similar to: SerNet - Samba 4.3 and ssh password logins

Hai, I have AllowGroups sshlinux, sshwindows Add at least 1 user in the linux group and at least 1 in the sshwindows group. Make sure the sshwindows group have a GID. And make sure the windows user loggin in in ssh als have a UID. AND for both, UID 1000+ ( which is in debian the default PAM setting ) . This is base on a "MEMBER" server. If you do : getent windowsuser You

Thats pretty simple todo. Create a group on windows, add the allowed users in it. Add AllowGroups YourADGroup In sshd_config Restart ssh. You want unix and windows groups. AllowGroups YourADGroup YourLinuxGroup Adduser Linuxgroup ( for the linux servers ) Greet, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Heinz

Dear Samba Friends, I've a problem to join with Windows2000-Clients a Samba-PDC. When I join the samba-pdc with a WinNT4.0-Client it is no problem, first I create a machine-account for the machine: 1. in /etc/group exists the group: machines:x:515: 2. useradd -g machines -d /dev/null -c nickname -s /bin/false neuch205$ 3. pdbedit -a -m -u neuch205 In this way, it isn't a problem to join

Hi all, I have the samba 3.0 and is my file server. I have set the Security Level to User. When a Win Client contact for the first time in the day the server, it ask to client the user and the password. If the user and pw are exact the samba server loggin the client. After that the client exit to the shared folders in the samba server and do other But when it for the second time contact the

Dear friends, is there anybody who can help us, I've the same problem with the Kickoff Time. I also found no possibility to change it... Heinz -------- Original-Nachricht -------- Betreff: [Samba] Kickoff time expired, how to change? Datum: Mon, 12 Nov 2007 10:35:32 -0700 Von: Tim Donnelly <tim@coalliance.org> An: <samba@lists.samba.org> I am attempting to move my

Hello there, I have a problem with replication between two domain controllers, dc1 and dc2. Distribution: Debian 8.5 Samba-Distribution: sernet-samba 4.3.11-14 The replication on dc2 working fine without any failures. But the synchronization on dc1 gives the failure "WERR_BAD_NETPATH". Because the message "BAD_NETPATH" I checked the DNS-resolution:

High, I've a samba-3.0.5 installation on a Debian Testing distri box, and I try to join a Windows 2000 PDC in an real ADS environment. I joined successfully the PDC with: # net rpc join -U Administrator Password: Joined domain NEURO After that I tried to list the sam: # net rpc samdump [2004/09/01 16:58:28 , 0] utils/net_rpc_samsync.c:rpc_samdump_internals(222) Error connecting to

Hi All, since Friday I get a surprising error, when I try to replicate my domain-controllers. This is new! It worked before in any direction without any failures... When I replicate from dc2 to dc1 this runs also, without any failures: root at dc1:~# samba-tool drs replicate dc1 dc2 DC=mydomain,DC=uni-frankfurt,DC=de Replicate from dc2 to dc1 was successful. Only when I try to replicate from

Hi all. I am running Debian jessie server with Samba, which has joined the Active Directory domain. The domain controllers are Windows Server 2012 R2. After I upgraded Samba version from 4.1.17+dfsg-2+deb8u2 to 4.2.10+dfsg-0+deb8u2, I'm facing the problem that I can't access Samba share by NetBIOS Aliases or IP Address. The Samba's NetBIOS name is mysamba, and I can access by

I hope this is the right place to post this. I am running SuSe 8.2 Linux on an IBM 1 gig processor at work. I installed samba 3.0.5 on it and followed the instructions in the online book "Samba-3 by Example" for chapter 9 "Active Directory Domain with Samba Domain Member Server <http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm>" to the tee (of

Hi all, We have an old 3.0.7 samba running as PDC. As we have problems with XP64 clients accessing the domain, I compiled a 3.0.23c and copied the smb.conf. Some of the client work well with the new Samba, but most of them do not. Was there any relevant change in the smb.conf part between the two versions? Thanks Bgs

Hey everyone, After discussing the AllowGroups I think I've discovered a bug. The system is a solaris 8 system and the problem is that when I use AllowGroups with no AllowUsers args, the proper actions happen. Same with AllowUsers and no AllowGroups. When I try to combine the two, none of the Allow directives seem to take. Is it just me or maybe a bug? -James

Hi! I'm experimenting with migrating the custom sshd_config settings for our (Debian bullseye, openssh-server 8.4) server environment into fragments under sshd_config.d/, and am wondering about sshd's behaviour when encountering multiple AllowGroup lines. The manual states "For each keyword, the first obtained value will be used.", so that gives me the impression that any

Hi, After extensively looking into puppet + augeas for managing the AllowGroups in sshd_config, I came to the conclusion that it won''t work as I expected :( So I''m sharing my thoughts here. The main objective is allowing multiple groups per-node, depending on what the security team wants. Since I want this to be dynamic, I created a define in a class: class ssh::server::config

Markus, ignore the other stuff I sent.. I need to go back to bed and stop trying to code.. <sigh> For everone else.. Will this make everyone happy? This does the follow. it will always honor AllowUsers. If there is no Allow/DenyGroups it stated they are not in allowUsers. IF there are AllowDenyGroups it tries them. And then stated they are not in either AllowUsers nor AllowGroups

Hi, with sssd i can do: $ ssh user at domain.tld@HOST1 $ id user at domain.tld $ ls -al /home/domain.tld/user drwx------ 5 user at domain.tld domain users at domain.tld 103 12. Jun 14:14 . $ grep AllowGroups /etc/ssh/sshd_config AllowGroups lokale_gruppe samba_gruppe at domain.tld When switching to winbind only $ id user at domain.tld is working any other command is using user\domain $ ls -al

After reading http://lists.samba.org/archive/samba/2003-November/001828.html what would the best approach for downgrading samba-3.0.10-1.4E.12.2 to 2.7 on centos4, then later upgrading back to current? -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us -

Hi there. I'm having a problem letting a Samba server (MYSAMBA) authenticate users (using "security = domain" and a "password server = MYPDC") against a Windows 2000 PDC (MYPDC). The Windows 2000 machine seems (I'm not 100% sure about this) to be configured to restrict anonymous and it seems to me that this is where the problem lies but don't know what to do. I

On 16/06/2023 19:49, Stefan Kania via samba wrote: > Hi, > > with sssd i can do: > $ ssh user at domain.tld@HOST1 > $ id user at domain.tld > $ ls -al /home/domain.tld/user > drwx------ 5 user at domain.tld domain users at domain.tld? 103 12. Jun 14:14 . > $ grep AllowGroups /etc/ssh/sshd_config > AllowGroups lokale_gruppe samba_gruppe at domain.tld > > When

While testing some AllowUsers and AllowGroups combinations I was surprised to find that one cannot be used to override the other. For example: AllowGroups administrators AllowUsers john If john is *not* part of the administrators group, then access is being denied. Is this the expected behaviour? This would force me to create another group just for ssh, something like ssh-admins. This other