similar to: best road to go... Win2008R2 +samba4

Am 14.09.2016 um 18:23 schrieb Michael A Weber: > >> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba >> <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >> >> >> >> Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >>> Experts— >>> >>> I’m attempting to export a keytab for a created

> On Sep 14, 2016, at 12:57 PM, Achim Gottinger <achim at ag-web.biz> wrote: > > > > Am 14.09.2016 um 18:23 schrieb Michael A Weber: >> >>> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >>> >>> >>> >>> Am 14.09.2016 um 05:53

Hi, Why modifying a working conf when you can build your DC on others systems (VM)? That could be really nice to learn but you add a lot of complexity in your process, I think. Why not using DLZ to access your AD zones? I expect Bind to be able to mix its behaviour: flat file for some zone, DLZ for others... Now regarding: update-policy { grant AD.DOMAIN2.SUBDOMAIN.TLD ms-self *

On 27/05/16 14:37, Jeff Sadowski wrote: > I had left my config alone for now and dhcp still writes to > DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able > to write to bind in its zone. > > [2016/05/27 07:30:06.738434, 0] > ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) > ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - >

Hi, I have been trying to use Winbindd in SLES 11 SP3 (Samba version 3.6.3-17.25.1) to fetch AD (Windows 2008 R2) identities into the Linux box and currently running into some problem w.r.t domain local groups and thought I could get some help here.. I have a two domain setup, in which DOMAIN1 is the parent domain and DOMAIN2 is the child domain. I have 2 users DOMAIN1\user1, DOMAIN2\user2 and

Consider this topology domain1-server1 domain2-server2 | | laptop - domain1-server1 ---- domain2-server1 Laptop has two ssh identities, domain1 and domain2. I don't wish to store identity locally in any of the servers. As far as I understand, there isn't any way to limit ssh-agent to allow only signing

On 27/05/16 17:11, Jeff Sadowski wrote: > https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped > me find that I needed to add > > options { > [...] > tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; > [...] > }; > That seems to have fixed my errors with DNS > > On Fri, May 27, 2016 at 9:26 AM, Rowland

On Fri, May 27, 2016 at 10:23 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 17:11, Jeff Sadowski wrote: > >> https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD >> helped me find that I needed to add >> >> options { >> [...] >> tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; >>

> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > > Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >> Experts— >> >> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error: >> >> ERROR(runtime): uncaught exception - Key table entry not

I had left my config alone for now and dhcp still writes to DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able to write to bind in its zone. [2016/05/27 07:30:06.738434, 0] ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - NT_STATUS_UNSUCCESSFUL If you are right about it using kerberos I think I am

So I had dhcp, radvd and bind working together nicely and now I threw in a wrench of setting up an AD DC I want to change my dhcp server setting to put client's into the new AD Domain but am a little hesitant as it is all working so nicely with DDNS I'm starting to think all I need to do is edit just my dhcpd.conf and change occurrences of DOMAIN1.SUBDOMAIN.TLD to

Hi, On Fri, 2 Jun 2017, Sandbox wrote: I have two LDAP domains, which has some equal users, eg: > > abc at domain1.com > abc at domain2.com > > This works fine except one thing: i cant set up the ldap query to choose > the correct maildir if the user names are equal. > | Well the most problem is that you have two LDAP servers with different content. Unfortunately i cant

https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped me find that I needed to add options { [...] tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; [...] }; That seems to have fixed my errors with DNS On Fri, May 27, 2016 at 9:26 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 14:37, Jeff Sadowski wrote: >

Hello all, we have a samba server on a SLES9 linux box. It is connected to an active directory with multiple trusted domains. With this server, we have strange problems with users/groups in others domains. The users/groups listed in smb.conf that are part of trusted domains are not take in account to access the shares. We cannot as well set ACL correctly on filesystem. This is not an

I'm able to consistently reproduce this problem/behavior, but not workaround or fix it, yet. Rich On Wed, Oct 19, 2011 at 7:41 AM, Rich <pgnet.dev+rich-dovecot at gmail.com> wrote: > I've made some progress, but quota 'Limit' is still not fully > functioning for me. > > A couple of changes have helped: > > Specifying a "%u% as username format, >

Hi Samba team! I tried with 3.0.22 and now with 2.0.24 and I got the same error. When I try to connect to my file server using a user from a trusted domain (DOMAIN2) my winbindd dies: [2007/02/12 15:14:26, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(328) [ 0]: getpwnam domain2+asspw [2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_lmhosts(962) resolve_lmhosts: Attempting lmhosts

On Mon, Oct 24, 2011 at 11:14 AM, Rich <pgnet.dev+rich-dovecot at gmail.com> wrote: > I'm able to consistently reproduce this problem/behavior, but not > workaround or fix it, yet. > > Rich > > On Wed, Oct 19, 2011 at 7:41 AM, Rich <pgnet.dev+rich-dovecot at gmail.com> wrote: >> I've made some progress, but quota 'Limit' is still not fully

Hi, I have two samba domains. On one member of DOMAIN1 I set up a share "intranet" with valid users = +"DOMAIN1+webmaster" +"DOMAIN2+TestGroup" Winbindd is running. When I try to access the share from a DOMAIN2 workstation permission is denied. When I look at the logfile, I see that the server tries to find the group of DOMAIN2 (TestGroup) in ldap of the local

not possible make operation with dovecot version 2.x as was possible in version 1.x: requisites description: connect to dovecot service on IP1 - dovecot must serve users that related to domain1 located in database1 connect to dovecot service on IP2 - dovecot must serve users that related to domain2 located in database2 login must be with username that form not as "user at domain" but

Dear Sir, I'm having problems with the implementation of prefetch userdb. Following the directives from the site (http://wiki2.dovecot.org/UserDatabase/Prefetch), I am unable to avoid the second search to the user backend (ldap). Could give me any advice or tips to achieve my goal? Thanks a lot, Hector M. Jacas My ldap has the following structure: search base: