similar to: Joining a domain

Marc, Thank you for taking the time to give me some complete answers. When writing to lists like these I often struggle with how much or little detail to give.... and I am eager to add more detail where you have explicitly asked. On Tue, Mar 10, 2015 at 2:13 PM, Marc Muehlfeld <mmuehlfeld at samba.org> wrote: >> 1. Must "net join" be used? > > If you want to join the

Hello, I am using AD authentication. When I setup samba on my new server, users could not access shares. However, the following command "fixed" the problem: net join -U XXXXX\\cstankevitz The command returned what appears to be an error: kerberos_kinit_password XXXXX\cstankevitz at XXXXX.CORP failed: Client not found in Kerberos database Failed to join domain: failed to connect to

Rowland, Thank you. I read the Oreilly book chapter 10, but I am still unclear on the requirements. If you have an idea for another book/man to read, please let me know and I will read. On Mon, Apr 25, 2016 at 11:48 PM, Rowland penny <rpenny at samba.org> wrote: > You may however run 'kinit user at DOMAIN.TLD' to ensure there is a kerberos > ticket before doing something

Hello, I have these questions regarding samba running in ads mode such that users are authenticated against active directory: 1. What is the role of 'kinit'? 2. How often must 'kinit user at domain.local' be run? 3. What are the consequences of an expired or non-existant klist? 4. Why does "kinit 'DOMAIN\user'" fail but "kinit user at DOMAIN.LOCAL"

On 11/03/15 23:57, Chris Stankevitz wrote: > Marc, > > Thank you for taking the time to give me some complete answers. When > writing to lists like these I often struggle with how much or little > detail to give.... and I am eager to add more detail where you have > explicitly asked. > > On Tue, Mar 10, 2015 at 2:13 PM, Marc Muehlfeld <mmuehlfeld at samba.org> wrote:

Hello Chris, Am 10.03.2015 um 18:26 schrieb Chris Stankevitz: > Please consider a scenario in which samba is sharing files and users > provide their Active Directory usernames and passwords to log into to > samba. > > 1. Must "net join" be used? If you want to join the domain, yes. > 2. Under what circumstances will samba (and family) require an > explicit

I just created a windows domain. it is essentially empty except for a couple of users and an group policy related to windows update. I then configured samba to connect using ads. net ads join took > 5 minutes - but worked fine net ads testjoin takes ~5 minutes - shows a good join wbinfo -u takes ~5 minutes and shows the users During the long wbinfo pause, the log show: "Starting

Hello, Can you recommend a first step in diagnosing these symptoms: The following operations are always fast: - browsing shared with osx/linux client - moving directories with osx/linux client The following operations are sometimes absurdly painfully slow: - browsing shared with windows 7 client - moving directories with windows 7 client Wireshark shows: - When using windows: Lots of ~10

On Wed, 1 Feb 2017 07:30:19 -0800 Chris Stankevitz <chrisstankevitz at gmail.com> wrote: > On Wed, Feb 1, 2017 at 1:12 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > He is also unlikely to be running avahi, he is using Freebsd 10.3 > > truss (like strace) showed that wbinfo, net, and sshd were all hanging > after system calls to getuid() and

On Tue, Jan 31, 2017 at 12:36 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > time net ads testjoin > Join is OK > > real 0m0.476s > user 0m0.108s > sys 0m0.008s Yes, I know... I have a similar setup (same version of samba, same hardware, same OS but a different windows domain on a different network) that is working fine. > Is the Windows AD

On Wed, 1 Feb 2017 09:47:38 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > We are missing the content of /etc/nsswitch.conf > Can you post that also. > > But you probely see: > hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 > > i suggest > hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4 > > since your using

On 10/02/2017 01:06 PM, Rowland Penny via samba wrote: > On Mon, 2 Oct 2017 12:38:19 -0700 > ToddAndMargo via samba <samba at lists.samba.org> wrote: > >> Hi All, >> >> You please look over my smb.conf and make >> criticism as appropriate? >> >> This is a workgroup server. >> winbind is running >> DDNS is also running (DNS [bind]

On 10/03/2017 05:33 AM, Rowland Penny via samba wrote: > Sorry if some of these sound like teaching your grandmother to suck > eggs, but it is better to say them than not;-) > > Rowland Hi Rowland, I appreciate the the help! You did exactly what I ask for, which was to let it rip. I will have to read over slowly several times. Be nice to disable winbind too. My ego

On Tue, Jan 31, 2017 at 2:45 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: >> /etc/resolv.conf: >> root at nickel:~ # cat /etc/resolv.conf >> nameserver 192.168.11.5 >> nameserver 192.168.1.4 >> domain mydomain.local >> > > I take it at least one of the above nameservers is the AD DC, is the > other another AD DC ? If it isn't,

Time for some all time pimpage folks. Me and Matt Pelletier wrote a small PDF book on Mongrel entitled: "Mongrel: Serving, Deploying, and Extending Your Ruby Applications" since we really wanted you to know what it was about. It''s published by Addison Wesley Professional, has just over 100 pages of goodness, and is available for $14.99 at: http://safari.oreilly.com/0321483502

Hello, I want to build an application where i have client and server. I need to exacute commands with XM-RPC. I can get all this working, following the howto''s in wiki and main website. But the problem is they are all unsecure. I can''t seem to find any web service examples where they use authentication, or ssl. Just wondering if anyone know how i go about doing this. At the

Hi, I have been using this setup for years: mail_home = /var/mail/vhosts/%d/%n mail_location = maildir:~ I have since learned that mail_home and mail_location should be different. I plan to use this: mail_home = /var/mail/vhosts/%d/%n mail_location = maildir:~/mail I would like the transition to be transparent for my email clients. I don't want mail/directories/sieve_scripts to

I have the following setup: PDC: Samba 3.0.37 on Solaris 10 BDC1: Samba 3.0.37 on Solaris 10 BDC2: Samba 3.4.3 on Solaris 10 Samba 3.0.37 is the bundled version of Samba. Samba 3.4.3 is compiled from source. BDC2 is a recent addition to the network. All machine use LDAP as the backend for everything. They use winbind to handle a domain trust with another domain, but otherwise

I have two Samba 3.6.24 domain controllers (Solaris 10.) On all machines unix accounts and groups are in the LDAP as well as idmap entries for trusted domains. Samba accounts on domain controllers are in LDAP so there is problem with consistency unix/windows id and group mapping on the domain controllers. The domain controllers are the main file servers as well. I am configuring a

On Thu, Mar 12, 2015 at 2:25 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: >> I'm sorry for being so daft, but I am asking you if I need/want to >> join the domain. I do not know the answer. Reminder of my scenario: >> samba is sharing files and users provide their Active Directory >> usernames and passwords to log into to samba. I will call this