similar to: Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD - ISSUE - The RPC server is unavailable

On Wed, 2017-06-14 at 11:01 +0100, Rowland Penny via samba wrote: > On Wed, 14 Jun 2017 15:13:13 +0530 > Arjit Gupta <arjitk.gupta at gmail.com> wrote: > > > Thanks for the response. > > > > Is this xattr causing this RPC server is unavailable issue ? > > > > Arjit Kumar > > > > > > Lets be perfectly honest here, the lack of

Hi Rowland, *>> How did you configure Samba ?* atca13 [/opt/samba/bin]# ./samba --show-build Samba version: 4.5.0-HPE CIFS SERVER 4.5.0.0 Build environment: Build host: HP-UX atca7 B.11.31 U ia64 3395706695 unlimited-user license Paths: BINDIR: /opt/samba/bin SBINDIR: /opt/samba/bin CONFIGFILE: /etc/opt/samba/smb.conf NCALRPCDIR: /var/opt/samba/run/ncalrpc LOGFILEBASE:

Hi Andrew, I have checked for the reason of below error single_terminate: reason[socket_get_remote_addr() failed] As mentioned by you earlier that it requires "credentials passing via the getpeereid() call or SO_PEERCRED" On investigating it further i found below condition that fails File :- lib/tsocket/tsocket_bsd.c Function int _tsocket_address_bsd_from_sockaddr(TALLOC_CTX

Hi , We have configured and run SAMBA-4.5 AD DC on Itanium HP UX 11iv3. We have tried to join the windows server 2008 DC to samba AD with the steps mentioned in the below link https://wiki.samba.org/index.php/Joining_a_Windows_Server_ 2008_/_2008_R2_DC_to_a_Samba_AD While i am trying to execute the steps mentioned in section "Joining the Windows Server to the Domain" 1.

Hi, On checking it further. I observe below message from net ads command. LDAP] TLS: hostname (*X.X.X.X*) does not match common name in certificate ( win.cifs.com). [LDAP] ldap_err2string Failed to issue the StartTLS instruction: Connect error I am able to fetch data successfully from ldapsearch command. It seems samba is connecting to ldap with IP but in client certificate domain name is

Hi Rowland, Below is the man page for pwgrd deamon. http://nixdoc.net/man-pages/HP-UX/pwgrd.1m.html Thanks for suggesting the changes in smb..conf as of now we are using above for testing purpose only. I have corrected your suggestion still i am having the same issue. Arjit Kumar On Wed, Dec 21, 2016 at 5:33 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On

Hi, I have enabled ldap ssl on Windows 2008 server active directory and want to join ads domain with net ads join command. I am getting below error:- net ads join -U Administrator ldap_url_parse_ext(ldap://localhost/) ldap_init: trying /etc/ldap/ldap.conf ldap_init: using /etc/ldap/ldap.conf ldap_init: HOME env is /root ldap_init: trying /root/ldaprc ldap_init: trying /root/.ldaprc ldap_init:

Hi Team, I have configured and run SAMBA-4.5 AD DC on Itanium HP UX 11iv3. I tried to join the windows server 2008 DC to samba AD I have follwed the steps mentioned in the below link https://wiki.samba.org/index.php/Joining_a_Windows_Server_2008_/_2008_R2_DC_to_a_Samba_AD While i am trying to execute the steps mentioned in section "Joining the Windows Server to the Domain"

Hi, We are testing samba 4.5.0 on hpux ia64. We are seeing below behavior. Please clarify the same 1. - Configure samba as nt4 server. - Mount any share folder from windows client with any user. Ex. user is *abc* - open any file from mount directory - Unmount share directory from Windows without closing the file. - Try to mount folder from same windows client with any other

Hi, I have modified my /etc/ldap/ldap.conf cat /etc/ldap/ldap.conf #TLS_REQCERT HARD TLS_REQCERT ALLOW TLS_CACERT /etc/ssl/certs/msadmaster.pem After above changes net ads is succesfull with ssl/tls I have verified at Windows AD DC end that TLS is being used for communication with the help of wireshark. Though i am not sure what is impact of changing TLS_REQCERT to ALLOW from HARD

