Displaying 20 results from an estimated 1000 matches similar to: "Flooding Samba DC with random requests"
2017 Apr 25
2
Flooding Samba DC with random requests
Hi,
our virtual DCs specs are:
1vCPU, 1GB RAM
System is running on iSCSI Storage in an Openstack Enviroment.
Smb.conf on our DC 03 and 04:
==================
# Global parameters
[global]
workgroup = NLI
realm = nli.local
netbios name = dc04
server role = active directory domain controller
allow dns updates = nonsecure
dns forwarder =
2016 Sep 07
2
Winbind / Samba auth problem after username change
- It really ends in local. So I guess I can leave this one.
- I've corrected the double entry in nsswitch.conf
The command returns:
# getent passwd | grep ren_test
ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash
What I copied into the message before was our object directly from the DC.
I thought you said "ldapsearch", not ldbsearch ;-)
Well here's the
2016 Sep 07
5
Winbind / Samba auth problem after username change
I would suggest.
Stop samba and winbind
Backup
/etc/krb5.keytab
/var/lib/samba
/var/cache/samba
Remove everything in :
/var/lib/samba
/var/cache/samba
And remove :
/etc/krb5.keytab
Put in this config ( from Rowlands suggestion. )
Can you try this smb.conf:
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.local
netbios name = vmu09tcse01
dedicated keytab file = /etc/krb5.keytab
2016 Sep 07
1
Winbind / Samba auth problem after username change
BTW I just tried the getent command again and it gets even weirder:
# getent passwd ren_test4
ren_test4:*:12521:10513:ren_test4:/home/NLI.LOCAL/ren_test4:/bin/bash
then did another getent after a couple of seconds:
# getent passwd ren_test4
ren_test3:*:12521:10513:ren_test3:/home/NLI.LOCAL/ren_test3:/bin/bash
This is...well..I have no damn clue XD
> -----Ursprüngliche
2017 Apr 25
0
Flooding Samba DC with random requests
On Tue, 25 Apr 2017 12:07:35 +0000
Julian Zielke via samba <samba at lists.samba.org> wrote:
> Smb.conf on our clients:
> ==================
> #Ansible managed
> # global options
> [global]
> workgroup = NLI
> realm = NLI.LOCAL
> netbios name = xxxxxx
> server string = Samba AD Client Version %v
> security = ads
> password server = dc3.nli.local,
2012 Sep 26
7
Routing issue
Hello,
This is on Centos 6 and not something I think is wrong with Centos 6
but I am looking to see if anybody else has experienced this and
if there is solution. So thanks up front for indulging me.
Because Linux makes routing decisions before SNAT it is causing
problems when trying to use FTP with two upstream providers in
a load balanced setup.
Other than ftp, things seem to work OK. Below
2016 Sep 07
7
Winbind / Samba auth problem after username change
Well, I always get 0 results, whether using cn, full username, wildcards, another existing and working user etc.
# cat /etc/passwd | grep 'ren_test'
returns nothing
# wbinfo -u | grep 'ren_test'
returns: ren_test4
I also created a backup of all those ldb files and restarted the samba service. Now there's no new sam.ldb but a file looking similar to it.
Here's
2016 Apr 23
2
[IndVarSimplify] Narrow IV's are not eliminated resulting in inefficient code
Hi Sanjoy,
Thank you for looking into this!
Yes, your patch does fix my larger test case too. My algorithm gets double
performance improvement with the patch, as the loop now has a smaller
instruction set and succeeds to unroll w/o any extra #pragma's.
I also ran the LLVM tests against the patch. There are 6 new failures:
Analysis/LoopAccessAnalysis/number-of-memchecks.ll
2016 Sep 07
2
Winbind / Samba auth problem after username change
AVAHI is not running on our machines.
We're using Samba from the official sernet repository. I did a find-command on all sam.ldb files and
this is the only one which exists. Also when I delete them and restart the samba service, it's being created again, so
I guess it's the correct file the daemon is working with.
I've used the ldbsearch with the full logon name, however even
2016 Sep 06
2
Winbind / Samba auth problem after username change
On Tue, 6 Sep 2016 15:38:57 +0000
Julian Zielke <jzielke at next-level-integration.com> wrote:
> No, getent NEWusername produces a result SHOWING the old username -
> not the other way around. The machine is a domain member. We did a
> join using net join ads.
Where is it displaying the old username ?
>
> The passwords file has only the standard local users in there.
