similar to: winbind problem, have workaround but...

Hello, and thanks in advance for any assistance. I have a linux machine that I'm trying to join to a windows 2003 sp1 active directory. The specifics are: RHEL5, samba version samba-3.0.23c-2.el5.2.0.2 a firewall between this server and the rest of the world (which includes the DCs), ports are open for kerberos and CIFS inbound and kerberos, CIFS, NTP and UDP oubtound. this machine

Samba 3.0.21b The Samba docs indicate [0] we should be running changetrustpw [1] at some point (cron.daily) to update a machines trust account. However, I've seen multiple instances with 2 seperate AD environments where this breaks our ability to enumerate/authenticate with the domain. In both instances, we see something similar to the following in the winbind logs: (ntlm_auth):

Mandi! Kees van Vloten via samba In chel di` si favelave... > There is "net changetrustpw" to do this. I've correctly just joined the firewall to the domain, i can check join status: root at vfwacpn1:~# net ads testjoin Join is OK but if i try to renew credentials i catch: root at vfwacpn1:~# net ads changetrustpw -I 10.172.1.8 Changing password for principal:

On Sun, 3 Mar 2024 16:12:04 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Kees van Vloten via samba > In chel di` si favelave... > > > There is "net changetrustpw" to do this. > > I've correctly just joined the firewall to the domain, i can check > join status: > > root at vfwacpn1:~# net ads testjoin > Join is

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hey, I'm running a Samba4 DC domain and I'd like to change the machine trust password of the current DC. This doesn't seem possible using net ads changetrustpw or net rpc changetrustpw on the DC itself, and I can't seem to find any command in samba-tool to achieve this. Is there any way to change the trust password of the DC? - --

On 25-02-2024 11:56, Marco Gaiarin via samba wrote: > I need to access the LDAP AD server from a debian box, but i don't need > shares nor winbind. > > For a sake of simplicity i'm thinking to use machine account (-P). There is "net changetrustpw" to do this. When you domain-join the machine the machine password is managed by winbind, so you don't need to this.

Mandi! Kees van Vloten via samba In chel di` si favelave... > Solution is easy: upgrading winbind from Debian backports solves the issue ! I've upgraded to latest buster version 4.18.10+dfsg-1~buster, but still does not work for me... Now display: root at vfwacpn1:~# net ads changetrustpw get_kdc_ip_string: get_kdc_list fail NT_STATUS_NO_LOGON_SERVERS Changing password for

On 04-03-2024 21:54, Rowland Penny via samba wrote: > On Mon, 4 Mar 2024 14:14:18 +0100 > Marco Gaiarin via samba <samba at lists.samba.org> wrote: > >> Mandi! Kees van Vloten via samba >> In chel di` si favelave... >> >>> Interesting, I tried running it with -d 10, it shows a lot of >>> output. >> The same. My output is a bit more

Mandi! Kees van Vloten via samba In chel di` si favelave... >> For a sake of simplicity i'm thinking to use machine account (-P). > There is "net changetrustpw" to do this. Ok, i've missed that. Thanks. > If you just have a service that does LDAP-queries, I would create an > ordinary user-account for it (and start it's name e.g. with "svc_").

Hello, Samba 4.4.7 AD member on Linux SLES 12 here ... We've been running flawlessly for weeks with version 4.4.5 until we updated to 4.4.6 and experienced this bug: https://bugzilla.samba.org/show_bug.cgi?id=12369 So we updated to 4.4.7 in which this issue was fixed with an interim downgrade to version 4.4.5 until 4.4.7 was available. Now, we're experiencing another issue and it seems

I only have limited Samba experience, and expect this is a silly mistake, but have been unable to find a solution I have installed Samba and Winbind on my desktop Linux (Debian) machine (SPARKSTONELX), aiming to unify logins with other windows machines accessing the PDC, again samba/Debian, with tdbsam password backend. All is well, joining the domain, and getting account details using wbinfo -u,

Greetings, I've been debugging the following scenario for some time now, and I'm slowly runing out of ideas. If anyone would suggest anything helpful... I'd be grateful. Anyway, here's the setup: windows 2003 AD domain running in 'windows 2003 native' mode + a few Solaris 8 servers with Samba 3.0.0. All sambas have computer accounts in windows' domain, and have

so I had some time to follow this bunny trailand found that even though all the other servers had no problems this one continued to.Every so often a new computer couldn't connect and then it would be all better after a net leave/net join. Net join would not work without -S <MyDC> in the command lineWhat I found out was that most net rpc commands such as net rpc testjoin would also fail

Installed Samba 3.0.10 via 'pkgadd' on Solaris 2.6 workstation s080 (137.223.31.80) - previously running Samba 2.2.8 which has worked for a long time. Samba 3.0.10 smb.conf file - changed to security =DOMAIN from SERVER at 2.2.8 version password server = 137.223.33.45, 137.223.33.72 - these are DCs # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date:

We recently upgraded our PDC from Debian 4 to Debian 5. That entailed an upgrade of Samba from 3.0.24 to 3.2.5. Since the upgrade we've had a very specific problem connecting to shares on a commercial NAS running Samba 3.0.34. The problem happens when users try to connect to shares from standalone servers--e.g., Windows XP Pro boxes that we use for testing. From those boxes users should be

Hello, I'm having some trouble with the winbind process I'm getting a lot of error: [2005/07/04 14:14:48, 0] libsmb/clientgen.c:cli_send_smb(155) Error writing 494 bytes to client. -1 (Broken pipe) [2005/07/04 14:14:48, 0] rpc_client/cli_pipe.c:rpc_api_pipe(435) cli_pipe: return critical error. Error was Write error: Broken pipe [2005/07/04 14:14:49, 0]

Hi, we have a problem with your Samba4 Domain Member as with Shares. when i would connect i got an Error. In Samba Logs it tells me ==> /var/log/samba/computerid349.log <== [2016/02/10 14:39:50.313835, 1] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh) Failed to fetch record! [2016/02/10 14:39:50.313949, 1]

Hi! I've set up a Samba server (running winbind) as a Win domain member server. Users authenticated from win domain and mapped to NIS uids and gids. Everything was working well, but the next morning winbind stopped to respond. I reset it, so now I get wbinfo, ypbind (ypcat) results ok as before, but users suddenly cannot authenticate any more. My <client>.log files are empty,

Hi, I have got two production facilities having the same configuration, facility 1-(domain CSW)Samba 3.0.5 PDC running on redhat 9 and 4 member server running the same samba version on redhat 9, facility-2- (domain CSWN)Samba 3.0.5 PDC with 2 domain member server, the domain member server uses winbind to authenticate usersthey connect to the local PDC, I have configured two way trust between the

I have configured winbind on a Linux file server, connecting to a Samba PDC. When I run wbinfo -g, I can see the group "domain users". On the other hand, when I run getent group, I do not see this group. Apart from a few other groups, all groups are visibile in both wbinfo -g and getent group. When running for the first time wbinfo -u, getent passwd and wbinfo -g, I got the results