Displaying 20 results from an estimated 3000 matches similar to: "LDAP mismatch between DCs"
2016 Apr 19
2
Ldapsearch against Samba 4
Hi Andrew,
I don't understand why 2 systems running the exact same version of Samba
have different behaviour. Is this an option I can disable?
regards,
John
On 19/04/16 11:29, Andrew Bartlett wrote:
> On Tue, 2016-04-19 at 10:29 +1000, John Gardeniers wrote:
>> I'm setting up a test domain in order to try out Sudoers LDAP and
>> have
>> run into a problem that has
2016 Apr 19
5
Ldapsearch against Samba 4
I'm setting up a test domain in order to try out Sudoers LDAP and have
run into a problem that has my puzzled. On our production domain I can
run a query such as:
ldapsearch -LLL -p389 -h DC -u me at ourdomain.com.au -W -X -LLL -b
"dc=ourdomain,dc=com,dc=au" -s sub
However, running an equivalent search on a freshly installed test
domain, using the exact same version of Samba
2016 Aug 23
7
virtual users, mailer daemon send mails to non existant recipient and dovecot store it
Hello,
Sometime when we receive a spam or virus that is detected as it, mailer
daemon send a reply to the sender to inform that the message is a spam
or content viruses.
The problem is that the sender of the spam as something like
voicemail at ourdomain.fr ( the user voicemail doesn't exist in our database )
And sometimes dovecot create the directory and store the reply 's mail...
2015 Mar 24
1
Debugging Samba 4 AD Setup
Hi Louis,
answers are inline ...
On 03/24/2015 03:48 PM, L.P.H. van Belle wrote:
> Realm is advices to use UPPERCASE.. not obligated. ( but very advices yes )
I changed the config to uppercase and rebooted, no change in the logfiles.
>
> check the following outputs and post them back in the list ( if needed anonymized )
>
> hostname -i
192.168.1.235
> hostname -s
the-ad-hostname
2010 Jun 10
2
Peculiar Samba permission denied error
Hello,
I've been trying to figure this out for some time and can't quite nail it
down, despite searching the internet, and a couple of samba books. Here
goes:
I'm running "Version 3.4.3-3.3.1-2341-SUSE-SL11.2" of Samba on OpenSUSE
11.2.
Here are some relevant excerpts from my smb.conf file:
[global]
...
security = ADS
...
winbind separator = +
...
log level = 2
...
2019 Mar 29
1
configuring Dovecot with wforced and auth_policy_server_url with https results in assertion failed
On 28.3.2019 22.34, Robert Kudyba via dovecot wrote:
>>>>> Set
>>>>>
>>>>> ssl_client_ca_file=/path/to/cacert.pem to validate the certificate?
>>>>
>>>> Can this be the Lets Encrypt cert that we already have? In other
>>>> words we have:
>>>> ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
2015 Mar 27
2
Replication error after trying to sync sysvol
I tried to synchronize the sysvol folders, on two dcs. Something went
wrong since yesterday we have replication problems:
One machine shows this, while the other one is happy.
samba-tool drs showrepl
==== INBOUND NEIGHBORS ====
DC=DomainDnsZones,DC=ourdomain,DC=com
Default-First-Site-Name\DC03 via RPC
DSA object GUID: af610e1a-9e3b-4cdd-a36b-c296d77a9479
Last attempt @
2018 Jan 25
3
Aw: Re: problem with lda
thanks for your input.
Bill: deliver is just a symlink to dovecot-lda
Stephan: I don't know, and and it even does not work when I use deliver -f "postmaster at ourdomain.internal" - I get the same error message.
A part of the mail I got when using 2.2.23:
Return-Path: <MAILER-DAEMON>
Delivered-To: user1 at ourdomain.internal
Received: from localhost (localhost [127.0.0.1])
2018 Nov 08
2
after reboot listen(*, 995) failed: Address already in use/listen(*, 993) failed: Address already in use
This is still happening after a reboot, Fedora 28. Restarting dovecot fixes
the problem. Does anyone know if it could be related to this bug
report? *https://bugzilla.redhat.com/show_bug.cgi?id=103401#c130
<https://bugzilla.redhat.com/show_bug.cgi?id=103401#c130> * and suggested
work around to add ports to /proc/sys/net/ipv4/ip_local_reserved_ports?
