similar to: Samba 4.2.x requiring TLS authentication

IMHO, in short, learn to use encrypted connections. 2016-07-27 22:38 GMT+02:00 Kris Lou <klou at themusiclink.net>: > As of 4.2.11: https://www.samba.org/samba/security/CVE-2016-2112.html > > =================== > New smb.conf option > =================== > > ldap server require strong auth (G) > > The ldap server require strong auth defines whether the

Hello, I am trying to add shares by configuring the server through Yast on an OpenSuse Tumblweed and KDE desktop on a Dell machine. The Samba package is version 4.9.1 on a i586 (32-bit) architecture. After making changes using the Samba Server GUI invoked from Yast I press OK and come out. But none of the changes are saved. I would be grateful if some could help. Kind regards,

So you have to reset the other account flags after doing it? On 08/15/2019 02:43 PM, Kris Lou via samba wrote: > pdbedit -c="[]" <user> > > This clears the Account Flags (warning, clears ALL Account flags) that you > can also view via "pdbedit -Lv <user>" > > > Kris Lou > klou at themusiclink.net > > > On Thu, Aug 15, 2019 at 12:11

I've found that some embedded devices have older CIFS clients, which can only talk over SMB1. So, you can adjust your server to allow it, or look for another file transport. Kris Lou klou at themusiclink.net On Wed, Sep 9, 2020 at 3:16 PM Jeremy Allison via samba < samba at lists.samba.org> wrote: > On Wed, Sep 09, 2020 at 02:35:28PM -0700, Peter Pollock via samba wrote: >

I have a bit of an oddity here: I'm using Samba 4.2.14 with AD, using Samba's internal DNS to serve to my domain (and forwarding others to Google Public DNS 8.8.8.8). However, it looks like client queries (and subsequent forwards) to a vendor's URL (www.pitneybowes.us) fail, but are successful if I query Google directly: [root at XXXX~]# nslookup -type=any www.pitneybowes.us >

> > The internal DNS is NOT supporting round robin. As Rowland said use Bind9 > That's news to me! If so, then the internal DNS backed is not suitable for multiple DC's. (Though, I could've sworn it worked on versions 4.2+ < 4.7. It's on my to-do list to explore this further with different versions.)

Is there an easy way to undo an account that is locked out due to wrong password count exceeded? -- Bob Wooldridge EDM Incorporated

Hi all, I seem to have run into a case where my DC's aren't being round-robin'ed by DNS. I've got 3 DC's using Internal DNS, but every time I ping mydomain.com and check the results (ipconfig /displaydns), it's always in the same order. The same order appears when I query the DC's directly, individually: # nslookup mydomain.com 172.23.51.5 Server:

Hi All, We're migrating our environment to AD. The question we have is about the users in /etc/passwd. Our users are in the TDB and /etc/passwd. What is the best way to purge the users from /etc/passwd? If we remove them manually, the user info cannot be enumerated using getent passwd. Any suggestions/ Thanks, RT

Hi Rowland, Fair comment. This is not a new domain and we are migrating to AD. The box in question runs Samba 3.6 (PDC and a physical box) and as such we are not able to directly migrate it. We are adding a Samba 4 box (a VM) , to which will become the new PDC . This box will then be used to migrate to AD. The Samba 3 box will converted as a file server. The confusion in smb.conf is possibly

I was trying to research whether multi factor authentication is possible with Samba AD.? There's not that information out there. We have both Linux systems with Winbind authenticating from Samba AD and Windows systems authenticating via Samba AD. ? I saw a message from Louis almost a year ago with some links, but as far as I can tell, not specifically tied to Samba AD (unless I

Hi all, Sorry for this question which has certainely already been answered, but I could not find info in the list nor in the wiki. From my Debian laptop running testing (samba 4.9.5) and with an empty smb.conf (I wanted to be sure that only default values are used), I can not browse shares of a Windows 10 machine (sorry, Thunderbird splits some lines): smbclient -L 192.168.122.200 Unable to

I'm currently using the standard Samba 4.5.8 on Debian 9.1, but would like to have spotlight support for Mac users. As far as I can tell, the standard package isn't compiled with spotlight support, so I will need to compile it myself. Is there an easy way to know what the configure string was that was used to compile the packaged version? I simply want to add the --enable-spotlight flag

Hai,   Im playing around with my XCP-NG ( open source Xen Server ) and *(trying to add the SMB Storage Repo.   The samba server is running ... Debian Jessie with samba 4.8.5 On the server im seeing in my logs. :   [2018/09/28 14:42:43.948555,  0] smbd/process.c:525(init_smb_request)   init_smb_request: invalid wct number 55 (size 106) [2018/09/28 14:42:44.963470,  0]

You're geniuses one and all! That looks to have fixed the problem! At a later date I'll try to work out how to do it via ftp so I can avoid the smb1 protocol altogether, but for now I have a working solution so THANK YOU! On Wed, Sep 9, 2020, 3:45 PM Andrew Bartlett via samba < samba at lists.samba.org> wrote: > The other thing is NTLMv2, also required by default in modern

On Wed, Dec 27, 2023 at 12:21?PM Sonic <sonicsmith at gmail.com> wrote: > On Wed, Dec 27, 2023 at 2:31?PM Kris Lou via samba > <samba at lists.samba.org> wrote: > > > named.conf.local > > > ===================== > > > include "/usr/local/samba/private/named.conf"; > > > ===================== > > > > Is the correct

Well, this is interesting (to me, at least). I joined a W10 machine to the domain (4.8/4.9.4 mix, I'm working on it), then renamed it via "WMIC /node:<computer> computersystem where name="<computer>" call rename name="<newname>". Doing so changed the displayName, sAMAccountName, dNSHostName, and assorted servicePrincipalNames, but did not change the

> > There is also Citrix XenServer for maxium > comfort. It offers GUI tools under Windows for managing VMs. The > drawback is, there are a lot of parameters you cannot set in the non > paid version. Just to throw it out there, there's also XCP-NG which is a rebranded (w/o Citrix) version of XenServer without all of the proprietary bits. The same people also produce

Hello, One of Samba 3 -> Samba 4 migration task I am solving is changing authentication against new Samba 4 AD domain. Existing services use LDAP directory of Samba 3 to authenticate. The simplest way to go would be just to replace LDAP credentials; however, I don't quite understand which LDAP credentials to use/how to create them for Samba 4 AD. Sample command against Samba 4 LDAP

Perhaps try http://wing-repo.net/ for CentOS rpms? The readme is out of date -- inspecting the repo at http://wing-repo.net/wing will find 4.6, 4.7 (in extras), 4.8rc3. Kris Lou klou at themusiclink.net On Wed, Feb 21, 2018 at 8:27 PM, denis.shigapov via samba < samba at lists.samba.org> wrote: > We have the standard centos. > I have recompiled packages from Fedora, as well as all