similar to: samba-tool modifying AD

On Mon, 22 Aug 2016 13:38:06 +1200 Andrew Bartlett via samba <samba at lists.samba.org> wrote: > On Sat, 2016-08-20 at 18:29 -0700, David Bear via samba wrote: > > Is it possible to use the samba-tool to create/update user accounts > > in a > > standard windows AD domain ? > > Yes. > > Andrew Bartlett > Well, yes, you can create new users with

On Sat, 27 Aug 2016 08:33:02 +1200 Andrew Bartlett <abartlet at samba.org> wrote: > On Mon, 2016-08-22 at 09:21 +0100, Rowland Penny via samba wrote: > > On Mon, 22 Aug 2016 13:38:06 +1200 > > Andrew Bartlett via samba <samba at lists.samba.org> wrote: > > > > > > > > On Sat, 2016-08-20 at 18:29 -0700, David Bear via samba wrote: > > >

I want to have samba be the back end provider for authentication to a radius server. I found https://wiki.samba.org/index.php/VPN_Single_SignOn_with_Samba_AD and wanted to see if this is 'current' and works with samba 4.1.8 -- or if anyone is using it. I want to use RADIUS authentication on a firewall and have Samba be the source for the user accounts. I am using a pfsense firewall.

I currently have a samba 3.6 pdc. I would like to migrate that to a samba 4 dc. I haven't been able to google out all the 'samba migration' hits that meet my specific use case. Sorry if there is something blindingly obvious on this topic. Is it possible to set up a samba 4 dc, and have it capture the sambe 3.6 pdc info? Currently, samba uses tdbsam. (no ldap) It runs on an Centos

I am using samba 4.1.x using the samba internal dns. I want to make the samba dns authoritative our our zone -- ha.net -- I'm not finding any docs on how to do that. Is it possible to? The issue we have is that if samba gets a query for a system in ha.net that doesn't exist -- it forwards and then we get a response from another dns that we don't want. -- David Bear mobile: (602)

I think I would like to use git to get the latest 'stable' of samba, and then use success get pull on the same samba version to keep up with security patches added to stable. Is this a valid way to 'manage' a production samba instance? I doubt I would be adding 'code'. I view using git as a way to get the latest stable version of samba which my current distribution of linux

On 12/29/2014 12:52 AM, Andrew Bartlett wrote: > On Mon, 2014-12-22 at 14:33 -0700, Cj Tibbetts wrote: >> Here is the information requested >> it took 3 days before results came >> samba-tool dbcheck finished with this error >> >> root at ham1:/usr/local/samba/bin# time ./samba-tool dbcheck --cross-ncs >> Checking 212687 objects >> ERROR(<type

Thank you for the excellent advice. so an lxc container should be a privilege vm. Do containers share the same file system like a BSD chroot jail? Or do they have a virtual disk image like vmware or virtual box? Sorry to be dense here. If you know of any good tutorials on making lxc containers, I'd like to read them. My thinking was that I would make an lxc container for the addc instance

Hi David Thanks you for reply, are you sure about this? Windows and Samba SMB byte range locking feature doesn't allow this by locking regions of a single file ? From: "David Bear" <dwbear75 at gmail.com> To: "Dante F. B. Colò" <dante.colo at stwbrasil.com> Cc: "samba" <samba at lists.samba.org> Sent: Friday, April 7, 2017 1:59:56 PM

Will a samba 4.1.9 work fine if there are newer samba 4.x AD DC in the domain? I compiled samba 4.1.9 from source on ubuntu 14 server. Now I am wondering if I can use the debian backports repo and get whatever samba is current there --is is amba 4.1.11 ? Not sure if its worth it to compile samba for each of my addc's, or if I can be lazy and use the deb from a repo. Would love

A "good" acl manual. http://www.vanemery.com/Linux/ACL/linux-acl.html As i do prefeer the debian os, but i do really like the archlinux wiki. https://wiki.archlinux.org/index.php/Access_Control_Lists Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Frank Kahle > Verzonden: dinsdag 2 augustus 2016 13:55

Is there a list of GPO functions that are known not to work with samba 4.1 ? We have a case where some settings in a GPO will get applied, and others don't. -- David Bear mobile: (602) 903-6476

Sorry to ask a windows question her but I didn't know if a windows group would know about the sticky bit. I have a windows server that is our primary file server in our samba domain. I am hoping that windows as something like the sticky bit that can be set on a folder where in only the creator of the file can modify the file. Any easy way to do this using ntfs acls ? -- David Bear mobile:

I have been wanting to allow our routers to continue to serve dhcp thinking this would give us a safer fail environment. Now we are learning that our routers can handle creating a whitelist of mac addresses to use for dhcp leases. So we need to look at alternatives. I am wondering how many samba AD DC's also run dhcp -- and if there is a samba 'good practice' for managing dhcp. Yes, I

On Fri, 2016-08-26 at 22:06 +0100, Rowland Penny via samba wrote: > On Sat, 27 Aug 2016 08:33:02 +1200 > Andrew Bartlett <abartlet at samba.org> wrote: > > > > > On Mon, 2016-08-22 at 09:21 +0100, Rowland Penny via samba wrote: > > > > > > On Mon, 22 Aug 2016 13:38:06 +1200 > > > Andrew Bartlett via samba <samba at lists.samba.org>

On 09/12/2016 01:17 PM, Jeff Sadowski via samba wrote: > This thread has me thinking about good ways to use python with web pages. > Maybe php or just flat HTML for the main page and have python work with cgi > to pass information with json's using AJAX > > Any thoughts on this? cgi is probably not what you want to do I doubt you want to make things complex by mixing php and

my first round of trying to compile samba 4.2 from source in an lxc container. Host OS is ubuntu 14.04 lts, and lxc template was the ubuntu template. This is a privileged container. good news, is the container seems to function well. Bad news is missing dependancies. So, in tracking down depenancies, here's what I installed in to the container apt-get install python apt-get install

On Mon, 2016-08-22 at 09:21 +0100, Rowland Penny via samba wrote: > On Mon, 22 Aug 2016 13:38:06 +1200 > Andrew Bartlett via samba <samba at lists.samba.org> wrote: > > > > > On Sat, 2016-08-20 at 18:29 -0700, David Bear via samba wrote: > > > > > > Is it possible to use the samba-tool to create/update user > > > accounts > > > in a

Hi, I didn't know about that one. I will try it out. Right now, it looks good enough. Thanks, On 10.09.2016 07:53, Andrew Bartlett via samba wrote: > On Sat, 2016-09-10 at 04:41 +0300, Ioan Eugen Stan via samba wrote: >> Hello, >> >> I'm thinking about starting a web tool for managing an Samba Active >> Directory - manage users, machines, etc. Managing Samba

I am using a member server with AD as my source of accounts. ssh logins work great. Yesterday, one of my students wanted to see what a fork bomb was and so now I need to place ulimits on place. Attempts to use AD domain groups fail. So I'm not sure this is an issue for samba+winbind or for /etc/security/limits.conf and pam. Here's what I have added in limits.conf # -- fix fork bomb