similar to: Windows policies question

When setting up an LDAP PDC do I have to have both user and machines in the ou=People container? Here's what I've got. LDAP Tree ou=People,o=umd.umich.edu ou=NIS,ou=Groups,o=umd.umich.eud ou=machines,ou=Samba,ou=Services,o=umd.umich.edu ou=Idmap,ou=Samba,ou=Services,o=umd.umich.edu smb.conf (ldap stuff) ldap delete dn = no ldap suffix = o=umd.umich.edu ldap

Hi @all, I have some question I can't find a explanation. I have a standalone Samba3 as PDC. It works perfect with LDAP. Now I want to implement Policies. 1) Is it possible to use GPO from ads ? And if so, where to store this policies. 2) Or can I only use policies created with poledit from NT4 which should be stored in NETLOGON. Any help or links about this would be apreciated.

In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ winbind are talking to dc1 everything is great when talking to dc2 or dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required" and nothing works. I don't think its a samba config problem but my AD admins aren't real helpful in getting samba

I've got a Samba PDC and a Samba domain member server. I successfully joined the domain, started winbind and run the wbinfo -p; wbinfo -t tests, both succeeded. But if I do a winbind -g I only get BUILDIN/group and if I do a wbinfo -u I get "Error looking up domain users". But ntlm_auth succeeds. So I'm a little confused. At this point this is a minor issue since

I'm attempting to join a Samba 3.0.4 domain on a Debian linux box, with a Windows XP client. Problems 1) Can only get the join to work if I use the root account. On Win2k I can use any account in the Domain Admins group. 2) The join succeeds, the unix account and the smb account are created but the smb account is disabled, and the password contains all XXXXs. Joining the domain works

I've been fighting with winbind for several months now have yet to get it to work according to the documentation. I've got a Samba 3.0.4 PDC, named PDC, running on a Debian linux box, and I'm trying to add a second linux box, FCSPRTSRV. I can successful join the domain using net rpc join -U dharknes and at the point I can access the samba server resources, I can do a ntlm_auth

Talking to myself again ;-) Samba-tool is working a little bit different then the silo/policy management on a Windows-DC. On a Windows-DC after assigning the user and host to the silo you have to assign the silo to the user and the host. When assigning the user and host to the silo with samba-tool, the assignment to the user and the host will be done at the same time. So now my policy looks

I'm installing a Samba 3.0 PDC with LDAP backend in a classroom in a Spanish school. Client workstations are Windows2000 and, in the future, there will be Linux clients. I'm following the Samba Project Documentation book (also known as Samba Howto Collection). The document is wonderfull, but there is a part that I don't fully understand, maybe because, as you can read, I'm not a

How can we set up the policy working for different users (belonging to diffe rent groups) on the same win98 machine? Win98 looks up the netlogon share on our Samba server in security level = us er, domain logons = yes. It parses the config.pol file, but the only group policy defined that applie s to ANY user logging on is the one for Users group I added in Policy Editor .. eirvine

Thanks Rob for chiming in. Stefan, I do want to be very clear, one of the big challanges that we as developers face building these kind of tools is that we don't run AD domains day-to-day. So we really value good feedback on the ergonomics. If you can test with our work in progress, we are keen to adapt the tooling where possible to be more in line with what is 'naturally expected, so

Ok, I'm going kinda nuts... I have a samba 3 + openldap domain, which works great for authentication, etc. I am trying to use the NTConfig.POL to enforce policies on a mix of 98/win2k and XP boxes. This is a K12 environment, so I need very restrictive policies for students, less so for teachers and staff. What seems to be happening, at least with the XP clients is that it gets the

We want to build a Debian's unstable samba 3.0.0beta2-1 as PDC with plenty of Windows 2K clients. Joining the domain, Domain Logons, Roaming Profiles, Domain Groups, are Ok. As we thought that Samba 3 cannot handle Win2K's GPOs (isn't it?), we tried NT4 style Group Policies to restrict a bit users posibilities (as we have students as users). Our opinion is that Mandatory Profiles

Hi Stefan, We had a long weekend in New Zealand, I'm catching up now to your emails. Some of the slight differences between Windows tools I've already picked up on and are in my PR Andrew Bartlett mentioned on Friday, but I'm always open to learning what things are missing or different etc. On 23/10/23 02:58, Stefan Kania via samba wrote: > Talking to myself again ;-) > >

I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script

> -----Original Message----- > On Mon, 29 Dec 2003, [ISO-8859-1] ?ncor Gonz?lez Sosa wrote: > > With Samba you can do only what you can do with NT4 using the > NTConfig.POL file. > > > You can copy the files Win2K creates in > c:\WINNT\SYSVOL\sysvol\domainname\profiles to a share called > "SYSVOL" under the path: >

I've got a very odd situation occurring. I recently upgraded to Samba 2.0.26a and now secondary group membership doesn't work. On the filesystem I have this layout /derek /derek/Folder 1 /derek/Folder 2 derek has these ACLs # file: derek # owner: root # group: root user::rwx group::r-x other:r-x Folder 1 has these ACLs # file: Folder 1 # owner: root # group: g1 user::rwx group:rwx

Hi, I have set up samba to enable Domain-Logons for windows95/98. I am using Samba-1.9.18p7. I have a share netlogon with a batchfile for connection network drives. Everything is working. But when I create a policies file and put it onto the netlogon share windows doesn't use it. I have named it config.pol. Is there another special thing to configure? I have found archives of this

hi, My NTconfig.pol file into \\netlogon share seems to be good... in the logs the file is readed with no problem at my user logon. The strange think I have is that the policy I've made is applied if my user loggon onto a windows 2003 server we have for testing purpose ! (If I loggon first onto my win2k machine, the policy is not applied ...) logging after onto my win2k computer takes

Hello everyone, Not really a Samba problem, but I hope someone can help me : I am doing some tests for integrating XP clients on Samba 3.02 with LDAP backend. I have tried this on a test machine on which I have applied local policies withthe gpedit.msc console (ie : Delete the roaming profiles or hide the logon scripts...) and this work perfectly. Now I'd like to do the same on other

So I am compling the newest release of samba 3.0.14a on Solaris 2.8. I can get it to compile but I don't get all the built in modules that I should and smbd when fired up bombs out with something like, ------- derek@supernova:/opt/UMsmb/sbin# ./smbd -c /etc/samba/smb.conf -i smbd version 3.0.14a started. Copyright Andrew Tridgell and the Samba Team 1992-2004 No builtin nor plugin backend for