similar to: samba-tool and --kerberos

Hi Stefan, Thank you a lot for that, it helped me much. To be a bit more precise, thanks again to your example, to authenticate samba-tool command using --kerberos: syntax is "-k yes" or "--kerberos=yes" or "--kerberos yes" AND -U username must not be present. "-k=yes" is not working. 2015-10-19 11:59 GMT+02:00 Stefan Kania <stefan at

You're right, but I tried successfully -k only with smbclient which accept -U and -k together (now I'm here I must say smbclient uses -k without argument). For net command I was not able to make -k nor "--kerberos yes" m707:~# net rpc service list --kerberos=yes Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed:

Hello. I apologize for my English, I am still learning. How do I create an organizational unit (OU) via command in Samba4? I've researched very samba-tool and found nothing on the subject. Thank you. ? Atte, Johnata Tagliavini

Hello Stefan, I learned the hard way about .local. I understand going forward. I do have an issue with the member server. Following along with the wiki I get stuck at 'Testing the Winbind user/group mapping'. Wbinfo works as expected but not #*id DomainUser* #*getent passwd* #*getent group* #*chown DomainUser:DomainGroup file* #*chgrp DomainGroup file* etc. I receive

Hi Rowland, Am 02.05.2018 um 14:27 schrieb Rowland Penny via samba: > Try adding 'dns update command = /usr/sbin/samba_dnsupdate > --use-samba-tool' to smb.conf > > and run 'samba_dnsupdate --all-names --use-samba-tool' we did this and we now getting the following error-message: ----------- . . ERROR(runtime): uncaught exception - (9711,

Hello, We have moved from PBIS to Samba + winbind. In PBIS, after logging in to a SSH session, the prompt (user context?) would be: username at hostname: Now, after logging in, the prompt is: domain\username at hostname: How do I make it drop the "domain\" ? This causes issues in other areas as passing "\" is an illegal character. Should we change the "\" to

Hello Stefan, Yes I'm using Samba4 as my DC's. I also provisioned my DC's with RFC2307. [global] netbios name = PFMS1 workgroup = DOMAIN security = ADS realm = DOMAIN.LOCAL encrypt passwords = yes vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes idmap config *:backend = tdb idmap config *:range = 70001-80000

Hi everybody, One of my DC crash this afternoon (dead disk). I can't remove this DC server from windows GUI (computer object from < users and computers >) and NTDS settings from < sites and services > because windows GUI error. So i manually remove this old server : - Clean all DNS stuff (tpc, sites, kerberos, kpasswd, srv entries.....) - With apache directory

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, on the wiki-page https://wiki.samba.org/index.php/Build_Samba_from_source there are some configure-Options like "./configure ... - --with-sysconfdir=/etc/samba/". If I try to start "./configure --with-sysconfdir=/etc/samba/" I get the following error-message: waf: error: no such option: --with-sysconfdir Is the

Hello, I have the following error when checking for GPOs for a single user, listing all GPOs is working: ------------------ root at tn2-debian1:~# samba-tool gpo listall GPO : {31B2F340-016D-11D2-945F-00C04FB984F9} display name : Default Domain Policy path : \\example2.net\sysvol\example2.net\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9} dn :

Ok, so yesterday it worked. Can you run this for me and mail me the output, i have a quick check. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh And https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-db-repl.sh Last, have you check for corrupted filesystem and/or file/folders? Any updates done last days? Now maybe, just maybe, and this

In my company we have in our 389-ds LDAP server schemas created by our group with our own attributes specifications, and we want to know if it is possible to create these attributes in the Samba4 AD and how to do it.

Hi, We have a couple of RHEL7 gluster storage servers with samba/ctdb. Both have joined the domain successfully (the ctdb service was started and net ads join issued on both). A container was created by the AD admin and I specified this using createcomputer=OU when I issued the net ads command on both machines. As far as I can tell on the RHGS servers everything looks OK. However the AD admin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have to use "-k yes" for example: samba-tool user list -k yes Bevor you can use it, you must get a Ticket with "kinit administrator" Stefan Am 19.10.15 um 10:49 schrieb mathias dufresne: > Hi all, > > I recently tried to use --kerberos switch in addition to some > samba-tool command (mainly samba-tool user

I am running a samba ad on Ubuntu 16.04 configured as told in https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller The server is running fine currently, but I have to manually start it after every reboot. The link to the upstart scripts in the wiki are dead: https://wiki.samba.org/index.php/Samba_AD_Init_Script_Examples Does anyone have a functioning init

Hello everybody, if I set up a RODC in a different site with an own subnet do I have to replicate the machine-passwords with "samba-tool rodc reload host\$ --server=addc"? Or can a machine always authenticate against a RODC? Greetings Stefan -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 195

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To show what we did here the entry in /etc/fstab: knoten-01:/gv0 /glusterfs glusterfs defaults,_netdev,acl,selinux 0 0 Am 17.11.2015 um 18:22 schrieb Michael Adam: > We just analyzed the situation together, and the solution is that > in order to access security.FOOBAR xattrs on the gluster fuse > mount, you have to specify the

I decided to give Samba 4.9.x a new try as AD DC in one of my servers. It has been running version 4.8.9. I installed version 4.9.4 and when I ran samba-tool dbcheck I still obtained the following error message: ERROR(<type 'exceptions.UnicodeDecodeError'>): uncaught exception - 'ascii' codec can't decode byte 0xc3 in position 25: ordinal not in range(128)   File

How can I best handle file & directory permissions & inheritance when accessing the same data on a remote server from Windows clients through a CIFS share and Linux clients through an NFS export? I have Samba AD working and I believe Winbind is working because when I check permissions from the command line, whether locally on the server or a remote Linux client, with ls, getfacl,