Displaying 20 results from an estimated 7000 matches similar to: "Group membership updates"
2009 Oct 09
2
AD Integration woes - rfc2307 data not being honored
Red Hat Enterprise Linux Server release 5.2 (Tikanga) - x86_64
Samba - 3.0.28-0.el5.8
Objective: To have samba authenticate against AD and utilize the values set for the AD rfc2307 schema.
Problem: Values stored in AD are not being used.
The samba server has successfully joined the AD, but when I do a getent passwd | grep <user> the uid, none of the values returned match what is stored in
2009 Oct 09
1
Domain trusts "forgetting" trusted users
I am running Samba ver 3.0.33 on Solaris 10 (sparc) as a PDC with LDAP
for the backend for both samba and unix accounts.
I have also set up a trust with an Windows domain- lets call it
WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in
mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS
domain, not not vice versa.
I had also tried setting up trusts with
2011 Aug 12
4
3.6.0 winbind issues
Testing 3.6.0 on a member server of a 3.5.8 domain shows some strange problems.
With the standard:
idmap config * : backend = tdb
no results are returned by getent, and wbinfo does not always
work, also no winbind_idmap.tdb file is ever created.
by changing to:
idmap config * : backend = rid
or
idmap config * : backend = hash
results are obtained but are the same regardless of
2008 Feb 13
2
Access denied when setting permissions
I have a windows 2003 AD domain and a server joined to that domain.
Winbind is being used as an idmap. Most everything seems to work fine.
Winbind gets user info correctly:
[root@samba ~]# wbinfo -u
TESTDOMAIN\administrator
TESTDOMAIN\guest
TESTDOMAIN\support_388945a0
TESTDOMAIN\krbtgt
TESTDOMAIN\swhaley
TESTDOMAIN\test
[root@samba ~]# wbinfo -g
BUILTIN\administrators
BUILTIN\users
2009 Nov 17
1
Samba trusts, mapping issue, and pam crap domain
I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for
the backend for both samba and unix accounts. Assume the samba SMBPDC is
called "PDC."
I have also set up a trust with an Windows domain- lets call it
WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode
for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not
vice
2008 Dec 04
1
Join multiple CTDB managed Samba servers into Active Directory
Hi ,
I have set up a 2-node CTDB cluster serving NFS and CIFS authenticating
Windows and Linux users via Active Directory.
The setup works fine, except only one server in the CTDB-cluster is able to
join the AD domain at a given instance. If you manually add the other server
into AD, the already connected server gets disconnected. There is no
specific error message logged in /var/log/message or
2018 Jul 16
2
Need advice on upgrading from 4.3.11 to 4.8.3
> Hi all,
>
> We have a Samba AD DC service running on Ubuntu 16.0.4 with Samba
> 4.3.11. We are planning to upgrade it to a recent version, probably
> 4.8.3.
>
> I think that I have two options:
>
> a) Package upgrade via 3rd party repositories (Louis Van Belle's repo)
> by following wiki.
>
> b) A fresh install of 4.8.3 on another VM then join it to
2009 Feb 21
3
dovecot auth
Hi,
I'm using dovecot with a passdb-file .
When I login using : test at testdomain.com I notice dovecot strips off the
domainname and looks up everything in front of the @ in his
passdb-file...
So I went on to configure the following in my dovecot.conf :
auth_username_format = %u@%d
restarted dovecot, but he still strips of the @ and the domainname ...
LOG (sorry for f* up format) :
2015 Apr 14
2
Dovecot and recipient_delimiter
On 4/14/15, J. Echter <j.echter at echter-kuechen-elektro.de> wrote:
> Am 14.04.2015 um 14:04 schrieb J. Echter:
>> Hi,
>>
>> we're using thunderbird as our client, it has the functionality to
>> sort spamassassin tagged mails in a folder called 'Junk'.
>>
>> I have this folder on my dovecot server and i'd like to use the
>>
2008 Nov 27
3
SMBD not authenticating against Active Directory
Hi,
Iam trying to setup Samba version 3.2.3 on Redhat (RHEL5) server to use
Active Directory for authentication. I followed the instructions from
article in following website:
http://technet.microsoft.com/en-au/magazine/dd228986.aspx
Setup Winbind + Samba + Kerberos and it seems to work fine. I can see the
users in Active Directory through winbind as well as authenticate users
using NTLM
2015 Apr 14
2
Dovecot and recipient_delimiter
Hi,
we're using thunderbird as our client, it has the functionality to sort
spamassassin tagged mails in a folder called 'Junk'.
