similar to: Samba 3.0.28a onwards "allow trusted domains" has no effect?

There is a samba compiled without winbind support, with the following options configured: workgroup = MYDOMAIN security = domain allow trusted domains = yes add user script = /usr/sbin/pw useradd %u -m -Y -M 755 When a Windows user MYDOMAIN\john connects to the samba server, he is mapped to the Unix user john. If there is no Unix user "john", it is created by the add user script. How

Hi there We have a bunch of Samba 3.0.10+ CentOS4.4 servers that are working 100% fine when connected to from users who are members of the same ADS domain our Samba servers are members of. However, users from other ADS domains (we are all W2K3-based) on our network cannot connect - they get NT_STATUS_ACCESS_DENIED. The shares they are trying to connect to have no share-level permission checks -

Thanks Rowland, I have removed from options, and amended the forwarders. [global] workgroup = <MYDOMAIN> realm = <MYDOMAIN>.CORP netbios name = <HOSTNAME> server role = active directory domain controller idmap_ldb:use rfc2307 = yes idmap config * : range = 3000-7999 ----------> If I remove the portion I get errors -> idmap

So if this is done, is edns configure also ? ? in resolv.conf add: options edns0 ? and, name.conf test these. ? ??????? //?The forwarded zone to the AD-DC DNS use these also. ????????//dnssec-must-be-secure?internal.domain.tld no; ????????//dnssec-must-be-secure 168.192.in-addr.arpa no; ????????// listen-on-v6 { ::1; };? // test what works best, if not all?ipv6 is disabled also?enable this

Hi all, I just installed dovecot-1.0_beta2 and love it! However, I've run into issues using multiple authentication databases. I use both pam (for users on my system) and sql (for virtual users). I've noticed that if I have system user "userabc" and virtual user "userabc at otherdomain.com" (two distinct users) and my "auth default" section contains these

Hi, I recently upgraded my servers from 3.0.28 to 3.0.31 trying to solve the winbind issue previously reported (Bug# 5551) but the issue is still happening in my servers. I have an ftp server (vsftpd), configured to use pam_winbind with krb5_auth and I see some random disconnects and my users cant login. My samba servers are member of a Windows 2003 domain. The relevant lines on my

Hi *, besides my dovecot maildir structure, that has been migrated from an Exchange server, I have an even older mail structure in an ancient uucp style. The program named CrossPoint I used for this isn't wideley known, but it used so called mpuffer files in a plain text format. It is the program I still use to write for example this mail. I wonder if there already exists a program or script

I'm finding this a little strange. I'm putting together a mail server that will (someday, hopefully) serve a lot of email addresses for a lot of domains. To make life easy, each account name is the full mail name ... i.e "joe at domain.com" instead of just "joe" Mail is stored in Maildirs, and the user account information is all in MySQL. Delivery is handled by

Hi all!!! I am trying to stablish a interdomain relationship, but i am having serious problem making samba and nt seeing domains in another network segments. Which is the best and easier way to configure samba to stablish relashionships between domains in differents network segments? For example i have domain A in network 192.168.101.0 and domain B in network 192.168.120.0. They are both under

Hi, I have a Mandrake 8.2 server with samba 2.2.5 installed. My server has ftp and the files some users upload I move them to another structure, this structure is shared via Samba with other users. I am in a W2k Domain.(We are in the process to migrate to linux). So, I have some users that move the files uploaded to their servers. A few days ago, a user reported me he couldn?t see the files in

Hi, I'm running winbind (3.0.28a) on SLES9 with heimdal Kerberos. Everything works fine so far. Now i need to have the host keytab generated by winbind to be in the default /etc/krb5/krb5.keytab in order to use nfs with kerberos security. The problem is i have set the parameter in smb.conf: use kerberos keytabe = true and as mentioned in man smb.conf i have set in krb5.conf

hi, I would like to know is it possible to make writing file to samba completely in kernel? I'm using a slow CPU (FA526) , and the memory copy is even slower. The reading performance is over 7 MB/s, with mmap and sendfile enabled, while writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is also about 4-5 MB/s. I use Oprofile to profile writing file to samba and found

Hi! I'm trying to convert my tdb-based idmap mapping to a LDAP-based one. This generally works as intended, with one exception - the highest uidNumber/gidNumber in use is not transferred, and this causes duplicate use of the same uid/gidNumber. Here's what I'm doing: 1) net idmap dump /var/cache/samba/winbindd_idmap.tdb > idmap.dump 2) Set idmap backend in smb.conf to

Hello. I'm facing an seemingly unsolvable problem on the Samba servers I administer (on Debian stable). Those servers are registered on a AD domain. They only serve files and are not registered as domain controllers. For some idendified users (always the same), Winbind periodically (but unpredicably) becomes unable to resolve their names, making their shares unavailable. A "net cache

I need helping again implementing samba4 ad and dns: Actually we have a dnsmasq server with dhcp/dns services for users on the lan, if we start to using the internal samba4 dns server to resolv names on the zone of DC server example mydomain.test.com we can use the actual dnsmasq to server another domains that we need ?, for example otherdomain.testing.com.ar If that is correct we need to

I have spent a long time looking into this and can't find the answer I'm looking for, so I'm asking here. I'm cutting the example down to just the bare minimums. This is NOT my actual configuration, but is sufficient for asking this question: How can I use dovecot's deliver LDA to deliver to virtual users, but then have unknown virtual users fall back to catch-all

Hello, I use both ser/asterisk . In fact i wish asterisk to forward all the sip requests which are not handled by domain=domain.tld in sip.conf Here is a diagram: The sip agents use the Sip proxy as an outbound sip proxy and domain=domain.tld . When the sip agents dial sip:user@otherdomain.tld so the request is sent to sip proxy and so to Asterisk. I wish Asterisk to Look up the

Hello Matt, I've had similar misfortunes too with interdomain trusts. I think you're working along the right lines since you seem to want to do the same thing as I. However the NT_STATUS_UNSUCCESSFUL is an error I always get when trying to connect to the IPC$ share of the PDC of the trusting domain. In my case the trusting PDC is a Windows 2003 Server. I know it's not an issue

I have a network where the domain controllers do not connect on port 139 Is there a way to have smbpasswd change the password without this? I am able to change the password using an ldap method in php ldap_connect ldap_bind ldap_modify_batch full source code here http://forums.fedoraforum.org/showthread.php?t=313554 however this does not allow the password to be set if it has expired.

Dear users, I have uploaded the new 3.0.25a packages compiled for sarge. At the same time I have removed older 2.2.x and 3.0.x packages for Woody. Support for back porting packages to Woody was already discontinued, but older packages were still provided. As these packages were not updated after the recent security issues, I decided to remove them to avoid pushing people to use outdated and