similar to: Windows file security properties on a domain member server

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Hi , I have set up a 2-node CTDB cluster serving NFS and CIFS authenticating Windows and Linux users via Active Directory. The setup works fine, except only one server in the CTDB-cluster is able to join the AD domain at a given instance. If you manually add the other server into AD, the already connected server gets disconnected. There is no specific error message logged in /var/log/message or

Hello all. I have a Samba 3.5.4 server that we're attempting to join to an existing Windows 2008 ADS. Doing "net ads join" seems to go ok, and a follow up "net -P ads testjoin" says we're OK. However... at this point, doing "wbinfo -u" or "wbinfo -g" returns no data (the programs exit with erro code 0, and no output). Attempting to log into a

Hi everybody, I'm new to this mailing list, i need help about a configuration with Samba / Openldap. I have a samba server with shared folders, where users authenticate with a determined login/password. I would like to use my directory (openldap) to authenticate my users to access the shared folders. I do not want to use samba as a domain controller, just to authenticate the users with

Your using a samba3 config on a samba 4. Change your config base on : https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member Gr, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Schuyler Bishop > Verzonden: dinsdag 17 november 2015 17:11 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Samba

On 17/11/15 16:38, Schuyler Bishop wrote: > Hi Louis, > > Thanks for the reply. Upon checking the URL you sent, I'm not finding > which stanzas you're referring to as being samba3 - my smb.conf looks > remarkably similar to the sample I see there. Could you perhaps be more > specific? > > Thanks, > > --Schuyler > > On Tue, Nov 17, 2015 at 11:23 AM

Hello (again) all! After successfully joining my Debian Jessie box to my Server 2012R2-based domain as a domain member, I've run into another snag. The installation worked successful for a couple days as a file server, and then after a while I stopped being able to access the file server. After trying various trouble-shooting steps (including nuking the samba and winbind installations and

Hi Rowland, Thanks for the response. I stripped my smb.conf down to the bare suggestions and still have a no-go on the testjoin. This really smells to me like a kerberos configuration issue due to the computer existing in one and users authenticating from the forrest root. Unfortunately I don't know where to begin to look for answers as the kerberos configurations I've found referenced

I am trying to reconfigure a samba server to use authentication from the University domain. * smbd seems to start OK * net ads testjoin is fine * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: Failed to join domain: failed to set machine spn: Constraint violation (where xxTEXT indicates redaction - sorry I'm not sure what's confidential and what isn't)

Okay, here's another wrinkle: if I run 'net rpc testjoin' immediately after joining, it succeeds, but 'net rpc info' fails (see below for the -d10 output). 'net rpc testjoin' fails as described in my last message after a reboot. Looking at the output from the failures, I notice that 'net rpc' is looking for SRV records at '_ldap._tcp.pdc._msdcs.DOMAIN'

On 12/04/16 12:09, John Rowe wrote: > I am trying to reconfigure a samba server to use authentication from the University domain. > > * smbd seems to start OK > * net ads testjoin is fine > * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: > Failed to join domain: failed to set machine spn: Constraint violation > > (where xxTEXT indicates

Greetings, Long-time but very occasional samba user here with a new challenge (well for me at least). The basics are that on the domain join, the computer account gets created but throws the dns error which based on my searching seems non-fatal. wbinfo -t gives me a succeeded, wbinfo -a klm.com\\me --ntlmv2 works fine but yet the net ads testjoin fails. Logs on the domain controller show

Hi Louis, Thanks for the reply. Upon checking the URL you sent, I'm not finding which stanzas you're referring to as being samba3 - my smb.conf looks remarkably similar to the sample I see there. Could you perhaps be more specific? Thanks, --Schuyler On Tue, Nov 17, 2015 at 11:23 AM L.P.H. van Belle <belle at bazuin.nl> wrote: > Your using a samba3 config on a samba 4. >

Hi people, I have a problem with my configuration. I'd like my debian box was client of a Domain (Samba+LDAP) my smb.conf is: [global] security = domain workgroup = DOMAIN_NAME netbios name = MYCOMPUTER log level = 3 auth:10 winbind:10 idmap backend = ldap:ldap://xxx.xxx.xx.xxx ldap suffix = dc=DOMAIN_NAME,dc=com ldap idmap suffix = ou=Idmap idmap uid = 10000-20000

Dear list users, I have a problem when joining an Active Directory domain. In this project we have one Main Dc in capital city and one read only dc in one remote city. We join to main DC succesfully. However, we can not join to local Replicate (rodc14). We are using this method for winbind / squid ntlm authentication purposes not a full samba server. ?nternet conection is not fast and we have

I am relatively new to Linux and Samba, so pardon what may be a stupid question. I am having a problem accessing my SAMBA server's workgroup from my window's clients. The workgroup (WORKGROUP) shows up in the Windows network neighborhood, but when I click it I get a message that says "Workgroup is not accessible. Network name cannot be found." However, when I click Start, Run

Hi All, In my Samba File server i am not able to set an "invalid users"... option.. even if i set that, its showing in "testparm" result but there is no change while accessing it... My Samba Server is connected with Windows 2003 ADS and all the Domain Users can access the share with out entering, any other password ( samba password ) some modification in /etc/pam.d/login,

Hi people, I am trying to migrate some users from tpop3d (Maildir mailboxes) to dovecot. The most important aspect of this migration, and which I cannot seem to get right, is to first be able to make dovecot to authenticate against the current DB being used by tpop3d so that I can use imapsync to transfer the user mails. And I do believe that is what I am unable to get right!! So here goes what

Hello, My name is Hiro. I'm using samba 3.0.21b-2(acl) and RHEL4.1(kernel 2.6.9-11.ELsmp) + AD Server Following problem: When the attribute of the group of the folder was set to a full control twice, the member of the group became inaccessible. I want to know this problem is BUG or SPEC. One example [smb.conf] security = ADS acl check permissions = no acl group control = no acl map

I have a laptop with fedora core 3 installed. I have an NT domain that I would like to use for all authentication (Linux and Windows). As a test I decided to focus on ssh authentication. I have completed the following: Created the smb.conf: [global] workgroup = DOMAIN_NAME server string = Linux Workstation log file = /var/log/samba/%m.log max log size = 50 security = domain