similar to: New 2.2.2 question/ACL Lists

On Mon, Dec 1, 2014 at 11:09 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > NO NO I can't take anymore :-D > > Please read the rest of the thread, it will explain all. People seriously use this in a production environment? The lack of documentation and confusion surrounding pretty basic posix auth is extremely surprising. I'm no noob at *nix admin and

On 01/12/14 19:19, Jeremy Allison wrote: > On Mon, Dec 01, 2014 at 11:14:59AM -0800, Greg Zartman wrote: >> On Mon, Dec 1, 2014 at 11:09 AM, Rowland Penny <rowlandpenny at googlemail.com> >> wrote: >> >>> NO NO I can't take anymore :-D >>> >>> Please read the rest of the thread, it will explain all. >> >> People seriously use

Jeremy: Just wanted to pass this snippet I saw from slashdot http://slashdot.org/article.pl?sid=01/11/07/053230 which says: Public Comment Period In MS/DOJ Battle Posted by timothy on Wednesday November 07, @07:03AM from the tap-your-mind dept. PacketMaster writes: "Somthing that I didn't know, and perhaps many others didn't

On Mon, Dec 1, 2014 at 9:09 AM, steve <steve at steve-ss.com> wrote: > > Not in any domain we've ever seen. The RID of BUILTIN\Admins is 300000? Where are you seeing this in the Samba 4 active directory? I don't have my development box in front of me, but the "Administrator" account is showing with an ID = 514 or similar. It's something in the low 500s. Greg

I'm working to setup Samba as a domain member to a Windows Server active directory, and I keep hitting road blocks. There's some real terminology hurdles in the wiki. In a nutshell, my problem is this: I setup a Windows 2012 Essentials ADS domain and I ended up with zartman.local for my "domain" in Windows. So, I've got a dns zone in windows server that is domain.local

I'm playing around with Domain Membership to a WIndows 2012 AD Server. It appears I'm able to join the AD domain, but the domain member doesn't seem to authenticate anything against the DC once joined. Here is my smb.conf netbios name = Member workgroup = ZARTMAN security = ADS realm = ZARTMAN.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and

When you first provision an AD DC, is there a way to control where samba-tool puts all of the AD data files? -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

Does anyone know what Red Hat/Centos is going with Samba 4? I've looked at their packages in COS 6.5 and 7 and it doesn't make sense. They seems to be doing some kind of watered down or modified version of Samba 4 with some of the tools disabled. Are they still holding off from full AD implementation in their packages because of the MIT Kerberos issues identified in previous

Additional Info... I am beginning to think that a file called 'secrets.tdb' might be what I am looking for. Inside that file is something mentioning SID. Of course, it also mentions the name of the PDC. If that is the file I am supposed to copy over. Then it is done. However, I still need a little more input for setting up a Samba BDC. With a Samba BDC, should I leave the

Hi , I want to Know the Difference between version 3.2 and 3.0.x. I know as 3.2.x support GPLv3 But other then that is there any difference ? Also is development for 3.0.x is stoped ? When can we expect the stable release of version 3.2 as it is in pre-release verion ? -- Regards, Shashi Lad. [M] - 9972047907 Don't tell "GOD" how "BIG" your "Problem" is;

I'm working with the Centos 7 packages for Samba 4.2.10 and I note that the stock packages don't include the ldb tools (eg, ldbmodify, ldbsearch, etc). I did find a stand along centos package that contains these tools from here: https://wiki.samba.org/index.php/LDB However, the stand along tools don't seem to be aware of the Active Directory schema. For example, if I try to use

I un-commented the following in my environments.rb file config.plugins = [ :all, :exception_notification, :ssl_requirement] but I get the following errors: in `ensure_all_registered_plugins_are_loaded!'': Could not locate the following plugins: exception_notification and ssl_requirement (LoadError) from /Users/mitch/.gem/ruby/1.8/gems/rails-2.3.2/lib/rails/plugin/loader.rb:44:in

So, I setup Samba on Ubuntu 18.04, using the packaged Samba version. [Thanks Rowland/Louis et al.] I'm doing some testing/tinkering using FreeNAS as a share, using the AD as the authentication back-end. As part of that process, you need to add a computer account and change some security settings. I setup RSAT and can see the AD tree, and add users etc. When I try to switch to advanced view

I'm installing sernet samba4 packages with active directory support on RHEL 6. Is it required that I install kerebros packages seperately? Kerebros does t seem to be an Install require . I wasn't sure if sernet had somehow rolled sernet with kerebros??.?. Any help greatly appreciated. Greg

Hai,   Since im still having problems reading the man smb.conf about the NTLM settings, im asking here. How do i allow NTLM auth for my proxy.   I have been playing around with :           client NTLMv2 auth         raw NTLMv2 auth         ntlm auth         lanman auth   i’ve added the proxy user to the winbind_privileged group. and did set the needed rights. chgrp winbindd_priv

Hi all, What is the real purpose if the following lines when using idmap-rid or idmap-ad: # Default idmap config for local BUILTIN accounts and groups idmap config * : backend = tdb idmap config * : range = 3000-7999 When using the next two lines # idmap config for the SAMDOM domain idmap config SAMDOM : backend = rid [or ad] idmap config SAMDOM : range = 10000-999999 AD users will be in

I am trying to connect to computers running windows9x knowing only the IP address using smbclient. on windows computers i can type \\130.15.210.185 in the address bar and browse the shares of computers that don't show up in my network neighbourhood (computers on other subnets don't seem to show up, but i can still use them by typing the IP in) I am using smbclient like so:

Hi, Installed latest Samba3.0.2a on NT4 domain, security = domain and net rpc join successfully. everything work great, but group permission failed, error message is "user_in_winbind_group_list: nametogid for group NTGROUP failed". smb.conf on shares as below: ===================== omitted base configurations... [shareA] path = /public/shareA valid users =

On Mon, Dec 1, 2014 at 1:33 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > >> I do what windows does, it ignores the RID (what you call 'the last set > of digits from SID') and uses a builtin mechanism to store the next uid & > gidNumber. The builtin users/groups use the RID for the GID/UID. If you create a user and then goto to the

On Thu, 10 Aug 2017 12:19:36 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai Mathias, > > Type: wbinfo --all-domains > > You should see 3 domainnames. > > BUILTIN => idmap config * > HOSTNAME => ? Dont know where this one maps to. > NTDOM => idmap config NTDOM On a Unix domain member, I get 4 BUILTIN