similar to: AD domain with SDMS issues & LDAP Idmap backend

Hello, I would like to share few things I have learned over time in my attempt to integrate all my Linux clients to an existing corporate Windows 2000 Active Directory (AD). I am a Linux admin for a small division in a large company and do not posses any special rights as far as AD goes. I ONLY have privileges on my division part of the tree in AD. Goals: - Integrate all Linux client to

This might be a stupid question, but I ask only because I can't think of a good reason... Why do so many vendors' builds of Samba not include libnss_wins, the WINS/NetBIOS name resolution library? I find that it is very helpful for my Linux/Samba servers to be able to resolve hostnames by WINS. It also seems to improve domain browsing performance dramatically to have the library present

I'm trying to do something fairly simple: login to a Linux box using a Windows AD-based account. I've followed the various recipes available online for configuring Linux (winbind, PAM, etc.) to this send, and I've got it working ... almost. I'm able to authenticate an AD-based user immediately after bringing up the Linux box, but a short time later (roughly 5 minutes, but it

Hi everybody, This may be a stupid question, but I really don't get it. When I restart my Linux box (occasionnaly / rarely), samba is not working from my Windows station. I can't connect to the samba drive. If I do /etc/init.d/smb restart, it doesn't work either. After many unsuccessfull problem determination, I found that there is two ways to correct this: 1- kill smbd -D process

I am looking for some solution, working with Samba preferably, which would allow multiple users to work on one document. This means that if a user makes a change to the document, a previous version of that document is saved somewhere else. For example, user A opens a document (rw - read/write, ro - read-only document): rw \\server\share\document.txt User makes some changes, and saves it to

Thank you, Louis, for your reply. By simply asking me to provide outputs of the aforementioned files, I found the cause of my first problem (auth failing). It was my /etc/hosts file on dc1. All of them should look like this, and indeed DC2 and DC3's *did* look like this: # cat /etc/hosts > 127.0.0.1 ? ? ? localhost.samdom.mycompany.net ?localhost > 192.168.3.201

Hai, And Omg... Your right, its my fault. :-/ I didnt say to you, you needed make the changes, to change what Rowland showed. Im really sorry.. ;-) when im in austria i'll buy you a beer. Or if you want teach you snowboarding.. I have an other guy in austria that cant ski/board. Im going to teach him also. .. So funny a dutch guy teaching to austria guys.. :-) And how is it running

I've been working on this problem for a few hours. Here are some updates: Many of the domains I listed are duplicates of domains managed by other DNS servers on my network. There was no point in having them in Samba AD, so I deleted the zones in Windows DNS Manager and created slaves in my named.conf.local folder, so that they'd pull the records from my authoritative BIND DNS server,

Nice shell script,?Louis. Here are the results: Collected config ?--- 2019-06-20-12:46 ----------- Hostname: umbriel DNS Domain: samdom.mycompany.net FQDN: umbriel.samdom.mycompany.net ipaddress: 192.168.3.203? ----------- Samba is running as an AD DC ----------- ? ? ? ?Checking file: /etc/os-release NAME="Ubuntu" VERSION="16.04.6 LTS (Xenial Xerus)" ID=ubuntu

Hello Samba Friends, I have a single DC (we'll call it, "DC1") that simply will not take my password when I run this command:? #samba-tool ldapcmp ldap://dc2 ldap://dc3 -Uadministrator? Or this command:? #samba-tool ldapcmp ldap://dc1 ldap://dc2 -Uadministrator? I basically get this:? > Password for [SAMDOM\administrator]:? > Password for [SAMDOM\administrator]:?

Hi, I'm trying to set up NFSv4 on two boxes (centos 5.5) and have it authenticate against our Windows 2008R2 AD server acting as the KDC. (samba/winbind is running ok with "idmap config MYCOMPANY: backend = rid" so we have identical ids across the servers.) I can mount my test directory fine via NFSv4 *without* the sec=krb5 option. However, once I put the sec=krb5 option in,

Hello all, I have setup my gentoo samba server as a domain member server of a windows 2003 Active Directory Domain using winbind. I am able to see all the users and groups with wbinfo -u and wbinfo -g andwbinfo -t does not report any errors. 'Getent passwd' and 'getent group' return local and domain users and groups. My problem is that when I login as a domain user, my prompt

I am having problems getting dns to function correctly with Ubuntu 14.04LTS. My /etc/hosts file is: 127.0.0.1 localhost # Need to keep 127.0.1.1 entry or DNS fails 127.0.1.1 mysrvr03.mycomapny.biz wdnsrvr03 192.168.16.208 mysrvr03.mycompany.biz wdnsrvr03 # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2

Right now, I have all of my Samba stuff under ou=corp,dc=mycompany,dc=com. I have it this way because there used to also be ou=furn,dc=mycompany,dc=com with a different domain. Now that I only have one domain, I would like to move everything to dc=mycompany,dc=com. So I copy all of the subentries of ou=corp (ou=computers, ou=people, ou=grooups, and the sambaDomainName entries) to

Hello, hello Rowland, So the physical configuration is something like below : +-------------------------------+ server_a   Samba AD DC   Domain: mycompany.net   Subnet: 192.168.1.0/24   IP    : 192.168.1.2 +-------------------------------+ +-------------------------------+ pc_a_1   FQDN: pc_a_1.mycompany.net.   IP:   192.168.1.33 +-------------------------------+

Louis, I appreciate your efforts with my predicament. I'm very sorry to say that your advice hasn't gotten me to a solution. After updating my /etc/network/interfaces to put my localhost IP address first (192.168.3.201, for example), saving, restarting services, rebooting, running "samba_upgradedns --dns-backend=BIND9_DLZ", saving, rebooting, etc., I still cannot add, edit or

Hello, I'm in trouble here with what appears to be a total meltdown of my DNS on my Domain Controllers. I only have two DCs right now and I cannot resolve anything on either of them. I am on Ubuntu 16.04 with a compiled version of Samba 4.10.4. I also have a compiled version of BIND 9.10.3-P4-Ubuntu <id:ebd72b3> # service bind9 status ? bind9.service - BIND Domain Name Server ?

hello, There is a group in my AD that has a user that does not exist. I can see it via RSAT. By running the command: samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes The following error occurs: Checking 10016 objects WARNING: no target object found for GUID component for one-way forward link member in object CN=ALUNOS,OU=GRUPOS,OU=CAMPUS,DC=mycompany,DC=net -

Hi team, I meet problem when join AD domain with Samba failed, want to get some help from community, please let me put details. 1. Problem When run "net ads join -U username" on Linux client to join AD domain, it failed with error message: """ Failed to join domain: Failed to set machine spn: Operations error Do you have sufficient permissions to create machine

I have a small environment with a single puppetmaster and puppetdb on the same node that I get sporadic "Failed to submit ''replace facts'' command" errors from nodes. It isn''t consistent about which nodes are causing the error and I can''t find anything else going on at the same time on either the master or the agent that these errors happen. Here