similar to: Multiple samba instances

Hi, I am trying to mount fileserver (samba, 10.20.30.16) shares on a linux domain member server, where I logged on via ssh using AD my credentials. I am unable to get past the "mount error(126): Required key not available" error message. I have read and googled a lot, and could use some help. See this: > domainuser at memberserver-45:~$ sudo tail -f /var/log/debug & >

Louis, I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed this (during install:) ==========SE Privileges =============================== Enter administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED This is my /etc/resolv.conf: root at dc01:~# cat /etc/resolv.conf search dts***m.dt nameserver

Can I configure Samba4 in such a way that I have two separate **forests** on a single machine? let?s say one for CompanyA and other for companyB? So essentially does Samba4 support multiple server instances like Samba3 as described here http://wiki.samba.org/index.php/Multiple_Server_Instances? If it does not yet, are there any known blockers in supporting this or it?s just a question of time

On Tue, 2017-12-05 at 16:14 +0100, mj via samba wrote: > We haved used it on a domain member server, yes. > > Only one thing: when you have a compteraccount memberserver$ in your AD, > you cannot use "memberserver" as an alias on another machine) And you should register any such alias as a servicePrincpalName. Andrew Bartlett -- Andrew Bartlett

Hello, I'd like to know if the following issues happen to you too. 1. Sysvol permissions After I edited a GPO with a user which is member of domain Admins, sysvolcheck runs on an error due to security settings of thisvedited GPO. Running sysvolreset makes it all for he again 2. GPO password policy We have a policy that defines a password change interval of 32 days. On our clients (windows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello James, Am 31.12.2014 um 15:48 schrieb James:> Hello, > > I'm following along with the wiki(Setup a Samba AD Member Server) > and I have a question after reading the 'Set up a basic smb.conf' > section. Please show us your smb.conf Do I need to extend the schema in order for my member server to > successfully

Le 17/03/2015 15:40, Peter Serbe a ?crit : > Hi S?bastien, > > S?bastien Le Ray schrieb am 17.03.2015 14:15: > >> So even with two interfaces and bind interfaces only you cannot do it? Sad > I am by no means an *nix epert. Maybe it is possible - but I don't know > anyone how ever talked about doing something like that. And given the > _very_ limited resources, You

Hi I am running a Samba PDC and a Samba member server in his domain. The member server acts as a file server with unix acl's working. Is it possible to get these acl's working under samba to? The docs seem to say, that acl's are only possible if samba is a memberserver in an NT-Domain using winbind. In my case the PDC acts as a LDAP Server and the Member server is gets the unix

I run a very small Samba AD, consisting of a Samba AD DC and a Samba AD Member Server, acting as file server. Today, I added a new user to the AD but I simply can't manage to get access to the file server - only for this user, all others are working fine. My AD is rfc2307 based, so I manually have to add UID's. I did so for the new user, the ID is within range and not in use. I double

Okay, I gave up fixing that raspberry and going to use some conventional legacy PC instead and reinstall it all. Is there a way I can use the group, user and domain controller IDs from the backups I created to reinstall a new Samba4 DC without the clients noticing? I don't like to rejoin everything yet another time. - Axel

> Comment from Rowland: > [...]an AD user without a uidNumber is merely a windows user Hi Rowland, just for my understanding, I have a question. If a domain user in my samba4 AD domain does not have been assigned with a "uid" on the [UNIX Attribute] tab of my ADUC tool, that user in general *cannot* access any of the shares of that particular member server? Is that correct? My

Hello Stefan, Yes I'm using Samba4 as my DC's. I also provisioned my DC's with RFC2307. [global] netbios name = PFMS1 workgroup = DOMAIN security = ADS realm = DOMAIN.LOCAL encrypt passwords = yes vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes idmap config *:backend = tdb idmap config *:range = 70001-80000

After tried to solve the problem with "getent", I found another problem with the Member server. The member server works well, but the "uid" and "gid" mapping for users its incorrect. In the DC the "UID" "GID" its around 3000085 In the Member Server its around 2000 - 3000 For example: ADDC Server. --------------------- root at ACDC:/# wbinfo

Hi, i am at the end of my knowledge. Our PDC works fine all user can access the Samba Shares, Windows Logins are Working, all fine. But our Member Server makes me ($=%§=(%(§=. When i join the Domain all is fine and all Shares are working net rpc join -S DOMAINSERVER -U Administrator Using short domain name -- DOMAIN Joined 'SERVER1' to domain 'DOMAIN' net rpc testjoin -S

Can all of the compiled-in filepaths below be overrdden in smb.conf? I can't find documentation for the required smb.conf equivilents. If someone could supply them or post a link, I'd be very greatful. SBINDIR BINDIR SWATDIR CONFIGFILE LOGFILEBASE LMHOSTSFILE LIBDIR LOCKDIR PIDDIR SMB_PASSWD_FILE PRIVATE_DIR

Hello list, how can I get CentOS 7 to authenticate against a Microsoft ISA server for package installations after the OS is installed. In Debian/Ubuntu apt.conf just needs to be edited and it works. How to do so in CentOS? Regards Tim

Hi, Playing around with winbind, i noticed the follewing option: wbinfo --dc-info=DOMAIN According the the manual: --dc-info=domainname Find the currently known DCs When I run it on a domain member server, it reports only one DC, instead of the three I would expect. I guess this means winbind doesn't know about the existance of two of our three DCs...? Does it return all DCs for

Ok, it's here: http://pastebin.com/JEnr5wUq The id_offset is that value because i initially didn't use rfc2307 attributes, but instead On 29 January 2015 at 23:27, Tim <lists at kiuni.de> wrote: > @Hans-Kristian: > I'd like to see it. How did you automate this? > > @Andrew: > In another thread I suggested to set the rfc2307 info automatically when a > domain

Hi, we have several samba servers running as AD members (w2003 domain). Since the Upgrade to samba 3.0.8 the following message appears, when accessing a share on the memberserver from clienthost rmts2. [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username NTROBOTIC\rmts2$ is invalid on this system [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)

Hai Mourik-Jan, Beste wensen he ;-) Lets start here.. A and PTR record exists for both servers? Does CIFS/spn and root/spn exist in the AD? In krb5.conf, set these : ; not used for nfs4 but cifs might need it. ; for Windows 2003 ; default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5 ; permitted_enctypes = rc4-hmac