similar to: question about "idmap config" in multi-forest environment

Hi there We've had three incidents this year where users connected to Samba shares (on CentOS systems) and appeared as the incorrect Windows account. e.g "dom\user1" would connect, but any files they created would be owned by Unix user "dom\user2" This is of course pretty nasty. We normally delete all the cache and winbind TDB files and restart and that fixes it - but

Hi there We have a bunch of Samba 3.0.10+ CentOS4.4 servers that are working 100% fine when connected to from users who are members of the same ADS domain our Samba servers are members of. However, users from other ADS domains (we are all W2K3-based) on our network cannot connect - they get NT_STATUS_ACCESS_DENIED. The shares they are trying to connect to have no share-level permission checks -

Hi there I've just upgraded a working samba-3.5.8 CentOS-4.9 (yes - pretty old) server to samba-3.6.1 and can't change "idmap config". We almost immediately had issues with it not working for some users - and the logs showed we'd run out of idmap mappings (strange that never happened before with the older version...) Anyway, I edited smb.conf so that idmap config

We've got nicely ADS integrated Samba-3.0.27a servers that are working fine with Win2000 through to standard Vista. However, we are starting to test RC1 of Vista SP1 and discovered that once applied, that workstation cannot connect to Samba server shares - unless the share is open - i.e. no "valid user" style settings. The moment one is defined, Vista fails to connect and pops up an

Hi there I've just a Windows7 box here that is erroring with "NT_STATUS_INSUFFICIENT_RESOURCES" whenever I try to connect using any samba tools: smbclient, "net", "rpcclient". This is when using Domain Admin creds, either via Kerberos (-k) or direct username%password. According to google, this is a resource problem on Windows and restarting the appropriate

Hi there Samba is a member of dom1.corp.net, there are also dom2.corp.net and dom3.corp.net - together making up the "CORP" forest. There are other forests with two-way trusts with CORP.NET, such as OTHER.NET We have a problem where Samba/winbind is inconsistent on account details and therefore access. * wbinfo -D OTHER returns details about "other.net" - good * wbinfo

Hi there I've got a problem CentOS-4.9 Samba server that we have never been able to join to an existing Win2K3/Win2K8 AD domain correctly. We have before and since installed Samba successfully on other sites btw. We actually have 55+ CentOs-4.9 Samba servers world-wide with identical configs - there's something about this one. Anyway, "net ads join -Uadmininstrator...." works

Hi there We're starting to play around with Win10 and I've noticed winexe doesn't seems to work against it - generates a NT_STATUS_BAD_INITIAL_PC error when connecting Looking around it seems like winexe really isn't maintained anymore? - which may be the reason it doesn't support Win10 as currently you can't even compile it against a current version of Samba4 (which

Hi there I'm trying to get rsync for windows (tried two versions) to call "--rsh" so I can pipe rsync through openssl.exe. When I run it I get The process tried to write to a nonexistent pipe. So it looks like the CMD file I have that calls openssl.exe isn't joining up with rsync.exe? As rsync.exe defaults to calling ssh.exe, and I can even successfully call it via

Hi there We have a Cisco VOIP environment here, with hard and softphones. I have a softphone account/etc, but I'm a Linux user and (as far as I'm aware) there is no Cisco softphone for Linux. However I can run Asterisk. So I was wondering if there is a way to "convert" a SIP phone transaction into a SKINNY transaction so that the Cisco environment thinks it is a Cisco

Hi there We are having a problem where the DNS "A" records of ADS member Samba servers are disappearing from DNS. It's not routine, but it is definitely real. What we normally do is assign static IPs, create DNS records manually and then install and configure the Samba server (mainly CentOS4 and CentOS5) and "net ads join" it to the domain. This is normally good for a

[background: we rsync Gbs of data over our WAN, so want to run rsync as efficiently as possible. We have Linux "rsync servers" that mount local Windows file servers - i.e we use Linux-rsync to replicate data between Windows file servers. (why? we found Linux IP stack to be superior over our WAN)] I know that "--partial" on it's own merely makes the rsync server process

Hi there I am running rsync-2.6.9rc2 and am having difficulty getting rsync to report an error when I think it should I mounted (via "mount -t cifs") a remote Win2K3 server and on a XP client opened a Word document. Then from Linux (FC5) I attempted a bash$ cp /tmp/other.txt file.doc cp: cannot create regular file `file.doc': Text file busy That makes sense - CIFS has the file

I have a Samba-3.0.23d installed on a CentOS4.4 server that cannot be connected to from other machines in the same W2K3 ADS. The server was added to the ADS successfully via "kinit admin@REALM" and "net ads testjoin" works just fine. The clocks are NTP-synced and no clock slew errors are to be seen. If WinXP/Win2K3 clients connect using \\ip.address\ it works fine, but if they

Hi there I've just done some brief reading up on SCTP, and I get the impression it will allow multiple "threads" of streamed data as part of one connection? I was wondering what impact that would have on high bandwidth, high latency links? Currently our bottleneck in using rsync is due to that. We have fat pipes and yet a single rsync session cannot saturate it due to the latency.

I got curious as to how rsync operates, and got a few tests going under ethereal. The results confused me more. I created /tmp/test-out/ containing two different text files - one named "file.txt" and the other "data.gz". ie. data.gz wasn't actually compressed - it was actually text. I then created an empty directory on a rsync server to replicate that data to. I did a

I'm running Samba-3.0.23d on CentOS4.4 servers. We have a process where people can upload files (from WinXP) to a directory over Samba, and then a Unix cronjob picks those files up, moves them to another directory (outside of Samba) and does things to them. The problem is that when the file moves occur, WinXP doesn't show the files have disappeared. Even days later the files show up as

Hi there We have a bunch of Samba 3.0.24 servers that use winbind to integrate into an existing Win2K3-based AD infrastructure. We have our own forest (call it FOREST, with sub-domains "DOM1" and "DOM2") - but have transitive and two-way trusts to other Win2K3 forests. We have set up (under Windows) a bunch of "DOM1" Domain Local Groups containing a mixture of

Hi there I've just had a samba-3.0.25a server (can't see any reference to this been fixed in b or c) become non-available to users, and after some serious head-scratching realized there was nothing wrong with the server - the Active Directory DNS was pointing to the wrong IP! This CentOS4.5 box actually runs two instances of Samba (and one winbind) in ADS mode. One associated with eth0

I'm starting to see some really weird things happen on a range of Samba-3.0.28a servers installed as "security=ADS" members of a variety of domains. This was working last time I checked (weeks ago), but something's happened. Windows Updates tend to spring to mind more than Samba upgrades as a cause... On all of them, "wbinfo -t" is happy, "net ads