similar to: Configuring samba share to be controlled by Active Directory

Hi All, I am using Samba 3.2.4 compiled from source on AIX 5.3 TL8 and using "security = SERVER" in the smb.conf works fine, however I am having some issues when using "security = ADS" .. I have followed numerous HOWTOs and newsgroup listings and seem to be going round in circles .. I think I can authenticate ok against the domain win2k3 server, but then Samba bombs out with

Trying to join a RHEL server to Win2K3 domain. I followed the directions specified here: http://kbase.redhat.com/faq/docs/DOC-4735 and here: http://kbase.redhat.com/faq/docs/DOC-3051 Confirmed that I have the edited the smb.conf and krb5.conf files correctly. Ran: /etc/rc.d/init.d/smb stop and /etc/rc.d/init.d/winbind stop Ran: net ads join -U administrator and got: [2009/05/20

I've been trying to setup Samba to authenticate users against accounts existing on a Windows 2003 Server without any backwards capability. Ideally, this needs to be done without any changes to the Windows 2003 Server. Users will not be logging into the Samba shares at all. This is merely for authentication. I'm running FreeBSD 4.10-Relase #4 with Samba 3.0.8. This is my smb.conf file:

I have 2 AIX systems that run Samba. We are currently on an NT4 domain and moving to Active directory. I am trying to find out what all would be needed to make that transition. The only authenification is for users connecting to their shares. I read one site via Google that states I need to create a user (Rocky) on both Samba and the AD server with different passwords but this does not seem

Hi list, Just in order to avoid loosing my time, I would be happy to know any success stories about configuring a Win2k3 as a Samba 3 client, just as any others MS client ( WinNT pro, Win2k pro, WinXP pro ). If so, is there any tuning on the Win2k3 client and the server ( Samba 3 PDC + ldapsam, but no kerb ) ? I'm expecting mistakes with users sharing their roaming profiles between Win2k

Hi all: I joined a samba4 DC to Win2k3. After run the samba-tool domain join command, all data migrate perfectly. BUT then when I create an object into either samba4 or win2k3, these objects are not replicated to the another DC. Then, I tried to obtain a kerberos ticket (kinit) and the output is: kinit: "Clock skew too great while getting initial credentials". Then I sync both CDs

I've spent all day on this, and I can't, for the life of me, get Samba 3.0.9 (updated RPM for Fedora Core 3) to authenticate properly against Active Directory. (I've edited out the actual domain name, username, etc) I've synced up time (to within a half-second) with the domain controller. Kerberos works: [root@printshop samba]# kinit username@AD.DOMAIN.COM Password for

Can I have folders in the msdfs root? >From the docs I do not see a mention of this and in the past it did not work for me however with samba-3.0.28 it appears to be working. img_dfs_root # ls -alR .: total 0 drwxrwsr-x 3 root honestbrokers 264 Feb 28 14:11 . drwxr-xr-x 4 root root 104 Oct 22 10:35 .. lrwxrwxrwx 1 root honestbrokers 27

Hi! I'm having some problem with our setup. I have a linux server authenticating from a win2k3 domain controller via winbind and pam. When i try to log in I receive the following error messages: Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' OK Jul 3 10:26:10 zeusz pam_winbind[20375]: user

Hi All I just got my RHEL5 hosts authenticating successfully from a Win2K3-R2 Active Directory server using the Samba / Winbind combination. While the host login capability works perfectly, we need the capability to deny specific users and groups access to specific computers. The generic Active Directory option of User->Properties->Account->Log On To works perfectly (i.e. I can specify

Here's the procedure: # qemu-img -f qcow2 /vm/win2k3.img 8G # virt-install --connect qemu:///system -n win2k3 -r 512 --vcpus=1 -c /home/temp/win2003sp2ins.iso -f /vm/win2k3.img -s 4 --network=bridge:br0 --mac=00:ff:ff:ff:58:58 --noautoconsole --vnc --os-type=windows --os-variant=win2k3 --hvm --accelerate And I get error as below: Starting install... internal error unable to start guest: qemu:

Hi, for the last two weeks ive been trying, to authenticate against a samba-domain using a win2k3-server. the server joined the domain without any problem and the basic login seems to work. but if i try to execute programs from mapped network drive (mapped using a domain-logon-skript), it fails with a message telling me, that i dont have sufficient rights to do so. the share has a forced user

Hi there We have a bunch of Win2K3 trusted domains that are parts of other forests from our own Win2K3 forest. Most times Samba works just fine with allowing users from such trusted domains to connect to its shares, but now and then it "gets out of whack" and loses access/information about these "other" domains. "log level = 9" shows things like the following where

I'm trying to configure a samba server in a Win2K3 domain as a dfs host. The dfs host part is working: from a win client I can map the dfs root on the samba server (on FC3 fwiw) and see the link I've created to a share on a Win2k3 active directory domain controller. From samba server, I can smbclient to the share on the Win2k3 DC, and can mount the share as "-t cifs" (but not

Hi all, We are having a an ongoing problem with out NTLM authentication on out squid system. The problem tends to arise when users change their passwords. I have read a KB article that says that DC's will still continue to authenticate Old password for an hour or so after the password is changed. But I think it is between IE and winbindd that is the problem. Below is a trace at debug

>From a discussion on samba technical about the inability to have Samba work as a DC when the original DC is a Windows Server 2000 machine. > > as Andrew asked you previously, the main question is : do you have some > > specific requirements for keeping a DC on that computer (eg. Exchange or > > whatever)? > > > > If you don't need to keep the DC role on

Hi people. I have 2 domains right now: WinNT4 + Windows 2k3. A lot of u will say, why don't u just move everything to win2k3?.. well I prefer to work with linux/Unix. My question is this, I test the migration from NT4 to linux with ldap, it works and is not to difficult, my problem is this: All my printers are in the server running windows 2k3 my AD server, the NT4 users can access

Hello to all. I want to use winbind to automatically create email accounts. I've added several linux boxes to our win2k3 AD and working pretty well (more in a new post about this). When I create a new user on the win2k3 box, users can access various shares on the linux boxes, as it should be. I also have a sendmail server sitting in a DMZ. I have to create the email user account on

Hello, I have been doing a lot of research on this subject and I'm not finding a clear answer. My company currently makes a video capture and transcoding application that runs on a Linux server. The video application mounts shares from a second Linux storage server for various users at the same time. In other words, we have: A Linux Storage Server with many accounts (for example,

We tried to migrate from old Windows fileserver (p4, single HDD) to Samba (FedoraCore15, Samba 3.5.12-72.fc15, ext4 volume, xeon, raid5). Our pipeline is so, that some special software generates files on that fileserver. The typical filesize ~50 mbytes. On the old hardware, software (win2k3 server) the time of single file creation was about 10 seconds. On the new configuration it takes 20-25