similar to: Cross-subnet browsing, with a twist

Hi! I am setting up a test bed for Samba PDC + LDAP. I used the 3.0alpha21 rpm for RH8 from samba.org. The setup is working. Win9x client can login no problem. I was wondering how I should setup an "Administrator" account for the domain. Right now, my plan is to have samba authenticate only to the ldap backend ("passdb backend = ldapsam" only). Does the administrator

Greetings, I want to use winbind in conjunction with nsswitch in a pretty large AD. I would like winbind to only map users in the default domain. As it is, winbind map users in other trusted domain of the AD too, which is *not* what I want. I am not sure I made myself very clear, so here is an example. Let's say I have an AD called ACME.COM. There are the domains PROD.ACME.COM and

Hi, Does anyone know of a binary rpm for Samba 3.0.14 that wonrk RHEL 4 ? The binary RedHat rpm on samba.org have been compiled for RedHat 9, and it does'nt install on RHEL. I would recompile the .src.rpm, but if anybody know of a repository that carry a binary, I would be glad to hear about it. Thanks ! Etienne Goyer

Hi, I am using winbind with nsswitch to resolve user and group information from an AD. I was under the impression that the "template primary group" directive would set the primary group of winbind users coming from the AD, but after rereading smb.conf(5) man page, I can see that this directive apply only to local accounts (that is, those that exist only in winbind and not in the AD).

Dear all, I'm having great difficulty getting cross-subnet domain logon & browsing to work and have nearly reached the end of my sanity trying to figure out what's wrong. Here's my setup and what's happening (apologies if it is convoluted): Subnet A One Samba PDC with encrypted passwords. One samba file server Subnet B One Samba file server (serverB) that is the *local

Hi, I've solved that issue by setting homeDirectory: /dev/null loginShell: /bin/false to the users and don't wish to give access. Don't know if it is the right way, but it solves my problems. But then again, I'm using Samba+OpenLDAP, and have almost zero experience with AD. Best regards, Bruno Guerreiro -----Original Message----- From: Rex Dieter [mailto:rdieter@math.unl.edu]

I use pam_require.so to limit access to services via pam. Here is how I limit access to my pure-ftpd server to a specific group (GLFTPAccess). You can also limit access to specific users, like I did with the user root. auth sufficient pam_winbind.so auth required pam_unix2.so # set_secrpc auth required pam_nologin.so auth required pam_env.so account required pam_nologin.so account

Hi, I have an odd problem with winbind. I use it for, among other thing, nsswitch user resolution. I believe it have a problem with accessing information for a single user, or with caching. When I request info for a specific user, it fail (trying to login also fail with NT_STATUS_NO_SUCH_USER). But it work when I request info for all users. And then, login and getent for single account start

Yes. Look up the "IndirectData" configuration option. On 1 May 2017 at 11:30, Bright Zhao <startryst at gmail.com> wrote: > Hi, Etienne > > In addition, is there any option or switch can turn of the automatic > direct connection? For the example below, even A has the route to C and can > establish UDP connection directly, but I need the traffic to go through B,

Hi, Etienne I took a look for the below host configuration parameter (IndirectData), the default is no. For the below example: A ConnectTo B, B ConnectTo C: If IndirectData = no (default), then A wouldn’t establish direct connection with C, but will be forwarded by B. If IndirectData = yes, then A will try to establish direct connection with C, even though A don’t have the statement of

Hi - I've got two subnets that I need to "browse accross". I read the docs, but my situation is slightly different and I need a bit of help. Here's my setup: Network: 10.2.0.1/255.255.255.0 workgroup = EILIO interfaces = 10.2.0.1 bind interfaces only = yes security = user encrypt passwords = yes socket options = TCP_NODELAY

I have a network with several sites, and all clients (mostly win9x) using one WINS server (Samba on RH Linux). The different sites have one or more workgroups each, and I want all workgroups to be visible and browsable for all clients. As far as I can make out, the clients at the various networks can only browse the workgroups which are either local or the one the WINS server is a member of. Not

Hello, I have been searching for answers now more then a week, but I cannot find a proper solution. Please help me with this: Scenario: Two differnet subnetted networks (1 and 2) connected by a cipe tunnel between two linux Samba boxes over the internet. On network one (1) is a Windows NT PDC installed which currently is the DMB for it's domain (1). On network two (2) one of the linux

Greetings, I recently upgraded my Samba server and am now running Debian sid's samba-2.999+3.0.alpha20-4. I have the following domain / workgroup / browsing options set in /etc/samba/smb.conf: interfaces = eth0 192.168.54.0/24 192.168.52.0/24 os level = 65 local master = yes domain master = yes domain logons = no preferred master = yes enhanced browsing = yes

I'm having some difficulties setting up browsing across networks and domains and was hoping some of you folks out there could help. We have two separate domains on two separate networks. I have a single WINS server. Why can I browse both networks from machine pw2 when I can NOT browse both from either ch2 or mtoal (my machine) or from streetsmary? (see details below). Does each network need

I as sending this again in the hopes that someone will respond. Surely I am not the only one with this setup. Thanks, Misty ---------- Forwarded Message ---------- Subject: [Samba] Cross-subnet browsing and VPN Date: Monday 06 June 2005 09:54 am From: Misty Stanley-Jones <misty@borkholder.com> To: samba@lists.samba.org We have two subnets which both belong to the domain CORP, and

I have two domains which are on different subnets, connected by a routed OpenVPN tunnel. The domains trust each other. Domain A has the WINS server. Domain B is confused to use Domain A's WINS server. The VPN pushes the WINS server as part of its DHCP options as well. >From either domain, I am able to use smbclient to see the shares on the other domain's PDC. I have to specify -W

Hi, I'm currently using the nbfw (netbios forwarder - http://nbfw.sourceforge.net/) patch with samba on a linux masquerading firewall/router. It works pretty well. I was wondering if there was plan to include this patch in samba (or TNG) I was also wondering if there was any way to use this as a mean to do cross-subnet browsing efficient. The paradox is that browsing works better between a

Please reply if you have any solutions to this problem! In this setup there are four computers: C1 --- local lan -----(eth1) C2 (eth0)------- internet --------- (eth0) C3 (eth1) ---- local lan -------- C4 | | |-(tap0)-----------------------------------------encrypted tunnel (VPN) --------------------(tap0)-| Computers 1,4 = win98 (called windows machines hereafter) Computers 2,3 = linux

Hi! I am having some trouble with a samba domain distributed over 2 subnets (192.168.0.0/23 (supernetted) & 192.168.4.0/24). These subnets are linked over the internet through a IPSec gateway to gateway (network to network) connection (i.e. all machines can reach/ping each other on both subnets). The samba PDC (with LDAP backend) has IP 192.168.0.4 and there is a BDC (LDAP slave) in