similar to: Can Windows 2003 server be configured as a samba client ?

I've been trying to setup Samba to authenticate users against accounts existing on a Windows 2003 Server without any backwards capability. Ideally, this needs to be done without any changes to the Windows 2003 Server. Users will not be logging into the Samba shares at all. This is merely for authentication. I'm running FreeBSD 4.10-Relase #4 with Samba 3.0.8. This is my smb.conf file:

Good morning/evening to all. I hope I'm not taking up space here or wasting people's time but - I've had several samba machines joined to a Win2k3 AD for some time now. Of course, I'm using kerberos, but that's it. I've kinda rolled the bones up 'til now in that I've relied on the PDC without having a BDC. But, if the PDC were to experience any down time

hi all, i've added a samba4 additional dc to my domain. all provision was ok with samba-tool domain join xx.mydomain.com DC -Uadministrator --realm=xx.mydomain.com command and i can replicate correctly from winpdc to sambadc. i have a couple of questions: 1) with adsedit i see objectversion 47 for my winpdc.mydom.com (is w2k3) which means 2008R2 (correct?) 2) on the samba4 side if i test

Hi list, I'm using Samba 3.0.4 on FreeBSD 5.2.1 as PDC for nt4 clients. Is it possible to set a limit concerning the number of parallel session that a domain user can open ? My goal is to allow only one session per user. Thanks, -- Pierre-Fran?ois LAURAND - tel: 02 54 55 21 13 Email: http://www.cerbermail.com/?8axpnD3KnU IUP Informatique et T?l?communication Antenne de Blois -

Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki. DNS and ldap are internal. Everything looks like working, I can create and edit GPOs with WinXP Pro but with Win2K3 server I can create GPOs but I can't edit them. I cannot see any error at the log.samba file. Win2k3 gives an error that I will try to translate to

Hi, We did an upgrade to the PDC from win2k to win2k3, and now I cannot mount shares on my linux box od access the pdc with smbclient. I'm running v2.2.7. Any ideas? Thanks, Rob Rob Tanner UNIX Services Manager Linfield College, McMinnville OR

Hello all samba'ers I'm trying to configure samba for Windows (active-directory) authentication, with every Windows-user having a similar unix username. I've created the users in both sides but I couldn't configure the smb.conf file (either with or without SWAT) to make it work. I'm using XP clients with a Win2K3 as the domain server and Solaris 9 as the samba server.

Using an 8-way ES7000 with 32GB of ram, I''m running xen at changset 11217 with dom0_mem=3092M as a kernel parameter on a x86_64 hyperviser. It appears that qemu is adding too much overhead to virtual machines to display graphics. If I boot a sles9sp3 domVT in runlevel 5 with vga=0x314 for a graphicalboot, and immediately use vncviewer simply to watch the virtual machine as it boots,

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

I have almost the same setup (NT4 domain, with W2K3 Terminal Server).... I am using Suse 9.2, Samba 3.0.21b, with winbindd on a generic x86 server. No special package configurations...just the rpms from samba for Suse. I do have the same problems. -- I have home directories mapped for users. When I log into the Term Server with RDP my home directory on my Samba box comes up just fine.. What

Hi, I'am experimenting an error on a Samba 3.0.20 pdc with ldap backend : When I have a try with the MS Win2k ACL editor to change a file permissions located on a Samba share, I can add or suppress domain users related acls, but with group related acls, an error occurs : MS Editor correctly shows the group SID, but cannot map the SID with the associated group name. smbd.log gives :

I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) Modern versions of MIT kerberos support GSS-SPNEGO natively, but are only willing to negotiate for kerberos tickets and not NTLM

Hi, I'm running OpenSSH 3.8 & 3.9, compiled against Heimdal 0.6.3 for it's GSSAPI & AFS integration. A couple weeks ago, we upgraded our MIT KDC from (ugh) Kerberos 5 1.0.6 to the lastest and greatest 1.3.5. However, it seems that as part of the upgrade, our GSSAPI credentials passing in OpenSSH stopped working. Actually, didn't completely stop... You can still do a

Ok, this one has me stumped... I am implementing 3.0.1 on a new machine - Slackware 9 based. Got everything compiled (OpenLDAP, Kerberos 5) and installed Kerberos pulls the ticket without problem. The samba machine joins the domain without any difficulties. Here is where it gets weird. From the Win2k3 DC, I can not browse the samba machine - won't recognize passwords. However, from

Hi All, First, off I'm a bit of a n00b w/Samba4 so I'll apologize ahead of time if any of this seems obvious/trivial. I'm working with Samba RC1 tar build and trying to get DNS replication working. Right how I get the following under --snip-- ==== KCC CONNECTION OBJECTS ==== Connection -- Connection name: fa253d86-3549-4208-ab29-a0d702ccdb02 Enabled : TRUE Server DNS name

Here's the procedure: # qemu-img -f qcow2 /vm/win2k3.img 8G # virt-install --connect qemu:///system -n win2k3 -r 512 --vcpus=1 -c /home/temp/win2003sp2ins.iso -f /vm/win2k3.img -s 4 --network=bridge:br0 --mac=00:ff:ff:ff:58:58 --noautoconsole --vnc --os-type=windows --os-variant=win2k3 --hvm --accelerate And I get error as below: Starting install... internal error unable to start guest: qemu:

Hi, for the last two weeks ive been trying, to authenticate against a samba-domain using a win2k3-server. the server joined the domain without any problem and the basic login seems to work. but if i try to execute programs from mapped network drive (mapped using a domain-logon-skript), it fails with a message telling me, that i dont have sufficient rights to do so. the share has a forced user

Hi Jim, I did what the doc says but the problem is the same. Does anybody saw this work ? I mean, is the Samba 3.0.2a+Kerberos MIT 1.3.3 able to be accessed by a WXP, W2K or W2K3 machine, using Kerberos tickets generated in a Windows 2003 KDC (W2K3 AD) ? Thanks -----Mensagem original----- De: Jim McDonough [mailto:jmcd@us.ibm.com] Enviada em: segunda-feira, 19 de abril de 2004 17:07 Para:

Hi Rowland, Thanks for your explanation. We have set up Samba to authenticate users against an external MIT Kerberos server and usernames match those in Unix password files. The setup was almost exactly like the Ubuntu help page: https://help.ubuntu.com/community/Samba/Kerberos#MIT_Kerberos There are others who have also set up Samba this way:

Are there any gotcha's..... I am currently using winbindd and very successfully integrating my Samba boxes with the NT4 domain structure. The admin who is doing the migration (A corporate person not used to Linux at all) is already nervous about the migration since it involves Linux. Usernames are not supposed to change..but, the authentication domain is going to be a completely new