similar to: No subject

Hmmm...., i have made now a complete new install but the problem persists: ldap authentication works, but the host attribute is ignored. I have installed CentOS7 64bit with KDE. I did not do any 'yum update' or install of extra packages so far. these pam and ldap packages are installed: openldap-devel-2.4.39-6.el7.x86_64 openssh-ldap-6.6.1p1-11.el7.x86_64 openldap-2.4.39-6.el7.x86_64

I am still not understanding why your using MD5? Is it because everyone in InfoSec declared that everyone finally went from md5 to sha512 or what? -----Original Message----- From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Ulrich Hiller Sent: Monday, May 11, 2015 1:40 PM To: CentOS mailing list Subject: Re: [CentOS] ldap host attribute is ignored one more

Hi, I'm testing out Samba 3.0.25c with Active Directory using the rid idmap backend. In certain cases there seems to be a repeatable deadlock in winbind. I have a local user "ed" created with uid 100 and no user exists with uid 1001. Here's the behavior I'm seeing with wbinfo: # time wbinfo -U 100 S-1-22-1-100 real 0m0.047s user 0m0.014s sys 0m0.007s # time

one more thing: firewalld service and selinux are deactivated. On 05/11/2015 07:06 PM, Ulrich Hiller wrote: > Hmmm...., i have made now a complete new install but the problem > persists: ldap authentication works, but the host attribute is ignored. > > I have installed CentOS7 64bit with KDE. > I did not do any 'yum update' or install of extra packages so far. > >

Dear all, i have a problem with sssd in conjunction with ldap on a centos 7 x86_64 box. ldap works fine. I can login there as an usual user registred in ldap. I want now restrict the access with ldap's host attribute. This is beeing ignored. Still every ldap user can login, no matter what the host attribute says. I googled around and only found that sssd.conf need two lines: access_provider

Hi. I have problems using local groups on a SAMBA ADS member. I encountered the problem when I switched from Fedora Core 4 to Fedora Core 5. I'm using the FC5 samba-3.0.22-1.fc5 package. The SELinux is set to permissive mode (SELINUX=permissive), so this should not cause problems. I'm using same scripts for generating group mapping and add users to groups, as I used on FC4. The

Hi, I have been running a Samba AD PDC with BIND9_DLZ on a Debian system for a year now without problems, and in the hope for ability to create AD backups I upgraded the samba packages (along with other packages with minor updates). Everything seemed OK during the upgrade, all processes restarted, but soon after I found that PAM refuses to authenticate AD usernames. By checking the samba

First, many thanks for all who have already help me. I finally success to connect to a share from another computer after searching a lot. Arg isn't this marvellous? ;-) However, i succeed this while removing my account from the valid user in the share declaration. In the following example, authentification for mylogon success in both case. But i can only connect on myshare, while having a

I get the following error message when trying to add a user to samba using... smbpasswd -a user1 Unknown parameter encountered: "ldap bind as" Ignoring unknown parameter "ldap bind as" Unknown parameter encountered: "ldap passwd file" Ignoring unknown parameter "ldap passwd file" New SMB password: Retype new SMB password: Failed to setup a TLS session

Hello, Thank you Rowland, Yes, I wanted to anonymize smb.conf and missed to change IPGAD in MYAD on some lines, sorry Does "winbind nss info = rfc2307" is not used anymore, because of "idmap config ipgad : schema_mode = rfc2307" ? Best Regards, Ed ----- Mail original ----- De: "sambalist" <samba at lists.samba.org> ?: "sambalist" <samba at

Hello When I run following command on my samba DC: sudo samba-tool dns serverinfo localhost (or other DC on same domain) samba-tool asks for: Password for [MyAD-DomainName\root]: But there is no root user at the domain. Domain Administrator name at mu domain is "admin". If I enter admin's password for Password for [MyAD-DomainName\root]: promt - I get: Connecting to DNS RPC

Hi, I'm trying to get my new samba server running for a few days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 users, all having a unix and a samba NT password stored in the LDAP as well as a User SID and Primary Group SID assigned and stored in the LDAP, derived from the SID of the LDAP

Dear list members, i have installed a CentOS 7 x86_64 system. I want to let users authenticate over our ldap server. This seems to be working. ldap-username and ldap-passwords are accepted for the users configured in the ldap server. No problem. Now i want to restrict the access to users who have my centos-machine in their ldap host attribute. My problem is, that this host attribute seems to be

Hi Folks, I'm having a little trouble to put dovecot authenticating in ldap. My postfix and saslauthd are authenticating fine. Here is what I have in my main.cf: # Accounts accounts_server_host = $ldap_server_host accounts_search_base = $ldap_search_base accounts_query_filter = (&(&(objectClass=VirtualMailAccount)(mail=%s))(forwardActive=FALSE)(acco

Hi all, Please help Ive been wasting days at this... I am not trying to create a PDC, I am not joining an active directory, I am not needing samba schema in my openldap (or do I?), I am not trying to use winbind and idmaps for translations from SID to UID/GID, I just want my samba server which shares linux home directories to authenticate user+password against my existing linux based openldap

Dear Rowland, Please find a dump of smb.conf and resolv.conf of my centos 7 server : # testparm Load smb config files from /etc/samba/smb.conf Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] client min protocol = SMB2 client signing = required disable spoolss = Yes domain

I setup Samba a while ago in an active directory environment. There are many trusted domains (with a very lot lot of users and computer account), but i (my users) used only one, and all worked just fine Actually, some from others domains needs to connect to my shares. And even if i do not setupe any users, they cannot. So here are some few questions : I've this in my winbindd log file :

Sorry about my pretty stupid question :-( I should have been dug a bit deeper... And I actually discoverer the -U parameter shortly after sending the mail to the list. But I didn't know how to cancel it... Sorry about that... On Sun, Jun 10, 2018 at 1:20 PM Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Sun, 10 Jun 2018 12:38:43 +0300 > Alexei Rozenvaser via

Now for the next question. I think (hope?) that I am quite close now. In order to add a machine to the domain, I think that I need to add a record to samba's DNS table. But samba_dnsupdate isn't working: # samba_dnsupdate -d 5 INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5

Hello Rowland, I had a look on message log, when the winbind stopped. I found that an system update occured during the night, and then Winbind did not restart properly. ... /Apr 28 04:33:08 [localhost] yum[1232]: Mis ? jour?: samba-winbind-clients.x86_64 4.10.4-10.el7// //Apr 28 04:33:08 [localhost] yum[1232]: Mis ? jour?: samba-winbind-krb5-locator.x86_64 4.10.4-10.el7// //Apr 28 04:33:09