similar to: Subject: Query a Windows 2003 AD server for specific

>Sure you can rename it. Being a member of the right groups decite what >an account can do. >However, I don't understand how renaming the admin account improves the >security. For example, every domain user can easily find out who is a >member of the "Domain Admins" group: >> dsquery group -name "Domain Admins" | dsget group -members

Hi together, I installed samba 4 on a server with Debian-Wheezy-OS. Everything seems to work fine. I can add a user with RSAT. The user is added to the AD, the profile is stored in the server-profile-path and homepath can be accessed. I have to import about 400 datasets to the AD. Therefore I want to use the commandlinetool dsadd. With this tool I can import datasets, which I can see with RSAT.

The Question: What command do I use to query a Windows 2003 AD server to return the Organizational Unit of a specific users? Also, what would be the command that would return the ?Home Directory? path as specified in the Account Properties of the Windows 2003 account? The Environment: Windows 2003 Domain with 10000 plus users 8000 Windows 2k/XP workstations 1100 Terminal Clients connecting to

Hi all,   Renaming the admin account in Windows server context is a popular measure to make the network more safe.  Can we do this also in Samba 4? Are there any negative consequences?   Met Vriendelijke Groet, Kind Regards, Salutations,     Bart Coninckx Bits 'n Tricks BVBA   Hoge Mierdse Heide 182 2360 Oud-Turnhout tel. +32 14 480 820 gsm +32 478 88 33 08 info at bitsandtricks.com

Hi, we are using Squirrelmail, imapd is dovecot. OS is Debian Sarge. When I want to login with Squirrelmail the connection to the imap-server is aborted. /var/log/mail.log gives the these log-entries: Oct 25 14:39:36 webserver dovecot: imap(rs.messegrafik-schreiber.de): mbox: Can't create root IMAP folder /home/rs.messegrafik-schreiber.de/mail: Permission denied Oct 25 14:39:36 webserver

Hello, I have a problem to build the samba_3.0 sources for sol9 , i am running gcc-3.3. It works , but the binaries became huge , the samba.pkg is about 450 MB . Now my question; do i need any compiler flags ? i did it with default-settings. But as i said , it works , i can join domains , hope there is a sun-guru. kind regards martin schreiber Siemens Business Services CCN-ITS

Greetings! FreeBSD amd64 10.0 operating system software installed Samba 4.1.4 from ports with defaultsettings. From Windows 7 32-bit Enterprise (Hungary) client from the command lineI started a dsadd command, which included the following: dsadd user CN=ValakiJanos,OU=Tart,DC=valami,DC=local -pwd Jelszok_ -hmdrvP: -hmdir \\probal\home\ValakiJanos -profile\\probal\Profiles\ValakiJanos -display

Hello, In our company we need to setup a samba-server for store the pst files in a dedicated share on our samba server. A very important goal is "zero administration" Samba Server is a sun running solaris 9 , samba-3.0.7 is installed with winbind , all is running as expected , users can connect to the share , if the share isnt already created , it is created by preexec script

Hello, is there any information about new windows version .NET or winxp server or whatever the name will be. Does it run with samba 2.2.7a or must i wait until version 3.0 is released. kind regards martin schreiber Siemens Business Services CCN-ITS Betrieb Wien GUD Gudrunstrasse 11 A-1101 Wien Martin Schreiber Phone +43 5 1707 47565 Server-Administration

Hello @List, We have a pretty complex problem; In our company AD is the one and only directory service, all other "clients" need to follow the given settings and guidelines. We are connected via security ADS , but every patch session on the PDC `s is a nightmare , does it still work or not. So we think about alternatives to the existent situation, pls note , we do not have any

Hello, I have a serious problem after upgrading from samba.2.2.8a -> 3.0.0(1) We have security = domain in both samba-versions ; for "normal" domain users nothing has changed , but we need to authenticate external users , who are not members of our native win2k domain via the smbpasswd mechanism. The user got a login-screen and authenticated himself via his "unix-login" and

> Hello, > > We have following environment > > Win2k AD with "endless" number of groups (should be more then 1000) , on > the other site solaris9 samba3.0.7 compiled with all relevant optins , > winbind , ads and so on , installations is ok , we joined AD domain w.o > problems , getent * shows all like expected > same for wbinfo > > The big problem

Hello, I've compiled SAMBA 3.0.7 on AIX 5.2 ML 2 with gcc 2.9. There were no errors during the compilation. I get no connection from a Windows XP PC to my SAMBA-Server. When I enter the username and password I get the next window and I have to enter the username and password again and so on. The log file is 0 byte long. I cannot find the error without a logfile. A ssh-connection

Guys needing some help with LDAP queries against samba4 this command works against MS AD's LDAP (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) but with samba4 I get C:\Users\Administrator>dsquery * --filter (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) I get the

Hi, Is there any way to stop Samba regenerating the krb5.conf.[WORKGROUP] file under /var/lib/samba/smb_krb5 every time? It appears to completely ignore /etc/krb5.conf, is this expected? Kernel: Linux localhost 2.6.16.60-0.37_f594963d-smp #1 SMP Mon Mar 23 13:39:48 UTC 2009 x86_64 x86_64 x86_64 GNU/Linux smbd -V: Version 3.0.32-0.8-2045-SUSE-CODE10 Thanks, Alex

We are using a windows server 2003 active directory as our single sign on server. I have been able to get our RHEL4U6 servers to authenticate with active directory. My concern is that the RID mapping to unix uid/gid range (15000-20000) is stored locally on each machine in a tdb database. So far all of the servers have produced the same mapping, but I do not think it is guarantied. I think the

Hello, below i send you a working share configuration on that products, try it [cmdocs] comment=/%S auf %h path=/home/cmdocs valid users = xxxx yyyy @yxyx read only = yes browsable = yes available = yes share modes = no locking = no public = yes kind regards martin schreiber mailto:martin.schreiber@sbs.at

Hello, We have following environment Win2k AD with "endless" number of groups (should be more then 1000) , on the other site solaris9 samba3.0.7 compiled with all relevant optins , winbind , ads and so on , installations is ok , we joined AD domain w.o problems , getent * shows all like expected same for wbinfo The big problem remaining is , we want to restrict access to shares to

Hello list, Is there a possibility to add entries to the winbindd_idmap.tdb manually? I know I can use tdbdump to see the entries, but is there a chance to modify? My problem is I have to map some uid to some Windows SID without using LDAP. On the other hand new user not having any uid in linux should map to the range of uid I defind by using idmap uid = 10000-20000 2nd Question: Is it

Hello everyone, I have biological data from a competition experiment where a free ligand is titrated against the binding of a protein. Now, I would like to fit a standard on-site binding curve to this data in order to obtain the IC50 and Kd values. Unfortunately I have not been able to find a package/function which allows such a fitting and calculates the results. Does anyone know if there is