similar to: Samba 3.0 as NT4 PDC with MIT kerberos 1.3 (v5) for authentication?

"Gerald (Jerry) Carter" <jerry@samba.org> wrote in message news:<zwyd.1Tn.5@gated-at.bofh.it>... > The Samba Team is proud to announce the availability of the > first official release of the Samba 3.0 code base. > > Major new features: > - ------------------- > > 1) Active Directory support. Samba 3.0 is now able to > join a ADS realm as a

I have do a classicupdate from a NT4 style domain to Samba DC 4.10.7 BIND_DLZ without (apparently) problem All seem work fine, access to PC work, join or re-join a PC to domain work, access from a Linux samba member server to Win7 PC work, access from Win7 to samba member server work. But I cannot access from a PC with win7 to another PC with win7. If I try to access from win7-0 to win7-1 via

Hi, I am about to spend one week of my holidays with transfering our (about 20 clients) NT4 domain to a AD DC one. We are running a samba NT4 PDC on debian buster which is offering dns (bind9) and dhcp (isc-dhcpd), too. I have an older server where I can play with an AD DC setup. If I see I won't make it in a week, I would like to be able to return as smooth as possible to the present

Il giorno mar, 25/04/2017 alle 14.36 +0100, Rowland Penny via samba ha scritto: > > However I would like to enable also the DHCP service, and think > > it's right to activate it on this server. > > > > What is the best way to do so? > > Well you could always do it the way I have been doing it for the last > 5 years, see here: > >

Il giorno lun, 02/09/2019 alle 08.26 +0100, Rowland penny via samba ha scritto: > > set 01 22:36:56 s-addc.studiomosca.net named[639]: samba_dlz: > > cancelling transaction on zone studiomosca.net > > That is showing that a client isn't being allowed to update a record. Is it possible to cure it in some way? > > [2] ----[smb.conf] > > > Please do not post

Hello, I provisioned an samba AD with the bind_dlz option. So far so good. Followed the samba wiki. I have a DNS for our external access services (website, moodle, etc) and I'm using it as a forwarder to AD but it is not working. In a win7 I configured the AD IP as primary DNS and put it in the domain. When I try to access, for example, "wiki.samba.org" it opens normally, but when

Il giorno mar, 25/04/2017 alle 13.26 +0100, Rowland Penny via samba ha scritto: > On Tue, 25 Apr 2017 14:07:05 +0200 > Dario Lesca via samba <samba at lists.samba.org> wrote: > > > I have setup a new Samba Active Directory DC on Fedora 25 and > > samba- > > 4.5.8-1.fc25.x86_64, rebuild from src.rpm with dc option enable. > > > > This system

Hi, I'm trying to set up an AD DC in an iocage jail on FreeBSD (to avoid the issues of having the DC a file server) but I'm running into some trouble. I've setup Kerberos and can kinit OK: root at samba-addc:/ # kinit administrator administrator at BEGER.COM.AU's Password: root at samba-addc:/ # klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: administrator at

I have setup on Fedora 27 server a AD-DC samba server + bind + dhcp. All seem work fine: I can join to domain, add/remove dns records with samba-tools, access to shared folder, use MS Management Console on Win7, ecc But when I join a new machine Samba winbind Member server to domain [ root at server-dati ~]# net ads join DOGMA-TO -U administrator Using short domain name --

Hi Rowland, Thank you for replying. Please find the output here below. Just a possible tip: _kerberos._tcp.example.com??? service = 0 100 88 addc-new.example.com. output is present on the new machine but if we issue a host -t SRV _kerberos._tcp.example.com on addc2 it does not appear in the list. Kind regards. Collected config? --- 2019-12-18-20:30 ----------- Hostname: addc-new DNS Domain:

Hi, I'd like to hear off-list from anyone who is currently successfully using folder redirection with an NT4 domain controller. If you are doing this, please would help me to understand your secret. There are two ways I know of that should work, however I have received feedback from separate sources that claim problems with both of these methods. I would like to include in the new book

Hello Stefan, you need to use "-U" with user from Domain Admin group(maybe it works with other users too, but I didn't test it). Andrej Am 07.08.2018 um 17:00 schrieb Stefan Kania via samba: > When I start the replication from the other DC it works as you can see: > ------- > root at addc-01:~# samba-tool drs replicate rodc-01 addc-01 dc=example,dc=net > Replicate

I'm attempting to get an old NT4 client participating in a Samba4 domain. Users can logon to the machine locally and access network shares on other machines in the network. However, no one can access shares on the NT4 machine using the machine name. Attempting this results in an error "The account is not authorized to log in from this station." Using the IP address does work however.

Hello, If my AD will only provide service for machines with windows operating system I can use the *idmap config ADDC: backend = ad*, correct or did I get it all wrong? For both unix and windows machines I need *idmap config ADDC: backend = rid* ? Other question. *Wiki Prerequisites says:* "Users must have at least the uidNumber and groups the gidNumber attribute set. When using the

Hi, I have been reading through the docs for Samba 3, and there is a lot of talk about how samba 3 can function in an AD domain as a member server and accept kerberos service tickets issued by an MS KDC. (net ads join, etc...) I have a slightly different twist on a similar situation. I have an MIT kerberos realm set up and my Windows2000 PCs get tickets from this realm on login just

Rowland, I have seen you state this before that "server services" line within a smb.conf file is not necessary on a DC. I have to ask, and it may have been asked before but, I recently install from source the v4.5.0 and during provisioning samba created that "line" within the smb.conf file. I understand what and why your saying this but, if the line is not needed then why

Performing the backup, for example on an external hard drive and restoring after all ok, the permissions will not be changed? In NT4 use the "lam" for management. Can I use ldap account manager for managing Samba4 ADDC or should only use the RSAT? Or is possible using both? On Thu, Sep 22, 2016 at 3:08 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu,

Hello, I just start testing the setup of an RODC with 4.8.3 (I use the packages from Louis). The join works fine. After a reboot of the rodc I can see all Objcts with: ldbsearch --url=/var/lib/samba/private/sam.ldb and all users and groups with: wbinfo -u wbinfo -g But as soon as I try to test the replication I got this message: ----------- root at rodc-01:/var/lib/samba/private# samba-tool drs

Il giorno mer, 26/04/2017 alle 07.27 +0100, Rowland Penny via samba ha scritto: > On Wed, 26 Apr 2017 01:55:16 +0200 > Dario Lesca via samba <samba at lists.samba.org> wrote: > > Your problem is that you need to find out just who dhcpd runs as on > fedora. On Devuan it is root and everything just works. Yes, on Debian work. And with this patch: [root at fedora-addc ~]#

Am 2016-12-01 um 13:19 schrieb Rowland Penny via samba: > You should have seen a line like this towards to the end of the upgrade: > > Administrator password has been set to password of user > > But it is usually the 'root' user password. Ah, yes, I should have remembered reading that. Unfortunately it isn't working for me, yet. in my test VM I rm-ed