similar to: FW: FW: Domain member seems to work, wbinfo -u not (update10)

Hello, a reply in debianforum.de led me to: client ldap sasl wrapping = plain and with that setting at least wbinfo works. But still my problems are not completely gone: On the filesystem level, AD users and groups are still not resolved. "Invalid user". But kinit "USER" works. Still have to try... Regards, pgs Am 16.04.2016 um 19:08 schrieb Patrick G. Stoesser: >

Hello everybody, I've bin running Samba as a AD member server for ages (Debian stable). After the last update to 4.2, I just can't get it to work. Symptoms: unable to map AD user / groups. After two days of successlessly fiddling (and moving all data to another server with still Samba 3.6, which I will definitely NOT update at the moment), I decided to purge my Installation and start

Ok some new info. Yesterday file server worked, print server not. Today, both dont work. Same test today, proxy1 and proxy2. Proxy1 didnt work, proxy2 did ( at that time 4.3.6) I upgraded (to 4.3.8) proxy2, tested again, still working. Ok, now this proxy 2 is an vm ( a copy of proxy1 ), so lets try something.. I remove proxy2 from the ad domain (proxy1 is our main proxy) so this one is

New update.   I now have done about 6 machines. 2 with samba 4.2.10 work fine, 2 not. 1 with samba 4.3.7 works fine, 1 not.   I saw Jelmer updated the samba to 4.3.8 in sid, so i recompiled these to jessie. I upgraded the 4.3.7 to 4.3.8 Same result. Wbinfo -g works, -u not. For both servers.   I notice one strange thing here. I have 2 servers, both samba 4.2.10, all stock debian

On 15/04/16 14:54, L.P.H. van Belle wrote: > Yeah, i have an output of log level 10 while i do a wbinfo -u. > > As for the packages below. > 4.1.17, yes, im upgrading these as we speak, but now on hold due to this problem. > > 4.2.20 .. error typo, is Version 4.2.10-Debian > > 4.3.7.. yeah, but 4.3.8 is not in debian, the 4.3.7 is the package version debian used for the

Hai, Test again but now install 4.4.2 >> All versions below 4.4.2 are affected i.m.o. << My guess, bad patch somewhere, I do think security-2016-04-12-prerequisite-v4-4-regression-fixes.metze01.txt is the problem, since this is the only patch i remove from the debian patches. (compaired to the samba 4.4.2 from source and the 4.4.1 from debian) (!! Above works for me, i dont

Yeah, i have an output of log level 10 while i do a wbinfo -u. As for the packages below. 4.1.17, yes, im upgrading these as we speak, but now on hold due to this problem. 4.2.20 .. error typo, is Version 4.2.10-Debian 4.3.7.. yeah, but 4.3.8 is not in debian, the 4.3.7 is the package version debian used for the latest CVE fixes. Im waiting until 4.4.2 is out of experimental so i can

On 16/04/16 21:09, L.P.H. van Belle wrote: > New update. > > > > I now have done about 6 machines. > > 2 with samba 4.2.10 work fine, 2 not. > > 1 with samba 4.3.7 works fine, 1 not. > > > > I saw Jelmer updated the samba to 4.3.8 in sid, so i recompiled these to jessie. > > I upgraded the 4.3.7 to 4.3.8 Hi Louis, debian 4.2.10 is the same as

Ok, I have resolved my problem with this error by recreating my Kerberos keytab file : net ads keytab create -k Hope this could help some others people. Regards Philippe RITTER -----Message d'origine----- De : RITTER, Philippe Envoyé : lundi 18 avril 2016 11:38 À : 'Rowland penny'; 'sambalist' Objet : RE: [Samba] Domain member seems to work, wbinfo -u not (update2) Hello

On 15/04/16 13:43, L.P.H. van Belle wrote: > Ok, i have tested a bit more also. > > Now i have this problem also on some other servers with D. Jessie. > > The sernet 4.2.11 debian wheezy works fine as far i can see now. > > All my member servers have these settings ( see below),. > Versies used are > 4.1.17 (all ok) ( debian jessie packages ) > 4.2.20 (fail wbinfo -u)

Hello everybody. since this morning I've got a massive problem. My fileserver (Debian wheezy, Samba 3, everything up-to-date) is an ADS member server and was running flawlessly for two weeks. Since a few days I began to move users to this server from an old one, and since this morning nothing works anymore. The symptoms are: User get "wrong password" when trying to mount

On 18/04/16 12:52, L.P.H. van Belle wrote: > Ok. I've done the following, any samba dev, please read below. > > Looks to me some bug in librpc/ndr/ndr.c > > But im not a coder.. so please have a look. > > > > > > Environment. > > Debian Jessie, samba 4.2.10 (debian) > > > > I remove my proxy2 server from the domain, cleared up the AD.

4.3.7 Debian = 4.3.8 samba.org But last Saturday Jelmer updated to 4.3.8 so its not confusing anymore. Go through the list, see which versions i tested. Recap. Imo 4.4.2 is at this time the only with correct outputs. DONT GET MET WRONG. Debian 4.2.10, yes, wbinfo -u mail fail, but EVERYTHING works. You just dont see any output. Debian 4.3.8, yes, wbinfo -u mail fail, but EVERYTHING

On 18/04/16 08:06, Oktay Akbal wrote: > >>> Rowland >>> >> OK, it is now later :-) >> >> My DCs are now running a self-compiled Samba 4.4.2, I set up a domain >> member in a VM running 4.4.2, again self compiled. My laptop runs Wheezy >> and Samba Version 4.2.11-SerNet-Debian-9.wheezy. >> >> Every thing works, wbinfo -u, wbinfo -g,

On 15/04/16 10:33, Oktay Akbal wrote: > [global] > workgroup = DOMAIN > realm = DOMAIN.DE > netbios name = HOST > server string = HOST > security = ADS > encrypt passwords = Yes > map to guest = Bad User > password server = * > log level = 3 vfs:0 > log file =

On 15/04/16 11:11, Oktay Akbal wrote: >> On 15/04/16 10:33, Oktay Akbal wrote: >>> [global] >>> workgroup = DOMAIN >>> realm = DOMAIN.DE >>> netbios name = HOST >>> server string = HOST >>> security = ADS >>> encrypt passwords = Yes >>> map to guest =

> > I don't see where exactly the ways differ. I already played with idmap settings and keytab. It makes no difference. > > BTW the wiki entry does not explain how to create the keytab, so the setting is not really useful if you just follow that page. > > With the 'old system' you just have one range, this is now depreciated > and you should use the new

I am also having this issue, however in my case it is worse - samba shares do not work and "getent passwd <domain user>" also does not work. I tried adding the following to the "[global]" section of my smb.conf as suggested elsewhere, but no improvement: client ldap sasl wrapping = plain My smb.conf is very similar to yours, however I also have the following options set:

Hi list, Some more useful information - I compiled 4.2.11 on CentOS 7.2, and tested with the same configuration files and AD DC, running on MS Windows 2012 R2. The issue still remains. Regards, Dimitar > From: dimitar.hristov at outlook.com > To: amartin at xes-inc.com > Date: Wed, 20 Apr 2016 13:23:05 +0200 > CC: samba at lists.samba.org > Subject: Re: [Samba] wbinfo -u,

Release Announcements --------------------- This is a security release in order to address the following CVEs: o CVE-2015-5370 (Multiple errors in DCE-RPC code) o CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) o CVE-2016-2111 (NETLOGON Spoofing Vulnerability) o CVE-2016-2112 (LDAP client and server don't enforce integrity) o CVE-2016-2113 (Missing TLS certificate