I have this folder on my dovecot server and i'd like to use the
recipient_delimiter feature to get my spam/junk mails directly to this
folder.
what i have done yet:
dovecot.conf:
plugin {
recipient_delimiter = +
}
postfix: master.cf
dovecot
2018 Jul 24
1
Tracing the consequences of overlapped id mappings
Hi,
I'm trying to find out consequences of overlapped idmap settings that
used with 4.3.11 DC's. I'm about to upgrade these DC's to 4.8 version.
Before deploying new DCs, I want to make sure that any side effects
regarding id map settings will be left behind.
# ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber \
| cut -d' ' -f2 | sort
0
100
3000000
2020 Jun 17
2
CentOS 7.8 samba member server does not join and populate with correct FQDN
Joining member Centos 7.8 Linux server with 4.10.4-10.el7 or higher appears to ignore client FQDN when AD domain does not match client domain name.? For example Active Directory Domain is ad1.testdomain.com and the client member server FQDN is? testhost.clients.testdomain.com.? When joining the domain? DNSHostName attribute in AD shows testhost.ad1.testdomain.com when it should be
2018 Oct 31
2
WERR_DS_DOMAIN_RENAME_IN_PROGRESS - Join Failed
Hi,
I'm trying to join a Samba 4.9.1 Debian Strech installation (also tested
with 4.8.6) to a Windows 2012 R2 Server which runs in 2008-R2 functional
level. This is a production system and it is going to be first Samba DC
in domain. There is currently two Windows DC's in domain. All FSMO
roles hold by DC1.
It seems there's something going on with Widows DC's bu I'm not able
2019 Jan 10
1
mixed versions, mixed UIDs
Okay, so I've now read 'man idmap_rid'.
It states that the use of the base_rid parameter is deprecated, so does
that change ID formula to this?
ID = RID + LOW_RANGE_ID
Assuming that the default value for the now-deprecated base_rid is 0.
Following the example on the man page, I am going to try this:
idmap config * : backend = tdb
idmap config * :range = 1000000-1999999
idmap
2018 Oct 31
2
WERR_DS_DOMAIN_RENAME_IN_PROGRESS - Join Failed
>
> OK, get the 'Windows sysadmin' to go to the 2012 DC and run
> 'rendom /end' on it, see if this fixes your problem.
>
> Rowland
Thanks Rowland, that did the fix the problem related with
WERR_DS_DOMAIN_RENAME_IN_PROGRESS error. But the problem evolved into a
new one: "WERR_DS_DIFFERENT_REPL_EPOCHS"
...
Starting replication
Join failed - cleaning up
2002 Jun 17
2
Method to verify existance of trust account?
I'm still fighting with getting a Samba server (RH Linux 7.2, kernel
2.4.9-21, samba 2.2.4) to join an NT domain (NT 4.0, SP6). Everything I've
read in the documentation indicates that this works well and readily, but I
cannot get it to work.
The error message received when attempting to join a domain is:
./smbpasswd -j TESTDOMAIN -r SMBTEST
cli_net_auth2: Error
2000 Mar 21
0
SAMBA on Solaris combined with WinNT4 Domain
Hello
I have a problem with connectivity between Samba and NT.
When I do a net view on an NT box like: "net view \\TESTSERVER" the system
asks me for a username and password.
Why is Samba asking for a user and password when on both system the same
user and password exists.
Im using the option EnablePlainTextPassword on WinNT.
After typing the username and password (same as I used to
2006 Aug 16
1
help debugging TLS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
hi,
i've built dovecot latest cvs on OSX 10.4.7. i'm making a 1st attempt @
trying/failing to get TLS operation up-n-running ...
my install's OK:
Install prefix ...................... : /usr/local/dovecot
File offsets ........................ : 64bit
I/O loop method ..................... : poll
File change notification method
2018 Nov 26
0
Replace AD DC FS with 2 new servers
On Mon, 26 Nov 2018 17:27:29 +0100
Mark Amundsen via samba <samba at lists.samba.org> wrote:
> > >
> > > Is 'idmap rid' a better choice than ad? Can I still copy files
> > > with rsync in that case or will file ownership be mangled?
> >
> > Quantify better ?
> > One isn't really better than the other, they are both usable, but in