similar to: cifs.ko kernel module versus smb.conf - which SMB protocol version?

Hello, if anybody would kindly have anything to advice, please, please - do :-) SETUP: Fedora 28 + Samba 4.8.5 AD (testing environment consisting of 1 Samba server and 1 joined windows machine and 1 account) :-) PROBLEM: the "--must-change-at-next-login" is the problematic part after creating user, with this attribute the user is authenticated OK during FIRST Logon BUT!! when

I didn't setup any ssh-keys for authentication yet. Sorry. > Karel Lang AFD <lang at afd.cz> hat am 23. Februar 2015 um 14:48 geschrieben: > > > Hi there, > isn't possible, that the problem is just very basic and you've got a > authentication set via ssh-key on admin locally on the server you try to > logon? > Just saying .. > > cheers :]

Hi Rowland, Thanks for the informations. Yes, the Fedora Samba 4 package is built with MIT kerberos. I know it is still 'fresh' so that is what i do - run tests :-). Actually this thing with password expiration, is only thing i found so far, otherwise, it 'behaved' surprisingly well. Thanks again! Karel -- *Karel Lang* *Unix/Linux Administration* lang at afd.cz | +420 731 13

Hi, I've configured sssd so far as advised in the wiki: https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd getent passwd/group works. Everything seems to be fine. But now I realized, that when I use my domain admin user account to login on that server via ssh, it is not asking for a password. Normal user must authenticate with a password. Where should I look

On Wednesday, 12 September 2018 18:13:16 CEST Andrew Bartlett wrote: > On Wed, 2018-09-12 at 17:16 +0200, Karel Lang AFD via samba wrote: > > Hello, > > if anybody would kindly have anything to advice, please, please - do > > > > :-) > > > > SETUP: > > Fedora 28 + Samba 4.8.5 AD (testing environment consisting of 1 > > Samba > > server

ssh -v shows which authentication modules are used. Might be GSSAPI/Kerberos, e.g. On 2015-02-23 15:08, Tim wrote: > I didn't setup any ssh-keys for authentication yet. Sorry. > > > >> Karel Lang AFD <lang at afd.cz> hat am 23. Februar 2015 um 14:48 geschrieben: >> >> >> Hi there, >> isn't possible, that the problem is just very basic and

Hi all, I have installed Samba AD Domain for testing and it works fine. Only problem is that when i create new user with "samba-tool user create $USERNAME --must-change-at-next-login" or via ADUC in RSAT with "user must change password at first login" i cannot change password at all. When i try login i get prompt that i have to change password so i write new password,

Hi, isn't it possible, that your new Samba4 server uses higher SMB protocol, than the old MS windows XP machine can understand/handle? Not sure about this, but might be worth checking? cheers :] -- *Karel Lang* *Unix/Linux Administration* lang at afd.cz | +420 731 13 40 40 AUFEER DESIGN, s.r.o. | www.aufeerdesign.cz On 03/06/2015 02:42 AM, Al Schapira wrote: > Hello, > > A

Hello guys, i just wanted to ask about an idea, if it is feasible (or not). The company i work for (350 users) has 2 branches, that are interconnected with HQ via L2TP (encapsulated in IPsec) tunnels, that are setup in between Mikrotik routers. current setup: 300 users | HQ 192.168.2.0/23 | | Samba PDC + LDAP | | (389 DS) backend | | | | | / \ 30 users /

Hi all, guys, first and foremost, i apologize, as this is not really about samba, but i'm basically at 'ground zero' with windows 10 and how to stop them from snooping information of the LAN PC windows users. And i know there is some great people with windows network understanding here on list, that is why i ask here, so please don't stone me :-) I think everyone heard

To all who have holidays this time of year :-). And may all our Samba-related wishes come true in 2015 :-). Cheers, Jeremy.

It has been a while since I have had to annoy you. You may be pleased to know that my server has been working quite well...until recently. I think it is because of a power hit we took recently. I don't know which came first, but I have four symptoms: 1) When I log in on a Windows machine, with an account that should have administrator permissions, I don't have said admin rights. 2)

Hi folks, Still trying to get security = share working, which it appears means I need to install Samba 3. As the server is pretty much goverened by this, I can install whatever linux is required, although I know Fedora, so CentOS etc is possible. I've just tried uninstalling Samba 4 from my F20 laptop to play with Samba 3. Can someone explain to me why to remove Samba I also have to

After being content with an old laptop running XP for years, my job decided to provide me with a shiny new one running Windows 7 Professional. The biggest problem with this is that I can't get the Windows 7 box to login to my Samba NT4-style domain controller. I have upgraded samba from 3.0.33 to 3.6.23, and copied my smbpasswd file to where the new samba expects to find it in

Friends-- I'm stumped! Cannot get mount.cifs to work over a tun connection. How would you trouble-shoot this? 1. It cannot be openvpn causing the problem: I can ping across the connection both directions on all machines. 2. It cannot be samba causing the problem: I can mount.cifs the smb shares on the lan (using the identical credentials file) without any issue. 3. Have iptables

Hi, this reminds me of my troubles of setting up samba BDC at remote company branch. Connection was done by IPSEC tunnel between 2 mikrotik routers. Thing was, ipsec supports only unicast, but not multicast,nor broadcast. Solved it by adding L2TP tunnel that support the above mentioned mechanisms. So ended up with the l2tp (which has very weak encryption and is very old and vulnerable)

Hello list and all, this is my case: 4month ago i joined new job with company: 400 employees, RHEL and CEntOS 6.5 servers in backbone (and some windows servers as app servers), with one Samba3 PDC fileserver/domain server with tdbsam backend for windows 7 workstations and NIS for Linux workstation and servers authentication... you can imagine this situation was a bit mess My goal was to

Hello my latest content updates: * https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member New page. It replaces the old "Member Server" page, which shows now just a notice (https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server) Everything to know is described on the new "Domain Member" page. In combination with the file-/printserver and other

Hi list, perhaps someone can help me out? fact: - samba 3.6.9 plus CentOS 6.5 - i have user quotas set up on their HOME directories, which resides in the "/home" filesystem - on windows workstation their disk quota is not shown, instead they see whole filesystem free/taken space (which generate much grumbling) After searching lists, googling etc., i decided to give a try the

Hello, A windows XP machine 'X' (the only one left in the LAN) sees all fedora14/samba3 shares on f14 machine 'A' but cannot see fedora20/samba4 shares on machines 'B' or 'C'. 'X' can ping all of the others by name, and all of the others 'A', 'B' and 'C' CAN see ALL of the other shares INCLUDING on the XP machine 'X'.