similar to: Active Directory clients in DMZ

On 29/08/15 19:09, Marc Muehlfeld wrote: > Hello, > > Am 28.08.2015 um 21:03 schrieb shacky: >> I read the document at >> https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD#Authentication_against_AD_through_openLDAP_proxy >> and it tells about an OpenLDAP proxy to authenticate some external >> services through it, but I need to join some Windows clients so I

Hi, i wonder if there is any need to install shorewall on a machine located in the dmz zone of shorewaal. ( 3 interfaces example) mess-mate -- You are a fluke of the universe; you have no right to be here. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE

On 16/12/15 20:40, Таболин Юрий wrote: > 16.12.2015 22:47, Rowland penny пишет: >> On 16/12/15 19:35, Rowland penny wrote: >>> On 16/12/15 19:02, Таболин Юрий wrote: >>>> Hi all. >>>> >>>> I have samba 4.2.3 on freebsd 10.1 server. There are three DC and >>>> about 350 PC on domain. I wrote earlier that samba4 ldap

Hi. What system or software are you using to show the iptables log files (for example the dropped packages tagged as LOG in the Shorewall rules)? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files

I configured a domU to access to the physical serial port of the dom0 (/dev/ttyS0) typing this in the domU configuration file: irq = [ 4 ] ioports = [ "3f8-3ff" ] The domU starts without any error, but the serial port isn''t recognised. The /dev/ttyS0 device exists on the domU, and I blacklisted the serial_core, the 8250 and 8250_pnp modules on the dom0. What is the problem?

On Wed, Dec 16, 2015 at 12:40 PM, Таболин Юрий <tabolin at speechpro.com> wrote: > 16.12.2015 22:47, Rowland penny пишет: > >> On 16/12/15 19:35, Rowland penny wrote: >> >>> On 16/12/15 19:02, Таболин Юрий wrote: >>> >>>> Hi all. >>>> >>>> I have samba 4.2.3 on freebsd 10.1 server. There are three DC and about

Hi, As of now my mail server is basically postfix. Did anyone succeed integrating the Samba4 AD DC users with any mail daemon ? I was searching for some guide or anything like that but couldn't really find anything "easy". My main questions are: 1) I have several mail domains to host. Can I use all of them with my single DC/DOMAIN ? 2) The usernames are not the same as the email

HI Rowland, thanks for your fast answer! 2018-07-31 13:14 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > What do you mean 'two Primary Domain Controllers' ? > Do you mean, 'I provisioned a DC and then joined another DC to this', > or did you actually provision two DC's in the same domain ? > I provisioned a DC and then I joined another DC

Hi. I realized that I have a problem with the users SID. Thy are different between the SID of the domain. Let's see the output of these commands: server:/home/utenti/user# net getlocalsid SID for domain SERVER is: S-1-5-21-1375271547-2371556575-3111006354 server:/home/utenti/user# pdbedit -Lv test Unix username: test NT username: Account Flags: [U ] User SID:

On 16/12/15 19:35, Rowland penny wrote: > On 16/12/15 19:02, Таболин Юрий wrote: >> Hi all. >> >> I have samba 4.2.3 on freebsd 10.1 server. There are three DC and >> about 350 PC on domain. I wrote earlier that samba4 ldap performance >> is not enough for me. Now I want to try a server in the middle with >> openldap pcache - ldap cache proxy function. But

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

Hi. I wish to create a webpage to allow to access to the console of my Xen virtual machines in case of problems with the SSH server or some other network related problems. Some ISP do this, but I didn''t understand how they make it. Could you help me and tell me some ideas, please? Thank you very much! Bye. _______________________________________________ Xen-users mailing list

Hi all, CTDB seems to be needing an underlaying GlusterFS. Would it be possible to declare a second GlusterFS share to host Sysvol data? I have no experience about distributed file systems, so I'm not sure this GlusterFS file system would act as a normal FS (modulo locking process) from Samba point of view when it access to that FS. Then Samba would share this through CIFS these data...

> SIGH, does nobody read the samba wiki ???? > Have a look here: > https://wiki.samba.org/index.php/Authenticating_other_services_against_AD > Yes, I read that document before writing to the list, but I cannot understand where I can set or modify the bind password.

Hi. How can I avoid a user or a set of users of a Samba 4 Domain Controller to login on Windows clients or let them to only login on some specific clients? Thank you very much! Bye

Hi. I need to use some other distributions other than Debian as a Xen domU. These distributions are: - Fedora Core 7 - Opensuse 10.2 - Gentoo 2007.0 - Slackware 11.0 - Ubuntu 6.06.1 Server - Ubuntu 7.04 Server - Centos 5.0 - Mandriva 2007 Could you tell me a way to install it as domU, please? I searched for rpmstrap, but it supports only Fedora Core 4 and Centos 4... Could you help me, please?

Hi list! I am configuring Shorewall on a Xen domU virtual machine. I configured only the zones, interfaces, rules, policy and shorewall.conf files. When I run "shorewall check" there aren''t no problems, but when I try to start shorewall I get this error a lot of time: iptables: Invalid argument ip6tables v1.3.6: can''t initialize ip6tables table `filter'': Bad

How would I use Big Brother with Shorewall and my loc and dmz zones to monitor hosts in both zones? If Big Brother''s server is on my LAN (loc) is it "safe" to forward the bb port from the dmz to the LAN? What would the security risks of this be? Common sense says that it may not be a good idea to forward stuff from the dmz to the LAN, but I''m inexperienced and unsure

I am trying to add a machine into my dmz. It is the first machine I''ve ever added to this dmz and fro some reason I cannot establish communication between the dmz and the machine. Here is an example of my setup: ISP router --> firewall (eth0) firewall (eth1) --> local network firewall (eth2) --> DMZ eth0 and eth2 have public IP addresses as does the machine I just added to

From reading the documentation, I understand that it is recommended to put servers that may be at risk in a DMZ served via proxy-arp. In this case, the local clients that are behind a NAT would have their connections to the DMZ masqueraded, yes? Is there any way around this that would still be considered secure? Just looking for advice. Thanks, A.