similar to: Issues With User Info and Authentication

I'm working on testing out using winbind in our environment for user info and authentication. Our 2K8 R2 AD DS set up has all of the rfc2307 attributes populated for objects that need to appear on the Unix machines and everything is working splendidly. One thing I'd like to know is, we have some instances where users' AD accounts are not the same as their unix id's (matching them

Hi Denis, thanks a lot! > you said that the zone is empty. It is not a problem per se but for some > time Bind-DLZ has been a bit more strict and ask for a NS record for > every zone. So you just have to create a NS field in your zone pointing > to one of your DC and you should be fine. Internal DNS does not have > this requirements. > > samba-tool dns mydc

On Tue, 1 Nov 2016 01:45:24 +0530 Pradeep Rawat <pradeeprawat85 at gmail.com> wrote: > I tried to use the smb.conf you mentioned but got same error. > We don't use Microsoft DNS (they just host underscore zones which > then gets transferred to *nix based DNS appliances) so is it required > to have the DC IP entry in /etc/resolv.conf? However, I tried adding > DC IP as

Still looking for some suggestions, recommendations or pointers on this issue. Kinda stuck with it. It was working well couple of months back and suddenly stopped working. No known changes were happned on both sides except installing and then uninstalling MS16-077 patch. Thanks, Pradeep On Tuesday, November 1, 2016, Pradeep Rawat <pradeeprawat85 at gmail.com> wrote: > We are running

hi all, I have been stuffing around with thsi problem for a couple of weeks now, without much success :) I am sure i am missing something simple. I have a Samba server setup as a member server in a 2000 domain. (samba 3.0.10) Samba is printing through CUPS and the printing works fine. when i click on "Printers and Faxes" froma windows xp machine, it takes about 30-60 seconds to show

Hi everyone, I'm requesting your help about an issue i'm faced with since 2 weeks. I've setting up a Solaris Server (Solaris 10 Update 6) with zoning. On a zone I've enable the samba service (samba v 3.0.28). In my smb.conf, my auth section looks like that : workgroup = Mydomain netbios name = MyComputer server string = MyComputer security = ADS use kerberos keytab = true

With the ubuntu security updates on Monday that broke everything, I downgraded my 12.04 3.6x samba packages on my NT4 DC - now my windows 7 domain members can join and function OK and am looking into a 14.04 client that was a member and cannot now join, and the downgrade also failed. So I got 4.4.2 source and built on the system and have tried to join, but it fails. Below is some debug

Hi Benedikt, > > I have to add a second DC to a Zone. > I use the sernet packages Version 4.11 on a debian 10 host. > > The bind refuses to start: > > root at addc-zone02:~# systemctl status bind9 > ? bind9.service - BIND Domain Name Server > Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor preset: enabled) > Active: failed (Result:

Hello, I'm using Samba 2.2.7a on RedHat 9.0. I'm trying to set-up universal logons between a Samba Server and a W2K SP3 DC, which has restrictanonymous=1. I followed the procedure as described at http://ftp.easynet.be/samba/docs/man/winbind.html - I managed to join the Samba server (MYSAMBASRV) to the domain (MYDOMAIN) - I used wbinfo with the -A switch to store the credentials of a

I keep getting this error when trying to do a" net ads join" or "net ads status". I am trying to get samba 3.07 to join win 2003 domain. I have been working at this for quite some time. I just installed fresh box with latest kerberos, openldap and samba on redhat 9 box. Any help/hints would ease my pain. Here is my smb.conf: (which I copied from Samba-3 by Example)

On 12/30/2017 05:22 PM, Paul R. Ganci via samba wrote: > 1.) net ads leave -U administrator > 2.) Remove the machine entry on the 1st DC (used ldbedit) > 3.) mv /var/lib/samba /var/lib/samba-client > 4.) mv /etc/krb5.keytab /etc/krb5.keytab-client > 5.) samba-tool domain join 2nd DC I tried this procedure and it just doesn't want to work. I have this error: >samba-tool

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

Hi, Since 1 month, I tried without any success to configure Samba. My problem is that winbind crashes when I list users and groups. And I think that it is linked to my trusted domains (wbinfo -domain=myADdomain -u works well). The error is the following : [2006/07/11 14:30:29, 3] libsmb/cliconnect.c:cli_session_setup_spnego(757) got principal=machine$@TRUSTEDDOMAIN.COM [2006/07/11

I have some hardware running CentOS 7 and Sernet Samba 4.7 that started out as a member server that I would like to make into a 2nd DC. However I am having trouble converting it because it seems I am not removing all the remnants of the client setup. What I thought I would have to do is this: 1.) net ads leave -U administrator 2.) Remove the machine entry on the 1st DC 3.) mv /var/lib/samba

Daniel R. Meigs wrote: > Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan > Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf.

On 04/05/2018 08:29 PM, Paul R. Ganci via samba wrote: > Back on February 28, 2018, I started a thread "User permissions of > profile/home directory lost" describing a problem occurring with my > wife's user account. Since that time the random problem has persisted > so I turned on some debugging. I have been able to determine that > somehow her account idmap is

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

On Tue, 26 Dec 2017 18:08:11 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > I have a problem that is now becoming very annoying. Namely I have a > Centos 7 member server running Sernet Samba 4.7.4 for which > everything seems to work except gdm or ftp logins. On the linux > client it seems winbindd is set up correctly. For example (the data >

Centos 6 Samba 3 smbldap-tools installed. LDAP directory not on local host. Example user LDIF: dn: uid=testuser at mydomain.com,ou=mydomain,o=ndtc mailHost: mailserver.mydomain.com loginShell: /bin/bash gidNumber: 500 uidNumber: 53112 uid: testuser at mydomain.com sn: user cn: test user mail: testuser at mydomain.com homeDirectory: /cust/mydomain/users/testuser gecos: test user,,662-6123

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression