similar to: New Samba installation

Hi, An update on my work to integrate my Linux server (CentOS 4.3) in AD 2003. Sorry about the long post :) Found this page (http://www.enterprisenetworkingplanet.com/netos/article.php/3487081) and followed the instructions on it. First, I made sure that the Samba installation is supporting Kerberos, LDAP, AD and Windbind. That was OK. I made sure that /etc/hosts contain the name of the AD

Hi, First, sorry if this is a bit long. I'm having problems finding what is wrong with my setup. Running Samba 3.0.10-1.4E.6 on CentOS 4.3. PDC is AD on windows 2003. Samba and winbind are running. My smb.conf file: # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2006/05/30 10:52:16 # Global parameters [global] workgroup = MONTREAL realm =

I'm seeing very long delays the first time winbind accesses the network. See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496569 I've tried lots of things, down to stripping the config to a bare minimum for ADS security and even killing ipv6 support on the box. Nothing has resolved this. Does anyone see anything obviously wrong with this configuration that might cause a very long

Running Samba 3.2.3 on Debian Lenny, amd64. I'm joined to an AD realm, authentication works fine for Windows clients. I'm able to see that the clients are using Kerberos, not NTLM to authenticate to the shares. However when I look at the keytab, my entries have the short names like "service/shortname@REALM" instead of "service/fqdn@REALM". Looking at Windows servers on

I have winbindd running. I run wbinfo -a userXYZ%pass and it succeeds Now I want to know if userXYZ is in group "monkeys", but I dont want to have to have to map anything. Is this possible? Is there a way to just say "give me the windows group names that userXYZ is in?" or "is userXYZ in windows group name 'monkeys'?" Thanks! - Jeremiah

Hi, I compiled Samba 3.0.23d on a CentOS 4.4 machine. Then I configured /etc/krb5.conf for my domain. Was able to successfully run kinit and join my Windows 2003 domain with a net ads join. Net ads user and net ads group returns the users and the groups of the domain. So far so good. I'm kinda stuck on the next step. I would like to grant access to the share defined in smb.conf to anybody

I am working with a host that is running RH enterprise 4 (a 2.4 kernel) and a desktop running Fedora Core 5 (a 2.6 kernel). I can not get my CIFS fstab file entry to mount, yet my matching RH ent 4 laptop mounts it just fine. The error is: mount error 1 = Operation not permitted Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) parsing options:

The latest Debian 3.0.23c-1 packages will not install on my Etch test machine. The packages seem to be fighting over who owns files. If I try to install them individually, dependencies kick in and I get the same result. Ideas? James Zuelow....................CBJ MIS (907)586-0236 Network Specialist...Registered Linux User No. 186591 ----------------------------------------------------- The

Dear All, I have succesfully managed to have my kerberos configured n working without error when i say kinit Administrator and after entering password i get the # prompt so its works fine my krb5.conf -------------- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = BALADIA.LOCAL

Hi! Our Samba file server seems to have a memory leakage. We are using samba as file server out of the box (debian sarge) on kernel 2.6.16.31. After a while users who have some shares and files open are acquiring more and more memory until the smbd dies. Here is a small shortcut from top: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 13843 gxxxxx 16 0 51792 44m 2552 S

Hi, I looked at the doc but I can't find what I'm looking for. I have 1 Linux server (CentOS 4.3) running Samba 3.0.10 in a Windows 2003 AD domain. I modified Samba's conf file to point it to our WINS server. We can access the share using \\servername. So far so good. Is there a way to use AD to authenticate the users instead of the Samba users that are on the server? Thanks! Simon

Hi There, Debian squeeze, samba 3.3.3-1 I am currently trying to use a samba partition to backup windows machines to, and am always warned that the destination does not support NTFS attributes, hidden attributes and system attributes. Are there any config options to enable these in samba? or does samba not support mapping these to something on the linux side? Any help or links to documentation

Hello, we integrated an samba v3.2.8 into a bigger ADS environment which is connected via MPLS world wide. Everything works as expected, but the login via SSH is slow: After entering the login name in ssh we can see via tcpdump network traffic to different ADS controllers: First a connection from Germany to UK: 17:16:43.867219 IP 10.49.x.y.37722 > 10.44.x.y.389: P 17:16:44.092774 IP

I'm trying to decide on a linux distro to use for our enterprise Samba server. I like that there is a deb repo for Debian from samba.org, but I'm more comfortable with CentOS (Redhat). I just want to be sure I have a well supported Samba server and I need at least the 3.0.20 version so I can use the "inherit owner" property. I also want automatic updates for bugfixes and

The setting is Debian with winbind v3.0.22. The pertinent bit of winbind configuration is as follows: winbind nss info = sfu idmap backend = ad winbind enum groups = yes winbind cache time = 1800 The problem is that once in a while, typically when either: a) an ls command is given for the 1st time in a login shell session or

I'm trying to set up a Linux box to authenticate users against AD (Win 2003) using winbind by following the Official Samba-3 HOWTO (http://samba.org/samba/docs/man/Samba3-HOWTO/winbind.html). We're running Redhat AS 3 and Samba 3.0.9. Our smb.conf look like this: [global] winbind separator = + idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups

First off, I apologize for reporting a problem with a "historical" version of Samba, but this is what we use in our production environment due to some integration issues with the 3.0 series. I've been experiencing a problem with Samba 2.2.x when trying to use a CIDR notation for hosts allow/deny when that CIDR prefix is not one of ( /8, /16, /24, or /32). When I included a

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet at samba.org] > Sent: Saturday, August 26, 2017 12:38 PM > To: James Zuelow; samba at lists.samba.org > Subject: Re: [Samba] retrieve machine password in current Samba? -- >8 -- snip -- 8< -- > > The recent secrets changes to store the krb5 hashes changed some things to > use a IDL defined NDR

> -----Original Message----- > From: Jeremy Allison [mailto:jra at samba.org] > Sent: Friday, August 25, 2017 3:48 PM > Looking at the code I think it's now returning the plaintext password, whereas > previously it only stored the password hash. You'll have to hash to make it > useful by wicd it seems (I'm guessing wicd expects the hash, not the plaintext). OK. I

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet at samba.org] > Sent: Thursday, September 7, 2017 3:41 PM > To: James Zuelow; samba at lists.samba.org > Subject: Re: [Samba] retrieve machine password in current Samba? -- >8 -- snip -- 8< -- > I've looked into this, and I don't think we have changed the format, it is just that > we stopped