similar to: samba4 as ADS member: some users visible, others not

Am 2015-12-29 um 18:05 schrieb Rowland penny: > On 29/12/15 16:32, Stefan G. Weichinger wrote: >> I have to add a brand new fedora 23 server with samba 4.3.3 to an >> existing Windows ADS domain. >> >> The join is OK: >> >> # net ads testjoin >> Join is OK >> >> I use winbind as I still have to learn about sssd (and I am unsure which

On 29/12/15 17:30, Stefan G. Weichinger wrote: > Am 2015-12-29 um 18:05 schrieb Rowland penny: >> On 29/12/15 16:32, Stefan G. Weichinger wrote: >>> I have to add a brand new fedora 23 server with samba 4.3.3 to an >>> existing Windows ADS domain. >>> >>> The join is OK: >>> >>> # net ads testjoin >>> Join is OK >>>

On 29/12/15 16:32, Stefan G. Weichinger wrote: > I have to add a brand new fedora 23 server with samba 4.3.3 to an > existing Windows ADS domain. > > The join is OK: > > # net ads testjoin > Join is OK > > I use winbind as I still have to learn about sssd (and I am unsure which > one to prefer). > > config (workgroup and realm edited): > > [global] >

I lose track here and I have to fix this as users get angry (we all know that ...) debian 8.3, samba 4.1.17 (substituted customer name by "CUST" below ...) [global] workgroup = CUST realm = MABC.CUST security = ADS map untrusted to domain = Yes load printers = No printcap name = /dev/null disable spoolss = Yes template shell = /bin/bash winbind enum users = Yes winbind enum

I could really need some help with this .... -> still problems here Am 2016-01-05 um 12:23 schrieb Stefan G. Weichinger: > pls see this logs as well : > > > Jän 05 12:08:21 samba01.customer.at smbd[18809]: [2016/01/05 > 12:08:21.401618, 0] ../lib/util/fault.c:78(fault_report) > Jän 05 12:08:21 samba01.customer.at smbd[18809]: >

Am 2017-07-11 um 13:37 schrieb Stefan G. Weichinger: >> Having everything in AD, gives you the possibility of using different >> Unix home dirs etc per person. > > Not needed. I am the only UNIX user there. > > I only need separate [home] dirs for a group of users: > > some customers of my customer come by to do some work with a specific > software and I want

Am 2015-12-29 um 18:59 schrieb Rowland penny: > NO! This will give you precisely 0 users > > config * == the range the 'builtin' users will be mapped to. > config customer == the range for all the domain users that have a > uidNumber attribute. If a user doesn't have a uidNumber attribute > containing a number inside the range set in smb.conf (in your case >

On Tue, 11 Jul 2017 12:05:28 +0200 "Stefan G. Weichinger" <lists at xunil.at> wrote: > Am 2017-07-11 um 11:57 schrieb Rowland Penny: > > > Remove this local Unix group, you cannot have a group (or a user) > > in AD and /etc/group > > ok, done > > > Probably because '11029' isn't a 'RID', it will be a uidNumber. > >

HI, I'm using debian jessie I have followed this instruction https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server Here is : [global] workgroup = DOM realm = DOM.LOCAL server role = member server security = ADS map to guest = Bad User dedicated keytab file = /etc/krb5.keytab kerberos method = dedicated keytab syslog = 0 log file =

Can someone point me at how the machine account plays into permitting access here? [it] path = /mnt/data/samba/data/it valid users = CUSTOMER\sgw CUSTOMER\fhäu @CUSTOMER\edv read only = No browseable = No A user out of the group "edv" uses the PC "p10013". Sometimes he gets access, sometimes not. Logs show: (a) check_ntlm_password: authentication for user [P10013$]

pls see this logs as well : Jän 05 12:08:21 samba01.customer.at smbd[18809]: [2016/01/05 12:08:21.401618, 0] ../lib/util/fault.c:78(fault_report) Jän 05 12:08:21 samba01.customer.at smbd[18809]: =============================================================== Jän 05 12:08:21 samba01.customer.at smbd[18809]: [2016/01/05 12:08:21.401904, 0] ../lib/util/fault.c:79(fault_report) Jän 05 12:08:21

Le 27/07/2015 16:16, Rowland Penny a écrit : > On 27/07/15 15:13, zorg wrote: >> HI, >> >> I'm using debian jessie >> I have followed this instruction >> >> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server >> >> Here is : >> >> [global] >> workgroup = DOM >> realm = DOM.LOCAL >> server

Am 2017-07-11 um 14:00 schrieb Rowland Penny: >> template homedir = /home/%U >> >> works for me in this context, right? > > That should work. edited accordingly, and rm-ed that idmap schema line on DM. I now have on the DM: [global] workgroup = BUERO realm = secret.AT netbios name = SERVER security = ADS map to guest = Bad User username map = /etc/samba/smbusers

Hello List, I'm running a Samba ADS on Debian 9, Samba version 4.5.12-Debian. Right now I'll try to add a Domain member - also running Samba version 4.5.12-Debian. Thanks to Loius and Rowland, this howto guided me a lot in the right direction: https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member But right now I'll get stuck. It seems that the configuration is ok -

Le 27/07/2015 17:02, Rowland Penny a écrit : > On 27/07/15 15:51, zorg wrote: >> Le 27/07/2015 16:16, Rowland Penny a écrit : >>> On 27/07/15 15:13, zorg wrote: >>>> HI, >>>> >>>> I'm using debian jessie >>>> I have followed this instruction >>>> >>>>

Am 2017-07-11 um 14:57 schrieb Rowland Penny: > On Tue, 11 Jul 2017 14:47:50 +0200 > "Stefan G. Weichinger" <lists at xunil.at> wrote: > >> Am 2017-07-11 um 14:40 schrieb Rowland Penny: >> >>>> Restarted winbind, did "killall -HUP" on smbd and nmbd. >>>> >>>> still can't login to DM via smbclient and that

> On 02.11.2015, at 16:25, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > > Well he didn't write what I asked for, can you please post your entire smb.conf, please do not use testparm, please post as is (although you can sanitise any sensitive info) Sorry, missed that part. Here we go. Regards, Thomas [global] available = yes smb2 leases = yes

Am 2015-12-30 um 10:40 schrieb Stefan G. Weichinger: > Thanks a lot for that explanation. > I read it after it started working here yesterday so excuse my late > reply. I never understood it the way you described it above, this would > have helped me with other servers earlier as well. Maybe off topic or another issue, but I add it to this thread as it affects the same server. The

Hi All, I am having an issue with Samba joining an active directory domain. When I run 'net ads join -S mydomaincontrollerFQDN -U adminuser command I get this error: Failed to join domain: failed to lookup DC info for domain 'MYDOMAIN.COM' over rpc: Logon failure The credentials we entered are for sure correct but if we see our domain controller it count it

Hi, Hope someone can help I have setup a domain menber samba4 server I can access it perfectly using his ip \\192.168.0.3 But if I use his name \\shareserver it ask me for a password like if i was not join dns are working Don't really know where to look to find the clue -- probeSys - spécialiste GNU/Linux site web : http://www.probesys.com