similar to: Problem joining linux box to active directory domain

maybe this is a simple fix but i really don't know how to fix it... it seems that i cannot run any net rpc commands... i wanted to see the members of Domain Users group so i did the following: root# net rpc group members "Domain Users" -Uroot%not24get and i got this error: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED i can ping localhost

John, The restrictanonymous setting was the primary culprit in Ash's issue. I think he's using basically the same setup as I am; no winbind/LDAP involved. I'm thinking there's some initial handshaking that requires an anonymous connection to PDC, and it's being blocked if the restrictanonymous setting is too high. I sent a note to Ash (& the list) asking for the

Hi All, Has any one got an idea of how to make clients automatically find the BDC when the PDC is stopped. Both PDC and BDC are running by Samba authenticating again a LDAPSAM backend replicated on both the PDC with master LDAP database and BDC with replicated LDAP database. But when I stop PDC the clients are not detecting the BDC broadcast. I can see that the replication is of

I've tried numerous times but cannot get Vampire to bring across all groups or add users to all groups that they belong to. Sometimes I get everygroup except 1, other times not so lucky. Vampire log is below with an example of what is going wrong. vampire.log Fetching DOMAIN database Creating unix group: 'skischool' Creating unix group: 'sales' Creating unix group:

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

Hello. I'd like to join a Samba 3.0 alpha 21 server running on RedHat 8.0 to an Active Directory. This AD does NOT support Windows NT 4.0 Domains. In a previous mail, I've been asked if I already have Kerberos setup and tested. I don't. How do I test if Kerberos is working correctly for me? If everything is working fine, I'd like the Samba server to join the AD

Hi, the smbldap tools are a great thing to have, thanks a lot! I just wonder if it would be possible to set a password via the command line, like: smbldap-passwd.pl testuser1 not24get I have to create accounts for several hundreds people every year and give them an immutable password. So long I do that with smbpasswd, ldappasswd and a tiny script around these tools. I tried smbldap-passwd.pl

Hi, I have performed all the steps from John Tepstra's "Samba-3 by Example" 20 April 2005 to Chapter 5, step 21, pg 146. (My goal is to have SAMBA with LDAP and no MS Windows servers.) Everything appears to work properly to this point. When I perform the command: (amd is the name of this test server) net rpc join -S AMD -U root%not24get I get the error: Could not connect to

Hi All, I am going through a setup of a test samba3 box with rh9 with my self rolled copy of 3.0.10. I have removed the old rpm version of samba. I compiled 3.0.10 with all defaults except for the install prefix which I set to /usr/local/samba3. I followed the steps given in Chap 6 - making users happy in the online html version. I changed a few things. Instead of MASSIVE as the PDC name I

I have setup samba 3 as a PDC for a set of computers that previously had Domain Users setup to run as local admins under XP, so that anyone that has logged into the domain has local admin access. Whats the best way to replicate this setup so that I don't have to go around to each computer and change the local security policy? Is there a way to assign users to the group domain users? or would

Hello folks, I have some directories within a samba 3.x share which I want to give granulated security settings for various users and groups. I could use of course "setfacl" and POSIX ACLs to accomplish that, but some of these ACL should be also able to be set by some users. These users of course has no access to my linux host where samba3 is running, so they only can do that by

Greetings, I've been reading and re-reading "Chapter 12. Group Mapping: MS Windows and UNIX", Mailing list messages with the subjects "valid users = +group doesn't work" and "Unix ADS group membership or vice versa" and all I've gotten is more confused. I have to move my samba servers from a Samba PDC environment to Active Directory (AD) where they will

Hi, I have setup samba+ldap an almost everything went well, accept the fact, that there was no administrative account from the beginning. So I just created one using smbldap-useradd. samba-pdc:~# /usr/sbin/smbldap-usershow administrator dn: uid=administrator,ou=Users,dc=rhhu,dc=local objectClass: top,person,organizationalPerson,inetOrgPerson,posixAccount,shadowAccount,sambaSamAccount cn:

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

I am trying to configure a samba with openldap as a PDC on SuSE9.1 with samba-3.0.4, openldap2-2.2.6, samba-winbind-3.0.4, following the book Samba-3 By Example, by John H. Terpstra. I am getting errors "NT_STATUS_LOGON_FAILURE" from smbclient commands and "The username or password was not correct." from 'net' commands. Anonymous smbclient access seems to work, and I

Hello All, I am trying to get a Gentoo Linux system to join a domain run by a Mac OS X Server. I have set up kerberos and ldap as per the instructions in the Samba documentation and I am able to log in to the system using the info (getent finds the users, and kinit successfully connects), but I can't get Samba to join the domain and authenticate the users. When I run "net ads join"

Our Windows 2003 domain controllers and Samba member servers support both ipv4 and ipv6. Our DNS server resolves hostnames both to ipv4 and ipv6 addresses. Recently, this turned out to be a problem when within a regular Fedora 11 update, samba 3.2 was replaced with samba 3.4. samba-3.4.2-0.42.fc11.i586 to be exact. Everything Active Directory related stopped working and I had to stop winbind

I had winbind configured so that it could fetch users from AD. Everything was working properly, but something happened in the past couple of days (no change in the Samba config) I'm not able to diagnose. "getent group" enumerates groups, "getent passwd" doesn't. "wbinfo -g" returns groups, whereas I get this error when trying to get users: # wbinfo -u

Dear All, I have succesfully managed to have my kerberos configured n working without error when i say kinit Administrator and after entering password i get the # prompt so its works fine my krb5.conf -------------- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = BALADIA.LOCAL

Hello, I've been attempting to get this working all day. :) I have an RHEL3 machine connected to a Windows 2000 PDC as a domain member. I'm running samba 3.0.21c, compiled from an SRPM: # rpm -q samba samba-3.0.21c-1 When I try to list my users, I get this: # wbinfo -u Error looking up domain users Exit 1 Similarly, `getent passwd` fails to show any SMB users. But `getent passwd