similar to: nightmare scenario

I am having problems implementing Samba using security=domain against a Windows 2008R2 server. I have been able to successfully join the domain via a net rpc join. Anytime I try to access a share through smbclient I get a NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE but nothing in the logs (on either side) seems to be giving me any leads on where to look. The system is locked down to allow NTLv2

On Tue, 2018-10-16 at 15:18 -0700, Emil Henry wrote: > Hi Andrew! > > I included it in one response, but may have not done a Reply All. Am resending it. > > Thanks. It is reading the hashes, so it looks like it is working. Dumb question, but are you really sure the password is right? Otherwise, it might be some very odd NTLMv2 thing. Try (on the client) 'client ntlmv2 auth

On 10.03.2015 20:20, Rowland Penny wrote: > > OK, the first will not work (well not yet), the second should, I > take it you ran 'kinit Administrator at AD.DILKEN.EU' as root before > the join ? > > You could try 'net ads join -U Administrator' and enter the > password when prompted, I personally have never seen the point in > using kerberos during the

I've read the documentation that domain trusts should be fully supported with both Kerberos and NTLM authentication. I've created a new 2016 domain on a Windows box and created a Samba domain on a Linux box with a BIND9_DLZ backend. Both servers can resolve both DNS domains forwards and backwards and I am able to connect a Windows 10 client to the Samba domain without any issues. The

Hello! We have Samba v3 (3.5.10) working against an LDAP server, and need to upgrade to Samba v4 (4.7.1), RHEL 7 supports only v4. Tried multiple configs of the smb.conf (including the old config) without success. Cleaned up smb.conf is below. Also, included is the output of a smbclient command on the SMBServer with debug option 10. Hoping that someone can point me in the right direction. Thanks

Hi, I upgraded our servers from Wheezy to Jessie. I use samba in classic mode, with openldap backend. After the upgrade, on the PDC (srv3) everything seems to be ok, it authetnicates, the netlogon share is accessible on it, but on the BDC (srv7), what is the file server, the authentication doesn't work, shares are inaccessible. I compared and syncronized the configuration files to as similar

Oh, I have a pair of samba-4.1.17-DC's, raspberry-pi and dc2 to which make the domain ad.dilken.eu on site Neuoetting. resolv.conf points to the two dc's: search ad.dilken.eu nameserver 192.168.2.33 nameserver 192.168.2.2 In the output I find some relations to dc2 resp. 192.168.2.2, but perhaps it doesn't work as expected.. Greetings Am 10.03.2015 um 21:23 schrieb Rowland Penny:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 "samba-tool user setpassword" works fine, but I don't want all "normal" Users to connect to the Domaincontroller to change their password. So I tried it with smbpasswd as it was mentioned in many places. I know that smbpasswd is normaly for NT-Domains but somehow also an AD-User must be able to change his password. passwd is

On Tue, 2018-10-16 at 20:20 -0700, Emil Henry wrote: > Hi Andrew! > > I am not 100% sure that the password is correct. I was told that it > was changed to the one I am testing. But, when I try the old > password, I get a different error message (NT_STATUS_INVALID_SID). I > will attached the output.  Then it is the old password, and you have other issues you need to sort out.

Hello: Platform: CentOS 6.7 x86-64 $ rpm -qa | grep samba samba-common-3.6.23-30.el6_7.x86_64 samba4-libs-4.2.10-6.el6_7.x86_64 ie-samba-utils-3.6.13-7.x86_64 samba-winbind-3.6.23-30.el6_7.x86_64 samba-client-3.6.23-30.el6_7.x86_64 samba-winbind-clients-3.6.23-30.el6_7.i686 samba-winbind-clients-3.6.23-30.el6_7.x86_64 Problems began after requiring SMB signing (I forgot the specifics but it was

On 10.03.2015 19:25, Rowland Penny wrote: > > Hi, what are you trying to join to? > > Remove this line 'idmap_ldp:use rfc2307 = yes' > > one) it should be 'idmap_ldb:use rfc2307 = yes' two) it is only > used on a DC. > > How are you trying to do the join ? > > Rowland > > Hi, I commented it out but it didn't change the behaviour.

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I try to change a userpassword with smbpasswd. But I allway get an errormessage: - ----------- root at sambabuch-c1:~# smbpasswd -U EXAMPLE\\stefan -r `nslookup _ldap._tcp.dc._msdcs.example.net | awk '{print $2;exit;}'` Old SMB password: New SMB password: Retype new SMB password: machine 192.168.56.11 rejected the password change: Error

Hi all I have a network with a Windows 2003 AD (10.10.10.5) and a Samba 3.0.23c (10.10.10.8). I want Samba to join the domain and get it's user/group/permission info from my Windows 2003 server. I have followed http://samba.org/samba/docs/man/Samba-Guide/unixclients.html#ch9-adsdc And it seams to join and work with wbinfo/getent/"net ads join/info/status". When I try to login with

Hi, I've changed /etc/resolv.conf, rebooted, here is the output: cat /etc/resolv.conf domain rona.loc search rona.loc nameserver 192.168.19.2 ------ smbclient -L $(hostname -f) -UAdministrator%<password> -d5 INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5

Hello Sambaers, i can not access my samba shares after upgrade my centos to 7.4,samba version was upgraded to 4.6.2 i joined centos to windows domain by realm command,domain user(format as username at doaminname) could login to centos could get kerberos ticket by kinit with domain user execute net view command at domain windows server get access denied C:\>net view

Hi all, this is probably VFAQ, but I never found a working solution. I have a standalone samba server running samba ver. 3. In the network, we have heimdal kerberos used to authenticate users for pop3,imap,web-based applications etc. Now I would like to make the samba communicating with kerberos kdc so there will no longer be users in smbpasswd with separate passwords outside of kerberos. I

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Hi all I'm desperate now. On one of the sites I cannot connect Ubuntu to Windows AD 2003. Error below. On exactly the same setup but on a different network and also on VirtualBox VMs everything works as expected. Looks like something on the network then or mission parameter. Error is about KDC but I can successfully do kinit and get ticket. I can also successfully run: sudo net ads info

Hello All I am seeing following error intermittently when I try to join the samba machine into AD controlled by windows machine. Failed to join domain: failed to lookup DC info for domain '3DFSTESTAD.COM' over rpc: The transport connection is now disconnected. If we repeat the same command with same configuration and credentials, it succeeds. Detailed logs at log level 5 are at end of