similar to: winbind problem (?) on samba 3 ADS

First thing - I'd like to say a big "THANK YOU" to the developers. I just upgraded to samba-3.0.23 and I've noticed an alarming issue with respect to my configuration. I've been using the built-in keytab management and it looks like the updated code no longer creates the userPrincipal in Active Directory. Whether this is an issue for others or not, it would be nice to have

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

On Fri, Aug 26, 2016 at 04:03:49PM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 02:46:19PM -0700, Jeremy Allison via samba wrote: > > On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the

On Wed, 2017-06-14 at 11:01 +0100, Rowland Penny via samba wrote: > On Wed, 14 Jun 2017 15:13:13 +0530 > Arjit Gupta <arjitk.gupta at gmail.com> wrote: > > > Thanks for the response. > > > > Is this xattr causing this RPC server is unavailable issue ? > > > > Arjit Kumar > > > > > > Lets be perfectly honest here, the lack of

Hi Viktor! Thanks for your try at this, I am already doing what you suggest: the iptables - timestaps. But that is rather troublesome, and I would very much samba to log this vital info. Anyway, I tried what you suggested, and now it stopped compiling. :-) Does this error perhaps tell you something, or are you just as clueless as I am now: > [1955/4033] Compiling source4/auth/ntlm/auth.c

Hi everyone, I am looking at a way to easily trace ldap queries to easily single out computers that have buggy software that download the whole AD (like a getent passwd with winbind enum users = yes for example). Increasing the debug level to 5 gives me the result I am looking for, however it is very very talkative and it fills up the log partition way too fast. I wanted to try to single out one

Good morning/day/night to all! After moving all my infrastructure to Debian9, changed my ADDC from Win2K12 to Samba4 scanning my network I found the following: -------------------------------------------------------------------------------------------------------------------------------- koratsuki at happyharry:~$ nmap --script smb-vuln-ms08-067.nse -p445 smb-addc.tld Starting Nmap 7.50 (

Release Announcements --------------------- This is the latest stable release of the Samba 4.11 release series. Changes since 4.11.9 -------------------- o Jeremy Allison <jra at samba.org> * BUG 14374: Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name. o Ralph Boehme <slow at samba.org> * BUG 14350:

Release Announcements --------------------- This is the latest stable release of the Samba 4.11 release series. Changes since 4.11.9 -------------------- o Jeremy Allison <jra at samba.org> * BUG 14374: Fix segfault when using SMBC_opendir_ctx() routine for share folder that contains incorrect symbols in any file name. o Ralph Boehme <slow at samba.org> * BUG 14350:

Hi Jeremy, I'm afraid this is indeed caused by the talloc tidyup as one can perfectly reproduce it wih the following patch for smbtorture (call bin/smbtorture ncacn_np:lo local.file.file_lines_parse). I guess we need to set up some warning signs around file_lines_parse() expressing that it takes talloced content and that one should not free the separated lines array separately. Cheers,

hi, I am trying to run a 3.0.6 on ADS network with "--with-acl-support" enabled on configure time. I also compiled the linux kernel 2.4.25 witch acl patch from http://acl.bestbits.at/. Samba shares is visible from the network and vice-versa. BUT, I can't change the ACL on samba shared files. I've read the HOWTO to change file permission from: 1. Remote Computer management mmc

I have a Samba 3.4.7 PDC set up (Ubuntu 10.10/OpenLDAP) and have configured a Windows 7 Pro 64 bit workstation as a domain member. Logins and shares work without a hitch. I'm running into a problem with ArcGIS 10 Server on Windows using domain accounts for the services. ArcGIS post-install fails because it won't take the username/password combination of the domain account. I initially

> > If you feel like it, you could write a VFS module that adds better support > for > this on FreeBSD, but what is the use case? > I've noticed in online forums that occasionally home NAS users will for various reasons have streams_xattr enabled and receive 'access denied' errors when trying to write files with large alternate datastreams. These are typically on media

Hi, I'm using samba-4.7.x I have some confusions over "map to guest=" options with setting SMB Signing 1. Set "*Server signing =auto*", "*map to guest=bad uid*" and set "client signing in windows 2k12 server group policy" to "Microsoft network client: Digitally sign communications (Always)” = *Disable*" SMB_Server is joined to Windows 2k12

With all the recent talk about ldap stacks, I wondered if we could discuss deprecating and eventually removing pdb_ldap? The reason is that pdb_ldap is primary user of smbldap. smbldap is in turn yet another of our ldap stacks (I have found four so far), in the sense that while it uses OpenLDAP under the hood, it replicates with libads, ldb and tldap the 'get AD-thing out of an LDAP

We've got nicely ADS integrated Samba-3.0.27a servers that are working fine with Win2000 through to standard Vista. However, we are starting to test RC1 of Vista SP1 and discovered that once applied, that workstation cannot connect to Samba server shares - unless the share is open - i.e. no "valid user" style settings. The moment one is defined, Vista fails to connect and pops up an

On Sat, Aug 27, 2016 at 12:46:12PM +0200, Ralph Böhme via samba wrote: > > ...and this one even has bug urls in all commit messages. Sorry for > forgetting this in the previous version. Juuuusttt *one* leetle change, sorry :-). I was following the changes to the talloc heirarchy in the code and realized that adding the following change made it much clearer (at least to me). diff --git

Hi All, can anyone make any sense of the error below, please advise if I need to log this as a bug but I'm not sure how to further diagnose what is happening. This is from my winbindd log file, thanks Andy. [2003/11/07 17:47:59, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0 started. Copyright The Samba Team 2000-2003 [2003/11/07 17:48:00, 1]

Hi, We are having an issue, trying to install a domain member server. I'm following the samba wiki: - samba 4.6.1 - krb5.conf as recommended on wiki - time synced - kinit works - dns works (DCs in resolv.conf) - setup a basic smb.conf (pasted at the end of this email) - edit nsswitch.conf to include winbind for passwd/group and then finally "net ads join -U administrator -d5" fails

I've run into an error when trying to compile libnet/libnet_join.c: cc: "libnet/libnet_join.c", line 111: error 1588: "LDAP_NO_MEMORY" undefined. cc: "libnet/libnet_join.c", line 111: warning 563: Argument #2 is not the correct type. The source below is what triggers it (line 111 is marked): static ADS_STATUS libnet_connect_ads(const char *dns_domain_name,