similar to: few quick domain questions

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

I would like to dnat certain protocols (HTTP, HTTPS, SSH) to the contents of an ipset (lan:+serviceshost or similar) where the ipset is ensured to contain only one host, but can be changed dynamically when services are in maintenance mode and go to the "services are down" message on another server. Will this work, or am I barking up a fish here?

so I have some local users that I'd like to show up in my samba domain a bit more properly, but it's infeasable to add their accounts to the ldap directory proper. I've tried to create an idmap entry (probably wrong) and a structural SID with a sam account pointing to the numeric UID and a proper name for the unix account, but it still shows up as UNIX-USER/accountname. what am

I found a fancy, easy (seeming) way to add printer drivers in windows 7 since the old methods don't seem to work anymore. if you run mmc, you can add a snapin called print management, which enables you to manage various things (drivers, forms, ports, and printers to be most important). Problem is, I can't figure out how to use the "Drivers" method to add drivers. I get a

Thanks to both of you - exactly the piece I was missing. -----Original Message----- From: tms3 at tms3.com [mailto:tms3 at tms3.com] Sent: Monday, January 10, 2011 12:52 PM To: Christ Schlacta Cc: samba at lists.samba.org Subject: Re: [Samba] Reestablishing trust with PDC > > > you haven't tried experimenting with backing up and restoring the > samba password cache. look in

how to do only users from ldap? i'm not running in domain mode, I'd just like to be able to have the same username and password for users from ldap. there are no machines, and nothing else, just users and groups. all the guides I find have machines in ldap too, and require domain mode, I'm not sure which pieces need tobe changed.

I have some shares on a media server that are considdered "Local, offline content", namely they should be accessible if the rest of the network is down, and each system has it's own group of users who are allowed to maintain it. the media servers in the livingroom are only for my wife and I, but each person can modify the one in their own bedroom and noone elses bedroom.

I''m converting my network from a "one interface per segment" to a "single connection with vlans", well, some hardware I have requires using different vlan IDs. suffice it to say I need bridges to connect a few different vlans that should all be one but can''t be because of firmware constraints. so my first step is to get shorewall to know about bridges.

I have an admin machine, and a backup server which does backups. The backup server has IPMI so I can do lights-out admin, and I want to allow this from the admin machine only. IPMI is completely unfirewalled, and so it must have a different class C than working networks.... this is just how it is. I''ve set the IPMI IP on the backup server to 192.168.10.4, and created a virtual

I am in the process of building a new machine to replace several older servers. I am considering running several virtual servers on one box, all linux for host and virtual machines using VirtualBox. Is it possible/advisable to configure shorewall on the host to act as a firewall for the virtual machines, each having one or more static public IP address? Any pointers, suggestions and/or

I've got a standalone host with an SID that matches exactly a domain SID. for some (fairly obvious) reason, windows machines get confused by this, so I need to change one of the two SIDs. I decided (for simplicity's sake) to change the machine. it broke a bunch of permissions in some silent way, and I couldn't solve a printing related issue as a result (see my other post).

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ This document has provided more information to me than I can adequately express, and as masochistic as it sounds, I'd kinda like to pop a copy on my nook and devour it. along with any of the other docs hosted on the samba website. has anyone prepared epubs of the documentation? if not epubs, than at least xhtml files in a zip

None of my systems can use lld2d to map the network when connected via wireless, but it works fine over the wireful network. the wireless is client -> hostapd -> ath5k -> bridge -> kernel with shorewall handling the bridge and kernel, as best I can explain it. on the bridge is also a wired device and a bunch of other PCs. the wired PCs can all map using lld2d just fine. lld2d

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

Hello, at my universities CS computer pools we're trying to migrate our samba3 based NT domain to AD with samba4-rc1. In the past we had a little script which our users could run on their own from their linux account which created a samba user with their own uid/gid and set their password (via smbpasswd). We're trying to recreate this behaviour with "samba-tool user create"

Hai, ? Just a quick question, maybe simple, but im not all there with my head.. ( hard night )... And last night my Samba 3 PDC decided to start dying..? the disk are dying..? :-(( so im a bit in a hurry.. I have 2 BDC's also in the old NT4 domain?running atm, was it a simple, down the PDC and set the bdc smb.conf to master? Its a ldap based network, and the ldap is on all my servers

Hi there I hope that you understand by English. I'm a Rooky and don't know Samba very well. I installed the newest version 3.0.10 on my SuSE Linux 7.3 machine and it works very well. I make User- and Passwort-Requests with Samba (winbind) for the Squid-Proxy. Now always work's well but I get the following error message from log.winbind: [2005/01/24 11:05:52, 4]

Hi All, Has any one got an idea of how to make clients automatically find the BDC when the PDC is stopped. Both PDC and BDC are running by Samba authenticating again a LDAPSAM backend replicated on both the PDC with master LDAP database and BDC with replicated LDAP database. But when I stop PDC the clients are not detecting the BDC broadcast. I can see that the replication is of

Hi, Is it possible to make samba act as a BDC yet?? Cheers ------------- Kristyan Osborne IT Assistant Manager Longhill High School ------ Computers are like airconditioners: They stop working properly if you open windows. Win95: A 32-bit patch for a 16-bit GUI shell running on top of an 8-bit operating system written for a 4-bit processor by a 2-bit company who

I am trying to configure puppet with LDAP repository . I have set puppet schema and I have also added node definition at LDAP. Here is my configuration details . ############################################################## Puppet.conf node_terminus = ldap ldapserver = 10.250.11.127 ldapbase = ou=Hosts,dc=xyz,dc=com ldapassword = secret