescapable requirement to have a dedicated [not fix] ip address, when i want to use ssl on my domain? thank you happy Christmas! :)

Hi all, i have had sip TLS with an own signed certificate (using the ast_tls_cert script) running on asterisk-1.8.8 - i then have updated to 1.8.9.3 - and now i get the message "FILE * open failed!" I have already recreated the certificates with the script - but still no luck... Does anyone here know the source of the problem ? best regards, Wolfgang Pichler

I want Dovecot handling IMAPS. /etc/dovecot.conf: protocols = imaps imaps_listen = * ssl_disable = no ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_key_file = /etc/ssl/private/dovecot.pem The problem is that Dovecot is not listening on 993 port, or there's something listening on 993, but it does not introduce itself. There's no problem if Dovecot listens on 143 (IMAP). When

Hello, I have a fresh install of puppet 3.2.3. on windows 8. I try to install the iis module (https://forge.puppetlabs.com/simondean/iis) with the command: puppet module install simondean/iis and it gives me *C:\Program Files (x86)\Puppet Labs\Puppet>puppet module install simondean/iis* *Notice: Preparing to install into C:/ProgramData/PuppetLabs/puppet/etc/modules .* *..* *Notice:

On 04/08/15 15:29, Felix Matouschek wrote: > Hi Rowland, > > I had to split smbd and winbindd config to work around some bugs in credentials offline caching. > I have a separate winbindd.conf, it looks like this: > > [global] > ### Network ### > netbios name = Fileserver > server string = Fileserver (%h V:%v) > > ### ad member ### >

When I try to connect to my new puppet master, I get an error because of a self-signed certificate: ---snip--- # puppet agent --test --noop Warning: Unable to fetch my node definition, but the agent run will continue: Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [self signed certificate in certificate chain for /CN=Puppet CA:

While toying around with Doveadmin HTTP api I noticed, there is not much hype around it. Let's change that. Doveadmin REST API so to speak provides a web server. When doing /ajax/ requests, modern browsers block that, unless the response comes with a specific CORS header. Here how to work around with a proxy: > # /etc/dovecot/local.conf > doveadm_allowed_commands = fetch >

On 01/07/15 12:59, Felix Matouschek wrote: > Hello, > > I am using winbindd to map users via the idmap_ad backend from a Samba 4.2.2 AD to another machine in the network. > Everything works fine unless I shutdown the DC. > I would expect winbindd to realize the DC is offline and shutdown or something, however instead of realizing something is wrong > It goes into some kind of