Displaying 20 results from an estimated 800 matches similar to: "Authenticating off a Windows 2003 ADS DC with Samba/Winbind"
2004 May 21
0
Insufficient access error
I've been working on getting Samba 3.0.4-2 to join our test W2k3 Active
Directory for most of the day. When I try to join with this command :
net ads join -U w702a-palmadesso "w702\NonCatComputers"
According to my official Samba HowTo Book this should join the domain
specified in my smb.conf. Instead I get the following output :
[root@w72l-tux samba]# net ads join -U
2005 Jun 11
1
Problem joining a domain using ads
server: ms 2003 with ads
client: debian 3.1/samba 3.0.14
smb.conf:
..
[global]
workgroup = SP-GRUPPE
password server = 10.85.117.150
realm = SP-GRUPPE.DE
encrypt passwords = no
server string = %h server (Samba %v)
obey pam restrictions = yes
passdb backend = tdbsam, guest
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
2005 Nov 01
1
Join ADS domain - Insufficient Access
SLES 9 SP2
samba-3.0.14a-0.4
heimdal-lib-0.6.1rc3-55.15
samba-winbind-3.0.14a-0.4
pam-modules-9-18.10
pam_krb5-1.3-201.7
I've been searching for days for a concrete answer to this question:
Is it possible to join an ADS domain from a Linux Samba server without
having Administrator privileges? Yes or No.
If so exactly what are the minimal requirements for joining the Linux
box to the
2004 Nov 02
1
net ads join fails
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
~ /usr/bin/net ads join -Udennisb
dennisb password:
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006)
~ Host account for if-srv-hos1 already exists - modifying old account
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_join_realm(1342)
~ ads_add_machine_acct: No such object
ads_join_realm: No such object
Also:
net user | wc -l
reports
2005 Nov 08
1
ADS Join and Insufficient Access
My agency is moving all users and computers to a new domain. Our current domain uses AD and the new domain will use AD. My current samba servers are running 3.0.20a with ADS security with winbind on Debian Stable (Sarge) with no problems.
I set up a test samba server using 3.0.20b, the new krb5.conf and smb.conf.
kinit works fine. ("Authenticated to Kerberos v5")
I prestage the server
2004 Jun 14
2
Member Server in Active Directory
I'm trying to join a Samba 3.0.4 (compiled from source on Debian) to an
Active Directory as a member server. I believe Kerberos is configured
correctly as kinit creates a ticket for the realm. Executables appear to have
support for Kerberos and LDAP (smbd -b | grep KRB and grep LDAP) return OK.
When I try to join the AD with
net ads join -U myadminusername
I'm prompted for my
2004 May 05
0
ADS join failing?
Hello all,
I'm not too sure we're having an ADS issue or not. Perhaps
someone could shed some light on this for us?
Here's what we're seeing during a net join:
14:32 myhost<42> sudo ./net join -S domaincontroller -U admin_user
Admin_user password:
[2004/05/05 14:33:39, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for myhost already exists - modifying old
2006 Nov 01
1
Windows != Samba - NETBIOS name handling
Hi,
I'm using samba just for its "net join" functionality. Computer accounts and kerberos keytabs are
created by Samba in Active Directory via "net ads join", then used by UNIX clients to authorise and
authenticate via LDAP and Kerberos.
Samba works perfectly until the computers hostname is longer than 15 characters. Then any attempt to
join the domain fails with:
----
2005 May 31
1
Samba AD member
hello
have such problems with my samba 3.0.12 @ FreeBSD 5.4
we have an Active Directory here. and a domain.
root@freeway# testparm
Load smb config files from /usr/local/etc/smb.conf
Processing section "[public]"
Processing section "[private]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
# Global parameters
2004 May 21
3
Suse 9.1 Samba
I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not do
ADS, only domain, server, or user, so I went to the command line stuff I
found the the Samba documentation.
I can do kinit and get back the following:
sha-linux:/etc/samba # kinit art_fore@3MTS.COM
art_fore@3MTS.COM's Password:
kinit: NOTICE:
2004 Jul 20
1
Chasing the "ads_add_machine_acct: Insufficient access" problem
Okay, the jist of this whole thing, I get this infamous (?) problem, I
have been trying to search though the archives of samba-general on gmane
and also in my archive of this list. I have only seen requests for the
magical answer.
