similar to: ldap, shared passwords, no domains?

so I have some local users that I'd like to show up in my samba domain a bit more properly, but it's infeasable to add their accounts to the ldap directory proper. I've tried to create an idmap entry (probably wrong) and a structural SID with a sam account pointing to the numeric UID and a proper name for the unix account, but it still shows up as UNIX-USER/accountname. what am

I've got a somewhat special domain (servers only, no clients, for unified passwords stored in ldap and unix passwords are in there too), and I'm looking at my directory and there are a few things I don't quite understand, or that I need some clarification on.. 1) these "Domain Admins" and "Domain Guests" and "Domain Computers" groups.. do they NEED

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

how to do only users from ldap? i'm not running in domain mode, I'd just like to be able to have the same username and password for users from ldap. there are no machines, and nothing else, just users and groups. all the guides I find have machines in ldap too, and require domain mode, I'm not sure which pieces need tobe changed.

I have some shares on a media server that are considdered "Local, offline content", namely they should be accessible if the rest of the network is down, and each system has it's own group of users who are allowed to maintain it. the media servers in the livingroom are only for my wife and I, but each person can modify the one in their own bedroom and noone elses bedroom.

I found a fancy, easy (seeming) way to add printer drivers in windows 7 since the old methods don't seem to work anymore. if you run mmc, you can add a snapin called print management, which enables you to manage various things (drivers, forms, ports, and printers to be most important). Problem is, I can't figure out how to use the "Drivers" method to add drivers. I get a

I have Samba running without a PDC and I have some questions about the advantages for implementing one with Samba vs. the problems and disadvantages. Perhaps some kind souls can help me determine whether I should do this or not. We have three offices connected by a Checkpoint VPN, plus people "on the road" using their SecureClient tool. We want everyone to be able to get to all the

Hello, I have a few questions. I have network like this: (A)---------(MS)--------(SS)-------(B) | | inet (C) Ms and SS are linux servers with samba. others are workstations with WinMe. Can I make all subnets and all computers to see all computers on all subnets without using WINS? So A should see SS, B and C. Because between MS and SS is very long network

I would like to dnat certain protocols (HTTP, HTTPS, SSH) to the contents of an ipset (lan:+serviceshost or similar) where the ipset is ensured to contain only one host, but can be changed dynamically when services are in maintenance mode and go to the "services are down" message on another server. Will this work, or am I barking up a fish here?

> > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Sat, 19 Apr 2003, G. Armour Van Horn wrote: > > > I'm trying to create a single structure that will serve the entire > > organization, using LDAP replication to keep the users and groups > > straight, which has it's own challenges, but the big mental > block here > > is the domains

Hi all, I got a new assignment today. My task is to install LDAP instead of NIS in our network, consisting of Solaris, Linux and W2k. Our actual setup is like this: Accounts are kept on a Solaris-server and served with samba and NFS. Two PCs serve as PDCs, running NOT samba on unix but a real W2k. Special MS-PAM-modules on the Solaris-server are used to synchronise accounts and passwords with

James: (Again someone correct me if I'm wrong) PAM allows local access to the Samba machine as well as authenticating Samba users. Winbind *only* allows for Samba access. This is why I chose *not* to use PAM in my setup. I don't want normal users to have local logon access to *MY* servers. <evil grin> With Winbind, you don't need PAM at all. If you're planning on

Hello Campers! Is it just me or does Camping init the session twice on a redirect? If I have an app and when the user visits it for the first time, a session is generated. Afterwards I redirect the user in a service (that basically does auth) and he gets bounced to the login page - but when I arrive at the login page my SID somehow has changed :-( so there is a stale session dangling

Hi Igor, Once again, thanks for keeping up with me. I have been migrating my master ldap server to 2.1 version so to keep it the same with the PDCs version of LDAP. Now they are the same. I have rectified such that "wbinfo -u" on both sides worked now. I am made "net rpc trustdom list" worked. It was not working before. I had to put "stuadmin = root" in the

The interesting part is that PAM nor the SMB auth plugin for Apache requires you to be a member of the domain. However, the caveat with pam_smb_auth is that you have to have a unix account for every windows user you want to authenticate. I guess the behavior I'm trying to achieve is the one achieved with the Apache plugin: 1) Doesn't require you to be a member of the domain 2)

Hi, I'm having some trouble connecting the SMB networks on two LANs that are connected over a "slow" (DSL) link: Network B: 172.16.0.0/24 Domain B: office Network A: 172.16.1.0/24 Domain A: home gate.office and gate.home are the respective networks' NAT gateways connecting to the internet over ADSL lines. The private IP spaces are connected to each other via an ipsec tunnel

Hey all, After setting up a migration server (a server which will act as a test for a Samba 3.x environment), so we can make sure our migration from Samba 2.2.x to 3.x goes as smoothly as possible, I've hit upon a problem, now I am not sure whether this is the fault of Samba (my configuration) or NT4 or whether this is infact designed behaviour for both/either servers. I'd like to

Actually, I do agree with you about Microsoft. But they have so many users that their terminology should not be ignored. Here are a few more views: https://www.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.performance/natl_lang_supp_locale_speed.htm https://docs.oracle.com/cd/E23824_01/html/E26033/glmbx.html

> On Sat, 5 May 2007, Aaron Gray wrote: >> It would be good to have a mailing list for test results where 'make >> check' >> results could be posted so that there is some reference and people could >> avoid repeating builds. > > llvm-testresults :) Great, feeling silly, I'll signon to that then :) Aaron

Greetings, I've been debugging the following scenario for some time now, and I'm slowly runing out of ideas. If anyone would suggest anything helpful... I'd be grateful. Anyway, here's the setup: windows 2003 AD domain running in 'windows 2003 native' mode + a few Solaris 8 servers with Samba 3.0.0. All sambas have computer accounts in windows' domain, and have