similar to: domain member with LDAP nss

Hi! Since upgrade to Samba 3.6.9, I am experiencing problems concerning winbind idmapping. I am using an LDAP directory with RFC 2307 accounts and sambaSamAccount sambaSID entries for each local domain user. SIDs for other domains should be stored in sambaIdmapEntry objects in a separate LDAP tree. The problem is that winbind doesn't seem to map SIDs from the local domain to unix IDs.

I have setup a Samba PDC using the following guide: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller I have opted to use the internal Samba DNS server and have specified a DNS forwarder of 8.8.8.8 When I test the DNS functionality according to the guide everything appears fine: user at myhost:~$ host -t SRV _ldap._tcp.ad.mydomain.com.au.

I upgraded to Dovecot 2.3.0.1 as advised, but it still seems broken. In the Postfix log I now see: Mar? 6 13:49:03 myhost amavis[7165]: (07165-10) K00VtLRHdrYw FWD from <admin at mydomain.tld> -> <"@"@mydomain.tld>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as B8CA22DA1B37 Mar? 6 13:49:03 myhost amavis[7165]: (07165-10) Passed CLEAN

I wrapped the LDA command in a script. I can see that Postfix passes "@@mydomain.tld" as the -d argument, without quotes. I then adapted the script to specifically replace this address with "@"@mydomain.tld, but this results in the following error message by Dovecot: ??? auth: Info: userdb(?): Username character disallowed by auth_username_chars: 0x22 (username:

I spent some time setting up Dovecot LMTP with Pigeonhole this weekend. I got most of the things I wanted to working but have a few issues that I'm hoping that someone might be able to help with. First, I'm running the stock version of the tools from the core repos for CentOS/6, which means Dovecot 2.0.9 and Pigeonhole 0.2.2. Unfortunately, I don't expect to be able to upgrade

Op 7-3-2018 om 15:40 schreef Stephan Bosch: > > > Op 7-3-2018 om 13:46 schreef Philipp Berger: >> I wrapped the LDA command in a script. I can see that Postfix passes >> "@@mydomain.tld" as the -d argument, without quotes. >> I then adapted the script to specifically replace this address with >> "@"@mydomain.tld, but this results in the

On Tue, 2023-04-04 at 09:37 +0200, Kees van Vloten wrote: > Op 04-04-2023 om 00:32 schreef Andrew Bartlett: > > > > > On Mon, 2023-04-03 at 15:08 +0000, Tim ODriscoll via samba wrote: > > > > > Unfortunately it's still erroring out: > > > (7) mschap: Creating challenge hash with username: host/SL-6S4BBS3.MYDOMAIN.co.uk > > > (7) mschap:

I am running Samba 3.4.7on Fedora Core 11 Linux. This is a domain member. My PDC is Samba 3.4.9 on Solaris 10. I have LDAP as a backend (Sun/Oracle Directory Server 6.) I have an OU for user accounts, and an OU for idmap entries. The PDC has already populated some idmap entries. An idmap entry looks like dn: sambaSID=S-1-5-21-xxxxxxxxxxxxxxx-1121,ou=mydomain,ou =idmap,o=mycomany.com

Hi everyone, We seem to be having issues on multiple CentOS 7.3 machines. The problem seems to revolve around polkitd. At some random time, polkitd seems to stop responding on my systems. Along with this, there might be hundreds of defunct pkla-check-authorization processes. If I reboot, then things are fine for a while. I don't see any activity in the unabridged journal to suggest anything

I have a web application which uses sudo to invoke python scripts as the user under which the application runs (NO root access).? Is there any reason why sudo would would require sys_ptrace access for this?? I only get this violation intermittenly, and not with every call to sudo.? Here's the violation: Summary: SELinux is preventing sudo (httpd_t) "sys_ptrace" to <Unknown>

Hi, already asked in the openssl mailing list, but just in case you already went through this... I need a little help with Certificate Revocation Lists. I did setup client certificates filtering with apache and it seem to work fine so far (used a tutorial on http://www.adone.info/?p=4, down right now). I have a "CA" that is signing a "CA SSL". Then, the "CA SSL" is

Upon rebooting our Dovecot server, I got these: Mar 16 09:49:16 peridot.tc.umn.edu dovecot: [ID 195972 local6.info] Dovecot v1.0.rc27 starting up Mar 16 09:49:18 myhost.mydomain dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 16 09:49:18 myhost.mydomain last message repeated 1 time Mar 16 09:49:18 myhost.mydomain dovecot: pop3-login: Can't connect to

We have been increasing our user count and have only run across these errors so far (dovecot-1.0.rc27): Mar 18 02:50:14 myhost.mydomain dovecot: pop3-login: Can't connect to auth server at default: Connection refused Mar 18 04:07:13 myhost.mydomain dovecot: imap-login: Can't connect to auth server at default: Connection refused Mar 18 05:43:14 myhost.mydomain dovecot: pop3-login:

Samba is trying to be a member server in an AD in native mode, using winbind, nss, and kerberose. There are 3 kdc's (2 are Win2003, 1 is Win2000), samba server is RH-AS3 + Samba version 3.0.9 (from samba.org) + krb5 1.3.1-6 (from Fedora Core). I thought I had things working (join succeeded, could access shares, modify files), and then it stopped working. After clearing out the host account

We are running Postfix 2.3.3 and Dovecot 1.0-RC27 on a Solaris 10 server. We use the Dovecot LDA for local delivery. Problems arise with looping mail whenever a user's .forward contains a reference to themselves. This most frequently occurs when a user sets up a vacation since it then puts this in their .forward file: \username, "|/usr/bin/vacation username" The vacation program

I have NT4 domain on samba-3.x integrated with LDAP. I need to use domain users in the shares permissions On the domain member server I have the following smb.conf [global] workgroup = W3 server string = File server netbios name = FS1 security = domain load printers = no show add printer wizard = no printcap name = /dev/null disable spoolss = yes log file =

Hi, I'm heavly relying on rsync -nvrc during my day-to-day work in UNIX-like enviroment. I'm using rsync for few years now and today I've found a situation which I do not understand. I have two directories with few maildirs in it. Each maildir containg some emails. I'm testing scripts which I wrote to manipulate those emails. Each time I want to revert changes in one set of

On 04/24/2015 09:59 AM, Steve Lindemann wrote: > > A script with no shebang will run in the environment of the account > running the script. Bad test on my part, apparently. $ python >>> import os >>> os.execv('/home/gmessmer/test', ('test',)) Traceback (most recent call last): File "<stdin>", line 1, in <module> OSError:

Hi There, I've searched and searched. Then searched some more. Came up with nothing. So here I am. I installed Samba as a PDC as per the HowTo, here: http://www.tiltingatlinux.com/2014/04/basic-samba4-domain-controler-on-ubuntu.html Thing is: The workgroup isn't coming out right: $ smbclient -L localhost -U% Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 4.1.6-Ubuntu]

Hi all Is anyone using the audit.so module ? I've compiled it and added the appropriate line to smb.conf but I seem to be having a few issues... Here is an snip from syslog... May 13 18:12:44 myhost.com smbd_audit[13474]: opendir ./ May 13 18:12:44 myhost.com smbd_audit[13474]: opendir . May 13 18:12:50 myhost.com smbd_audit[13474]: opendir . May 13 18:12:50 myhost.com smbd_audit[13474]: