similar to: ntlm_password_check: LM password, NT MD4 password in LM field and LMv2 failed for user username

If the problem machines are Windows 8 or later machines, it *could *be an SMB protocol negotiation issue. Windows 8 will attempt to negotiate SMB 3.11, but samba < 4.3 will cap at SMB 3.0. SMB 3.11 support came out with Samba 4.3.x. If this is the problem, you could either disable SMB2/3 on the Windows 8 box as noted in https://support.microsoft.com/en-us/kb/2696547, or possibly consider

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Hi, Since I really would like some more info (specifically: remote ip address) to be logged with failed password attempts, I have tried to edit the samba source code. :-) Anyway, I changed in source4/auth/ntlm/auth.c > if (tevent_req_is_nterror(req, &status)) { > DEBUG(2,("auth_check_password_recv: " > "%s authentication for user [%s\\%s] " >

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

Hi All I am tying to create a user in SAMBA 4 AD with ldapadd, but its not allow me to add multiple mail attributes, here is my ldif of user. dn: CN=ayesha,CN=Users,DC=samba4pdc,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: ayesha name: ayesha sAMAccountName: ayesha userPrincipalName: Ayesha Umar objectCategory:

Hi all, I need to add a windows nt4 (sp6a) server to our samba-4.1.6 active directory. I installed nt4 as a 'stand alone server'. So far it doesn't work, I get: When selecting to 'create a computer account in the domain': - the machine account for this computer either does not exist or is inaccessible If I create a computer account manually, and do not check 'create a

Dear list, I don't know if it is appropriate to ask here, if it is not, please point me to the right lists (suse-linux-e..?) I am using a samba pdc right now, and we want to start using linux for (some) workstations as well. I have exported /home to my subnet, to allow access via nfs. (so you will have your home directory available both under windows and linux) Under windows, you have

Maurik, You are right. I am currently using 4.1.17 and have the same failed login messages as you describe. There is, however, a bit more information further down in the logfile: [2015/10/07 16:51:24.076283, 2] authentication for user [HPRS/Administrator] FAILED with error NT_STATUS_WRONG_PASSWORD auth_check_password_send: Checking password for unmapped user [HPRS]\[Administrator]@[ROVER]

Hi list, i have a samba4 AD server working, and squid 2.7 auth internal...so i need change the auth of squid to my samba4 server....i search in google but information is incomplete and diferent...any official site, wiki or user experince to get information about? regards and thanks -- Administrador de Redes Nodo Provincial ESILT OS: Debian 7.5 wheezy

Hi, In our samba3 days, we provided a homedirectory like \\filehost\username. Now, with samba4 / ADUC using "\\filehost\username" gives the error: "the home folder could not be created because: the network name cannot be found". We have a little root preexec scripts creates the directory and sets permissions, so ADUC only needs to accept the

Am 06.10.2015 um 21:26 schrieb mourik jan c heupink: > I have checked all our policy directories on sysvol, and I have a > "Registery.pol" only in some "/Machine" directories, and none in "/User" > or "/Group Policy". Do you have any policy in the User tree in the GPME in that GPO? If you never defined one, then the file is missing. Try e. g.

Hi all, I hope that this request for help will be the last one, for a while to come. Today, sernet support helped my sort out our DC mess, and they did a great job. However, sssd no longer works, and I hope someone here can help out. We used to have DC1, DC2 and DC3. DC1 was the classic-upgraded, first, 'original' DC, and had to be shutdown, unfortunately. So only DC2 and DC3

dear list. I was just wondering, is there anyone here using sles9 with xfs in an lvm? We had severe filesystem corruption on a server today, and only two things were changed: I updated via yast online update (lot's of updates, strange enough, including an lvm update) and I had to replace a drive in my hardware 6 disk raid array. (IBM 5i, raid 5) Now I was wondering what caused the

Hi, On 10/21/2015 01:21 PM, Rowland Penny wrote: > I am now beginning to think it doesn't work at all, if samba4 is > involved in any way. I knew that it wouldn't work on a DC (probably > because the user is DOMAIN\username and not just username), but from my > experiment (see my earlier post) it doesn't seem to work at all, try > your setup with '[home]' and a

Hi, On our sernet-samba 4.2.4 AD-style we see that for some (newer) machine accounts, they do not have a gidNumber and uidNumber. Users logging on to those machines experience no problems, but in those systems eventlog we see during boot:: This computer was not able to set up a secure session with a domain controller in domain OURDOMAIN due to the following: There are currently no logon

Hi all, Not sure if this is the right place to ask, but...: On the dovecot enterprise release pages, only debian 6 compatibility is shown. Are there any plans to support wheezy? (as 7 is stable now, and we are running it...) Regards, Mourik Jan