similar to: Samba 4 problems

On Wed, 25 Feb 2015 10:18:04 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > > OK, going to need more info here, can you post the smb.conf you have > tried so far. You mention that you want to use the LDAP and Kerberos > provided by samba, this will mean that you will need to run samba4 as > an AD DC, yet you refer to creating users with pdbedit? >

On Thu, 18 Dec 2014 09:49:28 -0800 Jeremy Allison <jra at samba.org> wrote: winbind trusted domains only = yes > > > > server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > > winbind, nt p_signd, kcc, smb > > Remove 'smb' from this line. In fact, remove this line > completely. Where did you find docs telling you to add > this

Greeting- I had to take a break from mucking with samba because some other things came up. Let me recap the situation: . I have an existing network of various unix boxes that use NIS and NFS at the moment. . I have to drop some windows boxes into the network. . For policy reasons certain staff are in the local password file on each server, everyone else is in NIS. . UIDs are in sync

On Wed, 25 Feb 2015 19:48:07 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > OK, you would appear to be running samba4 in AD mode, i.e. you > provisioned it. > > You have now tried to add things to your smb.conf to make it work > like samba3, this will not work! Put your smb.conf back to what it > was like just after the provision and then go and read the

On Thu, 18 Dec 2014 17:57:55 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > Hi, After sorting out your smb.conf, it would seem that you are > running samba4 as an AD DC and then trying to add parts to it that > are either the defaults or are not required. I would suggest that you > reinstate the original smb.conf (you did keep a copy, didn't you ?), >

Greeting- Ok I went back and re-read the page on the AD DC HowTo, and now I remember that it was the first way I tried to set up the server two weeks ago. When I tried to start the server it failed to start, which is why I went searching out an smb4.conf online. I can go through the setup from the start again, but I am still at a loss as to how to match the UID numbers in the Samba AD to the

On Wed, 25 Feb 2015 19:48:07 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > As for creating users & groups, samba 4 comes with 'samba-tool' for > more info on this, run 'samba-tool --help' or 'samba-tool user add > --help', you can also run 'man samba-tool' > > Rowland > Nothing in the samba-tool man page speaks to

On Fri, 27 Feb 2015 00:18:24 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > 34, you are seriously using 34 for a standard user id number ? You > shouldn't use anything below 1000 for a normal user, these low > numbers are reserved for system use and you have run into a problem > that can only be fixed by not using such low numbers. The 3000014 > number is

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 26 Feb 2015 22:41:58 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > Try 'samba-tool user add --help' > All the info you require is there. > > Rowland > Still fail: Used pdbedit to remove the previous user wynkoop used samba-tool to add user wynkoop with specific UID and GID I then

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greeting- I have tinc on the following: 2 - x86 FreeBSD boxes 1 - ARM FreeBSD box 1 - x86 Macintosh All the x86 boxes can speak with each other, but none of the x86 boxes can speak with the ARM box. The ARM box says: [root at beaglebone /usr/local/etc/tinc/wdl]# tincd -D -n wdl tincd 1.0.24 (Mar 8 2015 14:55:57) starting, debug level 0

On Fri, 19 Dec 2014 09:17:25 +0100 Tim <rintimtim at gmx.net> wrote: > I think Rowland meant to use rfc2307 attributes in your domain. > Therefore it is needed to provision your domain with --use-rfc2307 > parameter. When you have done this the schema doesn't need to be > extended. Hmmm well used rfc2307 on one of my previous attempts, but still saw no way to set the UID to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 10 Mar 2015 02:10:51 +0100 Guus Sliepen <guus at tinc-vpn.org> wrote: > If that was not the problem, then another issue might be the version > of OpenSSL on your Beaglebone not supporting the Cipher or Digest > algorithms that you are using. > This seems the most probable from the various tests and key changes and so forth

On 26/02/15 22:35, John Yocum wrote: > On 02/26/2015 02:31 PM, Brett Wynkoop wrote: >> On Wed, 25 Feb 2015 19:48:07 +0000 >> Rowland Penny <rowlandpenny at googlemail.com> wrote: >> >>> As for creating users & groups, samba 4 comes with 'samba-tool' for >>> more info on this, run 'samba-tool --help' or 'samba-tool user add

On Thu, 26 Feb 2015 22:45:02 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > > Just what do you mean by 'allow no connections' ?? where from ? how? ivory:~ wynkoop$ smbclient -L prd2 Receiving SMB: Server stopped responding protocol negotiation failed ivory:~ wynkoop$ and on the server with the samba-tool built config I have these samba related processes:

On Thu, 26 Feb 2015 19:45:31 -0700 Nigel W <nigel.w at nosun.ca> wrote: > Hello Brett, > [1] > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#RFC2307 > > Hope this helps, Nigel- I think I am still at a loss. after having a look at that page I added idmap uid = 34-1000 to the smb4.conf file. I then deleted user wynkoop, restarted samba and

I'm currently running Openvpn on a multi-homed linux server. The bridge device br0 comprises the tap0 virtual device and the physical eth0 device. Eth0 is wired to the local LAN. Remote clients dial into the server's external interface eth1's udp port 1194. This works but when the number of clients increases (over 12), we see lots of dropped packets and lost connections. We look at

On Fri, 19 Dec 2014 11:35:58 +0100 steve <steve at steve-ss.com> wrote: > On 19/12/14 10:06, Brett Wynkoop wrote: > > > > > So is there a way to force a particular UID, meaning can I create > > account smith with UID 553 in a Samba DC? > > Yes. Simply add: > uidNumber: 553 > to the user's entry. That gets it into the database. You can use sssd >

On 25/02/15 19:31, Brett Wynkoop wrote: > On Wed, 25 Feb 2015 10:18:04 +0000 Rowland Penny > <rowlandpenny at googlemail.com> wrote: > >> >> >> OK, going to need more info here, can you post the smb.conf you >> have tried so far. You mention that you want to use the LDAP and >> Kerberos provided by samba, this will mean that you will need to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greeting- How does tinc compare in security to openvpn? I am mostly using it to get around nating routers at homes of family members so I can help them when they have issues, but I am sure if I suggest tinc in a professional setting whoever I suggest it to will ask me the same thing. - -Brett - -- wynkoop at wynn.com

I think Rowland meant to use rfc2307 attributes in your domain. Therefore it is needed to provision your domain with --use-rfc2307 parameter. When you have done this the schema doesn't need to be extended. When you are using ADUC in Windows, are you seeing a Unix tab in preferences of a user or group? If not you need to install the "Server for NIS Tools" extension for ADUC. Then you