similar to: Winbind for five minutes?

Hello, I have been using samba to authenticate my squid users to Active Directory. Because of the amount of users, I would like to set up my ACL's based on groups, rather than individual user accounts. I have successfully joined my samba box to our windows domain (2k). For some reason I had to enter the domain controller name instead of the domain name when doing so. I am now having issues

ok here's the situation; i've done this on 7 servers same either SLES 9 or 10, and all those work. i have a problem server though which is SLES v9 (same versions of all daemons/services that would be used) and this one just wont allow AD auth to work i can restart all smb, nmb, winbind, and ssh servers with no errors *Note: all the needed configuratoin file snippets are at the end of

Hi. I'm hoping for some advise/help. I have a domain that won't seem to go online: $ wbinfo --online-status BUILTIN : active connection MY-HOST : active connection FOO : no active connection The log for the domain repeats over and over again: [2019/05/30 09:34:10.259173, 3, pid=1606, effective(0, 0), real(0, 0), class=auth] ../../auth/ntlmssp/ntlmssp_sign.c:514(ntlmssp_sign_reset)

On Mon Jul 31 11:17:57 2023 Mark Foley via samba <samba at lists.samba.org> wrote: > On Jul 31 03:00:37 2023 Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On 30/07/2023 22:24, Mark Foley via samba wrote: > > > That gave me: > > > > > > # host -t A 0d2a3ba9-4ade-45de-85c7-321ba69caee0._msdcs.hprs.local > > > host:

The problem is that getenv does not return any AD domain users or groups. From much research this seems to be because nsswitch is not setup for Samba. I would really appreciate some assistance as I think this is my last hurdle for actually being able to use this test file server. Ubuntu server 18.04 - Samba installed and configured (almost) Kerberos functioning. wbinfo --ping-dc successfully

Hi, I'm trying to access a file share on what I believe is a netapp server using kerberos authentication. I've done a kinit and gotten credentials and then ran: $ smbclient -U pedrocr //gsb-filer2/pedrocr -k -d10 This actually increased the number of credentials klist shows so looks good in that regard. Howeever, I got the error: """ SPNEGO login failed:

On 01/08/2023 22:40, Mark Foley via samba wrote: > Is not being able to run 'host -t A' a show stopper here? The wiki 'host -t CNAME' > gave, as expected: > > # host -t CNAME 0d2a3ba9-4ade-45de-85c7-321ba69caee0._msdcs.hprs.local. > Host 0d2a3ba9-4ade-45de-85c7-321ba69caee0._msdcs.hprs.local. not found: 3(NXDOMAIN) > > and when trying to add with

While awaiting feedback on the error results of my "samba-tool ntacl sysvolreset" (ref. my message, same thread, of Fri, 28 Jul 2023 17:04:21), I'm going to look at this problem with the DNS ... On Tue Jul 25 01:54:45 2023 Mark Foley via samba <samba at lists.samba.org> wrote: > On Jul 24 13:30:11 2023 Rowland Penny via samba <samba at lists.samba.org> wrote: >

Hi Rowland >> The folders must be mounted on a drive letter, ex: "H" in the windows >> clients workstations. >So, you are referring to Windows home Directories, now stored on a Samba >server. Next question, what sort of Samba server, a DC, Unix domain >member or what ? I have 2 DC Samba 4 (migrated from Windows 2008 Server) and the users' Home folders are stored

@Heinz, Thanks for testing also, but what is your samba version, OS and packages samba of compiled samba. To keep info bit more complete @Christian, can you try purge the deleted DNS records. Can you also add the debug 10 log, shown below to this bugreport. https://bugzilla.samba.org/show_bug.cgi?id=14268 I'll retest it here later on today with a few more zones. But i must finish some

I have been trying to figure out this problem for a couple weeks no with no luck. Out of the blue, I started getting TSIG errors on my Samba AD DC. I pulled the logging extract below after turning up the log level to 10 and waiting for a reoccurrence. These errors will typically happen every few hours with one to three occurrences withing the same second. Can anybody tell from this what Samba is

Hi list, I run a Samba-3.0.0beta3 / Heimdal-0.6 system and want it to be the BDC of our Win2003-controlled domain. The reason is that we had to move from our perfectly working samba-PDC to a windows system and I want to keep the user profiles on the old, but stronger, Linux box(now on SuSE8.2). I get(kinit) a ticket of the Win2003 without any problem, even for admin users. But If I try to connect

Hi, I am running a Samba 2.2.7a on Redhat 7.3 in a NT domain. For authentication I am using the domainusers.This is done by Winbind 2.2.7a which verifies the existens of the users on the PDC. So I dont't have to create local users (/etc/passwd) for users who want to connect to the shares in the smb.conf. I authorise them by adding valid users = domain+domainuser to the smb.conf. This works

On 15/10/2019 13:56, ASW Global via samba wrote: > I've read the documentation that domain trusts should be fully supported with both Kerberos and NTLM authentication. I've created a new 2016 domain on a Windows box and created a Samba domain on a Linux box with a BIND9_DLZ backend. Both servers can resolve both DNS domains forwards and backwards and I am able to connect a Windows 10

Hi, I build an alpha23 samba3.0 system in win2k AD domain. Just a few days ago, it works very well. But in recent, I find it cannot work. I am sure it is the reason for kerberos authority. When I kinit a ticket successfully, it fails to run "smbclient \\Win2K-server\c$ -k", the error message will be as blow: Doing spnego session setup (blob length=109) Doing kerberos session setup

> Hi Mark, can I ask just what you are trying to achieve ? Well, it's rather simple. I want to remove a domain member from the domain. Normally, I do that with ADUC, no problem. But for some reason I was having trouble with ADUC (since resovled, magically), so I thought I'd try the same thing using samba-tool. That's it really. You wrote further: > I hope you can see that

Hello: Platform: CentOS 6.7 x86-64 $ rpm -qa | grep samba samba-common-3.6.23-30.el6_7.x86_64 samba4-libs-4.2.10-6.el6_7.x86_64 ie-samba-utils-3.6.13-7.x86_64 samba-winbind-3.6.23-30.el6_7.x86_64 samba-client-3.6.23-30.el6_7.x86_64 samba-winbind-clients-3.6.23-30.el6_7.i686 samba-winbind-clients-3.6.23-30.el6_7.x86_64 Problems began after requiring SMB signing (I forgot the specifics but it was

I am connecting to a samba share with a ubuntu 7.04 livecd using this smbclient command: # smbclient //server/share -A /tmp/credentials -d3 Here is the (successful) debug output: ----------------------- Got NTLMSSP neg_flags=0x60890205 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080205 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080205 Domain=[NAM] OS=[Windows

Hi, I'm having problems getting Samba 3 working in a Win2K/ADS domain. I don't want Samba to be a PDC - just a member server. I have two boxes, aquarius (Windows 2000 Server DC) and gemini (Debian Linux, current development version) I do both a kinit, and a net ads join successfully, but if I try to access shares on the DC, I get: # smbclient -k -L aquarius added interface

Hi, I've set up a samba server as a primary domain member with AD auth. Everything works pretty smoothly except that when you reboot the server samba will not work. AFTER REBOOT: kfrank at tldapprovider003:~$ smbclient \\\\tldapprovider003\\base Enter kfrank's password: session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED did you forget to run kinit? I don't have kerberos