similar to: AD share not accessible

Gents, I would appreciate your advice on helping me debug my problem here. My objective : ---------------------------------- . have a share that is accessible only by AD users that are in a specific AD group . I want to add an AD group to the unix What is not working : -------------------------- . #getent passwd only shows local users it seems to

Hello, I'm trying to authenticate to a Samba file server version 3.6.6 which is joined to a samba AD version 4.1.17. The problem is that I can't seem to login using smbclient -L //172.16.0.229/itdev -U shemgp tothe file server and the server displays the error: winbind authentication for user [shemgp] FAILED with error NT_STATUS_WRONG_PASSWORD even if I use the correct password.

Hello, I am using winbindd to map users via the idmap_ad backend from a Samba 4.2.2 AD to another machine in the network. Everything works fine unless I shutdown the DC. I would expect winbindd to realize the DC is offline and shutdown or something, however instead of realizing something is wrong It goes into some kind of reconnection loop and makes the whole system unuseable. As soon as I kill

I have a Samba PDC (Ubuntu 12, OpenLDAP 2.4.28, Samba 3.6.3), and at two remote sites, I have some Samba BDCs. For now I've manually entered the DCs as WINS servers on the workstations I'm using for testing. At the remote sites, I can log in with an account that has no logon path or logon home specified, and it works perfectly. But at the main site, when I try to log on to one of these

Hi Rowland, I had to split smbd and winbindd config to work around some bugs in credentials offline caching. I have a separate winbindd.conf, it looks like this: [global] ### Network ### netbios name = Fileserver server string = Fileserver (%h V:%v) ### ad member ### workgroup = INTRANET realm = INTRANET.MYCOMPANY.DE security = ADS kerberos method = secrets and

I'm sorry it got confusing, changed the topic and I'll try to explain. I am using Jessie on the DC. Server13 is a linux file server and domain member, it is on squeeze. If possible, I do not want to upgrade it. The problem here is, that it does not seem to generate a DNS record when joining the domain and, after setting up the new smb.conf, the users aren't passed on from winbind to

Hi Rowland, my users are known to the OS, they also have the correct permissions to alter the settings. Doing so on the CLI does work when logged in via SSH. When opening the Security Tab the users and groups are displayed, only on directories there are no checkmarks under Read, Write etc. I also cannot set any checkmarks for Read, Write etc. When viewing the Security Tab of a file everything

> On Sep 14, 2016, at 12:57 PM, Achim Gottinger <achim at ag-web.biz> wrote: > > > > Am 14.09.2016 um 18:23 schrieb Michael A Weber: >> >>> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: >>> >>> >>> >>> Am 14.09.2016 um 05:53

Hi Rowland, yes I do have two separate config files for smbd/nmbd and winbindd. You can tell winbindd to load a separate config file via the "-s" command line switch. Therefore I set "WINBINDD_EXTRA_OPTS" in "/etc/default/sernet-samba" to "-s /etc/samba/winbindd.conf". The "cached_login" option for pam is also set and working. The problem was

Good morning! First of all thanks Rowland for the fast answer yesterday! I realized that samba-technical might have been the wrong mailing list and switched it to the normal samba users list (hopefully it worked, as it does get a bit confusing with spamgourmets sendto addresses!). Unfortunately the problem with samba_dnsupdate remains after the changes. I did changed the smb.conf, krb5.conf, and

sorry , the original message was in error. Follow: Hi. Sorry. Today I have a big problem with the samba I can not solve! My permissions do not work properly. in the RSAT created groups, OU and users. I configured in Windows the shared directory *TECNOLOGIA* security settings assigning full permissions to *grupo_tecnologia* (technology group). However users who are with *grupo_tecnologia*

> On Sep 14, 2016, at 10:44 AM, Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > > Am 14.09.2016 um 05:53 schrieb Michael A Weber via samba: >> Experts— >> >> I’m attempting to export a keytab for a created SPN on the AD DC machine but I’m receiving an error: >> >> ERROR(runtime): uncaught exception - Key table entry not

Hi guys, I'm facing a problems with samba4 + bind9_dlz that consuming my time for several days. Everything is working fine until samba4 need to update dns when I'm work with more than one DC server. When samba (or bind) need to reload all zones, the module bind9_dlz is shutting down and then all my environment stops and I need to restart the bind to up again. See my log: ... Jan

Thanks Rowland, OK, sorry about this... Note that the "Old AD" has some errors in their config files, but everything sort of work so I'm not going to fix those errors - my concern is obviously just the "New AD".  I've not set up printing in the new AD yet as it doesn't work in the old one anyway, and that's a discussion in a future thread.  Note

Ok, I setup a new smb.conf and rebooted. Winbind doesn't seem to pass on the domain users anymore and the DNS Update during domain join still fails. For some reason, although I have all samba 3.5.6. packages installed on this debian squeeze samba -V or samba-tool are unknown commands. Maybe this is why the dns update fails, some missing tools or commands? wbinfo -u and wbinfo -g return domain

Mathias, Thanks for your reply. Please, try to start your bind with some debug level and run commando "rndc reload" and see the end of the log. I saw samba source code and found the destroy dns function in dlz_bind9.c and called by turture blz_bind9.c. When dlz_bind9.c is shutting down, I get this error when I try to update dns. update failed: NOTAUTH Failed nsupdate: 2

Hi folks, big problem with my testint environment... my windows 2003-domain exists since 2004 and the credentials are correct, guaranteed. This problem is actually same on Ubuntu 12.04.3 and Debian 7... <code> root at pa-lnxd-04:~# /usr/local/samba/bin/samba-tool domain join INTRANET.DOMAIN.DE DC -Uintranet/admin --realm=intranet.DOMAIN.de Finding a writeable DC for domain

Hi. Sorry. Today I have a big problem with the samba I can not solve! My permissions do not work properly. in the RSAT created groups, OU and users. I configured in Windows the shared directory *TECNOLOGIA* security settings assigning full permissions to *grupo_tecnologia* (technology group). However users who are with *grupo_tecnologia* (primary) to access the share opens a popup asking for

I am trying to run Samba 3.0.24-11.fc6 on Fedora Core 6. I've run across two problems that are keeping me from being successful. 1. IPTables. Even when I configure it through Webmin to not run at startup, it does anyway. I consider this a minor problem, at least for now, although I wouldn't mind some input on how to configure it to allow Samba. 2. Access to shares. We are running

On 16/12/14 17:35, Carl Carpenter wrote: Forgot to mention that the permissions are also incorrect. They are supposed to be 775 but come out as 744. Carl Carpenter Director, Information Services Hill Country MHDD Centers (830)258-5414 or ext. 2038 On 12/11/2014 4:13 PM, Carl Carpenter wrote: Per your request [global] workgroup = HCCMHMRC realm = HILLCOUNTRY.LOCAL