similar to: Samba firts DC fail over

Just a thought if the client machines are still getting a listing in the DNS for the failed machines wouldn't this be a problem? How would the programs know not to use the failed server? Is there a way to temporarily move the failed machines out of dns listings? On Fri, Feb 24, 2017 at 8:52 AM, Vinicius Bones Silva via samba < samba at lists.samba.org> wrote: > No, the question is

Hi friends: I was installed Samba4 ver 4.5 on openSuSE 42.1 Leap, the smb.conf is: # Global parameters [global] netbios name = SERVERDOM realm = POLRMVAR.MTZ.SLD.CU workgroup = POLRMVAR dns forwarder = 10.44.0.5 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc [netlogon]

HI, on debian i use pam winbind by adding the file /usr/share/pam-configs/winbind and enable this. Is there another way on RHEL? i have configure RHEL that wbinfo -u gives me the users and getent passwd also. id <username> is not possible. It tells me user unknown. With authconfig i have enable winbind for authentication. Im Using RHEL6 and Samba 4.4.9 Best wishes OLIVER WERNER

Hi everybody, I'm setting up a Samba under RHEL 7.0, just a simple samba server. But I'm having trouble with blocking access to shares, to be specific with domain block. I'm using default config in samba.conf, just added the share's config. While blocking by network range it works. Even when some IPs in the network 172.25.0.X are subdomains of example.com, they are not blocked.

I'm not sure whether this is a Dovecot issue or a Samba issue, but as it deals with authentication I think it's worth trying the samba experts first. Here's the scenario ... I have an AD/DC running Samba 4.4.14. I have 3 AD users: mark, sue, dennis. Mark and Dennis use both Windows 7 and Linux (also running PAM-enabled Samba 4.4.14) domain member workstations. Sue is Windows 7

Hello! Taking advantage of the email, I tried to make an ldap query with tls and I had an error .. Version Samba 4.4.4 samba-tool testparm -v --suppress-prompt|grep tls ldap ssl = start tls tls cafile = tls/ca.pem tls certfile = tls/cert.pem tls crlfile = tls dh params file = tls enabled = Yes tls keyfile = tls/key.pem tls

Can I keep invisible folder to windows clients without renaming it by suffix '.' in front of file with samba 4?

Hai,   Since im still having problems reading the man smb.conf about the NTLM settings, im asking here. How do i allow NTLM auth for my proxy.   I have been playing around with :           client NTLMv2 auth         raw NTLMv2 auth         ntlm auth         lanman auth   i’ve added the proxy user to the winbind_privileged group. and did set the needed rights. chgrp winbindd_priv

Hello, I have installed an samba ad1 and an samba ad2 with replication. On the dc1 "samba-tool drs showrepl" say "... was successful" On dc2 there is the same. When dc1 goes down I get an Error (on my client): Active Directory Users and Computers error: "server is not operational" What is wrong here? For my understand that is no Replication, when one goes down and

While working on my existing member file server smb.conf config file I found an entry for "veto files" like the following: veto files = /.bash_logout/.bash_profile/.bash_history/.bashrc/ The "man smb.conf" entry says: veto files (S) This is a list of files and directories that are neither visible nor accessible. Each entry in the list must be

using testparm of 4.6.0rc2 against the smb.conf of a production server (the production server is not using rc2, dont worry) produces the error: [root at fwborda1 samba-460rc2]# testparm /root/smb.conf Load smb config files from /root/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]"

On Thu, 27 Oct 2016 10:51:08 -0200 Vinicius Bones Silva via samba <samba at lists.samba.org> wrote: > Wait, now I'm confused. Idmap lines do not need to be set up on the > DCs? Then how does windows figure's out the ids in the Unix > Attributes tab? I thought you needed both rfc2307 and idmap on the > DC and the members. > > > The DCs have idmap.ldb, this

Hello everyone, I'm using Samba4 in my CentOS server, and it was just fine. I could always use ldap commands like 'ldapsearch' and 'ldapadd' and I had no problem. But one day, I don't know why, I couldn't use more ldapsearch or ldapadd. They return this: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) I'm using the same command as always, like:

I've just done a yum update and a reboot on one of our CentOS 7 DCs, which has taken Samba from sernet-samba-4.5.1-6 to sernet-samba-4.5.5-13. I now notice that the Samba log files contain errors since the update. The error message is: "../lib/util/modules.c:48(load_module) Error loading module '/usr/lib64/samba/vfs/acl_xattr.so': /usr/lib64/samba/libsmbregistry-samba4.so:

No, the question is about your client machine. Who are the DNS servers configured on it? Does it have a second dns server configured? If it uses your first DC as DNS, and you take that DC offline, who the client machine will query for domain info? As for the issue below it is normal. Every DC registers an "A" record for your domain name. When you use dig, it will retrieve all

Hello.In my configuration I have three DCs one who build the domain and two replication. For the configuration of the client I put in the resolv.conf the three DC addresse. So normally the client is able to contact all DCs of domain. But to have domain information only the dc that built the domain provided them, and when I stop it, replication DCs are unable to provide this information to client

Rowland, I looked at Samba wiki, but it doesn't helped me as I wanted, maybe I'm doing something wrong. This is what I tried to do: yum install pam* ./configure.developer --with-pam make && make install ln -s /usr/local/samba/lib/libnss_winbind.so.2 /lib64/libnss_winbind.so ln -s /lib64/libnss_winbind.so /lib64/libnss_winbind.so.2 modified my nsswitch.conf passwd:

On Thu, 20 Oct 2016 20:21:17 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 20 Oct 2016 14:06:18 -0500 > Arthur Ramsey via samba <samba at lists.samba.org> wrote: > > > On 10/20/2016 01:52 PM, Rowland Penny via samba wrote > > > Have you given Administrator a uidNumber attribute ? > > Yes, I have. > > > > > >

On Thu, 2016-10-27 at 17:23 -0200, Vinicius Bones Silva via samba wrote: > Hi Rowland, > >      Just to let you know, we removed all the idmap entries we had on > the smb.conf of our  > two DCs and the ids reported by getent passwd at the DCs were in the > 3.000.000 range, as  > you said. We had to add back 'idmap_ldb:use rfc2307 = yes' to get the > user listing

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS