similar to: Sernet-samba + Kerebros???

When you first provision an AD DC, is there a way to control where samba-tool puts all of the AD data files? -- Greg J. Zartman Board Member Koozali Foundation, Inc. 2755 19th Street SE Salem, Oregon 97302 Cell: 541-5218449 SME Server user and community member since 2000

I'm playing around with Domain Membership to a WIndows 2012 AD Server. It appears I'm able to join the AD domain, but the domain member doesn't seem to authenticate anything against the DC once joined. Here is my smb.conf netbios name = Member workgroup = ZARTMAN security = ADS realm = ZARTMAN.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and

I'm working to setup Samba as a domain member to a Windows Server active directory, and I keep hitting road blocks. There's some real terminology hurdles in the wiki. In a nutshell, my problem is this: I setup a Windows 2012 Essentials ADS domain and I ended up with zartman.local for my "domain" in Windows. So, I've got a dns zone in windows server that is domain.local

Does anyone know what Red Hat/Centos is going with Samba 4? I've looked at their packages in COS 6.5 and 7 and it doesn't make sense. They seems to be doing some kind of watered down or modified version of Samba 4 with some of the tools disabled. Are they still holding off from full AD implementation in their packages because of the MIT Kerberos issues identified in previous

I'm working with the Centos 7 packages for Samba 4.2.10 and I note that the stock packages don't include the ldb tools (eg, ldbmodify, ldbsearch, etc). I did find a stand along centos package that contains these tools from here: https://wiki.samba.org/index.php/LDB However, the stand along tools don't seem to be aware of the Active Directory schema. For example, if I try to use

I'm working on building some perl code to query a Samba AD and list various things. I'm wondering if there is something like samba-tool for query user from the AD other than just the username? I see that I can use and LDAP perl module to query the LDAP side of the AD, but wanted to see if Samba has a utility for doing this. Thanks! -- Greg J. Zartman Board Member Koozali Foundation,

Is it possible to change the DNS listening IP? I'd like to run a dnscache service for primary LAN queries, but the only way to do this with Samba seems to be iptables preroute configuration to redirect port 53 requests. Thanks, -- Greg J. Zartman Board Member, and Developer Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

On Sat, Dec 27, 2014 at 2:43 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > Yes, samba4 comes with a script: oLschema2ldif > Humm... Not liking the errors in this method. Looking at the ldif, I think we could rework this so that one could modify the LDAP schema directly using LDAP syntax. In my case, I'm using Net::LDAP. Something more like this: dn:

I'm wanting to change group members by writing to the Active Directory using perl Net::LDAP. I noticed that AD groups have the LDAP objects "member" to list the user who is a member of this group. The user object then has the LDAP object "memberOf" to record the groups the user is a member of. I'm wondering if their is a mechanism in Samba AD that sets on of these if

What is the best way to store file system quotas for users in the Active Directory? I'm not seeing any standard attributes for this, so it looks like the best way is to extend the schema. Is this correct? Thanks, Greg -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and community member since 2000

On Mon, Oct 3, 2016 at 10:39 AM, Sketch <smblist at rednsx.org> wrote: > > The standalone tools (as packaged by CentOS) don't have all of the > extensions that are built when you build a Samba DC. If you have already > rebuilt CentOS Samba packages with DC support, you need to add samba's ldb > modules to ldb's module path. > This is what I suspected.

On Mon, Oct 3, 2016 at 12:10 PM, Sketch <smblist at rednsx.org> wrote: > > I would assume they would work if you built Samba against them so that > it's ldb modules were built for the same version. But that seems like a > lot of work when you can just use the CentOS ldb-tools package. > Well the ldb-tools package from COS doesn't work, as we've discussed

On Thu, Aug 18, 2016 at 7:07 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > > Hi Greg, I take it what we discussed last time didn't work. > I did in fact create some custom schema mods that can store the quota information, but it just seems to be an odd way to do it. I am surprised that others uses Samba 4 on *nix file servers don't talk about this

I've been messing around with disk quotas for users and have seen some who have extended the Samba 4 AD schema to include a quota attribute. For example, I found this schema extension here: http://fossies.org/linux/quota/ldap-scripts/quota.schema Is there a common method for doing this? -- Greg J. Zartman Board Member Koozali SME Server www.koozali.org SME Server user, contributor, and

Greg, > Unfortunately, these attributes do not exist as standard, so you would > either have to add a user with ADUC or manually add them yourselves with > ldbedit. As standard on windows, they both start at '10000', though you > can set them to whatever you require, just make sure that they do not > interfere with any local Unix users. If you like to manage Unix users

On Mon, Dec 1, 2014 at 11:09 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > NO NO I can't take anymore :-D > > Please read the rest of the thread, it will explain all. People seriously use this in a production environment? The lack of documentation and confusion surrounding pretty basic posix auth is extremely surprising. I'm no noob at *nix admin and

On Mon, Dec 1, 2014 at 11:39 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > I understand where you are coming from, I have written my own scripts to > maintain an S4 AD DC but as you say the documentation is a bit limited, so > I had to search and experiment to find out how to do things. The > documentation is getting better, but it will take time, if you have any

I would say that workgroup = ZARTMAN should be right. Workgroups normally don't have dots in their name. Than you should also try: idmap config ZARTMAN:backend = ad idmap config ZARTMAN:schema_mode = rfc2307 idmap config ZARTMAN:range = 10000-99999 One more thing is that it's not recommended to have a .local domain realm. Have a look at this above glibc...

I'm working to setup a Samba 4 AD DC and ran through the howto on the wiki. https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO What type of database backend is Samba using? Is it using the LDAP server internal to Samba or a tdb database? The man page for smb.conf says that the default passdb backend is tdb, so I was curious what Samba-Tool is going. Thanks, -- Greg

Did, as su "apt-get install sernet-samba-ad" (after adding source to repositories.) (Have a test setup on CentOS 6.6 running but it is Samba 4.3.0 ** from git. Would prefer Samba version not so new as 4.3.0 so, want to change to Ubuntu.) --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an