similar to: Stacking pam_kerberos and pam_winbind modules

Hello All, I have run into a situation where a user exiting from a PAM_KERBEROS-authenticated session runs the risk of deleting a kinit-generated credentials file that was already sitting on the server. I will explain the problem in detail, but let me begin with my question. It has a specific reference to PAM_KERBEROS, but it can also be a general question. If a user (ssh) session was

Hi, I'm almost ready to migrate Courier to Dovecot 2.2.31 but I have one question about home and mail directory. It's good idea to have same directory form home and mail ? Which scenerio will be better and why ? For example: A) Home: /home/doamin/user1 Mail: /home/doamin/user1 B) Home: /home/doamin/user1/home Mail: /home/doamin/user1 C) Home: /home/doamin/user1/ Mail:

Hello, i have a fresh installed/compiled from source samba 4.11.2 on ubuntu 18.04. But samba wont start. Syslog output: Nov? 6 12:15:19 dms systemd[1]: Starting Samba4 smbd... Nov? 6 12:15:19 dms systemd[1]: Started Samba4 smbd. Nov? 6 12:15:19 dms smbd[1557]: [2019/11/06 12:15:19.594448,? 0] ../../source3/auth/auth_util.c:1385(make_new_session_info_guest) Nov? 6 12:15:19 dms smbd[1557]:??

I downloaded and installed dovecot 1.1 nightly build yesterday. Here is a the errors I collected from the log file. dovecot: Aug 15 14:19:29 Error: IMAP(use at doamin): Log synchronization error at seq=7,offset=24 for /data2/mail/we/webmail.us/ji/jing/dovecot.index: Extension introduction for unknown id 2 dovecot: Aug 15 14:19:29 Error: IMAP(use at doamin): Log synchronization error at

with getfacl userprofiles appear that domain admins has no permission, and I have configured as appear in wiki profiles, but only step that I can't configure is chgrp doamin admins # getfacl /local/var/profilesad/usertest/ getfacl: Removing leading '/' from absolute path names # file: local/var/profilesad/usertest/ # owner: 20087 # group: 513 user::rwx user:20087:rwx user:3000001:rwx

Hi, compiled from sources with # ./configure # make # sudo make install 2016-07-07 12:34 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > Hi tried with: > > winbind enum users = Yes > winbind enum groups = Yes > > > and winbind in nsswitch but same output, no result with getent from users and groups from samba 4 ad > > > 2016-07-07 11:40 GMT+02:00 Trenta

hello, if i start a transient guest doamin via "virsh create abcd.xml" i see an additional libvirt thread and also some open files: pstree -h `pgrep libvirtd` libvirtd───11*[{libvirtd}] libvirtd 3016 root 21w REG 253,0 6044 1052094 /var/log/libvirt/libxl/abcd.log libvirtd 3016 root 22r FIFO 0,8 0t0 126124 pipe libvirtd 3016 root

I have been reading the FAQ and the online samba how to's and been googeling to find out why wbinfo is failing on me. I am tryitng to use wbinfo -a domainname\\username%password to authenticate to my MS AD domain but what is happening is every time I try I get the following output. plaintext password authentication failed error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e) error messsage

Hi, I'm trying to migrate a samba 3 domain, and I have detected that our domain users and doamin admins are migrated/renamed during migration, we have this grousp in other language than english and ater migration are migrated to domain admin and domain users. Members of this groups are migrated correctly, only question is this change in name could genereate a problem and if this is an issue

Hi, I have installed samba 4.4.4 and configured and works perfect, now I need to configure roaming profiles and reading https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I have detected that I can't configure chgrp "Domain Admins" /srv/samba/Demo/ I'm creating this share on our dc, but seem that with # getent group "Domain Admins" any samba AD group is

Hi, I have samba 4.4.5 configured as AD wortking correctly, now I need to configure Mcafee Logon Collector to receive security event about user login, this application requires to read security event log about domain controller I have tried to connecto to doamin controller form windows server with connect as and view event log but any event viewer is showed... I have tried to configure

I have a question about integrating MAc OS X and Windows 2003 AD Domain. Getting the machine to join the doamin is easy. But when I try to map the home drives, I can see them but not access them. There was a note that implied this is due to sending encrypted vs non-encrypted with samba and that Win 2K3 server SP1 broke that. It says to disable kerberos authentication on the Windows side. Is that

I am in the middle of a rather confusing situation. At the moment I am unable to shutdown a KVM guest machine. Nor am I presently able to open a virt-manager session on the host. I am not exactly sure what has happened but the problem with the vm guest is that issuing a "virsh shutdown 1" from the root console has no effect. # virsh list Id Name State

oh, there is much much much code,it's too too too hard for me. So,,,,,can i ask more question:use virt-manager create a domain,but with a result of "unsupported configuration:the ioh3420 controller is not supported in this qemu".since it's arm64 platform,and ioh3420 is a intel device.right?Why produce a intel device in arm64 platform? So, can i delete the ioh3420 only by

Hi all, I'm trying to get pam_winbind to create ticket cache on login if the AD is available. Please note that this is an Ubuntu Lucid system. When trace this with wireshark it receives a TGT ticket for the user. The current solution is to use pam_krb5 before attempting winbind. That gives me a ticket cache. The main problem is that if the user enters the wrong password it does two login

[global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of ??? security = ADS ??? workgroup = NET ??? realm = relam.fqdn ??? log file = /var/log/samba/%m.log ??? log level = 3 ??? # Default ID mapping configuration for local BUILTIN accounts ??? # and groups on a domain member. The default (*) domain: ??? # - must not overlap with any

Hi, Using a samba 4, and having users configured as primary group domain users (513) we detected that then if you execute net group /domain "Domain Users" then user is not showed in as member of domain users, if you remove from primary group and assign another group then with net group /domain "Domain Users" you can list this user as member. This generates that for example

On Thu, 13 Apr 2017 17:10:16 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > [root at gtmpve nagios]# net rpc rights list accounts > ATGTM00\Domain Admins > SeDiskOperatorPrivilege > > It look like the Domain admins yes have the > 'SeDiskOperatorPrivilege' privilege. I change the group of the share > with chgrp and try from

Hi, If you try net group /domain "Domain Users" in samba domain with domain users as primary group any user is showed, but If you try the same in a native AD then users are listed, try this to reproduce the error Thanks 2018-02-12 20:24 GMT+01:00 Trenta sis <trenta.sis at gmail.com>: > Hi Rowland, > > Not really sure if that is correct, tried with native AD and domain

Hi, I am trying to create a build on CircleCi with smaba4 AD. It seems the filesytem doesn't support ACL's, which s3fs requires. I get the folowing error: ?ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed - ProvisioningError: Your filesystem or build does not support posix ACLs, which s3fs requires.? Try the mounting the filesystem with the