similar to: Samba4 migration issues (wbinfo errors and UPNs)

Am 26.02.19 um 12:26 schrieb Ralph Böhme: > On Tue, Feb 26, 2019 at 11:19:45AM +0100, Alexander Spannagel via samba > wrote: >> The huge delays are seen, when user isn't known to sssd and winbind >> tries to look that user without explicitly a domain given and the >> option "winbind use default domain" is on it's default of "No" in >>

Greetings all, I've been a long term user of the samba, ntlm, winbind, and active directory as the backend authentication mechanism for a squid proxy server. Recently, a challenge has presented itself and I am still seeking an answer. Currently, my users login to the PCs, VPN connection, etc with just a username. Ie: jgauthier I would like to have them login to these services using any

On 24/09/2020 03:23, Chris Olive via samba wrote: > Been using Samba since the early days and it's always worked terrifically. > Install it from RPM or apt or yum, make a few tweaks to the smb.conf and > I'm off and running without fail. > > So to run into a situation where I'm getting denied has really stumped me. > I dialed up logging to try and get a peek into

On 22/02/2023 08:45, Leon Benthaus via samba wrote: > Dear all, > > since I didn't get an answer I would carefully ask again. Maybe this is just a quick yes or no question: > > Is there any known way to get winbind to accept UPNs as username instead of the samaccountname? All the threads I found online regarding this are really old. > > Best, > Leon NO Well,

Dear all, since I didn't get an answer I would carefully ask again. Maybe this is just a quick yes or no question: Is there any known way to get winbind to accept UPNs as username instead of the samaccountname? All the threads I found online regarding this are really old. Best, Leon

Been using Samba since the early days and it's always worked terrifically. Install it from RPM or apt or yum, make a few tweaks to the smb.conf and I'm off and running without fail. So to run into a situation where I'm getting denied has really stumped me. I dialed up logging to try and get a peek into what's failing and things start falling apart around NT_STATUS_ACCESS_DENIED

No real "standalone" or domains explicitly specified in the smb.conf file. This is a host with containers on it, but at this level, this is the smb.conf file for the host itself. Ironically when I install SMB in a container and spin it up it works fine. At the machine level it does not. All these issues took place before I tried it in a container, so the log I originally sent was when

Hello all, ? this is my first Post in a Mailing List I hope everything goes fine. ? We are running a Samba 4 DC (4.0.14, Version 4.1.4 has the same problem) as a second DC in our Windows Environment. This server is in a second site. ? So after a while Samba 4 hangs and it is not possible to talk to the server via the RPC Protocol. So all samba-tools Commands like ?samba-tool drs showrepl? run

Dear Samba users I recently successfully implemented a SuisseID smartcard based Windows login on a original Microsoft AD domain controller server as shown in http://www.suisseid.ch/unternehmen/technik/index.html?lang=de&download=NHzLpZeg7t,lnp6I0NTU042l2Z6ln1acy4Zn4Z2qZpnO2Yuq2Z6gpJCDdIJ8f2ym162epYbg2c_JjKbNoKSn6A (English documentation) Because Samba supports "domain logon =

Am 23.02.19 um 22:23 schrieb Rowland Penny via samba: > On Sat, 23 Feb 2019 21:54:31 +0100 > Alexander Spannagel via samba <samba at lists.samba.org> wrote: > >> Am 23.02.19 um 15:48 schrieb Rowland Penny via samba: >>>>>>>>> If you have, as you have, 'files sss winbind' in the the >>>>>>>>> passwd & group line

Hi, I'm using samba 3.2.6 and getting the following error whille calling? smbc_getxattr(). cli_lsa_lookup_sids_noalloc(): out of memory Here is the relavent code snippet of the function cli_lsa_lookup_sids_noalloc()... if (dom_idx != 0xffffffff) { ??????????????????????? dom_name = ref_domains->domains[dom_idx].name.string; ??????????????????????? name =

Release Announcements --------------------- This is the latest stable release of the Samba 4.16 release series. Changes since 4.16.0 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 14831: Share and server swapped in smbget password prompt. ?? * BUG 15022: Durable handles won't reconnect if the leased file is written ???? to. ?? * BUG 15023: rmdir silently

Release Announcements --------------------- This is the latest stable release of the Samba 4.16 release series. Changes since 4.16.0 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 14831: Share and server swapped in smbget password prompt. ?? * BUG 15022: Durable handles won't reconnect if the leased file is written ???? to. ?? * BUG 15023: rmdir silently

Hello all. Still no luck with UPN logon. I think there's something missing in my krb5.conf, but can't find WHAT. Our UPNs are in the form of email addresses (name.surnameX at unibo.it for people in PERSONALE and name.surnameX at studio.unibo.it for people in STUDENTI domain). I never could make logon-by-upn work, but SOMETIMES "wbinfo -n UPN" resolves to the right SID

Release Announcements --------------------- This is the latest stable release of the Samba 4.15 release series. Changes since 4.15.7 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15042: Use pathref fd instead of io fd in vfs_default_durable_cookie. ?? * BUG 15099: Setting fruit:resource = stream in vfs_fruit causes a panic. o? Douglas Bagnall <douglas.bagnall

Release Announcements --------------------- This is the latest stable release of the Samba 4.15 release series. Changes since 4.15.7 -------------------- o? Jeremy Allison <jra at samba.org> ?? * BUG 15042: Use pathref fd instead of io fd in vfs_default_durable_cookie. ?? * BUG 15099: Setting fruit:resource = stream in vfs_fruit causes a panic. o? Douglas Bagnall <douglas.bagnall

hai, The servers have "A and PTR" records? You have for both server these UPNs. nfs/${SETFQDN} ${SETHOSTNAME_CAPS}$ nfs/${SETFQDN}@${SAMBA_KERBEROS_REALM} ${SETHOSTNAME_CAPS}$ on the samba side the nfs spn is in you keytab file? and if your brave, read, * dont run it, since i did not test this with windows servers.

I've got a fully updated Fedora Core 4 server crashing hard every week or two. I use Samba via smbmount and autofs to read & delete log files on 17 XP boxs and 6 NT4SP6 boxes as well as a couple other Windows files servers every 5 minutes. The first indication of a problem I get is smbmount stops working, then the server becomes unresponsive to the point where only a power slam will fix

Hello, I have winbind authentication working my a win2003 AD, however, I have to authenticate using DOMAIN+samaccountname right now. I would prefer to use the UPN. The UPN in my case is their full email address username@domain.com. The context for this authentication could be anything that pam supports. How can this be done? I am using samba-3.0.28 on Centos 5. Thanks! Terry

I want to know if we can configure samba to authenticate to active directory using the user principal name (upn). Currently, it is working using the samaccountname but we need to use the upn. I am using samba 3.5 Thanks