similar to: smb.conf different between first DC and replica DC

On Tue, 2016-12-06 at 21:23 +0000, Rowland Penny via samba wrote: > On Tue, 6 Dec 2016 20:56:23 +0000 > Brian Candler via samba <samba at lists.samba.org> wrote: > > > Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created > > an initial DC and a replica DC by following: > > > >

All, I configured two DCs (Samba version 4.5.5) replicating ad.corp.com in two sites ( https://wiki.samba.org/index.php/Active_Directory_Sites) Following 'DNS configuration on Domain Controllers' section from this wiki https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory If I configure nameserver DC1 to be the first resolver for DC2, samba_dnsupdate

I have setup a new Samba Active Directory DC on Fedora 25 and samba- 4.5.8-1.fc25.x86_64, rebuild from src.rpm with dc option enable. This system (fedora-addc) is only an AD-DC. In the next days I will deploy another Centos 7 samba member server with standard samba-4.4.4 rpm (without dc enabled) and join it to Fedora AD-DC for manage data users. After install bind dns and samba new rebuild

I came back on this topic. As just depicted on: https://lists.samba.org/archive/samba/2019-December/227626.html there's no way to run samba AD DC on a unprivileged LXC container, because samba need the XATTR SYSTEM namespace that is reserved on container. Could be doable 'offloading' all XATTR from filesystem with a module like xattr_tdb?

Hi, Does CentOS 5 / RH 5 ship with a similar windows active directory and able to support windows workstations? I've of heard OpenLDAP and FDS. Does windows support those? regards

On 06/12/2016 16:06, Brian Candler wrote: > Ah OK... I've just seen Rowland's reply, "Just don't use ZFS". That's > clear enough :-) FYI, I rebuilt the system using btrfs but initially I got the same issue [^1] It turns out this came from running inside an unprivileged lxd container. After setting "security.privileged true" it was happy. So I guess

Here's one that's got me baffled. "No such file or directory"? # net ads join -U'AD-Administrator' AD-Administrator's password: [2005/05/26 08:15:00, 0] utils/net_ads.c:ads_startup(191) ads_connect: No such file or directory I've been testing 'net ads join' to our AD all week, but I've not seen this error before. I don't even know what it

Hi Rowland, Thanks for your response . I will check on this. Even i have tried with commenting xattr_tdb:file = /var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue . To be more specific whether you're referring ACL as Windows ACL or POSIX ACL or Extended ACL In the below command "-U%" refers to nouser and no group ? . smbclient -L localhost -U% I am able to get

Hi I'm getting Jun 11 13:12:46 "Fatal: Can't open configuration file /home/dovecot/dovecot-pgsql.conf: Permission denied this file have fulle permissions and has belonged to dovecot and root but still no joy what am i missing must be something stupid on this side Thanks for the previos comments about scripting I am swithcing to postgress for the mail env and will look at mysql

Do people have any recommendations on which Samba version to choose for production use, as a domain controller and authentication database for 802.1x only? (i.e. no file sharing) I note that: * CentOS 7 comes with samba 4.2.10 - labelled as "do not use" on https://www.samba.org/samba/history/ !! * Ubuntu 16.04 comes with samba 4.3.11 (although 4.3.12 exists) The Ubuntu/4.3.11

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Hi all! Anyone know how to tell samba4 to use "--use-xattrs=yes" after domain provision, i have a lot of users so i cannot recreate the domain from scratch ;( Any ide? Thanks!

Hi , FQDN of the DC is Hostname.DomainName . In smb.conf: netbios name = <HostName> realm = <DomainName> eg: (ww.xx.yy.zz) workgroup = ww In resolve.conf domain <DomainName> nameserver <IP Address of the DC i.e host IP> # host -t SRV _ldap._tcp.<DomainName>. _ldap._tcp.<DomainName> has SRV record 0 100 389 <HostName>.<DomainName>. # host

On Tue, 2 Jun 2020 at 18:48, Brian Candler <b.candler at pobox.com> wrote: [about ssh -Q ssh_config_keyword] > There is also "-Q key-sig" in recent versions (not sure exactly how recent, but 7.6 doesn't have it) Added in the same commit (Feb this year), first released in 8.3: https://github.com/openssh/openssh-portable/commit/d4d9e1d40514e2746f9e05335d646512ea1020c6 --

I am trying to use a keytab for a client machine to authenticate to Samba's own LDAP server. The samba servers (replicated) are ubuntu 16.04 with samba 4.5.2 compiled from source. The client machine is ubuntu 16.04 with stock samba 4.3.11. It has been joined directly to the Samba domain ("net ads join"). I have also extracted a keytab ("net ads keytab create -P")

I want to use Samba together with freeRADIUS in an Active Directory network. I successfully followed these instructions for that: http://deployingradius.com/documents/configuration/active_directory.html Now my question is: How can I use Samba with more than one Active Directory? Because it must work with A D "Example 1", "Example 2" etc. and not only with "Example

Sorry my bad I forgot to reply all. Begin forwarded message: > From: Mike Gallamore <mike@mpi-cbg.de> > Date: November 7, 2008 12:35:20 PM GMT+01:00 > To: "degbert degbert" <degbert42@gmail.com> > Subject: Re: [Samba] AD howtos: LDAP needed? > > My understanding is AD was/is MS's implementation of LDAP. http://en.wikipedia.org/wiki/Active_directory

On 09/12/2016 15:55, Rowland Penny wrote: >> But did you give Domain Users a gid? If you don’t do that, winbind >> and getent will not find any UNIX users (doesn’t matter if the users >> have a uid and gid within the range you’ve specified in smb.conf). >> It’s been a while since I had this problem - my memory is it’s not >> clearly mentioned in the wiki at all.

The following program is a minor variant on the sample given in the README with eventmachine-0.8.1. I am running under CentOS 4.5 (kernel 2.6.9-55.0.2.plus.c4) with a ruby-1.8.5 RPM from the CentOS testing repository. When I run it, I find that set_comm_inactivity_timeout doesn''t do anything. That is, if I client opens a connection, it stays open indefinitely. However, if I comment out

I am trying to install samba 4.5.1 from source, as a domain controller only, under Ubuntu 16.04, with ZFS filesystem (actually inside an lxd container with ZFS backing). Out-of-the-box, samba-tool domain provision does not like the filesystem: ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed - ProvisioningError: Your filesystem or build does not support posix