Hi, Any one any suggestion how to make this work. This issue is reported in ubuntu bug 1576799 <https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1576799?comments=all> earlier But the solution suggested of replacing ldap ssl ads = Yes to ldap server require strong auth = Yes leaves communication in plain format. Arjit Kumar 9650104435 On Tue, Dec 5, 2017 at 12:18 PM, Arjit Gupta

Hi Team, Workaround for CVE-2017-12151 :- client max protocol = NT1 and CVE-2017-12163 :- server min protocol = SMB2_02 are contradicting to each other. CVE-2017-12151 impacts on SMB3 protocol but workaound suggst to use NT1. I have below queries regarding this. Is SMB2 protocol also impacted by CVE-2017-12151 ? Can i use client max protocol = SMB2 so that it does not contradict with

Hi , Below is the content of smb.conf file for ADS member. [global] password server = WIN2008.CIFSDOM.COM client ldap sasl wrapping = plain security = ADS workgroup = CIFSDOM realm = CIFSDOM.COM guest account = smbnull log file = /var/log/samba/%m.log log level = 10 # Default idmap config used for BUILTIN and local accounts/groups

Hi Rowland, *After stopping **pwgr daemon* we are able to access the domain user as expected. Below is the smb.conf file used. mach# ./testparm -s Load smb config files from /etc/opt/samba/smb.conf rlimit_max: increasing rlimit_max (2048) to minimum Windows limit (16384) Processing section "[tmp]" Loaded services file OK. Processing comments in /etc/opt/samba/smb.conf Server role:

Hi All, Please help us for these issue. Its kind of urgent for us. Arjit Kumar On Fri, Jan 6, 2017 at 6:04 PM, Arjit Gupta <arjitk.gupta at gmail.com> wrote: > Hi, > > We are testing samba 4.5.0 on hpux ia64. We are seeing below behavior. > Please clarify the same > > 1. > > - Configure samba as nt4 server. > - Mount any share folder from windows client

On Tue, 20 Dec 2016 20:13:28 +0530 Arjit Gupta <arjitk.gupta at gmail.com> wrote: > Hi , > > Below is the content of smb.conf file for ADS member. > > [global] > password server = WIN2008.CIFSDOM.COM > > client ldap sasl wrapping = plain > security = ADS > workgroup = CIFSDOM > realm = CIFSDOM.COM > > guest

Hi, Please help me identify what additional is to be done. On 4 Dec 2017 15:10, "Arjit Gupta" <arjitk.gupta at gmail.com> wrote: > Hi, > > I have enabled ldap ssl on Windows 2008 server active directory and want > to join ads domain with net ads join command. > > I am getting below error:- > net ads join -U Administrator >

On 06/12/2016 16:06, Brian Candler wrote: > Ah OK... I've just seen Rowland's reply, "Just don't use ZFS". That's > clear enough :-) FYI, I rebuilt the system using btrfs but initially I got the same issue [^1] It turns out this came from running inside an unprivileged lxd container. After setting "security.privileged true" it was happy. So I guess

Hi, Issue Background:- 1. Configure samba as member to ADS/NT4 server 2. Share a folder from samba member server Issue:- - Try to access share folder from domain user(other non admin user which exists in ADS/NT4 server). - It fails with with error NT_STATUS_NO_SUCH_USER. >From the log it seems that winbind is able to find and authenticate the user. but smbd fails to get user

Thanks for the analysis of second bug. Please also share CVSSv3 score for first bug. Arjit Kumar On Fri, May 26, 2017 at 12:29 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Fri, 2017-05-26 at 11:36 +0530, Arjit Gupta via samba wrote: > > Hi Team, > > > > Please let me know the severity of CVE-2017-2619 and CVE-2017-7494. > > They are not unpublished: