similar to: Unable to authenticate with Samba 4.5 from XP box

Thanks L.P.H and Rowland, I've just tested the L.P.H solution and after reboot I'm able to authenticate with the member server without problem. Is slow listing folders with much objects but works (maybe happened always). Here's my smb.conf: [global] workgroup = DOMAIN security = ADS realm = DOMAIN.COM server role = member server dedicated keytab file = /etc/krb5.keytab kerberos

Thanks Rowland. Yes, I use ACONFI as Workgroup but I always try to hide my domain name on lists (today i've failed :P) Thanks for your recomendations. I'll change it, and I'll disable the acl_xattr because I use the linux tools to manage the permissions (setfacl). Greetings!! 2017-10-30 12:44 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>: > On Mon, 30 Oct

Hello, I'm trying to set the final permissions of my shares because we comes from an old samba managed by IP, and I've noticed that when I create a new file it has the default user group (Domain Users) instead the default configured group. I've used chown and chmod g+s to do it, and when I create a new file in that folder from terminal it keepts the group, but when I create a new file

Hai,   now realmd sssd and autofs are all not my cookies.. but..   i see 2 things. 1) you missing the CIFS spn. here is shows how to make them and extract them. https://wiki.samba.org/index.php/Generating_Keytabs  https://wiki.samba.org/index.php/Keytab_Extraction      2) for the smblcient try :  smbclient //server.domain.dom/escaner -U user -W DOMAIN.DOM -R host -k -d 3 -m SMB2 ....added

Thanks Rowland. I'll give a try to both things (WG and SPN). To be honest, I ask here because the sssd daemon is working as expected allowing the authentication of the machine to the domain, and the real problem is that I'm not able to access to a shared drive using a Kerberos authentication (cifs and smbclient) and i've thought that maybe was a misconfiguration on member server

Hello, I've compiled Samba 4.7 from repository using a Debian 9 machine and I've noticed that the system started to create zombie processes of samba: # ps aux |grep "Z" USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 502 0.0 0.0 0 0 ? Z 13:01 0:00 [samba] <defunct> root 1346 0.0 0.0 0 0 ? Z

Can you try with this systemd unit file. Restarting does not close all prosesses with that one. ( you need : ExecReload=/bin/kill -HUP $MAINPID ) Jessie used probely sysv and not systemd, which should explain why there are so many zombies. [Unit] Description=Samba AD Daemon Documentation=man:samba(8) man:samba(7) man:smb.conf(5) After=network.target [Service] Type=notify NotifyAccess=all

Hello, I'm trying to replace a Windows Server 2003 DC that has problems, with a Samba 4 domain with HA. The linux client server seems to works fine even when main DC/DNS server fails, but as always, Windows clients not... They are able to log in (maybe using cached credentials), but the GPO are not being applied... I've checked the sysvol folder and both are syncsynchronized and

Hello, I'm using a Samba 4 as domain server and I've a lot of Windows computers that mounts shared drives on another server through GPO applied by user groups. Is there any way to do something similar on a Linux box, or I've to use a local script? Thanks! -- _________________________________________ Daniel Carrasco Marín Ingeniería para la Innovación i2TIC, S.L.

i've seen that is similar to your latest test. What about a gpresult -h result.html. The GPo is appplied to the user? Greetings!! 2017-11-30 13:29 GMT+01:00 Daniel Carrasco <d.carrasco at i2tic.com>: > I don't know if is relevant and maybe is the same as GPO that you've > created, but Ive a profiles folder with this configuration: > > [profiles] > path

Hello, Some of my users have complained about that some of her shared drives are not there. After research on one of the computers I've noticed that all drives are mounted correctly by GPO (you can use that drives from cmd and are showed on "net use" command), but when you use the Windows Explorer some of that drives are not showed (and are no accesible even setting manually the

Hello, thanks for your response. I'm using samba_internal as DNS because I don't want to add bind to only relay the internal DNS. The hosts file is clean on srv2 DC (default localhost), and this is the srv1 hosts: 192.168.0.251 srv1.domain.com srv1 resolv.conf srv1: domain domain search domain.com nameserver 192.168.0.251 nameserver 8.8.8.8 resolv.conf srv2: nameserver

Hello, El 20 oct. 2017 4:50 p. m., "Rowland Penny via samba" <samba at lists.samba.org> escribió: On Fri, 20 Oct 2017 14:57:42 +0200 Daniel Carrasco via samba <samba at lists.samba.org> wrote: > Hello, > > Sorry for take so long to answer, but I was not able to do the tests > because the computer is in use and out of my office. > > Finally I've

I think MJ is using samba with AD backend and Rowland RID. Rowland, try AD backend if your using rid atm. Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mj via samba > Verzonden: woensdag 11 oktober 2017 13:25 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Using GPO to mount shares on Linux > > >

Hello, I'm trying to replace an old Windows Server 2003 with Samba 4 and I've got a problem trying to add some DNS entries. When I open the RSAT DNS manager I got an Access Denied error and I can't edit the zones. My config file is the generated by samba-tool and I'm using Samba 4.7.0rc5 compiled on a Debian 8 amd64: [global] netbios name = DC1 realm = DOMAIN.DOM

Hello, I've a member server that is working fine as shared folder server (all shares works and it permissions). My problem is that when I add the nsswitch winbind entries then the server uses the DC to authenticate even when I use ssh, so if Samba DC server fails I have problems to login into the member server. My nsswitch: passwd: compat winbind group: compat winbind

Hai, I did a re-read of you thread. First. If you use smblcient, with a samba installed, use -s /path/alternative/smbclient.conf If i did read it correct. Your connecting from xUbuntu (samba version ??) to (debian8) samba 4.2 member How did you join the xUbuntu? https://docs.pagure.org/SSSD.sssd/users/ad_provider.html Like this setup? ^^^ > This setup is working as expected (some

Mandi! Rowland Penny via samba In chel di` si favelave... > Is this on a DC ? No, is a DM. > If it isn't, Try setting it up exactly like it is shown on the > wikipage, note that you only need the 'vfs objects' line if it isn't > set in [global] Wikipage say only: Create a new share. For details, see Setting up a Share Using Windows ACLs. and

Hello, Sorry for take so long to answer, but I was not able to do the tests because the computer is in use and out of my office. Finally I've progressed in this topic with realmd, sssd and autofs, but now I'm locked on mounting shares from my member server. I'm able to use autofs and smbclient to mount and connect to sysvol share on my DC server, but when I try to connect to my

Hello, The GPO must be linked to the computers OU also, then the computer part will be applied too. Greetings!! 2017-11-30 14:54 GMT+01:00 Marco Gaiarin via samba <samba at lists.samba.org>: > Mandi! Daniel Carrasco via samba > In chel di` si favelave... > > > What about a gpresult -h result.html. The GPo is appplied to the user? > > Mmmhhhh... seems me no. Clearly