Environment: W2K/W2K3 mixed ADS going Native ADS only soon. Samba 3.0.4
compiled from source on a RHEL AS30 machine. MIT Kerberos v1.3.4 also
compiled from source.
2006 May 22
1
Join ADS problem
Problem with join to Active Directory
[root@clust-master samba]# net ads join -S 10.0.0.1 -U Administrator
Administrator's password:
[2006/05/22 10:24:05, 0] libads/ldap.c:ads_join_realm(1640)
ads_add_machine_acct (clust): Type or value exists
ads_join_realm: Type or value exists
[root@clust-master samba]# kinit Administrator@COROD.LOCAL
Password for Administrator@COROD.LOCAL:
As you can
2006 Mar 28
0
Join to ADS Type or Value Exists
Hello, I am new to samba and I am trying to set it up to be a member server
of my ADS Domain. I keep getting the same error whenever I do this. At the
point where I have logged in and type "net ads join <myOUname>" I get the
error: "libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct
(my_server_name): Type or value existsads_join_realm: Type or value
exists". I am
2002 Nov 12
0
Re: net ads join blows
hi,
you cannot use the root-principal unless it has administrative privileges,
this works for me:
kdestroy
kinit administrator@YOURREALM
net ads join
bye,
guenther
On Thu, Nov 07, 2002 at 08:48:44PM +0200, Jaakko Niemi wrote:
>
> Starting program: /usr/bin/net ads join
> root password:
> net: /home/liiwi/cvs-foo/openldap-2.1.8/libraries/libldap/getvalues.c:97:
2009 Nov 27
0
No subject
su testuser11
cd /storage/CME/test
No problem. But when I try to access the same directory in windows I get these entries in my logs....
/var/log/samba/log.smbd
------------------
[2010/01/04 16:08:25, 1] smbd/sesssetup.c:reply_spnego_kerberos(350)
Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
log.winbindd reports no errors so it seems that the SIU/UID mapping
2004 Mar 10
0
Followup to previous request
As a followup to my previous question, here is the debug log of the issue:
[root@bonair samba]# net join -U dchait -d 10
[2004/03/10 13:49:23, 5] lib/debug.c:debug_dump_status(360)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
2007 Mar 27
1
re: Samba + Winbind + SuSE Linux AD auth not working
ok here's the situation; i've done this on 7 servers
same either SLES 9 or 10, and all those work. i have a
problem server though which is SLES v9 (same versions
of all daemons/services that would be used) and this
one just wont allow AD auth to work
i can restart all smb, nmb, winbind, and ssh servers
with no errors
*Note: all the needed configuratoin file snippets are
at the end of
2012 Nov 05
8
Centos 6: Dell GX270 fails to power down (but reboots)
Hi,
am using latest C6 on a Dell GX270 with latest Bios.
It fails to power down but restarts when running
$ sudo poweroff
I tried some google hints for kernel boot option:
acpi=force
no help, looks like acpi is working anyway when looking in dmesg
acpi=off
makes e1000 nic fail to initialize
Any suggestions?
Rainer
2007 Jul 28
4
memory query
Dear All,
I have recently installed centOS 5 on DELL pentium 2.7ghz (model optiplex
GX270) and have 512 memory
but the OS free command show me
Mem: 473876 469892 3984 0 11288 69384
-/+ buffers/cache: 389220 84656
Swap: 1020088 0 1020088
also cat /proc/meminfo show me same
MemTotal: 473876 kB
MemFree: 4108 kB
Buffers:
2005 Jul 20
5
Samba Server not using domain users as samba users
Good evening everyone:
I am struggling with a problem here.
I have a brand new FC3 server set up. My Windows domain is a windows 2003 active directory domain.
I have samba configured as below
[global]
netbios name = SRVWEB-01
server string = MCA Production Web Server
printing = cups
idmap gid = 15000-20000
password server = srvdc01
idmap