similar to: Samba 3.5.6: can't follow symlinks on shares

Hello, After setting up Samba 3.5.6 on CentOS 5.5 (built from sources) I have noticed a strange problem. Windows 2003 servers participating in this Samba domain do not receive domain groups list when I, say, try to assign security credentials for a file/folder. When I choose domain as source, search reveals only technical group names and individual domain users names. No domain group names

Hello, Thanks to everyone who responded. On 19.07.2018 17:55, Rowland Penny via samba wrote: > On Thu, 19 Jul 2018 16:36:45 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> Given: >> - Samba 3 domain is set up (runs on Samba 3.6.23, domain name "LAN") >> - Windows 10 Enterprise workstation >>

Hello, To harden security, I've modified the smbldap-passwd script so that it update sambaPwdMustChange, sambaKickoffTime and shadowExpire fields; also, a simple script notifying users with expiration date approaching has been set up. I have also added a call to cracklib to check password strength prior to applying it. It all works well, but the task it to force users to use unique password

Rowland Penny via samba писал 2018-09-05 15:56: > On Wed, 05 Sep 2018 15:26:30 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: >> >> Exactly that. I need to create a separate domain; after all the >> checks are done that switching to it works, the computers will rejoin >> the new domain. Our Samba 3 domain is used for years; since Window

Rowland Penny via samba wrote 2018-07-19 20:47: > On 19 Jul 2018 09:21:46 -0400 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> Thanks to everyone who responded. >> >> On 19.07.2018 17:55, Rowland Penny via samba wrote: >> > On Thu, 19 Jul 2018 16:36:45 +0700 >> > Konstantin Boyandin via samba

Rowland Penny via samba wrote 2018-09-06 14:37: > On Thu, 06 Sep 2018 12:22:11 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Rowland Penny via samba wrote 2018-09-05 15:56: >> > On Wed, 05 Sep 2018 15:26:30 +0700 >> > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: >> >> >> >>

L.P.H. van Belle via samba писал 2018-12-04 15:59: > Hai, > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >> Konstantin Boyandin via samba >> Verzonden: dinsdag 4 december 2018 6:35 >> Aan: samba at lists.samba.org >> Onderwerp: [Samba] WinbinD no longer available in Samba 4.7.6 >> >>

Rowland Penny via samba wrote 2018-09-06 14:50: > On Thu, 06 Sep 2018 12:47:02 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Rowland Penny via samba писал 2018-09-05 16:10: >> > However, are you sure you cannot use kerberos ? >> > What are your existing services ? >> >> to name most important ones: >>

Rowland Penny via samba писал 2018-09-05 16:10: > On Wed, 05 Sep 2018 15:46:04 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> One of Samba 3 -> Samba 4 migration task I am solving is changing >> authentication against new Samba 4 AD domain. >> >> Existing services use LDAP directory of Samba 3 to

Also: -H ldap://10.100.0.4 should probably be ldaps://URI You can potentially this in smb.conf, but that is definitely not recommended. https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC Kris Lou klou at themusiclink.net On Wed, Sep 5, 2018 at 2:10 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 05 Sep 2018 15:46:04 +0700

Hello, One of Samba 3 -> Samba 4 migration task I am solving is changing authentication against new Samba 4 AD domain. Existing services use LDAP directory of Samba 3 to authenticate. The simplest way to go would be just to replace LDAP credentials; however, I don't quite understand which LDAP credentials to use/how to create them for Samba 4 AD. Sample command against Samba 4 LDAP

On Tue, 04 Dec 2018 16:44:55 +0700 Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > Rowland Penny via samba писал 2018-12-04 16:28: > > On Tue, 4 Dec 2018 09:59:14 +0100 > > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > >> Hai, > >> > >> > -----Oorspronkelijk bericht----- >

On 28.07.2018 21:17, Rowland Penny via samba wrote: > On 28 Jul 2018 09:58:39 -0400 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> On 28.07.2018 15:18, Rowland Penny via samba wrote: >>> On Fri, 27 Jul 2018 19:50:55 -0500 >>> Ivan Rojas via samba <samba at lists.samba.org> wrote: >>> >>>> It is not

On 07.09.2018 11:43, Andrew Bartlett wrote: > On Fri, 2018-09-07 at 11:06 +0700, Konstantin Boyandin via samba wrote: >> Andrew Bartlett via samba wrote 2018-09-06 17:33: >>> On Thu, 2018-09-06 at 11:50 +0200, Slim Ontario via samba wrote: >>>> Hi, >>>> >>>> I've a migrated samba-ad on my test-machine. Is it possible to >>>>

On 28.07.2018 15:18, Rowland Penny via samba wrote: > On Fri, 27 Jul 2018 19:50:55 -0500 > Ivan Rojas via samba <samba at lists.samba.org> wrote: > >> It is not recommended to install samba AD in centos, in what >> distribution is it recommended to install? > > It's not that it isn't recommended to install AD on the Centos > Samba packages, it is that

On 21 Sep 2018 10:10:22 -0400 Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > Hello Louis, > > In fact, the shares mentioned in my original messages are used in > Windows-only. > > The accounts, however, are used in both Windows and Unix-type > environments (we have quite a zoo of OSes in active use); so we > actually use the Posix part of

Hello, After joining Windows 7 to a Samba 4 (AD), when logging on I experience 'Access denied' error accessing user profile. As a result, Windows creates temporary profile for the domain user (the profile is deleted upon logoff). The roaming profiles directory has been created according to instructions in https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles Note: the home

Hello, The below happens with Samba 4.7.* (didn't checked with other Samba 4 versions): Setup: Samba 4.7.* AD, two domain controllers, 'computer A' and 'computer B' are Windows 10 domain members. 1. A user (login 'username') logs in into domain for the first time, on a 'computer A'. Samba DC doesn't find existing profile directory and creates an empty

On Tue, 4 Dec 2018 09:59:14 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Konstantin Boyandin via samba > > Verzonden: dinsdag 4 december 2018 6:35 > > Aan: samba at lists.samba.org > > Onderwerp:

Hai, Now, i did not know you used the DC for the profiles here but yes it looks good. Small comment on point 3 and 4. 3) Its good, you might notice a few more rights there compaired to what i posted, thats because you have your profiles on the DC but the settings are good. 4) yes, the security is ok, i like the higher security setting and try to mimic the windows settings as much as