Well
2009 Dec 30
4
[Bug 627] New: NATed TCP-connections fail arbitrarily
http://bugzilla.netfilter.org/show_bug.cgi?id=627
Summary: NATed TCP-connections fail arbitrarily
Product: netfilter/iptables
Version: linux-2.6.x
Platform: All
OS/Version: All
Status: NEW
Severity: blocker
Priority: P1
Component: ip_conntrack
AssignedTo: laforge at netfilter.org
2012 Oct 13
1
ipsec nat issue
Hello,
I have the following setup on linux 2.6.32... CentOS 6.x :
ipsec tunnel eth0-10.255.3.254/25 - eth1-pub add1 <-> eth1-pub add2 -
eth0-10.255.5.254/25
I am trying to SNAT remote private address 10.255.5.128/25 packets when
they come out of the ipsec tunnel to make it appear like it was from local
address 10.255.3.254. I am doing a source ping from the right side to a
device on the
2013 Feb 21
1
Problem with managesieve proxy
Hi folks,
I'm setting up a new dovecot email service and have a proxy server running in
front of it to facilitate migrating users from my very old UW-IMAP-based mail
server to the new one.
I have a mysql proxy table that directs inbound IMAP and LMTP connections to
the correct server, works great. Managesieve connections are not working
through the proxy using either with the sieverules
2017 Jun 17
1
client reconnect fails (was gluster heal entry reappears)
Hi Ravi,
back to our client-cannot-reconnect-to-gluster-brick problem ...
> Von: Ravishankar N [ravishankar at redhat.com]
> Gesendet: Montag, 29. Mai 2017 06:34
> An: Markus Stockhausen; gluster-users at gluster.org
> Betreff: Re: [Gluster-users] gluster heal entry reappears
>
> > On 05/28/2017 10:31 PM, Markus Stockhausen wrote:
> > Hi,
> >
> > I'm
2015 Jul 08
0
using http from syslinux.efi
On Tue, Jul 7, 2015 at 10:12 AM, BALATON Zoltan via Syslinux
<syslinux at zytor.com> wrote:
> Hello,
>
> I'm trying to use http from syslinux.efi but it fails while trying to
> establish the connection to a FreeBSD http server. A packet capture shows:
>
> TCP healthd > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=64 TSval=1094
> TSecr=0
> TCP http > healthd
2017 Oct 15
3
can only ssh unidirectional
Dear developer,
This issue may be not related to openssh but I am not sure. So post it here for some luck.
The issue is like this:(you can see more formatted description at (https://serverfault.com/questions/878504/can-only-ssh-unidirectional)
I have two centos 7.2 server. One machine ip is
10.104.196.18, another machine is 10.240.197.21. I can successfully ssh from 10.104.196.18 to
2016 Sep 07
4
Winbind / Samba auth problem after username change
Good Morning Rowland,
oh well, the bad side of the Internet... well the samba stuff was implemented by a former co-worker so I've to get into everything he did.
Here’s the information you’ve requested, additionally with my config files I know changed based on the samba wiki:
smb.conf:
cat /etc/samba/smb.conf
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.local
netbios name =
2017 May 14
2
ssh ethernet tunnel jumbo frame udp is not work
root at ne-vlezay80:~# tcpdump -i tap0 -n
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tap0, link-type EN10MB (Ethernet), capture size 262144 bytes
00:23:53.206672 ARP, Request who-has 10.194.0.2 tell 10.194.0.200, length 28
00:23:53.206691 ARP, Reply 10.194.0.2 is-at 52:54:00:38:b9:0b, length 28
00:23:53.710691 STP 802.1d, Config, Flags [none], bridge-id
2014 Apr 22
1
35 second wait when cache expired
Hello,
I've got an issue with RHEL6 running smbd & winbindd version
3.6.9-168.el6_5. This is authenticating against a Windows 2008R2 domain
using the rid backend.
If I run any command that has to look up user info I get a 35 second delay,
after this initial delay it's fine until the cache time-out, then it
happens again.
This is making logins and most commands hang for 35 seconds
2016 Nov 21
2
Winbind traffic not encrypted
A problem here getting winbind traffic to be encrypted using Kerberos.
I have set up a test environment with a pair of servers (actually lxc
containers):
- samba server (ubuntu 16.04, stock samba 4.3.11)
- client machine (ubuntu 16.04) joined with "net ads join" and winbind
The client machine has the following in /etc/samba/smb.conf:
-------
[global]
#netbios name = client-ad