similar to: realmd and net rpc privileges

Am 29.04.2015 um 12:58 schrieb L.P.H. van Belle: > so tell us what are your errors? > > It's hard to help without them. > Please post your smb.conf ( sanitized ) and your resolv.conf and hosts file. > and.. > you can try the command : > net rpc rights grant 'SAMDOM\Domain Admins' SeDiskOperatorPrivilege -U'SAMDOM\administrator' -S servername.fqdn > >

On 30/04/15 09:05, Sebastian Gabler wrote: > There is something to add. Listing existing rights (any rights that > is, thus using the current, root, user) fails with the same problem: > > # net rpc rights list > Enter root's password: > Could not connect to server 127.0.0.1 > The username or password was not correct. > Connection failed: NT_STATUS_LOGON_FAILURE >

so tell us what are your errors? It's hard to help without them. Please post your smb.conf ( sanitized ) and your resolv.conf and hosts file. and.. you can try the command : net rpc rights grant 'SAMDOM\Domain Admins' SeDiskOperatorPrivilege -U'SAMDOM\administrator' -S servername.fqdn greetz, Louis >-----Oorspronkelijk bericht----- >Van: sequoiamobil at

There is something to add. Listing existing rights (any rights that is, thus using the current, root, user) fails with the same problem: # net rpc rights list Enter root's password: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE I conclude of that net cannot authenticate at all for this purpose, and the first step

Am 30.04.2015 um 10:13 schrieb Rowland Penny: > On 30/04/15 09:05, Sebastian Gabler wrote: >> There is something to add. Listing existing rights (any rights that >> is, thus using the current, root, user) fails with the same problem: >> >> # net rpc rights list >> Enter root's password: >> Could not connect to server 127.0.0.1 >> The username or

Hai, >thus, the password of SAMDOM\Administrator is the >mapped (root) pw. No, not correct. root has its password. Administrator has it own password, even when mapped these are different. these users just share the same uid 0 ! test with kinit Administrator at YOUR.REALM.TLD and have a look here.

Am 01.05.2015 um 16:49 schrieb samba-request at lists.samba.org: > Perhaps you will get better help if you try using a mailing list for > realmd or sssd, neither of these two programs is supplied or supported > by samba. > > Rowland You may have missed that the problem is solved meanwhile, and as I stated above the error was with the Samba configuration, namely value of the

Hi, too! Am 01.05.2015 um 11:32 schrieb L.P.H. van Belle: > Hai, > >> thus, the password of SAMDOM\Administrator is the >> mapped (root) pw. > No, not correct. > root has its password. > Administrator has it own password, even when mapped these are different. > these users just share the same uid 0 ! Don't know. A minimal install of Samba, sssd on OEL7

On 30/04/15 11:32, Harry Jede wrote: > On 12:29:52 wrote Rowland Penny: >> You need to map root to Administrator, add this line to smb.conf: >> username map = /etc/samba/user.map >> >> Then create the map file, it is just one line: >> >> !root = EXAMPLE\Administrator Administrator administrator > Simply wrong! This maps the windows users to the unix user

Hi All, First post so I hope this is pitched right. I've been successfully using 3.6 as an AD authenticated (winbind) file server for a while, and decided to have a poke around with 4 (I'd read somewhere that someone had got zfs filesystems to work with full windows acls with samba 4). I've got as far as compiling 4.1.6 and setting up a similar share. Server role = member server,

hi users I'm trying: $ realm join ... and I see that keytabs are not ok, I think, right? >setspn -L dzien Registered ServicePrincipalNames for CN=DZIEN,OU=private,DC=my,DC=dom te,DC=cam,DC=ac,DC=uk: HOST/dzien.private.my.dom HOST/DZIEN seems to me that @AD.MY.DOM is missing? is this expected behavior and missing keytabs should be added manually? many thanks, L.

Giving a domain user group privilege SeDiskOperatorPrivilege fails with NT_STATUS_NO_SUCH_PRIVILEGE. The domain is controlled by a MS 2012 R2 DC. Has this privilege been renamed or replaced with some other privilege? How to give the domain user group necessary rights for defining file share permission settings from MS environment? The RHEL 7 file server is running Samba 4.1.1-38 and the id

Louis, I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed this (during install:) ==========SE Privileges =============================== Enter administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED This is my /etc/resolv.conf: root at dc01:~# cat /etc/resolv.conf search dts***m.dt nameserver

I have samba installed and joined to a Windows domain as a member server. I would like windows admins to be able to manage shares. I have followed the docs on samba.org and I am on the last step which is to run net rpc rights grant 'SAMDOM\Domain Admins' SeDiskOperatorPrivilege -U'SAMDOM\administrator' but it fails with an access denied error. So my question is: 1.What user

Did you try it with the administrator account? If it is also not working have a look right here: https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting Am 15. Februar 2015 07:15:23 MEZ, schrieb Jason Long <hack3rcon at yahoo.com>: > > > >Thank you. > >According to the "

Hi, I have a question, hidden shares with $ in samba 4 seems that are not showed when you try to connect to samba server and view from windows shares, is this a bug or I have a problem with my configuration? Thanks

On Fri, 25 Jan 2019 16:32:56 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > > I come back in this thread, sorry. > > > Maybe https://wiki.debian.org/LDAP/NSS is a better solution for > > the mailserver. > > Probably better use directly LDAP info with native MTA tools

Hi Rowland, Am 20.03.2015 um 15:02 schrieb Rowland Penny: >>> Try replacing the global part of your smb.conf with this: >>> >>> [global] >>> netbios name = PLATON >>> workgroup = FEE >>> security = ADS >>> realm = FEE.DE >>> dedicated keytab file = /etc/krb5.keytab >>>

Tim, Thanks for the hint. Usermap for root applied, locally made requests fail now systematically with "Could not connect to server <server address> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" It is kind of improvement :) Random things scare me. -Tom On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > Hi Tom, > > have a look at this: >

I want to authenticate a user before he is able to use the phone. I also want to set his privilege as to where he is allowed to call to... Preferably, the password should be their VoiceMail password, (every extension (or is that user?) can have voicemail defined - even if its not in use?) ...one should be able to enter the password (variable length) as part of the dial sequence - eg the number