similar to: Back with my UID problems

On Wed, 25 Feb 2015 10:18:04 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > > OK, going to need more info here, can you post the smb.conf you have > tried so far. You mention that you want to use the LDAP and Kerberos > provided by samba, this will mean that you will need to run samba4 as > an AD DC, yet you refer to creating users with pdbedit? >

On Wed, 25 Feb 2015 19:48:07 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > As for creating users & groups, samba 4 comes with 'samba-tool' for > more info on this, run 'samba-tool --help' or 'samba-tool user add > --help', you can also run 'man samba-tool' > > Rowland > Nothing in the samba-tool man page speaks to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 26 Feb 2015 22:41:58 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > Try 'samba-tool user add --help' > All the info you require is there. > > Rowland > Still fail: Used pdbedit to remove the previous user wynkoop used samba-tool to add user wynkoop with specific UID and GID I then

On Wed, 25 Feb 2015 19:48:07 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > OK, you would appear to be running samba4 in AD mode, i.e. you > provisioned it. > > You have now tried to add things to your smb.conf to make it work > like samba3, this will not work! Put your smb.conf back to what it > was like just after the provision and then go and read the

On Thu, 26 Feb 2015 22:45:02 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > Just what do you mean by 'allow no connections' ?? where from ? how? ivory:~ wynkoop$ smbclient -L prd2 Receiving SMB: Server stopped responding protocol negotiation failed ivory:~ wynkoop$ and on the server with the samba-tool built config I have these samba related processes:

On Fri, 19 Dec 2014 09:17:25 +0100 Tim <rintimtim at gmx.net> wrote: > I think Rowland meant to use rfc2307 attributes in your domain. > Therefore it is needed to provision your domain with --use-rfc2307 > parameter. When you have done this the schema doesn't need to be > extended. Hmmm well used rfc2307 on one of my previous attempts, but still saw no way to set the UID to

Greeting- Ok I went back and re-read the page on the AD DC HowTo, and now I remember that it was the first way I tried to set up the server two weeks ago. When I tried to start the server it failed to start, which is why I went searching out an smb4.conf online. I can go through the setup from the start again, but I am still at a loss as to how to match the UID numbers in the Samba AD to the

On Thu, 26 Feb 2015 19:45:31 -0700 Nigel W <nigel.w at nosun.ca> wrote: > Hello Brett, > [1] > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#RFC2307 > > Hope this helps, Nigel- I think I am still at a loss. after having a look at that page I added idmap uid = 34-1000 to the smb4.conf file. I then deleted user wynkoop, restarted samba and

On Fri, 27 Feb 2015 00:18:24 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > 34, you are seriously using 34 for a standard user id number ? You > shouldn't use anything below 1000 for a normal user, these low > numbers are reserved for system use and you have run into a problem > that can only be fixed by not using such low numbers. The 3000014 > number is

On 26/02/15 22:35, John Yocum wrote: > On 02/26/2015 02:31 PM, Brett Wynkoop wrote: >> On Wed, 25 Feb 2015 19:48:07 +0000 >> Rowland Penny <rowlandpenny at googlemail.com> wrote: >> >>> As for creating users & groups, samba 4 comes with 'samba-tool' for >>> more info on this, run 'samba-tool --help' or 'samba-tool user add

Greeting- It has been years since I last set up a Samba server. The last one I did was a 2.x version! For the last two weeks I have been fighting with 2 issues with a samba 4 server I have set up for testing. . Encrypted transport seems to not work for me . Unix user smith and Samba user smith seem to have different UID numbers when files are created. At the moment the second issue is the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 10 Mar 2015 02:10:51 +0100 Guus Sliepen <guus at tinc-vpn.org> wrote: > If that was not the problem, then another issue might be the version > of OpenSSL on your Beaglebone not supporting the Cipher or Digest > algorithms that you are using. > This seems the most probable from the various tests and key changes and so forth

On 26/02/15 23:30, Brett Wynkoop wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Thu, 26 Feb 2015 22:41:58 +0000 > Rowland Penny <rowlandpenny at googlemail.com> wrote: > >> Try 'samba-tool user add --help' >> All the info you require is there. >> >> Rowland >> > Still fail: > > Used pdbedit to remove the

On Thu, 18 Dec 2014 17:57:55 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > Hi, After sorting out your smb.conf, it would seem that you are > running samba4 as an AD DC and then trying to add parts to it that > are either the defaults or are not required. I would suggest that you > reinstate the original smb.conf (you did keep a copy, didn't you ?), >

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greeting- I have tinc on the following: 2 - x86 FreeBSD boxes 1 - ARM FreeBSD box 1 - x86 Macintosh All the x86 boxes can speak with each other, but none of the x86 boxes can speak with the ARM box. The ARM box says: [root at beaglebone /usr/local/etc/tinc/wdl]# tincd -D -n wdl tincd 1.0.24 (Mar 8 2015 14:55:57) starting, debug level 0

On Thu, 18 Dec 2014 09:49:28 -0800 Jeremy Allison <jra at samba.org> wrote: winbind trusted domains only = yes > > > > server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > > winbind, nt p_signd, kcc, smb > > Remove 'smb' from this line. In fact, remove this line > completely. Where did you find docs telling you to add > this

On Fri, 19 Dec 2014 11:35:58 +0100 steve <steve at steve-ss.com> wrote: > On 19/12/14 10:06, Brett Wynkoop wrote: > > > > > So is there a way to force a particular UID, meaning can I create > > account smith with UID 553 in a Samba DC? > > Yes. Simply add: > uidNumber: 553 > to the user's entry. That gets it into the database. You can use sssd >

On 25/02/15 19:31, Brett Wynkoop wrote: > On Wed, 25 Feb 2015 10:18:04 +0000 Rowland Penny > <rowlandpenny at googlemail.com> wrote: > >> >> >> OK, going to need more info here, can you post the smb.conf you >> have tried so far. You mention that you want to use the LDAP and >> Kerberos provided by samba, this will mean that you will need to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greeting- How does tinc compare in security to openvpn? I am mostly using it to get around nating routers at homes of family members so I can help them when they have issues, but I am sure if I suggest tinc in a professional setting whoever I suggest it to will ask me the same thing. - -Brett - -- wynkoop at wynn.com

On 25/02/15 09:06, Brett Wynkoop wrote: > Greeting- > > I had to take a break from mucking with samba because some other things > came up. > > Let me recap the situation: > > . I have an existing network of various unix boxes that use NIS and NFS > at the moment. > > . I have to drop some windows boxes into the network. > > . For policy reasons certain