similar to: Samba 2.2 PDC to ADS member server migration issues

I've been using Samba for about 7 years of so, but have hit a hurdle I just can't seem to figure out. I want to setup samba domain member servers to be members of a samba 3.0.25 (NT4 type) domain. No windbind, LDAP, or any other of the more complex authentication mechanism. This is the same functionality going way back to Samba 2.2, or so. In fact, I successfully did this on samba

I've had a further look at this now and a hunt through some mail lists and I think it must have something to do with the windbind pipe in /tmp/.windbind/pipe. From what I understand it's the pipe that passes the windbind info onto other processes - although I may be wrong? Looking at my setup the pipe file isn't being created when starting winbind and after a full reboot and starting

See inline comments, extraneous lines removed from post: On Wed, 8 Nov 2017 12:43:16 +0100 Ervin Hegedüs <airween at gmail.com> wrote: > > You would be better using the DCs ipaddress rather than '127.0.0.1'. > > You should also remove '10.10.0.1' it doesn't seem to be a DC. > > yes, that's the forwarder (see in smb.conf). Most documents >

Dear all, I try to setup a samba 4 member server on centos 6.5. The wikis and howtos I have found are very confusing. Which is the right way to do this. So winbind can map the domain users and groups. What I have done yet is, Set up Kerberos working and can contact my ADS-kerberos Servers: klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator at TPLK.LOC Valid starting

I have posted on this subject before but am still running into problems. The main question is whether I need to use Windbind in a single samba domain when each samba server also uses NIS for centralized unix level authentication. And if, in fact, I need windbind do I need it on all the samba servers? And do I need a central IDMAP respositoryor other mechanism to maintain consident SIDs? My

Good morning Rowland and samba list ... Rowland Penny wrote on 03.07.2015 18:36:32: > From: Rowland Penny <rowlandpenny241155 at gmail.com> > To: samba at lists.samba.org, > Date: 03.07.2015 18:40 > Subject: Re: [Samba] Migration Samba3 -> Samba4: Accessing domain > member server is not working > Sent by: samba-bounces at lists.samba.org > > On 03/07/15

Hi, I am stuck in a bad place and I'm not sure where to go next. I'd sure appreciate some advice or direct help in troubleshooting this problem. If I can provide additional information I'd be happy to send it along privately. Some logs are very large - like the debuglevel 10 classicupgrade output is about 160MB. But there is Dropbox, right? I've included what I could think of

Hi, as windbind is not supported on FreeBSD I hope to get some hints how to solve the following issues: I want to setup a samba (2.2.2) fileserver that just contains the home-directories for all users of a Win-NT 4.0 Domain. - How can I use the PDC for authentication instead of smbpasswd? - I am looking for an easy way to auto-genarate a home-dir each time a new Domain-user is created via the

I have the current situation and am trying to figure out which way is the best approach. Our organization has two domains, REMOTE and LOCAL REMOTE - remotely located Active Directory, Windows 2003 LOCAL - local Samba 3.0.x, Linux server I have computer labs and students that would like to login to REMOTE and also local accounts that need LOCAL. There is no way to have a WinXP station

-----Original Message----- From: M. D. Parker [mailto:mike.parker@ga.com] Sent: Thursday, August 10, 2006 9:02 AM To: 'samba@lists.samba.org' Subject: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC I am using samba with NO windbind and a configuration file that has worked for years stopped working at 3.0.23b. The affect was that my [netlogon] area was not being

Hello Pierre, Am 08.04.2015 um 17:25 schrieb BRIEC, Pierre: > On Site1, the machines accounts are specifics, same for the Users and > Groups except 1 group that is common with Site2 (The Teachers). > Today, each site is independant, > > Now, i would like a create a new domain Samba4 AD whith all machines and > users from site1 and site2 together. > Then, i would make a

Here's the situation. We've got an old NT4 domain (not a Samba domain in NT 4 mode) which we'll call CRUSTY. There is of course an NT4 PDC and several NT4 BDCs. We have some Linux/Samba file servers (Samba 3.0.1) that are member servers (security = domain) of the NT4 domain. We also have several NT4 BDCs and about 200 workstations of varying vintage (2000, XP) in several

Hi All, I have a problem following the migration of my PDC's backend from tdbsam to LDAP. We started out with a PDC called SMB1 which ran with a tdbsam backend. I used pdbedit to convert it to LDAP and built a new server onto which the LDIF file was loaded. Samba was then setup to use the LDAP server as a backend. So far so good, Samba runs against LDAP and I was able to add 60 new XP

Il 18-09-2015 01:50 Jeremy Allison ha scritto: > > Currently a Samba member server must contact the DC > for authentication even if a krb5-PAC is presented. > > This is a bug, and one I'm working on fixing (it > is a regression from earlier behavior). Hi all, sorry for resurrecting this very old thread, but I would like to know if the situation improved over time. In

Hi All, I have a problem with permissions following a migration from tdbsam to LDAP. As I understand it from the documentation, each member server on the domain needs to have 2 SIDs, a domain SID and a local machine SID. After migrating the server to ldap, users can still login and desktops and servers can still connect so the machine accounts are fine but I've lost access to shares on

I posted this to comp.protocols.smb, but I'll give it a shot here too... Background : We have an existing Win2k domain, 2 Win2k domain controllers, all working just fine. I've been using Samba 2.2.x for quite a while to provide access to specific folders on *nix machines using Domain security...So I'm reasonably familiar with how file/print sharing works. But what I'm

On 17/06/2019 20:05, Goetz, Patrick G via samba wrote: > On 6/17/19 12:37 PM, Edouard Guign? via samba wrote: >> On my linux box (centos 7), I set Samba + Winbind against AD. >> But I also set SSSD against AD for an other purpose (sftp access). >> >> I am wondering if there is no risk to disable sftpd/sssd if I add >> winbind in /etc/nsswitch.conf >> >>

Hello, I'm trying to migrate a Samba 2.2 Fileserver as ADS member to Samba3 and having a lot of problems in understanding the new design. After searching through the Official HowTo and Google, I have several question unanswered and in need of a Step-by-Step Migration HowTo. The Examples given in the docs are very general (to me) and cover only a new setup, but no migration. The Installation

Hi, and thanks in advance for your support (sorry my english) Is there any documentation for migrating Samba 2.2 with LDAP and PDC suport to Samba3 with PDC and LDAPSAM? I try to explain the situation: Only one server running Mandrake 9.2 + Samba 2.2.8a with ldap support (from precompiled contrib); and I wish to migrate to Samba3+LDAPSAM. My real problem is that I must use ldap because I also use

I was thinking of using rsync, since it has the ability of mapping the written user-name instead of using UID's. Anyone know how this work on WindowsNT? I've read, that CygWin hasn't the ACL's properly implemented yet? Does another "cross-platform" exist, that can map between the written usernames? Jacob ps. I've tried using scopy, but it fails : "Acces