similar to: question on password server =

On Thu, 15 Jun 2017 10:14:45 +0200 mj via samba <samba at lists.samba.org> wrote: > Nobody knows..? > > Or my question is unclear..? > OK, whilst it is recomended to use 'password server = *' you can use a list of servers instead. I personally do not see the point of setting it as you are proposing, surely it is just the same as using '*' ? I am also

Hai, Added some extra comment.. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: donderdag 15 juni 2017 11:06 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] question on password server = > > On Thu, 15 Jun 2017 10:14:45 +0200 > mj via samba <samba at

Hi James, Thanks for the quick reply. On 10/09/2017 08:52 PM, lingpanda101 via samba wrote: > You should be able to fix the 'replPropertyMetaData' errors with; > > samba-tool dbcheck --cross-ncs --fix --yes > 'fix_replmetadata_unsorted_attid' Yep, worked great! Fixed all of those replPropertyMetaData errors! :-) > The highwatermark doesn't necessarily

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Nobody knows..? Or my question is unclear..? MJ On 06/14/2017 09:59 AM, mj via samba wrote: > Hi, > > I would like to ask how exactly the "password server =" smb.conf option > works. The man pages say that the option is to "restrict Samba to to do > all its username/password validation using a specific remote server" > > I know that we should

On 10/16/2017 11:13 AM, Rowland Penny via samba wrote: > On Mon, 16 Oct 2017 16:53:17 +0200 > mj via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> dbcheck tells us we have two "dangling forward links" that I am >> trying to get rid of. On my test domain, I have simply done >> >> ldbedit -e nano -H

Hi all, I hope that this request for help will be the last one, for a while to come. Today, sernet support helped my sort out our DC mess, and they did a great job. However, sssd no longer works, and I hope someone here can help out. We used to have DC1, DC2 and DC3. DC1 was the classic-upgraded, first, 'original' DC, and had to be shutdown, unfortunately. So only DC2 and DC3

https://technet.microsoft.com/en-us/magazine/jj631606.aspx goes through the steps I remember taking in a windows environment. As you can see step 2 is to install ADFS this is what would need emulated with some web server. So I will try and google ADFS on apache or nginx or linux. I'll let you know if I find anything interesting. On Mon, Jun 6, 2016 at 1:53 PM, Jeff Sadowski <jeff.sadowski

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

It's very difficult at least. I can't instantly think any sensible way forward, but you might be able to get somewhere using %a variable. Aki > On December 31, 2016 at 11:38 AM mj <lists at merit.unu.edu> wrote: > > > Hi, > > Does the lack of replies mean that what I'm asking is not possible? > > (or am I missing something SO obvious that nobody

Or. maybe it is the holidays and people actually have a life? On December 31, 2016 4:38:53 AM EST, mj <lists at merit.unu.edu> wrote: >Hi, > >Does the lack of replies mean that what I'm asking is not possible? > >(or am I missing something SO obvious that nobody bothers to point it >out..?) > >MJ > >On 12/29/2016 09:23 PM, mj wrote: >> Hi, >>

> Le 29 mai 2020 ? 11:17, Stuart Henderson <stu at spacehopper.org> a ?crit : > > On 2020-05-26, mj <lists at merit.unu.edu> wrote: >> Hi, >> >> On 25/05/2020 23:04, Voytek wrote: >>> jumping here with a question, if I use 143 with STARTTLS, and, force >>> TLS/SSL in configuration, that's equivalent from security POV, isn't

Hi! You can ignore it, or you can change the socket permissions to 0666. service stats { unix_listener stats-writer { mode = 0666 } } Aki > On 23/10/2020 17:52 mj <lists at merit.unu.edu> wrote: > > > Hi, > > Nobody? > > It happens so rarely, and the system appears to be running fine > otherwise, should I just ignore it? > > Still

Hi all, I have just updated our dc's from sernet 4.1.11 to sernet 4.1.12. And suddenly since that update, we're getting many ldapcmp failures on the attribute 'whenChanged'. In 4.1.11 life was good, and ldapcmp reported no differences at all. Here is a sample: (dc2 <-> dc3) Comparing: 'CN=podcast,CN=Users,DC=samba,DC=company,DC=com' [ldap://dc2]

I used to also get related log messages of the form: auth_check_password_send: Checking password for unmapped user [HPRS]\[mark]@[ROVER] auth_check_password_send: mapped user is: [HPRS]\[mark]@[ROVER] but now all I get is the auth_check_password_recv in the log. Perhaps the change is due to an upgrade to Samba, or perhaps a change I made to my smb.conf log options? (see log config in my

Hi all, I need to add a windows nt4 (sp6a) server to our samba-4.1.6 active directory. I installed nt4 as a 'stand alone server'. So far it doesn't work, I get: When selecting to 'create a computer account in the domain': - the machine account for this computer either does not exist or is inaccessible If I create a computer account manually, and do not check 'create a

Hi, I would like to have two seperate imap listeners, with different authentication settings, but the mailstore and userbase etc will be identical. I know I can do this: > service imap-login { > inet_listener imap { > port = 143 > } > inet_listener imap2 { > port = 144 > } > } But I'm unsure how to configure imap/143 with "driver =

Hi all, We'er running a classicupgraded samba4 AD 4.1.6 sernet for a month or two now, and all is very well. :-) It has been classicupgraded using the same 4.1.6. Today I wanted to try GPO's and they are not applied. GPUpdate /force tells me: "Windows attempted to read the file blahblah\gpt.ini from a domain controller and was not successful". Taken from the mailinglist, I

Hi, I am trying to find a nice way to identify dovecot clients that are still configured to use port 143 to connect to our mailserver, from the dovecot logs. I would then ask them to move over to 993, and finally disable port 143 altogether. When looking at the dovecot logs, it seems this is not logged in any obvious way. Of course I could use netflow etc, but that would not give us

Hi, I have searched here, and noticed some discussion lately on problems demoting a dc. In my case, all roles are on DC2, and DC1 & DC3 know that: root at DC1:/var/log/samba# samba-tool fsmo show InfrastructureMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com RidAllocationMasterRole owner: CN=NTDS