similar to: strange auth issue

Windows make any "Levenshtein distance" into domains and fix them??? ummm.... ----- Mensaje original ----- De: "Ing. Luis Felipe Domínguez Vega" <luis.dominguez at mtz.desoft.cu> Para: "Sonic" <sonicsmith at gmail.com> CC: "samba" <samba at lists.samba.org> Enviados: Lunes, 20 de Febrero 2017 15:08:59 Asunto: Re: [Samba] strange auth

All of these steps, but I dont ran 'samba-tool domain provision' ----- Mensaje original ----- De: "samba" <samba at lists.samba.org> Para: "samba" <samba at lists.samba.org> Enviados: Viernes, 11 de Agosto 2017 15:36:46 Asunto: Re: [Samba] NT_STATUS_INTERNAL_ERROR and cannot join windows 7 samba4-ad-dc fresh install, get NT_STATUS_INTERNAL_ERROR On Fri, 11

This is with -d10, I test in Windows 10 (joining to domain) and same error, "Internal error". One thing, I don't execute the domain provision command because I put all the files created in the old server into the new server, that's metter??? INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10

On Mon, 14 Aug 2017 09:34:57 -0400 (CDT) Ing. Luis Felipe Domínguez Vega <luis.dominguez at mtz.desoft.cu> wrote: > Sorry, in weekends I don't have email and the internet neither. Yes, > I have copied the smb.conf gggg. Well the files are. Ahhh something > extrange, the NTP server is working only with native NTP clients, if > i use w32tm /resync in windows clients don't

And i forgot to mention.   This is what i have for my squid.   auth_param negotiate program /usr/lib/squid/negotiate_wrapper_auth \     --kerberos /usr/lib/squid/negotiate_kerberos_auth -s HTTP/proxy.internal.domain.tld at REALM \     --ntlm /usr/bin/ntlm_auth --helper-protocol=gss-spnego --domain=NTDOMAIN   See the ntlm line. =>  --helper-protocol=gss-spnego     Greetz,  

Hello, a short history, I am using samba 4 with Debian 9 from the repository, 2 days ago the server was broken, but I was copy all the /var/lib/samba directory to a safe place, then I was installed a new server with the same Debian and samba from repository, and stopped smbd, nmbd and winbind, unmask samba-ad-dc and finally copied all the directory from the old server to the new server and started

The proxy already is into domain "wbinfo -u" returns all users from the AD, the kinit command with -t /etc/squid/PROXY.keytab is working great, but the NTLM phase into the squid log is the same ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }} are in recent versions some changes about the NTLM or NT

How strange that is, with the old server that does not happen, but with this new server... I thought that as I only copied the /var/lib/samba to the new server, then samba with the samba provision command make something outside the /var/lib/samba (and smb.conf file) that I miss from the old server. ----- Mensaje original ----- De: "samba" <samba at lists.samba.org> Para:

About the : > ERROR: Negotiate Authentication validating user. Result: {result=BH, > notes={message: NT_STATUS_UNSUCCESSFUL * NT_STATUS_UNSUCCESSFUL; }}   I suspect the pc you trying with is not domain joined? Or you using user at REALM Can you add ?-d?  to the auth line of squid and try again and post that log. ( -d = enable debugging )   Now what i dont know. A samba DC

Hello, I am a network admin and I have Samba 4 (4.5.2+dfsg-2) running into Debian Testing, before i update to this version my proxy (squid) authenticate with NTLM with ntlm_auth correctly, same to my FreeRadius server authenticating with winbind. But now with this update i can get to work again the autentications, when i request the NT_KEY to ntlm_auth it not return that key. this is the output

Hai, Can you post your smb.conf that helps. But you probly forgot to set: ntlm auth = yes and maybe more, a summup: This is the full list: https://wiki.samba.org/index.php/Samba_Features_added/changed_(by_release) The complete history, have a look at the X.x.0 release notes. https://www.samba.org/samba/history/ For the major differences (new features, etc.) Upgrade samba from a : 4.4.x

Hai, We have 2 persons with exact the same problem. Based on the configs shown by both personsn (Vladimir and Ing. Luis). I dont see issues which should case this, so as Andrew suggest, keep increasing the debug levels and post these. Lets hope we see something here, im bit puzzled about this one. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces

First time I've seen this: Samba Version 4.5.6-GIT-f4219b7 as PDC Windows 7 client New system I was setting up. Joined the domain, no problem. On reboot, I did a typo on the domain name, something akin to: DOMIAN\administrator Instead of: DOMAIN\administrator Yet, I was logged on, desktop was setup, etc. Logged off to verify my mistake and loogged on with the proper domain name, and it was

Hello, i have samba 4 as AC-DC mode with Bind as DLZ, all work well but, in my server i have 2 NICs, one of them is only to work into a servers network and don't want to be into dns. I remove all the internal ip reference from DNS, but samba always create them again. So how i can tell to samba that ignore that interface and not put it's ip into DNS??

I comment the idmap line and "systemctl restart samba-ad-dc" but the squid not authenticate, same error... --------------------------------------- Al tanto Ing. Luis Felipe Domínguez Vega Administrador de la Red de Desoft Matanzas GNU/Linux Kernel Developer - rtlwifi kernel module "No es grande aquel que nunca falla, es grande el que nunca se da por vencido… " -----

Any body here?; some body can help me ?. T.I.A. El 25/10/16 a las 16:24, Informatico Neurodesarrollo via samba escribió: > Hi friends: > I was installed Samba4 ver 4.5 on openSuSE 42.1 Leap, the smb.conf is: > > # Global parameters > [global] > netbios name = SERVERDOM > realm = POLRMVAR.MTZ.SLD.CU > workgroup = POLRMVAR > dns forwarder = 10.44.0.5

I was tested try to conect users to "the openfire chat server", using ldap and recive the same error: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. Its working fine on samba 4.2.3 running on opensuse13.2 x64. El 31/10/16 a las 10:39, Vinicius Bones Silva via samba escribió: > Hi, > > The ldapsearch

Helo friends: This is my smb.conf file, runing in openSUSE 42.1 system and SAMBA acts as a DNS proxy to Bind # Global parameters [global] netbios name = SERVERDOM realm = POLRMVAR.MTZ.SLD.CU workgroup = POLRMVAR dns forwarder = 10.44.0.5 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap,

Hi friends: I was installed Samba4 ver 4.5 on openSuSE 42.1 Leap, the smb.conf is: # Global parameters [global] netbios name = SERVERDOM realm = POLRMVAR.MTZ.SLD.CU workgroup = POLRMVAR dns forwarder = 10.44.0.5 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc [netlogon]

Hi, The ldapsearch message is because you can't connect by plain text (-x) by default . Try using https, that should do it. Does smbclient -L SERVERDOM -U Administrator work? Or does it give NT_STATUS_LOGON_FAILURE as well? if you increase the log level, do you see "Unable to convert SID (S-1-X-XXX) at index X in user token to a GID." in your log files? Em