similar to: Users and groups on member server without ssh

Can you try with this systemd unit file. Restarting does not close all prosesses with that one. ( you need : ExecReload=/bin/kill -HUP $MAINPID ) Jessie used probely sysv and not systemd, which should explain why there are so many zombies. [Unit] Description=Samba AD Daemon Documentation=man:samba(8) man:samba(7) man:smb.conf(5) After=network.target [Service] Type=notify NotifyAccess=all

Hello, I'm trying to replace a Windows Server 2003 DC that has problems, with a Samba 4 domain with HA. The linux client server seems to works fine even when main DC/DNS server fails, but as always, Windows clients not... They are able to log in (maybe using cached credentials), but the GPO are not being applied... I've checked the sysvol folder and both are syncsynchronized and

Hello, I've compiled Samba 4.7 from repository using a Debian 9 machine and I've noticed that the system started to create zombie processes of samba: # ps aux |grep "Z" USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 502 0.0 0.0 0 0 ? Z 13:01 0:00 [samba] <defunct> root 1346 0.0 0.0 0 0 ? Z

Hello, I'm using a Samba 4 as domain server and I've a lot of Windows computers that mounts shared drives on another server through GPO applied by user groups. Is there any way to do something similar on a Linux box, or I've to use a local script? Thanks! -- _________________________________________ Daniel Carrasco Marín Ingeniería para la Innovación i2TIC, S.L.

Thanks Rowland. Yes, I use ACONFI as Workgroup but I always try to hide my domain name on lists (today i've failed :P) Thanks for your recomendations. I'll change it, and I'll disable the acl_xattr because I use the linux tools to manage the permissions (setfacl). Greetings!! 2017-10-30 12:44 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>: > On Mon, 30 Oct

Hai,   now realmd sssd and autofs are all not my cookies.. but..   i see 2 things. 1) you missing the CIFS spn. here is shows how to make them and extract them. https://wiki.samba.org/index.php/Generating_Keytabs  https://wiki.samba.org/index.php/Keytab_Extraction      2) for the smblcient try :  smbclient //server.domain.dom/escaner -U user -W DOMAIN.DOM -R host -k -d 3 -m SMB2 ....added

i've seen that is similar to your latest test. What about a gpresult -h result.html. The GPo is appplied to the user? Greetings!! 2017-11-30 13:29 GMT+01:00 Daniel Carrasco <d.carrasco at i2tic.com>: > I don't know if is relevant and maybe is the same as GPO that you've > created, but Ive a profiles folder with this configuration: > > [profiles] > path

Thanks Rowland. I'll give a try to both things (WG and SPN). To be honest, I ask here because the sssd daemon is working as expected allowing the authentication of the machine to the domain, and the real problem is that I'm not able to access to a shared drive using a Kerberos authentication (cifs and smbclient) and i've thought that maybe was a misconfiguration on member server

Hello, I've a computer that has XP for compatibility purposes and is outside the domain. I'm trying to mount some shares that are on a Member Server with Samba 4.5 but always get an error saying that password is wrong. All other computers can enter to shares without problem and I'm sure that the password is OK because I can login on Windows 7 computer and even I've mounted a share

Hello, Some of my users have complained about that some of her shared drives are not there. After research on one of the computers I've noticed that all drives are mounted correctly by GPO (you can use that drives from cmd and are showed on "net use" command), but when you use the Windows Explorer some of that drives are not showed (and are no accesible even setting manually the

Hello, thanks for your response. I'm using samba_internal as DNS because I don't want to add bind to only relay the internal DNS. The hosts file is clean on srv2 DC (default localhost), and this is the srv1 hosts: 192.168.0.251 srv1.domain.com srv1 resolv.conf srv1: domain domain search domain.com nameserver 192.168.0.251 nameserver 8.8.8.8 resolv.conf srv2: nameserver

I think MJ is using samba with AD backend and Rowland RID. Rowland, try AD backend if your using rid atm. Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mj via samba > Verzonden: woensdag 11 oktober 2017 13:25 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Using GPO to mount shares on Linux > > >

Hello, I'm trying to replace an old Windows Server 2003 with Samba 4 and I've got a problem trying to add some DNS entries. When I open the RSAT DNS manager I got an Access Denied error and I can't edit the zones. My config file is the generated by samba-tool and I'm using Samba 4.7.0rc5 compiled on a Debian 8 amd64: [global] netbios name = DC1 realm = DOMAIN.DOM

Thanks L.P.H and Rowland, I've just tested the L.P.H solution and after reboot I'm able to authenticate with the member server without problem. Is slow listing folders with much objects but works (maybe happened always). Here's my smb.conf: [global] workgroup = DOMAIN security = ADS realm = DOMAIN.COM server role = member server dedicated keytab file = /etc/krb5.keytab kerberos

Hai, I did a re-read of you thread. First. If you use smblcient, with a samba installed, use -s /path/alternative/smbclient.conf If i did read it correct. Your connecting from xUbuntu (samba version ??) to (debian8) samba 4.2 member How did you join the xUbuntu? https://docs.pagure.org/SSSD.sssd/users/ad_provider.html Like this setup? ^^^ > This setup is working as expected (some

Mandi! Rowland Penny via samba In chel di` si favelave... > Is this on a DC ? No, is a DM. > If it isn't, Try setting it up exactly like it is shown on the > wikipage, note that you only need the 'vfs objects' line if it isn't > set in [global] Wikipage say only: Create a new share. For details, see Setting up a Share Using Windows ACLs. and

I might be asking this question the incorrect group but, here goes. I have successfully added a Debian 10 member (workstation) and made the /etc/pam.d files adjustments per the Debianwiki page https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory and Debian is allowing me to login with AD users and passwords except for one thing. I have to enter the password twice to login. Here are the

On Thu, 8 Dec 2016 13:03:49 -0500 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 12/8/2016 12:52 PM, Rowland Penny via samba wrote: > > On Thu, 8 Dec 2016 12:27:20 -0500 > > lingpanda101 via samba <samba at lists.samba.org> wrote: > > > >> I think I have a issue with ldconfig not finding winbind. I create > >> the sym links and

All DC are running same Samba version : 4.4.2. All DC are hosted on same Centos 7. On broken server(s): wbinfo -i mdufresne failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user mdufresne On working servers: wbinfo -i mdufresne AD.DOMAIN\mdufresne:*:12104:100:Mathias Dufresne (TEMP):/home/AD.DGFIP/mdufresne:/bin/false The smb.conf is:

On Fri, 30 Sep 2016 13:32:18 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > the interface part is ok. eth0 has another IP as eth0:35 > > DCs show me the profiles > > unix authentication > register user session in the systemd…. > inheritable capabilities management > OLIVER WERNER > Systemadministrator > I use Devuan and I get: Kerberos