similar to: ldap and ldaps udp needed?

Denis, Thank you for the information. I was under the impression that authentication was done through LDAP. I'm not sure what led me to this belief/understanding. How can I confirm that indeed my Linux member server is authenticating with Kerberos, and that it is encrypted? Is Kerberos traffic always encrypted? Thanks, Tim On Mon, Jan 15, 2018 at 10:37 AM, Denis Cardon <dcardon at

Hi, I would like to join a samba 4.2.0 file server sitting in a branch office, with connection only to a RODC (and only the RODC can talk to the RWDC). Was wondering what's the workflow for doing this in samba. For Windows machines, Microsoft seems to have planned two workflows for this: 1. Use new flag to NetJoinDomain() API to join using the RODC

Hai, In a bit testing with software deployment through GPO. ? Now i noticed te following. If i setup my software source somewhere on the sysvol share ( and probely any other share on the DC) then i can deploy the software with computer and user GPO setting. Aka works ok good all settings with software deployment. ? Now i noticed the following. I did setup a share on a member server the AD

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

Hi, I'm trying to synchronize user accounts from LDAP to Samba 4 AD (using LSC) but it seems that password update through ldap is not allowed. I failed to find details about it, but can someone confirm that unicodePwd cannot be read / wrote trough a LDAPS connection ? Is there any workaround ? Regards. -- Sébastien BEAUDLOT Université d'Avignon et des Pays de Vaucluse - France

Hello everybody, I have a running an installation of Samba4 as AD. All is working fine, but when I start the firewall, the clients have problems to login. By my firewall-rules from the past, I had opened the ports 137:139 and 445 for samba and new for bind the port 53. The clients (WinXP) seems to have problems to read and write from/to the home directories. Maybe samba4 need additional or

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

Hi, All. In official samba wiki https://wiki.samba.org/index.php/Installing_RSAT_on_Windows_for_AD_Management#Installation Feature explanation: Active Directory Module for Windows PowerShell: Administrating AD via PowerShell I thought I can manage samba4 domain with powershell, but I can't. I see error "Unable to find a default server with active directory web services running"

Hi, I always studying the fact that I must move to a pure windows AD. Is ADMT can work with a samba 4.1.4 for transfer informations to windows AD DC ? Must I upgrade to a newer version before ? regards Stéphane Purnelle

Hello Samba Team, We have AD controller with opened ldap ports (389/636). Problem is that users can connect by application like Apache DIrectory Studio and they see all ldap tree. Is it any solution to: - block view for all users without specific ACL, - block same attribute like uidNumber ? I'm lokking something like ACL in OpenLdap for Samba AD. Maybe somebody can help ? Best regards,

it is possible to change the name of the domain? ad.domain.local to domain.local Samba4 version 4.1.13 Thank you

Dear Samba users and admins, I am trying to deploy Samba4 as a domain controller and a file server and having some issues.* The domain have been well provisioned with option --use-rfc2307 I am then trying to create share by following this samba wiki https://wiki.samba.org/index.php/Shares_with_Windows_ACLs The problem is that i cannot succeed to change the group owner of the folder I want to

Good morning people from Argentine. again bothering with a doubt, It is posiblle, audit change password, create-delete-change users? and more? i have a file server with audit and works really really well and now I want more! any ideas? thanks for samba....i love it

Nope, but that was not the problem... root at samba01:~# dpkg -l | grep python-dns root at samba01:~# apt-get install python-dns Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: python-dns 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 28.7 kB of archives. After this operation, 135

Caming from Samba in NT mode with OpenLDAP backend i've created a bunch of ''things'' (apps, web tools, ...; but also printers and so on) that rely on reading ''public'' data in LDAP. With OpenLDAP ''public'' was a easy concept: anonymous access was the default, and ACL protect more sensitive data (mostly, passwords). Now i've to redo some

On 04/19/2016 3:49 PM, Helmut Hullen wrote: > Hallo, Dale, > > Du meintest am 19.04.16: > >>>>> As for smb.conf options: similar on the DCs and the smbserver, >>>>> with: >>>>> >>>>> server signing = mandatory >>>>> ntlm auth = yes >>>>> server min protocol = SMB2 >>>>> client max

We are attempting to connect a RHEL 6.8 server running Samba4/Winbind to a Windows 2008R2 Active Directory. We can make the connections, see the server in the "computers" section of the AD. We have been able to establish valid Kerberos connections and can establish a trust relationship. When we run the wbinfo utility we are able to retrieve group information, information

Hi Louis, normally you are building these wonderful samba debian packages for us :-) Is there a reason, that you didnt create packages for samba 4.8? Tfh! Oliver

Hi, I installed a RODC on my mailserver to have a local authentication for mailusers on the machine which doesn't rely on a always-on-connetion to the office. The problem is now that the user-preload doesn't work so that the RODC is not able to authenticate the users itself: samba-tool rodc preload <user> --server <DC1> -U Administrator Password for [AD\Administrator]:

Hello @all, i have three samba dc's each running with Version 4.7 on raspbian strech On one oft hem i have now this problem and i don't know why? I'm not sure what caused the problem. because it worked before. root at samba01:~# /usr/sbin/samba_dnsupdate --help Traceback (most recent call last): File "/usr/sbin/samba_dnsupdate", line 52, in <module>