Nov 8 12:21:41 ourdomain dovecot[1386]:
2013 Feb 20
3
LDAP users/groups not showing up with nis, pam, & ldap
I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've
previously installed a similar configuration on RHEL4, but CentOS now
uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations
are a little different.
Currently, local users and groups are showing up but not LDAP users.
When I do a /getent passwd/ and/getent group/ I don't get LDAP users.
When I do
2013 Feb 15
1
Problem with User and Group Ownership listing
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've
previously installed a similar configuration on RHEL4 using smb 3.0 but
CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the
configurations cannot be moved straight across.
When I do a listing of a share directory that should have user and group
ownership determined by LDAP, I get the uidNumbers and
2016 Apr 19
0
Ldapsearch against Samba 4
Hi,
testparm -v | grep 'ldap serve'
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[netlogon]"
Processing section "[sysvol]"
Loaded services file OK.
Server role: ROLE_ACTIVE_DIRECTORY_DC
Press enter to see a dump of your service definitions
ldap server require
2014 Apr 18
4
Changing SSL certificates - switching from self-signed to RapidSSL
Hi all,
Ok, been wanting to do this for a while, and I after the Heartbleed
fiasco, the boss finally agreed to let me buy some real certs...
Until now, we've been using self-signed certs with the following dovecot
config:
ssl = required
ssl_cert = </etc/ssl/ourCerts/imap.pem
ssl_key = </etc/ssl/ourCerts/imap_key.pem
Now, I've created new keys/certs and the CSR, got the new
2019 Jun 20
2
Samba internal dns server vs Bind
>What are you thinking to transfer the zones to ?
I try to explain, why I asked the question. Now we have NT4 style
Samba domain, with ldap backend, and Bind. We have two sites, they are
connected through VPN. On the servers, Bind configured as
master-slave. On every site, there is a master, for their own domain,
and they are each others' slave. As I know, this is zone transfer.
I want to
2015 Mar 24
4
Debugging Samba 4 AD Setup
We're using quite successfully a samba 4.1 AD setup authenticating user.
We have on an unregular basis
mails that can't be delivered because dovecot-pam fails to verify the
credentials. I'm trying to debug
this and set the loglevel up to 3.
I can see an error message being spammed in the log files and can't
figure out what causes this. I expect a configuration error somewhere
2015 Mar 26
1
TSIG error with server: tsig verify failure
when you read. :
http://www.spinics.net/lists/samba/msg111972.html
says:
>
>That output
> ; TSIG error with server: tsig verify failure
>is usually only seen when the internal DNS server is running.
>It's a glitch, which can be ignored atm (all dyn. updates are done OK).
>
so if you dont want to see that error, switch to bind9_DLZ.
Greetz,
Louis
2018 Jan 24
3
problem with lda
Hello,
I am currently testing the upgrade from our dovecot v2.2.23 to 2.3.0. I have a strange problem with lda.
We use bounce mails for internal users if they try to send virus/spammails. The exact same config works with 2.2.23, but not with 2.3.0.
The relevant postfix/master.cf part:
dovecot unix - n n - - pipe
flags=DRhu user=vmail:vmail
2014 Jun 26
4
syslinux 6.03pre17 + gpxelinux.0 + iso from http not working
Ady,
I had not previously tried three slashes, but have now. No difference unfortunately. I've also tried using the web server on the same machine as the PXE server and using 'http://127.0.0.1/Software/Util1.iso' as the URL, again to no avail.
It appears not to be able to connect to anything via http or https. Presumably it uses network settings (such as the gateway) provided by the
2014 Jun 26
4
syslinux 6.03pre17 + gpxelinux.0 + iso from http not working
Hello,
I am running Debian testing x64 and have manually installed the 6.03pre17 deb packages for extlinux, pxelinux, syslinux, syslinux-common, syslinux-stuff and syslinux-utils.
I have a working tftpd-hpa 5.2-18 PXE system and can boot PCs to it. All .c32 binaries, gpxelinux.0 and memdisk are from the Debian packages and everything works except for http/https sources of ISOs. I have tried both
2019 Jun 19
3
Samba internal dns server vs Bind
Hi,
I set up Samba DCs for two sites. The first site is for example
domain.ourdomain.com, the second is site2.ourdomain.com. On the first
site, there will be 2 DCs, and one fileserver, on the second site
there will be one DC, and it will act as fileserver too.
Is it true that Samba's internal dns server won't good for that, and I
need Bind, because of Bind's zone transfer feature?