similar to: Goups and domains trusted

Hello all, we have a samba server on a SLES9 linux box. It is connected to an active directory with multiple trusted domains. With this server, we have strange problems with users/groups in others domains. The users/groups listed in smb.conf that are part of trusted domains are not take in account to access the shares. We cannot as well set ACL correctly on filesystem. This is not an

Hello, i have two Questions about Permissions in Trusted Domain. 1.) When User1 from the Domain1 creates a File in a share from antoher Domain(Trusted Domain) - lets call it Domain2 - than the File has the following Owner: "DOMAIN2\root" and not "DOMAIN1\user1". So "force user = %U" does not work and removing this Option won't work too. But the Group settings

Good Morning! We got in some troubles using trusted domains and winbind. First i will tell you something about the network and samba configuration. For our SMB Environment we use Samba 3.2.12. We have three trusted domains. Our Samba Server uses LDAP as Backend. Most of the time it worked nice, but after some time Winbind loses User Entrys. On the windows side i can see "unknown user

Consider this topology domain1-server1 domain2-server2 | | laptop - domain1-server1 ---- domain2-server1 Laptop has two ssh identities, domain1 and domain2. I don't wish to store identity locally in any of the servers. As far as I understand, there isn't any way to limit ssh-agent to allow only signing

Hi, currently I have the following Samba 3.0.2rc2 setup: [w2k 1] --- [Samba1] ----VPN Link---- [Samba2] --- [w2k 2] Samba1 and Samba2 are PDC's, there is one domain for each network. I'm trying to configure a symmetric trust relationship between them. Both Samba servers have "wins support = yes", and I added the other server/domain to their wins.dat (notably the line with the

Hi, On Fri, 2 Jun 2017, Sandbox wrote: I have two LDAP domains, which has some equal users, eg: > > abc at domain1.com > abc at domain2.com > > This works fine except one thing: i cant set up the ldap query to choose > the correct maildir if the user names are equal. > | Well the most problem is that you have two LDAP servers with different content. Unfortunately i cant

Hi, I have two LDAP domains, which has some equal users, eg: abc at domain1.com abc at domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a

Am 14.09.2016 um 18:23 schrieb Michael A Weber: > >> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba >> <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >> >> >> >> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >>> Experts— >>> >>> I’m attempting to export a keytab for a created

Hi, I have two LDAP domains, which has some equal users, eg: abc at domain1.com abc at domain2.com I sat up this config: domain1 users maildirs are stored in /home/vmail/username domain2 users maildirs are stored in /home/vmail/domain2/username This works fine except one thing: i cant set up the ldap query to choose the correct maildir if the user names are equal. Is it possible to use a

Hi, I've just moved a second Samba domain to LDAP -- it works great! However, the first domain is now dead in the water. It refuses to autenticate, and from the logs it looks like it's not find the SambaDomainName entry in the LDAP tree. Here is a diagram of how my LDAP tree is set up. dc=mycompany,dc=com |___ ou=computers |___ ou=people |___ ou=groups |___ sambaDomain=domain1 |___

> On Sep 14, 2016, at 12:57 PM, Achim Gottinger <achim at ag-web.biz> wrote: > > > > Am 14.09.2016 um 18:23 schrieb Michael A Weber: >> >>> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >>> >>> >>> >>> Am 14.09.2016 um 05:53

I've successfully joined my Samba server to a Windows domain (let's call it DOMAIN1). When I run wbinfo -m , I see a number of other domains listed, including DOMAIN2. I can even test credentials in those other domains (wbinfo -a DOMAIN2\\username says that both plaintext and challenge/response authentication were successful). However, I can't get Samba to accept credentials from

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 2 Jun 2017, Sandbox wrote: > I have two LDAP domains, which has some equal users, eg: > > abc at domain1.com > abc at domain2.com > > This works fine except one thing: i cant set up the ldap query to choose > the correct maildir if the user names are equal. Well the most problem is that you have two LDAP servers with

Hi, Why modifying a working conf when you can build your DC on others systems (VM)? That could be really nice to learn but you add a lot of complexity in your process, I think. Why not using DLZ to access your AD zones? I expect Bind to be able to mix its behaviour: flat file for some zone, DLZ for others... Now regarding: update-policy { grant AD.DOMAIN2.SUBDOMAIN.TLD ms-self *

On 27/05/16 14:37, Jeff Sadowski wrote: > I had left my config alone for now and dhcp still writes to > DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able > to write to bind in its zone. > > [2016/05/27 07:30:06.738434, 0] > ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) > ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - >

Hi, I have been trying to use Winbindd in SLES 11 SP3 (Samba version 3.6.3-17.25.1) to fetch AD (Windows 2008 R2) identities into the Linux box and currently running into some problem w.r.t domain local groups and thought I could get some help here.. I have a two domain setup, in which DOMAIN1 is the parent domain and DOMAIN2 is the child domain. I have 2 users DOMAIN1\user1, DOMAIN2\user2 and

On 27/05/16 17:11, Jeff Sadowski wrote: > https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped > me find that I needed to add > > options { > [...] > tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; > [...] > }; > That seems to have fixed my errors with DNS > > On Fri, May 27, 2016 at 9:26 AM, Rowland

> On June 2, 2017 at 11:13 AM Steffen Kaiser <skdovecot at smail.inf.fh-brs.de> wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Fri, 2 Jun 2017, Sandbox wrote: > > > I have two LDAP domains, which has some equal users, eg: > > > > abc at domain1.com > > abc at domain2.com > > > > This works fine except one

On Fri, May 27, 2016 at 10:23 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 17:11, Jeff Sadowski wrote: > >> https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD >> helped me find that I needed to add >> >> options { >> [...] >> tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; >>

> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > > Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >> Experts— >> >> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error: >> >> ERROR(runtime): uncaught exception - Key table entry not