similar to: Secondary groups and Posix ACL

I'm attempting to join a Samba 3.0.4 domain on a Debian linux box, with a Windows XP client. Problems 1) Can only get the join to work if I use the root account. On Win2k I can use any account in the Domain Admins group. 2) The join succeeds, the unix account and the smb account are created but the smb account is disabled, and the password contains all XXXXs. Joining the domain works

I've got a Samba PDC and a Samba domain member server. I successfully joined the domain, started winbind and run the wbinfo -p; wbinfo -t tests, both succeeded. But if I do a winbind -g I only get BUILDIN/group and if I do a wbinfo -u I get "Error looking up domain users". But ntlm_auth succeeds. So I'm a little confused. At this point this is a minor issue since

In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ winbind are talking to dc1 everything is great when talking to dc2 or dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required" and nothing works. I don't think its a samba config problem but my AD admins aren't real helpful in getting samba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Actually determined this was a CUPS issue. I split the CUPS and Samba servers, system load on the Samba box now averages about 0.3 while load average on the CUPS system is about 0.8 or 1. Thanks, Derek On Aug 28, 2005, at 9:47 AM, Jim Ross wrote: > Derek Harkness wrote: > >> Is it better to setup lots of small print servers or one

When setting up an LDAP PDC do I have to have both user and machines in the ou=People container? Here's what I've got. LDAP Tree ou=People,o=umd.umich.edu ou=NIS,ou=Groups,o=umd.umich.eud ou=machines,ou=Samba,ou=Services,o=umd.umich.edu ou=Idmap,ou=Samba,ou=Services,o=umd.umich.edu smb.conf (ldap stuff) ldap delete dn = no ldap suffix = o=umd.umich.edu ldap

Hi @all, I have some question I can't find a explanation. I have a standalone Samba3 as PDC. It works perfect with LDAP. Now I want to implement Policies. 1) Is it possible to use GPO from ads ? And if so, where to store this policies. 2) Or can I only use policies created with poledit from NT4 which should be stored in NETLOGON. Any help or links about this would be apreciated.

I've been googling for a while now and haven't found a decent answer to this question. How do I allow users to join the domain without handing out a domain admin level account? Is there someway to limit what other domain features this account has access to? Thanks, Derek -------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type:

Its weird, when i sat up (&(uid=%n)(mail=*@%{domain1.com})) as user_filter: auth: Debug: auth client connected (pid=14697) auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=3Ej8PkdRAgDAqAG3 lip=192.168.34.10 rip=192.168.34.18 lport=143 rport=59394 auth: Debug: client passdb out: CONT 1 auth: Debug: client in: CONT<hidden> auth:

hey, I can add and delete users using smbldap-tools just fine. However, I can't log into the machine using the users I created using the tool:'smbldap-useradd -m testuser1' and set a password using'smbldap-passwd testuser1' I tried the follwoing: [root@eaglex root]# ssh testuser1@eaglex testuser1@eaglex's password: Permission denied, please try again.

hi I'm trying to configure my samba server and its clients to leave the user profiles on the server if a user logs on/off. Windows (2000) seems to synchronize the local profile every time a user logs on/off, which can't be disabled. so, i thought, why not use this synchronize "feature" to synchronize the _same_ files ( - or then - don't touch anything ? ) I searched the

CentOS 6.5, dovecot 2.0.9-7 I used http://www.linuxmail.info/postfix-dovecot-ldap-centos-5/ to configure LDAP authentication for postfix and dovecot. I can log in to dovecot via IMAP, but it cannot read messages. It does wind up creating alternate directories though: [joliver at localhost ~]$ sudo ls -l /var/vmail/ total 8 drwx------. 3 vmail vmail 4096 Sep 10 15:00 testuser1 drwx------. 3

Hello list, I'm stuck since 2 days and I have no clue how to troubleshoot and solve that problem. Any help really really appreciated. Scenario: ========= I am using Samba 4.1.12/sernet on DC1 (172.19.100.1) and DC2 (172.19.100.2) with default [netlogon] and [sysvol] share only. I installed an additional samba4 server with fileserving role which is called MEMBERSRV1 (172.19.100.3), which is

I think I've answered my last question by changing mail_location But I'm still getting duplicate mailboxes: [joliver at localhost ~]$ sudo ls -l /var/vmail/ total 8 drwx------. 3 vmail vmail 4096 Sep 11 10:30 testuser1 drwx------. 3 vmail vmail 4096 Sep 11 10:36 testUser1 The cn for my user is 'testUser1', and that's where postfix writes mail. But dovecot wants to use

This maybe more appropriate on the developers list but I'll ask here first. Anybody know if any improved support for AFS is being added to either samba 3 or 4? We currently share all user home directories, shared files, web sites, etc. etc. from AFS using Samba. This setup is working great, thank you to everyone involved!! I'm just concerned that AFS support might not make it

Okay I don't think what I want to do is possible but here goes. I want to deploy a samba domain for my windows clients, but I want samba to use AFS on the back end. But AFS requires kerberos to get tickets and tokens. So is there anyway to make this work. I personally don't care if samba accepts kerberos tickets from the client or not, but a ticket and AFS token will need to be

I am attempting to set the SePrintOperatorPrivilege right on my RHEL 5.2 samba server and need some guidance. The samba box is currently joined to an AD forest in which I have a delegated OU, I do not have a Domain Admin account. Samba seems to want/need an Admin account in order to make changes to the server configuration such as rights. So the question is. Is there away to set a

Has anybody found a fix for the Access 2003 printing? I've got a couple of work arounds but neither is a good long term solution. 1) Set the default printer to something other then a Samba print queue. 2) Map the Samba print queue to a dos LPT port. Thanks, Derek To boldly go where I surely don't belong. -------------- next part -------------- A non-text attachment was scrubbed...

Hello All, I'm integrating an existing unix environment into an exist AD environment. I'm thinking of switching from nssldap to nss_winbind but have one problem. My user's home directories are in the format of /home/user/<$first letter>/<$second letter>/<$username> (/home/user/ d/h/dhaknes). Looking at the template homedir it doesn't appear that I can

I have made some changes to try and get the PDC working and now I am down to one thing where I believe the problem lies. All such documents on the setup show that the addition of users to the PDC should be added to passwd as well as LDAP but for my system that is not the case. I am running the listed software: Fedora Core 4 OpenLDAP 2.2.23 Samba 3.0.14a This is what currently happens when I

I can't get my Samba PDC (FreeBSD 7,0-BETA3) changing UNIX passwords from Windows clients (Ctrl-Alt-Del). I now have the password chat debug active and I have loglevel 100. I am not certain about the syntax in the password chat. But if I from a console try to change the password of a given user (here testuser1), I see these lines: mflserver3# /usr/bin/passwd testuser1 Changing local password