similar to: How to prevent users from changing their password?

Hi Roel Just guessing: do you have conntrack enabled? If not, "modprobe nf_conntrack_netlink" (you can remove it and its dependencies later) What are the outputs of sysctl net.netfilter.nf_conntrack_count and sysctl net.netfilter.nf_conntrack_max when the problem shows up? cheers Ethy On Thu, 31 Mar 2016 12:17:12 +0000 "Dovid Bender" <dovid at telecurve.com>

Dovid Bender writes: > The tcpdump that you are running is on the Asterisk box or via port > mirroring? It's on the asterisk box itself. I've already replaced the network card - no change. Thanks, Roel > Regards, > > Dovid > > -----Original Message----- > From: Roel van Meer <roel at 1afa.com> > Sender: asterisk-users-bounces at

Ethy H. Brito writes: > > Ifconfig output looks like this: > > > > root at communiceer:~# ifconfig eth1 > > eth1 Link encap:Ethernet HWaddr b4:99:ba:a9:3e:e5 > > inet addr:x.x.x.x Bcast:x.x.x.127 Mask:255.255.255.128 > > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > > RX packets:5967421 errors:0 dropped:21425

Dovid Bender writes: > Just guessing I would verify that the out of : iptables -L -nv > Shows no dropped packets, try disabling selinux as well as look at the > limits of the asterisk pid (cat /proc/<Asterisk PID>/limits). I know the > defualt for rhel is 1024 which was never enough for us. Thanks for the hints. Selinux is disabled, there is no outgoing firewall (anymore)

Hi Thanks all for your responses. The users can now change their own password adding and removing the unicodePwd attribute, using the correct method to generate the password value. Now, I have a problem, because the users who have the option to force to change the password in the next login checked, can't bind to the LDAP server in order to change their password. Is there any way to do this,

L.P.H. van Belle writes: > is the time in sync on your servers ? Yes it is. I managed to make it work by specifying the primary DC as nameserver in /etc/resolv.conf of the secondary DC. As soon as I do that, samba_dnsupdate works on the secondary. When I change it back to use the local Samba as resolver, it no longer works. So it is a DNS issue (possibly related to replication

Hi list! I have a problem where SIP packets sent by Asterisk do not hit the wire, and I don't know what could cause this. I'm running Asterisk 1.8.28_cert5 with full SIP debug. At the same time, I'm doing a tcpdump of the traffic on the network interface. I can see in the SIP debug log that asterisk is sending packets. Most of the time, I can see those packets in the tcpdump,

Hi all, When created through RSAT OUs receive, by default, ACLs to refuse removal. When created through LDIF and ldbadd OUs do not receive these ACLs. Is there a way to create these ACLs using command line tools? Cheers, mathias

Hi list, for future reference: we haven't been able to fix it. Upgrading to 4.9.18 didn't help, so in the end we decided to downgrade to our previous version (4.5.12) which doesn't have this problem. Hooray for tdbbackup! Thanks Louis for thinking with us. Best regards, Roel And for Google: smbd[16461]: ldb: Failure during ltdb_lock_read(): Locking error ? Busy smbd[16461]:

L.P.H. van Belle writes: > check the rights on : > /var/lib/samba/private/dns.keytab 640 root:bind > /var/lib/samba/private/dns 750 root:bind > /var/lib/samba/private/sam.ldb.d 750 root:bind I'm using the internal DNS on both DC's, so I guess bind access rights aren't the issue. Thanks for your answer though :) Regards, Roel > >-----Oorspronkelijk

Hi list, we're in the process of converting our Samba 3 / OpenLDAP systems to Samba4. Since these machines also run applications (Postfix, Zarafa) that retrieve their information from LDAP, performance of the LDAP server is quite important to us. While testing, it seems that the S4 LDAP server is a lot slower than OpenLDAP. So, I would like to ask two questions: 1. What is the

L.P.H. van Belle via samba writes: > Is samba-dsdb-modules installed ? Yes, I checked again, and all packages are installed, all of them with the proper version, and no leftovers. This server works fine for a half a day, and then these errors happen, so I think it's unlikely that it's related to the install itself. I have already made a backup of all tdb files with tdbbackup and

Hi everyone, I have a Samba 4.2.4 AD which works fine. I'm using Windows RSAT and I'm trying to create an OU under ou=Users, but this is not allowed. I can create OU's in the top DN, but not under ou=Users. Could this be a permissions problem or is this simply not possible or allowed? Thanks a lot, Roel

======================================================================= "Positive anything is better than negative nothing." Elbert Hubbard ======================================================================= Release Announcements --------------------- This is the latest stable

======================================================================= "Positive anything is better than negative nothing." Elbert Hubbard ======================================================================= Release Announcements --------------------- This is the latest stable

Hi list! I'm trying to create a user with non-ascii characters in the name, but this fails: root at test-samba4:~# samba-tool user create foa --given-name='foa?' New Password: Retype Password: ldb_handler_fold: unable to casefold string [foa?] ldb_handler_fold: unable to casefold string [foa?] ldb_handler_fold: unable to casefold string [foa?] ldb_handler_fold: unable to casefold

Hi everyone, I'm testing with a Samba4 AD network, and I have some problems with DNS on the second DC, with which I could use a bit of your help. I have an AD with two DC's, both Samba 4.2.3. On the first DC, samba_dnsupdate works fine. With stock 4.2.3 I get the error "TSIG error with server: tsig verify failure" but the DNS updates succeed anyway, and after applying

Hello list, Iam using Samba4 alpha18 with Debian Squeeze. Mi primary domain have Windows Server 2003 and my Secundary Domain have Samba4. When i create a user in active directory user and computer in Windows Server, i can see the user in active directory user and computer in samba4, and when i create a user in samba4 i can see this user en active directory windows server. the principal problem is

Hi! recently we upgraded a Debian jessie server to Debian buster, with Samba being upgraded from 4.5.12 (+dfsg-2+deb9u3) to 4.9.5 (+dfsg-5+deb10u1). A few hours later we saw these errors in syslog: smbd[26024]: [2020/02/03 11:13:13.631613, 0] ../lib/ldb-samba/ldb_wrap.c:79(ldb_wrap_debug) smbd[26024]: ldb: Failure during ltdb_lock_read(): Locking error ? Busy smbd[26024]:

Am 03.11.2015 um 16:43 schrieb James: > Not possible. It's a container and not a OU. Right. However Roel, you can create an OU for your users/computers and redirect the standard to them: https://support.microsoft.com/en-us/kb/324949 Then you can have sub-OUs, link GPOs to them, etc. and ignore cn=Users/cn=Computer. Regards, Marc