similar to: SSL Certificate

Hello! Taking advantage of the email, I tried to make an ldap query with tls and I had an error .. Version Samba 4.4.4 samba-tool testparm -v --suppress-prompt|grep tls ldap ssl = start tls tls cafile = tls/ca.pem tls certfile = tls/cert.pem tls crlfile = tls dh params file = tls enabled = Yes tls keyfile = tls/key.pem tls

Hello Rowland, ldap search command throws error as below. I am unable to search ldap. ------- ldap_initialize( ldap://dc.exza.local:3268 ) ldap_start_tls: Can't contact LDAP server (-1) Enter LDAP Password: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) ---------- I am using BIND_DLZ dns back end. and server is listening on 3268 and 3269 -- Thanks & Regards, Anantha

Hi, after a successfully migrating my NT4 with OpenLDAP to a Samba4 AD...I got a problem. Like in the sambawiki tutorial (https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC) I tried to configure LDAPS. I used the auto-configured certs. They are located in "/var/lib/samba/private/tls". My smb.conf: # Global parameters [global] netbios name = PDC

Hello All, We have interesting issue. When application connect to PDC by port 389 (without ssl) everything works fine. When we try to use SSL by port 636 we have issue. ldapsearch -x -D "cn=user,ou=users,dc=dc,dc=local" -p 636 -h PDC -b "DC=dc,DC=local" -w pass output: ldap_result: Can't contact LDAP server (-1) ldapsearch -x -D

I have tried this with a bunch of different versions of Samba, starting somewhere in the 3.0.1 series. I am currently running 3.0.34 on several Gentoo servers, all showing the same problem. I am almost positive it is not a Samba issue, but I was just hoping that someone may have experienced it and knows if there is a solution. When I have the current Novell Netware client installed on XP

I am currently researching the possibility of slowly moving an existing Novell network [with all Windows clients except mine :)] to something Linux based. I have about 900 clients that would be slowly migrated if this whole thing is feasible. The version of NetWare we are using now is no longer "officially supported" from Novell, so it is becoming more and more difficult to successfully

I currently have a 95% Novell Network network that continues to have constant printing issues. Enough Novell bashing, here lies the problem. I am trying to migrate all of our printers over to a samba print server, but in several of my tests I have come up with problems. I will attach my smb.conf at the end for those of you that wish to see it. I am using lprng as the printing backend because all

Hi, I've got ldapsearch mostly working: root at morannon:/usr/local/samba/private/tls# ldapsearch '(sAMAccountName=dumaresq)' SASL/GSSAPI authentication started SASL username: administrator at XXX SASL SSF: 56 SASL data security layer installed. # extended LDIF # # LDAPv3 # base <> (default) with scope subtree # filter: (sAMAccountName=dumaresq) # requesting: ALL # results in

Okay, I've been chasing performance for a while now. I have no idea if I should be trying to get better performance or if I'm getting all I can out of my hardware. Here is the information: /sbin/hdparm -I /dev/hdd /dev/hdd: ATA device, with non-removable media Model Number: ST328040A Serial Number: 7BY034XB Firmware Revision: 3.07 Standards:

Hi @all, I cannot use this patch in 2.2.5. I patched the source before with parse_sec.patch ldap_start_tls.patch Makefile.in.patch srv_spoolss_nt.patch addform.diff Containes the samba-2.2.5-printing.patch only parts of the above patches? tom

Hi, I need to create a large number of users in the smbpasswd file.Is there a way to do this without having to type passwords? I need a batch mode. Using Samba 3. Thanks, Craig

I've rolled 2 virtual servers running Ubuntu 12.04 LTS and have installed the SerNet packages. SRV1 has the AD setup and SRV2 is a member server. I've followed the wiki for both servers to the letter, and winbind still refuses to grab info on the member server. I rolled the provision with --use-rfc2307, added a bunch of users with samba-tool. I then manually created a group and made sure

Hello, I just configured a three-site DCs setup with Samba 4.6.0, and replication worked great. But then I added a custom cert to one of the DCs to authenticate various apps against it. I used this wiki https://wiki.samba.org/index. php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC Now I can authenticate my apps over LDAPS against my DC, but broke replication. How do I need to configure

On Sat, 2017-03-11 at 13:39 +1300, Andrew Bartlett via samba wrote: > On Fri, 2017-03-10 at 16:17 -0600, Mircea Husz via samba wrote: > > > > Hello, > > > > I just configured a three-site DCs setup with Samba 4.6.0, and > > replication worked great. > > But then I added a custom cert to one of the DCs to authenticate > > various apps against it. I

Hi all, I'd like to perform some ldapsearch against my AD domain. And I'd like to be able to perform these ldapsearch using GSSAPI to avoid usage of password in scripts. DC are using default configuration file: ---------------------------------------- # Global parameters [global] workgroup = SAMBA.DOMAIN realm = SAMBA.DOMAIN.TLD netbios name = M707 server

I'm using Samba 4.2.0 and cups 2.0.2. I have had the same print server and config since the early 3.x days and have never had an issue. Now suddenly, any new printers added to cups can no longer be installed in Windows. XP clients give a generic "Windows cannot connect to the printer. Either the printer name was typed incorrectly, or the specified priner has lost its connection to the

I was thinking of putting a slightly bigger HD on my Linux server and would like to know the easiest way. I know that ghost works well on FAT32 partitions, but does it work on Ext3 partitions too? Id rather not reinstall if I don't have to, so any and all suggestions are appreciated. TIA Kev

Hello, I'm using Samba 4.5.1 as a ADDC and the internal DNS. If I use 'allow dns updates = secure' in my smb.conf. Only A records update. The applicable reverse zone fails to update. If I switch to using non secure updates both the A and the PTR records are updated. Is someone else able to confirm this behavior? Thanks. -- - James

If I were guessing, based on some experience with certificate usage in other apps, concatenate your certificate and intermediate certificates into a single file which is then your "tls certfile" then point "tls cafile" to your issuers proper CA or just to your distro's CA bundle, e.g /etc/pki/tls/certs/ca-bundle.crt. Nick On 06/08/2020 16:36, MAS Jean-Louis via samba

I am using Samba 3.5.0 on Arch Linux. I have security = user and am looking to create a new server with a lot of different shares as well as the [homes] share. So far my testing is making me pull my hair out... If I create shares with certain users, everything works fine. However, I see that if I connect to the \\server, the user will see all shares.