similar to: Linux Workstation x SMB4 DC

An example of how slow is... [root at CTA1PAPAN001645 ~]# time id teste uid=16777232(teste) gid=16777216(domain users) grupos=16777216(domain users),16777220(operacao),16777222(BUILTIN\users) real 1m15.981s user 0m0.005s sys 0m0.007s According this documentation, if I want use File Sharing without AD modifications only option is Winbind (idmap_rid).

Em 2015-08-05 11:45, Rowland Penny escreveu: > On 05/08/15 15:36, Jefferson B. Limeira wrote: >> An example of how slow is... >> >> [root at CTA1PAPAN001645 ~]# time id teste >> uid=16777232(teste) gid=16777216(domain users) grupos=16777216(domain >> users),16777220(operacao),16777222(BUILTIN\users) >> >> real 1m15.981s >> user 0m0.005s

On 31/07/15 18:53, Denis Cardon wrote: > Hi Jefferson, > > Le 31/07/2015 15:22, Jefferson B. Limeira a écrit : >> What is the best way to authenticate users in SMB4 DC on Linux >> workstation? >> I'm using pam_winbind, but sometimes its very slow... > > Configuring everything correctly on the workstation side is quite > tricky. If you have laptops among

Em 2015-08-05 13:38, Rowland Penny escreveu: > On 05/08/15 17:18, Jefferson B. Limeira wrote: >> Em 2015-08-05 11:45, Rowland Penny escreveu: >>> On 05/08/15 15:36, Jefferson B. Limeira wrote: >>>> An example of how slow is... >>>> >>>> [root at CTA1PAPAN001645 ~]# time id teste >>>> uid=16777232(teste) gid=16777216(domain users)

Em 2015-08-05 16:13, Rowland Penny escreveu: > On 05/08/15 19:55, Jefferson B. Limeira wrote: >> >> I'm using CentOS 6.5 in all computers, workstations and servers. Samba >> 4.2.3, compiled last night. >> >> I wrote a script that connect at some workstations and run 'time id >> teste', the result: >> >> # ./exec.sh |grep ^real

Morning, On a DC: [root at BPCTASRVSDC003 ~]# samba-tool drs showrepl | grep failure 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0 consecutive failure(s). 0

Hi everyone! Everyday some channels go to this situation: # asterisk -rx 'pri show channels'| head -n 32 | grep 'Yes No Idle Yes' PRI B Chan Call PRI Channel Span Chan Chan Idle Level Call Name 1 1 Yes No Idle Yes 1 2 Yes No Idle Yes 1 6 Yes No Idle Yes 1 13 Yes No Idle Yes 1

Hi all, After successful joined a new DC (my third), no new DNS entry was created. The end of samba_dnsupdate --fail-immediately --verbose Calling nsupdate for A bp.net 192.168.1.240 (add) Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: bp.net. 900 IN A 192.168.1.240

On 05/08/15 17:18, Jefferson B. Limeira wrote: > Em 2015-08-05 11:45, Rowland Penny escreveu: >> On 05/08/15 15:36, Jefferson B. Limeira wrote: >>> An example of how slow is... >>> >>> [root at CTA1PAPAN001645 ~]# time id teste >>> uid=16777232(teste) gid=16777216(domain users) >>> grupos=16777216(domain >>>

On 05/08/15 15:36, Jefferson B. Limeira wrote: > An example of how slow is... > > [root at CTA1PAPAN001645 ~]# time id teste > uid=16777232(teste) gid=16777216(domain users) grupos=16777216(domain > users),16777220(operacao),16777222(BUILTIN\users) > > real 1m15.981s > user 0m0.005s > sys 0m0.007s > > According this documentation, if I want use File

On 05/08/15 19:55, Jefferson B. Limeira wrote: > Em 2015-08-05 13:38, Rowland Penny escreveu: >> On 05/08/15 17:18, Jefferson B. Limeira wrote: >>> Em 2015-08-05 11:45, Rowland Penny escreveu: >>>> On 05/08/15 15:36, Jefferson B. Limeira wrote: >>>>> An example of how slow is... >>>>> >>>>> [root at CTA1PAPAN001645 ~]# time

On 07/31/2015 06:22 AM, Jefferson B. Limeira wrote: > What is the best way to authenticate users in SMB4 DC on Linux workstation? > I'm using pam_winbind, but sometimes its very slow... > How slow is "very slow"? That said, nslcd with LDAP over SSL works, and it's fast in my experience. You could combine nslcd with Kerberos, which also works very well. Of course both

hi i'm trying to start testing samba4 i used: http://wiki.samba.org/index.php/Samba4/LDAP_Backend/Samba_4_alpha_9_with_Fedora_DS as a start... so far so good, but i get stuck with th provision.. ------------ setup/provision \ --host-name=dev --root=root \ --domain=JORDAN --realm=JORDAN.NET \ --server-role="domain controller" \ --ldap-backend-type=fedora-ds \

Hi, When I change dsHeuristics=0000002001001 like M$ said: https://technet.microsoft.com/en-us/library/cc816788%28v=ws.10%29.aspx Not works.

Hi Rowland, Perhaps I misled you with my wording. Each user has just one email address, which was not migrated across. From where I'm sitting that looks like a very serious bug. regards, John On 31/08/15 19:07, Rowland Penny wrote: > On 31/08/15 07:27, John Gardeniers wrote: >> I've been running through a bunch of tests after migrating from >> Samba > 3 to Samba 4

Hello, Using Nagios on Ubuntu 14.04.1 LTS. I'm attempting to authenticate users against Samba 4.2.1. When I edit 'apache2.conf' with <Directory /> Options FollowSymLinks AllowOverride None Require all granted Allow from all AuthName "AD authentication" AuthBasicProvider ldap AuthType Basic

No joy. I added winbind to the passwd, shadow, and group lines and it is still not working. I also switched back to ad instead of rid (I deleted the Samba database files in /var/lib/samba and rejoined the domain when I switched), and still the same. If the account exists locally I can authenticate against AD and map the share. No local account and it fails. -Mark

On Wed, 25 Feb 2015 19:48:07 +0000 Rowland Penny <rowlandpenny at googlemail.com> wrote: > As for creating users & groups, samba 4 comes with 'samba-tool' for > more info on this, run 'samba-tool --help' or 'samba-tool user add > --help', you can also run 'man samba-tool' > > Rowland > Nothing in the samba-tool man page speaks to

The only way it seems to work is if I do have both the local and AD user with the same name. But my goal here is to not require that, to have the AD account only. I have applied Unix attributes to the users. testuser uidNumber = 30089 and gidNumber = 100. However, when I try to query with wbinfo, I was unable to look that up: wbinfo -i "DEVELOPMENT\testuser" failed to call

We are preparing for an email domain name change. Is there a way I can script this in AD? I can of course manually edit each user's email address but I'd rather use a script that can be tied in with other scripted processes that will be performed during the switch-over, which would save me considerable time. I can't use ADUC for this because the username part of the email address