similar to: Dark Secret of Winbind

Hi All, I have the following problem: [2002/05/29 18:16:13, 0] smbd/posix_acls.c:create_canon_ace_lists(774) create_canon_ace_lists: unable to map SID S-1-5-21-2025429265-1580818891-682003330-1109 to uid or gid. in smb.conf I have: [global] winbind uid = 1000-2000 winbind gid = 1000-2000 winbind enum users = yes winbind enum groups = yes Any Idea?? Thanks, Christian DISCLAIMER: This

I have just migrated to a new server and have Samba ver 3.0.12-5-SuSe running on a small network ( 7 win 98pcs) Logins are possible from all clients but morning logins (after client reboot) are delayed. It can take 2 or 3 attempts to successfully login. At each failed attempt the hour glass sits there for 30 seconds or so. logins usually succeed on the second or third attempt. I have searched

No I'm join samba to Windows DC(srv-dc01), he not server RODC >> If they do, try pre-creating the new DC in AD. in Windows manager console AD may create only RODC, it does not suit me run samba-tool domain join example.ru DC --server=srv-dc01.example.ru --username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 Failed to fetch machine account password for EXAMPLE from

I've read the documentation that domain trusts should be fully supported with both Kerberos and NTLM authentication. I've created a new 2016 domain on a Windows box and created a Samba domain on a Linux box with a BIND9_DLZ backend. Both servers can resolve both DNS domains forwards and backwards and I am able to connect a Windows 10 client to the Samba domain without any issues. The

On Tue, 20 Feb 2018 14:10:16 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: It seems that the problem starts here: Could not find machine account in secrets database Yet near the top there is: Setting up secrets.ldb It seems that either 'secrets.ldb' doesn't contain the required info or 'vas.lah' doesn't have the required permissions

I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. Assume the samba SMBPDC is called "PDC." I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice

Before I lay out the problems I am currently suffering from let me describe my environment: Dell OptiPlex GX270 2.6Ghz 512MB Ram RedHat Linux Fedora Core 3 with all current updates. Samba compile is version 3.0.20 stable. Uname -a: Linux theo.hq.navis.net 2.6.12-1.1378_FC3 #1 Wed Sep 14 04:24:31 EDT 2005 i686 i686 i386 GNU/Linux Everything was running fine until my last YUM update.

I am desperately in need of help. I have a Centos 7.2 server running Samba 4.6.13 as an active directory domain controller. I am trying to join a new Centos 7.4 server running Samba 4.6.13 to the domain. The domain command will not connect to the other server. I have firewalld and selinux disabled on both servers, I can ping both ways. From the new server I was able to do a kinit -U

I have a machine that I am trying to join the domain from and am having the following problem: smbpasswd -j DOMAIN -r pdc.domain.com error: modify_trust_password: machine pdc.domain.com rejected the session setup. Error was : code 131 What is error 131, is there documentation of error #'s somewhere. If it is what I think it is, it is telling me that there is another machine with this

Sometimes a group sid does not get resolved to its name. Is this a settings problem? Looks like winbind deamon went dormant for a while and then woke up? I am using interface wbcLookupSid provided by the library libwbclient.so for resolving sids to names. These are the winbind related parameters in /etc/samba/smb.conf [global] # separate domain and username with '\', like

Hi, I've got my samba 2.2.2 server running and working, but while trying to get winbind working, I'm running into a problem. Specifically on step 9.5.3.4 from the winbind configuration documentation: [root@NetServer samba]# smbpasswd -j BIO2RES -r DOMAIN-CONTROL -U Administrator Password: Error connecting to DOMAIN-CONTROL Unable to join domain BIO2RES. [root@NetServer samba]# echo $?

the only thing to happen has been the server has had the patch for the windows rpc problem now the responce to a command that has worked perfectly for weeks of testing doesn't ************ work anymore. instead it spews this out [2003/08/08 11:50:31, 0] libsmb/namequery.c:getlmhostsent(588) getlmhostsent: Ill formed hosts line [ > lots of random signs rpcclient vomits this out

After update I have got this: samba-tool drs kcc -Uadm2 -d 9 INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9 quota: 9 acls: 9 locking: 9 msdfs: 9 dmapi: 9 registry: 9 scavenger: 9 dns: 9 ldb: 9 tevent: 9 auth_audit: 9

The following scriptlet, containing a wrong password among the mount options, #!/bin/bash /bin/mount -t smbfs -o \ "netbiosname=mymachine,workgroup=group,username=user, \ password=wrongpasswd,ro,debug=4" //machine/c /mnt/dir /bin/echo "Exit $?" returns invariably mount.smbfs started (version 2.2.7a-security-rollup-fix) added interface ip=192.168.0.53

I've attempted to change my smb password on a remote NT PDS, but it always fails with resolve_name: Attempting lmhosts lookup for name SERVER<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_name: Attempting host lookup for name SERVER<0x20> Connecting to nnn.nnn.nnn.nnn at port 139 error connecting to nnn.nnn.nnn.nnn:139 (Connection refused) unable to connect to

Hi, I''ve setup my systems to do reporting as explained in https:// reductivelabs.com/cgi-bin/puppet.cgi/wiki/ReportsAndReporting, with tagmail defined as one of the report types - but I do not recieve any mail at all. I''ve configured a tagmail.conf file like this: all: root@localhost But the documentation mentions three options, namely sendmail, reportfrom,

Hi As I''m more familiar with cfengine and it''s way to split updates (in update.conf) from the actual grunt work (in cfagent.conf), I''m wondering how to best manage puppet and my manifests with puppet...? Should I define a puppet class that copy the puppet package (in .tgz format) and all the manifests to the client, and then have all my other classes depend on

Hi Can anyone tell me what''s wrong with this one. Sorry I''m new and I just want to print some message to the the puppet log on the client side. --------------------------------------------------- $testvar = "Hello world!" class mytest { exec { "/bin/echo $testvar" } } I keep getting: err: Could not parse; using old configuration: Syntax error at

Hello, I have samba 3.3.8 installed on CentOS 5.5 on a production server. Winbind is filling up the logs with these messages: [2010/12/06 10:43:28, 0] winbindd/winbindd_passdb.c:sid_to_name(159) Possible deadlock: Trying to lookup SID S-1-5-21-2106371596-187675891-3351287853 with passdb backend [2010/12/06 10:43:29, 0] winbindd/winbindd_passdb.c:sid_to_name(159) Possible deadlock:

Everyone, I am going nuts trying to figure this problem out. I have successfully joined a SUSE 10 server to our domain and configured samba for ADS authentication. This exact setup works on all my other servers. On this one, I keep getting access denied when entering my domain password despite the fact that I have tried it literally dozens of times. I am 100% confident I am