similar to: domain vs. ads

I have a question regarding joining a Samba 3 machine to a Windows 2000 Domain using ADS authentication. I have been able to join the machine to the domain, enumerate users with getent and wbinfo -u. The problem I am having is with a Windows 2000 default domain setup an AD object is created: CN=Users,DC=Domain,DC=Com Generally all users created belong in this container. I am able to

I am having a hard time getting Samba to authentication correctly against a Windows Active Directory setup. Here is a snap of the smb.conf [global] passdb backend = ldapsam security = domain password server = server1.com server2.com prefered master = No local master = no hide unreadable = yes wins support = no winbind use default

I am having a problem which with much help from this list I have gotten 90% complete. I am attempting to create a samba server which will authenticate users as a Domain member server using active directory. The question I have is how can I map a specific container which is not an OU but a CN in the active directory? Any help is appreciated. -- Jason Gerfen "My girlfriend threated to

I have encountered a problem so I am posting this question to both the technical list as well as the normal user list for a solution. When I initially joined the samba box to the Win2k domain as a member server I followed the Samba 3 HOWTO and specified the OU in the Active Directory. After speaking with our boss this is not the correct OU for the users we need to authenticate. My question

I am having a hard time getting any information from this list about the default OU's used when running the net ads join command. After mapping to the wrong OU in Active Directory for a Samba Domain Member Server (ou=wrong_container,dc=server,dc=com) I cannot change this back to the default (cn=users,dc=server,dc=com). Any help is appreciated and here is the result of net ads dn command:

I appreciate the assistance. I am running SuSE 9.3 with the samba and winbind packages (latest releases). I have configured the krb5.conf to correspond including the enc types. Here is that output: [libdefaults] default_realm = DOMAIN.COM clockskew = 300 default_tgs_enctypes = rc4-hmac des-cbc-md5 default_tkt_enctypes = rc4-hmac des-cbc-md5 permitted_enctypes = rc4-hmac des-cbc-md5 [realms]

I am not sure if anyone has done this but I am assuming it has been done before. Setting up a multihomed DHCP server accross multiple network blocks to issue PXE/BOOTP setup actions? Some background, I have successfully setup PXE to work with a cross over cable (first setup and testing env.), moved cient/server to switch and configured boot menu, images etc. and now after setting up the

I can authenticate users on a default setup of Windows 2000 using 'Security = ADS'. However if I install Windows Services for Unix (http://www.microsoft.com/windowsserversystem/sfu/productinfo/features/default.mspx) I am not able to authenticate or view users from different Organizational Units in the default domain. ??? -- Jason Gerfen "My girlfriend threated to leave me if

That is what I thought, but just to clarify: I am using static dhcp hosts in the dhcpd.conf and our network config. is similar to this: 3 subnets 192.168.15.0/24 192.168.16.0/24 192.168.17.0/24 dhcpd.conf ### Global Settings for DHCP Services ### option domain-name="dom.com"; default-lease-time 900; max-lease-time 1800; ddns-update-style none; authoritative; allow bootp; allow

I am having a problem with Version 3.0.13-1.1-SUSE and ADS. For one thing I am trying NOT to compile from source, or using an unstable branch of the source to get ADS authentication working for Samba. I have joined the machine to the domain, I am able to view users with getent passwd and wbinfo -u. I can view users within containers etc, but I cannot authenticate any of them. I am

HELP PLEASE? I am not sure why I cannot get anyone's assistance with this problem, but I am going to repost in the hopes someone can help me out. I am setting up Samba as a ADS Member server. The krb5.conf and the smb.conf are configured correctly, I can use getent passwd to retrieve users, wbinfo -t, wbinfo -m, wbinfo -u & wbinfo -g all perform the operations correctly. The problem

I am having a problem while trying to download anything from a recently configured tftp boot server. Here are the configuration for the dhcpd.conf option domain-name="domain.com"; default-lease-time 900; max-lease-time 1800; ddns-update-style none; authoritative; allow bootp; allow booting; option space PXE; option PXE.mtftp-ip code 1 = ip-address; option PXE.mtftp-cport code 2

I am having problems configuring Samba as a stand alone server. Here is my smb.conf [global] workgroup = SCL netbios name = ODIN security = share log level = 4 [images] comment = ODIN path = /odin/images Here is the information I am recieiving in the log.smbd. [2006/06/02 07:24:43, 3] auth/auth_sam.c:check_sam_security(264) check_sam_security:

Scenario: Samba-3.0.20b domain member server on SuSE 9.3 (w/ all available patches applied) providing kerberos authentication through a Windows 2000 domain with AD4Unix services installed. Problem(s): 1. Can only view users from one OU in Active Directory (default is: CN=Users, problem container is: OU=authenticated) 2. According to log.winbind and log.smbd authentication fails with error:

I have been ready everything I can regarding this setup but am having a problem that I am unsure of. I am unable to authenticate any user despite the following commands working: %> getent passwd <username> %> wbinfo -u %> wbinfo -g With the getent passwd I am able to see all of my UID/GID being mapped via winbdind to the rid of the domain user account. This command fails: %>

I am having a hard time getting a Windows XP virtual machine to follow a symlink share to a localhost samba share with 'follow symlinks = yes' I have been googling this for a couple of hours now and have found some references but not definite fix. Error from samba: '/tmp/Desktop' does not exist or permission denied when connecting to [desktop] Error was Permission denied System:

I realize this is probably the wrong list but since some of the principals this list deals with are similar in nature I figured it could't hurt. What I am looking to do: Provide a solution to either boot from a floppy disk, establish a network connection, give user the ability to run utilities such as fdisk and dd. as well as provide the same solution as a PXE bootable image. My

The nss_ldap has some performance problems and doesn't have any caching features that windbind does. What I was aways wondering is does IDMAP write UID/GID derived from SID to the extended schema in AD? Can winbindd use this extended schema, instead of using nss_ldap? -----Original Message----- From: samba-bounces+letz_samba=realmspace.com@lists.samba.org

I am still having a problem which I am unsure of in regards to the following configuration: Linux Gentoo-x86 Samba 3.0.28 VMware (Windows XP virtual machine) Symlink to users home directory I am not sure what information I would need to post for assistance in resolving this issue but here is a short list of things I have tried thus far to remedy: Tested /tmp as share root folder (works) Symlink

I just updated Samba on Gentoo due to a security vulnerability and the authentication for domain accounts is now failing. Has anyone else seen this? -- Jas