similar to: idmap_ad and RFC2370 (inconsistent results)

Hi, I have one Samba4 server running as Active Directory Domain Controller. It's working like a charm. So I needed to add another server to be a Member Server (File Server). The server is running samba-4.0.9. Configured and compiled ok: ./configure --prefix=/usr/local/samba --sysconfdir=/etc --localstatedir=/var --mandir=/usr/man --bindir=/usr/bin --sbindir=/usr/sbin --libdir=/lib

Something strange here. User created using: root at dc1:~# samba-tool user add user7 Abcd1234 --uid-number=1007 --home-directory=/home/user7 --login-shell=/bin/bash User 'user7' created successfully I can see the homeDirectory attribute in the entry. But the home directory that winbind returns is just the template one: root at adclient:~# getent passwd user7

I changed my SMB.conf on the DC's and the member as per your instructions. Now the connection dropped at 10 hours, which appears to be the default end time of the certificate. KLIST on a windows box returns..... Cached Tickets: (3) #0> Client: hans @ MYNET.MYNET.COM Server: krbtgt/ MYNET.MYNET.COM @ MYNET.MYNET.COM KerbTicket Encryption Type: RSADSI RC4-HMAC(NT)

I posted the following a month ago but have only managed to get to fixing on this over the holidays.? Rowland mentions that I needed to add my domain info, it?s now included and I still have the same issue. Thanks and Happy New YearOld post begins below with edits Hello ? I have a problem with my Windows 10 drive connections dropping every 24 hours, very briefly.? It's enough to cause me to

Hello I have a problem with my Windows 10 drive connections dropping every 24 hours, very briefly. It's enough to cause me to be unable to save my file, or access a geodatabase. I have followed much trouble shooting and I believe that its due to the KDC Service ticket lifetime expiring, I have it set for 24 hours in smb.conf. I have a Samba 4.9 DC and an Ubuntu 18.04 member file

Hi I using ipp2p to block p2p traffic. How to enable to use p2p to me host in my net ? I using this setup: iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -j DROP This setup: iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -d ! mynet -j DROP iptables -A FORWARD -m ipp2p --ipp2p --bit --apple --winmx --soul --ares -s ! mynet -j DROP not

On Sun, 23 Feb 2003 09:47:05 -0800, "Sam Leffler" <sam@errno.com> said: > >> Add a new config option IPSEC_FILTERGIF to control whether or not >> packets coming out of a GIF tunnel are re-processed by ipfw, >> et. al. By default they are not reprocessed. With the option they >> are. > > This may affect your ipfw/ipf rules. If you are happy with

We have identified a problem joining samba to a windows 2003 rc2 domain. Using mit kerberos 1.5, and the latest version of samba (3.0.25b), net join ads would throw up the error: cli_rpc_pipe_open: cli_nt_create failed on pipe \NETLOGON to machine domaincontroller.mynet.mydomain.com. Error was NT_STATUS_ACCESS_DENIED net_rpc_join_ok: failed to get schannel session key from server

Hi All, I'm trying to integrate Samba 4 DHCPD and Bind 9.9 into a complete solution. I'm using the BIND/Samba 4 DLZ plugin. DHCP by itself works and hands out IP addresses. What I would like to have happen is the following: - PC is joined to the Samba 4 domain (this works) - PC gets an IP via DHCPD - DHCP or the PC registers the IP in BIND Network PC's should resolve cleanly when

Now I have a some time to answer, maybe a few of your questions. Am 26.02.19 um 20:59 schrieb lists via samba: > Hi, > > No replies unfortunately. Unsure why. There are still a lot of questions open and I think a lot of things have to be done. > > We searched the list, and we found little discussion on the subject of > trusts. We see occasional questions, but they are often

Hi, I have been working with tinc network where one host will provide the IP addresses over DHCP to each connected node. Tinc runs in switch mode. It seems that the HWaddr of the tinc interface is regenerated every time when tinc is (re)started. As a result, DHCP server will assign a new IP for the host. Is there any configuration variable we could use to avoid HWaddr changing? Currently, I

Hi, Having read the release notes on the status of trusts within samba, we see for 4.9 > "improved support for trusted domains" but we also always see these messages: > "Both sides of the trust need to fully trust each other!" and > "DCs of domain A can grant domain admin rights in domain B" What we would like to achieve is a one-way incoming trust

Hi, I have different class of nodes in my network like ''sql servers'' , ''http servers'' , ''smtp servers''. I have written ''node'' definition for them. i''m not sure how to configure puppet master send those configuration to those nodes when they connect. the documentation says, "The interpreter looks through the list

Hi, I am running squid as a TRANSEPARENT PROXY WITH SQUID 2.5 on CENTOS 4.5. Pls see below for squid.con file. http_port 3128 cache_mem 64 MB cache_dir ufs /var/spool/squid 100 16 256 cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule

Thanks everybody! The sudden burst of help (both on- and offlist) is much appreciated. :-) I'll get back to my test setup next week, and try again with these new insights. MJ On 2/28/19 3:46 PM, L.P.H. van Belle via samba wrote: > Hai Maurik-Jan, > > Stefan's work can be found here, i'm reading it myself and its really good. > >

I like the config generator of tinc 1.1! An issue to consider on the default behavior: It turns out 'tinc -n mynet init mynodename' makes up a default Port=... when the standard port is taken: "Warning: could not bind to port 655. Tinc will instead listen on port 22911". It is nice that this is autodetected and warned, but I wonder whether it is nice to let this

c:\APPS\TINC\tincd.exe --mlock --net=mynet --config=C:\APPS\tinc\mynet Without --mlock, the service starts OK. With --mlock, the service fails to start.

Hello, it seems that there is some bug in authentication cache code in dovecot version 1.1.alpha4 - after login attempt with wrong password the correct password also will fail. I can reproduce it very easy: $telnet 10.10.10.30 110 +OK Server. <861.2.46e6c679.jZ8QYpFmU8ZN6XIq7zPhkw==@server2> user testuser +OK pass pass +OK Logged in. quit +OK Logging out. Connection closed by foreign host.

Hello everyone! After running Samba on several machines for some years, I just came accross a rather strange problem. The short story is that the special user home shares are readable, but not writeable. Here's the long story: The system is a freshly set-up Debian Squeeze, right out of the box. This is the Samba config: -------------------------------- 8<

i'm trying to setup autocreate in 2.0. in mail.conf, ... namespace private { separator = / prefix = "" inbox = yes hidden = no list = yes subscriptions = yes } namespace public { separator = / prefix = "Public/"