similar to: Question(s) about user mapping

Hello all, I've added my windows7 client to the domain (samba running as pdc), having applied the registry changes identified here (http://wiki.samba.org/index.php/Windows7). Partial success - domain users can login and see shares etc, BUT: 1 - the registry settings in ntlogon/NTConfig.POL are not applied. Am I right in thinking that windows 7 ignores this policy? And if so I therefore

Hi again, I just started to debug things on the samba4 side: When trying to mount the Windows NFS share, I get the following error on the samba4 dc (just grepping for nfs in the logs): auth_check_password_send: Checking password for unmapped user [S5DOM.TEST]\[nfs/nfsclient.mydom.test]@[] map_user_info_cracknames: Mapping user [MYDOM.TEST]\[nfs/nfsclient.mydom.test] from workstation []

New to linux and new to Samba so any direction in troubleshooting would be helpful. Here is what I have so far. Within a half an hour of a reboot of the server my cpu reaches high numbers and becomes slow to respond on all actions. With my limited understanding I have used vmstat to observe the system. I noticed is that the numbers of forks grows from 1-2k to 43k within 30 minutes after reboot. I

On 18/12/14 16:19, Germ van Eck wrote: > Not sure about the high CPU load, but you have the [netlogon] share > twice in your smb.conf. Your first matches mine, have you added the > second yourself? > The second one looks weird with 2 path definitions. > Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >> New to linux and new to Samba so any direction in troubleshooting

On 10.05.2016 21:36, ????????? ???????? wrote: >>> I'm also using ddns and have my zone files in >>> /var/named/chroot/var/named/dynamic. >> are you using DDNS in DualStack (IPv4 and IPv6 together) or do you >> have only DHCP or DHCPv6 and not both? > > IPv4 only. > if a host has IPv4 only or IPv6 only this works fine, but when a host has both -

Hello Andrew & Louis, Yesterday by around 1:30 PM we had the same issue. Samba AD kicked all of us out and RSAT did not connect to any domain controllers. /*Incidentally the RSAT that caused this error was running on Windows 7 Professional 64 Bit edition.*/ When I restarted the samba-ad-dc service, all started working well again. However, as mentioned again, I could not trace the error

Try this on your samba DC. amba-tool spn list PCNAME$ You should see something like: PCNAME$$ User CN=PCNAME,CN=Computers,DC=internal,DC=domain,DC=tld has the following servicePrincipalName: HOST/PCNAME HOST/PCNAME.internal.domain.tld nfs/PCNAME.internal.domain.tld nfs/PCNAME.internal.domain.tld at YOUR_REALM can you confirm this for both your servers which

hai, The servers have "A and PTR" records? You have for both server these UPNs. nfs/${SETFQDN} ${SETHOSTNAME_CAPS}$ nfs/${SETFQDN}@${SAMBA_KERBEROS_REALM} ${SETHOSTNAME_CAPS}$ on the samba side the nfs spn is in you keytab file? and if your brave, read, * dont run it, since i did not test this with windows servers.

Not sure about the high CPU load, but you have the [netlogon] share twice in your smb.conf. Your first matches mine, have you added the second yourself? The second one looks weird with 2 path definitions. Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: > New to linux and new to Samba so any direction in troubleshooting would be > helpful. Here is what I have so far. > > Within

Hi. reading docs i found THIS pdbedit -P "minimum password age" -C 5184000 (limit for validity of the password set for 60 days) pdbedit -P "maximum password age" -C 7776000 (maximum period for validity of the password set for 90 days) after u set ur policies restart samba and cofirm policies/informations make to user: pdbedit -L -v samba_user AND THIS -P account-policy

Hai,   For me.. the interesting parts.. where i think i can help out a bit.   [2017/08/07 11:00:06.129569,  3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)   Kerberos: constrained delegation from BLR066YESH03$@KTKBANKLTD.COM (blr066yesh03$\@KTKBANKLTD.COM at KTKBANKLTD.COM) as BLR066YESH03$@KTKBANKLTD.COM to blr066yesh03$\@KTKBANKLTD.COM at KTKBANKLTD.COM not allowed

I used to also get related log messages of the form: auth_check_password_send: Checking password for unmapped user [HPRS]\[mark]@[ROVER] auth_check_password_send: mapped user is: [HPRS]\[mark]@[ROVER] but now all I get is the auth_check_password_recv in the log. Perhaps the change is due to an upgrade to Samba, or perhaps a change I made to my smb.conf log options? (see log config in my

>>> I am running samba 4.1.9 compiled with internal dns. Please upgrade first to the latest samba version before be can investigate whats going on. The lastest is 4.1.14 now and lots have happend in betweeen. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: ricky.nance at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens Ricky Nance >Verzonden:

Hi, In the past (2 months ago) : I have two AD Domain under Samba 4.1 : A and B. I war able to  connect a share in A from B. Now (after upgrade) : I have a W2016 domain (B) and a Samba 4.6 domain (A) but I can't connect a share in A from B. The user from B which try to connect the share in A has the same login in the two domains. So since the upgrade I don't have the same behavior

I am running Samba Version 4.1.23 as an AD/DC on Linux Slackware64 14.1. I am logging samba messages to /var/log/samba/log.samba with logging set to the following in smb.conf: log level = 2 passdb:5 auth:10 winbind:2 lanman:10 I have a script that scans this logfile for message like the following: auth_check_password_recv: sam_ignoredomain authentication for user [HPRS\thisuser] FAILED with

Hi there, I'm trying to get FreeRADIUS to authenticate against my Samba DC. It's Samba 4.7.6-ubuntu running on Ubuntu 18 (kernel version 4.15.0-66-generic). It came nicely packaged with Zentyal, which provides a nice GUI for managing a domain, as well as a CA and lots of cool small features. That same Zentyal also includes support for FreeRADIUS (3.0.16). This is my smb.conf:

Hello List, I'm dealing with the following issue here: https://forum.zentyal.org/index.php?topic=25300.0 Although it starts with OpenChange, it ends with Samba4 so I very much hope that somebody on this list can help me out. Basically I try to authenticate users through the Outlook autoconfigurator using RPC-OVER-HTTP to a samba server. The problem is that in Samba4/LDAP I cannot have

Hi, As I configured the Roaming profiles under linux, it more or less generate an abnormal operation (in less than 2 mins) if I add/copy some files to the home directory. But for Windows XP and Windows 7 is running smoothly and it generates folders at the Samba4 server location with corresponding users. e.g. Administrator (for XP), and Administrator.V2 (for Win7/2008) based on my observations. I

Hi, I have been having issues with NTLMv2 on newly provisioned domains, using Samba 4.1 from backports on Debian Wheezy. Everything seems to be working fine, except for NTLMv2 authentication with Squid and "ntlm_auth" on newer Windows versions. If I set "Lmcompatibility" down on the Windows PCs, then authentication works, but that is temporary workaround at best. I have

Here is the information requested it took 3 days before results came samba-tool dbcheck finished with this error root at ham1:/usr/local/samba/bin# time ./samba-tool dbcheck --cross-ncs Checking 212687 objects ERROR(<type 'exceptions.MemoryError'>): uncaught exception - File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run