similar to: Samba Security

Hi list I have a query, I have a samba 3.0.21 with openldap, all my windows clients are joined to PDC. but suddenly now , all my windows clients uanble to login but when i do getent passwd on the server , i could see all my computer accounts . even when i do ldapsearch -x -b "ou=Computers,dc=msdpl,dc=com" , i could see the list of computer account names but my windows clients report

Dear all, Can any body help m on this to resolve my issue permanently. I m almost done, but one bug is creating problem & unable to resolve it as per mail reply from one of our colgn niranjan.ashok. Following command is not working on my system ie $ svn co http://svn.easysw.com/public/cups/branches/branch-1.3/. Its showing error as " could not resolve hostname, host not found".

Hi all I have installed samba 3 and made pdc. i had added root to Domain admins, and a group called sambaclients to Domain users. i had changed the hostname of the system, now when i give the f following command , net groupmap list | sort. i am seeing 2 Domain Admins, Domain Groups, System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain

Hi all I have a Fedora release 17 (Beefy Miracle) with libvirt versions: libvirt-0.9.11.3-1.fc17.x86_64 virt-manager-0.9.1-3.fc17.noarch I have allowed non-root user to user libvirt by allowing the user through polkit cat /etc/polkit-1/localauthority/50-local.d/cat 50-org.example-libvirt-remote-access.pkla [Remote libvirt SSH access] Identity=unix-group:virt

Hi all I have a linux server with RHEL 4.0 ES with Samba 3.0.23c . I am trying to integrate it with our Windows 2003 Active directory. our Windows domain is EXAMPLE.COM and netbios name of the server is EXAMPLE. The hostname of our Active directory is lesl-dom. when we are joining to the domain we are getting the following error. ##########################################################

Hi all, I have a very good query related to printer sharing using samba. Following is the scenario... I had installed HP laserjet 9040Dn printer on redhat Enterprise linux 5. Shared it using samba. Used winbind protocol to integrate linux with windows AD 2003. Now i am able to see printer in Active directory as well as linux computer account in AD. But unable to set option lpadmin -p printer

I am running several samba servers (2.2.3a and 2.2.7) in various places as pdcs. Everything seems to be running smoothly, but I can't find any way of restricting access to only those uses who have logged on to the domain. Is this possible? ie at the moment, any user can map a drive to \\server\share, put in a valid user/password pair and have access to that share without going through any

Hi all I have been using samba 3.0.21 with openldap , and facing some problems. since i am using samba with openldap, samba hangs abruptly, I have tuned openldap with DB_CONFIG parameters my DB_CONFIG file is as follows ######################################### set_cachesize 0 150000000 1 set_lg_regionmax 262144 set_lg_bsize 2097152 #set_lg_dir

Hi all, I have 3 guests (2-RHEL4 and 1 RHEL6) and have some issues regarding networking between them. The 2 RHEL4 system's use default bridge virbr0 and get ip's of range 192.168.122.0/24 (192.168.122.207, 192.168.122.167) I created another bridge (virbr1) with NAT forwarding (no dhcp). The network i choose was 192.168.100.0/24. And the third system (RHEL6) was assigned static ip-addres

Hi, I've joined my new SAMBA-3 in a NT4 PDC using the administrator user. The winbindd daemon is started but when I try : wbinfo -g, I see in the log file : could not enumerate domain groups! Error:NT_STATUS_ACCESS_DENIED Which could be the reasons of this error ? Thank you, Rapha?l

Hi All, I am getting Kerberos "enc type" problem that I can't explain: [2005/06/11 11:41:29, 1, pid=29355] libads/kerberos_verify.c:ads_keytab_verify_ticket(61) ads_keytab_verify_ticket: krb5_kt_start_seq_get failed (No such file or directory) [2005/06/11 11:41:29, 3, pid=29355] libads/kerberos_verify.c:ads_secrets_verify_ticket(193) ads_secrets_verify_ticket: enc type [16]

Hi all I have a samba PDC with LDAP with samba version 3.0.21,(domain=mydomain.com ). the samba and openldap are configured on a single system. i would like to setup samba BDC with slave LDAP server for domain mydomain.com and samba BDC is also having DNS server for domain . my query is, the nsswitch.conf and ldap.con of BDC should point to it's own LDAP server or Master LDAPserver and in

Hi all I have a samba 3.0.21c with OpenLDAP 2.3.19 as Primary Domain Controller. I would like to enable Roaming Profiles per user basis , not for all users. below is my smb.conf , [global] workgroup = mydomain.com <http://msdpl.com/> netbios name = mydomain passdb backend = ldapsam:ldap://mydomain.com server string = Domain Controller hosts allow = 192.168.128. 192.168.129.

I have a Samba PDC with LDAP (samba version 3.0.21c with Openldap 2.3.19). where i have all the users. I have configured sendmail on another system with dovecot as IMAP and POP3 server. I wanted to enable user authentication from LDAP server which is on samba PDC. So configured /etc/dovecot.conf ################################################################ protocols = pop3 imap imap_listen

Hi All, When I run winbindd -i -d5 I am getting the following error IPC$ connections done by user DOMAIN\domainmanju connecting to PDC from SAMBASERVER with username [DOMAIN]\[domainmanju] & finally it throws up an the following error. Could not open a connection to DOMAIN for \PIPE\lsarpc (NT_STATUS_LOGON_FAILURE) I have joined the Samba server to the Win2k AD domain, users are able to

Hi all I have a samba pdc (3.0.21 LDAP backend). at subnet 192.168.129.0 network . samba pdc ip: 192.168.129.20 domain : msdpl.com I have setup Samb BDC (3.0.21 with slave ldap server + Slave DNS server) at subnet 192.168.130.0 network samba bdc ip: 192.168.130.3 domain: msdpl.com when i am joining win2k client to Domain, it says "the domain does not exist or could not be contacted"

I am wondering if winbind works with win 2003. I can get winbind working just fine with 2k servers, but when I run wbinfo -t, all I get is "can not check secret". it joined the domain fine, but can not get it any info using wbinfo. __________________________________ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com

I have a samba ldap pdc set up. (2.2.8a). I have a windows domain member that is joined to the domain running ras. When users try to dial in to the server they get "Does not have Dial in permission/rights". Is this an option that samba recognizes at this point? Is there a way to tell windows that a user has dial in privileges? Sean Cook Kinex Networking Solutions

Hi All, I experienced the problems with Samba 3.0.2rc1. When the Samba server is joined ADS, I got following Samba panic when access the share by hostname, it worked find if I access the share by the IP address. Actually, this issue was reported by me before. Your help is appreciated. BTW, it hasn't been solved the issue by using Samba 3.0.2 either. Juer [2004/02/27 16:05:25, 0]

I have two samba servers (version 2.2.2-2, debian sid) with identical configuration. One stands in the server room and is part of the server subnet. the other is in the normal 'user' subnet. I added both server (several times!) to the win2000 domain. the procedure was identical. Both have secret.tbs files of 8192 bytes opposite to the 6xx bytes which they have when they are not joined to