similar to: Need workaround or replacement of "security = server" in SAMBA 4

Hi List, I have reported this issue before but I did not get an answer, ill try one more time before I register it as a bug incase I am doing something wrong. I'm evaluating the use of samba/winbind to join our linuxhosts into active directory. My testsetup use win2k3 R2 with rfc2307 schema fields populated on the server side. For the most part the project is humming along nicely. However,

Hello, I've got some problems with a Samba Server. The Samba Server is member in an Active-Directory Domain (Win2000), it is NOT the domaincontroller. Authentication is kerberos-based (smb.conf: securty=ADS, winbind). The Sambaserver is accessed by Windows-Clients, that are domainmembers and by some Windows-Client, that are not. Originally Users, who were logged on the domain could access

hi ! i'm a little bit confused about the domain names, in my smb.conf workgroup name is set to 'workgroup=samba'. the name of the domaincontroller is 'netbios name=dc01'. if i do a net rpc join the machine always joins the domain dc01 doesn't matter if i use the -w switch. (do i have to join a domaincontroller to his own domain ?) same with net setlocalsid, it's

We have identified a problem joining samba to a windows 2003 rc2 domain. Using mit kerberos 1.5, and the latest version of samba (3.0.25b), net join ads would throw up the error: cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine domaincontroller.mynet.mydomain.com. Error was NT_STATUS_ACCESS_DENIED net_rpc_join_ok: failed to get schannel session key from server

Hello, I've a rhel6 server on a vmware structure. samba rpm are; samba-common-3.5.10-115.el6_2.x86_64 samba-3.5.10-115.el6_2.x86_64 samba-winbind-clients-3.5.10-115.el6_2.x86_64 smb.conf [global] workgroup = AAAA server string = TSTArchive security = DOMAIN passdb backend = tdbsam log level = 3 local master = No ldap ssl = no cups options = raw short preserve case = No dos filetimes = Yes dos

Hi there I set up a POC domain with multiple DCs, multiple remote sites and samba shares. This POC is a simulation of a whole samba3 domain migration. Users, and groups have been imported from the older domain to the new one. Here's the setup: ("Remote sites" are actually different subnets on the same location for the POC) *Main Site*: DC1 (RHEL7 - samba 4.6.4) DC2 (RHEL7 -

This patch attempts to address an issue some have reported where our nss_winbind is even slower than it's simple non-caching implementation needs to be. I think this comes from us not handling the BUILTIN domain properly, and so we constantly attempt to contact the DC, and then fail an internal validation step, throwing away that connection. I think this is also the cause of crashes folks

example is sanitized as required the samba host is a member of AD.INTERNALTWO.COM when accessing from a client member of AD.INTERNALONE it is appending @AD.INTERNALONE to the SPN request(??) and I get the error in smbd.<client ip> 2018/04/25 17:11:58.506095, 1] ../source3/librpc/crypto/gse.c:649(gse_get_server_auth_token) gss_accept_sec_context failed with [Unspecified GSS failure.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 19.01.16 um 19:38 schrieb Rowland penny: > On 19/01/16 17:24, Stefan Kania wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> "samba-tool user setpassword" works fine, but I don't want all >> "normal" Users to connect to the Domaincontroller to change >> their password. >

Hallo First i try to install samba 3.5.21 on RHEL 6.4 Im getting the message: Loaded plugins: kabi, product-id, refresh-packagekit, rhnplugin, security, subscription-manager This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. This system is receiving updates from RHN Classic or RHN Satellite. Loading support for Red Hat kernel ABI

Am 02.10.2017 um 16:41 schrieb Rowland Penny via samba: > On Mon, 2 Oct 2017 14:51:54 +0200 > Rainer Krienke via samba <samba at lists.samba.org> wrote: > >> Hello, >> .... >> [2017/10/02 11:07:47.046715, 2] >> ../source3/auth/auth.c:315(auth_check_ntlm_password) >> check_ntlm_password: Authentication for user [HOSTNAME$] -> >> [HOSTNAME$]

Hi to all, Is there a known problem when using Debian 11 together with the samba packages from the backports (4.17.4) and the bind9 from the backports (9.18). With me it comes on each further Domaincontroller to errors with the "samba_dnsupdate --verbose --all-names". If I install Bind9 in version 9.16 everything works. I have the whole thing running in a Vagrant environment and can

I have a samba server running as an active domaincontroller. I want people in an other office building to use the same samba server. What is the best way to do this? Use a second domain controller. Vpn to first domain controller. (Using an Mikrotik router). And how can you configure windows to use the vpn at startup? Philip

Hai basti, Few tips here you can check/try. A know problem, this might happen if your primary dns and/or search dns are not correct when connected to the VPN. See if you can use \\host.dnsdomain.tld\share and not \\host\share Then test \\dnsdomain.tld\sysvol and \\dc.dnsdomain.tld\sysvol Last, if you trying to access through CNAME, you might have hit this bug.

On 1/22/20 3:57 PM, Gary Stainburn wrote: > I have managed to find out what happened in the yum update and it turns out it was a mess. It looks like the server ran out of memory in the middle and things then started to fail. Any advice on how to recover from this would be greatly appreciated > > The log below shows: > > [root at vps2 ~]# yum history info 22 > Loaded plugins:

On Thu, Dec 17, 2015 at 04:28:01PM -0500, Jonathan Billings wrote: > On Thu, Dec 17, 2015 at 08:37:32PM +0000, Richard wrote: > > > > I'm seeing the following banner when I start up google-chrome > > 48-beta (48.0.2564.48 beta (64-bit)) on my 7.2 machines: > > > > This computer will soon stop receiving Google Chrome updates > > because this Linux

Hello, I have a Win10 Client connected via openVPN to the company LAN. openVPN seem to work fine. I get Routes, the AD DNS server, can ping domain controller file Server etc. Authendicaten on Fileserver fail (cant connect to domaincontroller) gpupdate fail with the same error. Firewall haas open all port list here: https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage I have try to debug with

On 23.04.19 14:51, Rowland Penny via samba wrote: > On Tue, 23 Apr 2019 14:35:16 +0200 > basti via samba <samba at lists.samba.org> wrote: > >> Hello, >> I have a Win10 Client connected via openVPN to the company LAN. >> openVPN seem to work fine. I get Routes, the AD DNS server, can ping >> domain controller file Server etc. > > It looks like you

On Mon, May 11, 2015 at 06:18:04PM +0000, Marc Fromm wrote: > Marc Fromm: > > Will the current RPM packages work on a RHEL7 system? I am upgrading > > from a RHEL5 system that uses the omega search tool. > > Since there have been no replies, I take it to mean that there is no > compatible package for RHEL7, thus I must remove the omega search > tool. I don't use

On Wed, 6 Nov 2019, Konstantin Shalygin wrote: > On 11/5/19 8:26 PM, vincent at cojot.name wrote: >> can you provide more detail? >> >> RHEL7 has libtomcrypt but no devel rpm for it. >> That's the onoy issue I had with it. > > tomcrypt.h is required for build this package. Yes, that's the reason I've rebuilt libtomcrypt from the RHEL sources (see