similar to: integrating samba with pam

On Sat, 1 Jul 2017 16:30:25 +0100, Rowland Penny via samba wrote: > On Sat, 01 Jul 2017 11:48:21 -0300 > Guido Lorenzutti via samba wrote: > >> Hi there! I been using samba3 with ldap for years, and now im about to move to samba4 to leave the slapd. > > I take it you mean that you use Samba as an AD DC Exactly. >> I didnt try yet to migrate the directory from

On Sat, 01 Jul 2017 11:48:21 -0300 Guido Lorenzutti via samba <samba at lists.samba.org> wrote: > > > Hi there! > > I been using samba3 with ldap for years, and now im > about to move to samba4 to leave the slapd. I take it you mean that you use Samba as an AD DC > > I didnt try yet to migrate > the directory from samba3 to samba4. But i did setup a new

On Sat, 1 Jul 2017 19:27:09 +0100, Rowland Penny via samba wrote: > On Sat, 01 Jul 2017 14:19:13 -0300 > Guido Lorenzutti wrote: > >> We used to hide some information from our windows group, to make acls only in unix groups. But well.. i think we can start sharing that info with the domain groups. > > You can do something very similar by using ACLs, create groups in AD,

On Sun, 18 Feb 2018 14:05:38 +1300, Andrew Bartlett via samba wrote: > On Sat, 2018-02-17 at 20:44 -0300, Guido Lorenzutti via samba wrote: > >> Hi there! I have one domain, shared between several samba3+openldap on different geographical locations. I want to migrate them to samba4. The domain has aprox 4000 users accounts, 4000 workstations, and several groups. I was able to

On Sat, 01 Jul 2017 14:19:13 -0300 Guido Lorenzutti <guido at lorenzutti.com.ar> wrote: > We used to hide some information from our windows group, to make > acls only in unix groups. But well.. i think we can start sharing that > info with the domain groups. You can do something very similar by using ACLs, create groups in AD, add RFC2307 attributes and add your Unix users to the

I get this error message "getpeername failed. Error was Transport endpoint is not connected" in my logs very often. Any ideas how to fix it? Tnxs in advance

Hi there! I have one domain, shared between several samba3+openldap on different geographical locations. I want to migrate them to samba4. The domain has aprox 4000 users accounts, 4000 workstations, and several groups. I was able to successfully migrate the domain in a test environment. But I am faced with the problem that I will not be able to migrate in parallel the more than 20 locations

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I posted this also on hylafax list - maybe here is someone with a hint. System: Debian Jessie, Hylafax-Server 6.0.6, pam 1.1.8, libpam-ldapd 0.9.4, nslcd 0.9.4 (all actual debian packets from stable), sernet-samba-*-4.2.7-8 After a switch from OpenLDAP to a Samba 4.2 based LDAP Server, I cannot auth users anymore in Hylafax, everything else

O, try the following.   Test this first. ldd /usr/sbin/hfaxd  if you getting libpam.so..  something, then hylafax is compiled with pam support.   Next,   apt-get install libpam-ldap   ( just to be sure, i do believe you have installed it already )   create the file :  /etc/pam.d/hylafax Add :   auth         required       pam_ldap.so account   required       pam_ldap.so

Hi people, im trying to use shadow copy. Is anyone currently using it? Im following the oficial howto in the samba home page and when i do the xfs_freeze the system totally hangs, any ideas? I know this isn't a specific samba question... I know how to use LVM and snapshots.. the samba how to is accurate? Tnxs in advance.

Someone knows of a tool to make samba usage graphs? I know this isn't exactly samba related. But I have several samba fileservers and it would be great to have such tool to measure the usage of a fileserver. Mostly openfiles, but connected users would be great. Tnxs in advance.

Hi People: In the how to posted on .. http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html The docs says several times to the option -B in the winbindd , but I can't find anything on the manpage about that switch and I can't notice any difference by using it. The docs are outdated? or my 3.0.24 dosen't have this feature? Tnxs in advance.

I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've previously installed a similar configuration on RHEL4, but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations are a little different. Currently, local users and groups are showing up but not LDAP users. When I do a /getent passwd/ and/getent group/ I don't get LDAP users. When I do

Hi people, i was experimenting with the pdbedit and i found the "user must change password at next logon". The thing i wan't able to make it work. I just can login and im not asked to change my password! How's that? The other thing.. i want to make my password expire after 30 days. I did this too, but it dosen't apply until i change my password one more time. I can make

I have a samba PDC 3.0.14a and is running as a PDC. My domain members are windows 2003. I have several users and several unix groups. I want to create some domain groups and map them to the unix groups. When i check my current groups i get this: net rpc group list Password: System Operators Replicators Guests Power Users Print Operators Administrators Account Operators Backup Operators Users

So what happend with the ldap filters? Is a feature that will come back some time in the future? Or I must keep using an old version? I have an ldap tree with 3 companies and i can't allow that people from one company is able to login in the other domain! I don't have pam. What can I do? Tnxs in advance.

Hello Again, I have a problem to understand differences between libnss-winbind libpam-winbind Kerberos I need to see Sambausers on linux box via "getent passwd". At the moment I sync users via LDAP, but i plan to migrate to Samba AD. I dont want to install samba (just for login) on this linux box if it is possible. Best regards, On 25.01.2017 16:37, Rowland Penny via samba wrote:

Hi all, I would like to limit access to our samba shared printers to certain user groups by commandline without using Windows. Is this possible? Thanks! Christoph

Hi, I am testing share parameters, and have the following share definition: ## Section - [shareA] [shareA] path = /tmp/shareA writelist = user1 and do not understand why user1 cannot write files in the share when connected as user1. Unix permissions for the share files are rw for everyone, and the share directory has wide-open permissions. Samba version is 3.0.20b-3.4-SUSE.

Rowland Penny via samba wrote 2018-09-06 14:50: > On Thu, 06 Sep 2018 12:47:02 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Rowland Penny via samba писал 2018-09-05 16:10: >> > However, are you sure you cannot use kerberos ? >> > What are your existing services ? >> >> to name most important ones: >>