similar to: auth audit log question

Hi, We are having an issue, trying to install a domain member server. I'm following the samba wiki: - samba 4.6.1 - krb5.conf as recommended on wiki - time synced - kinit works - dns works (DCs in resolv.conf) - setup a basic smb.conf (pasted at the end of this email) - edit nsswitch.conf to include winbind for passwd/group and then finally "net ads join -U administrator -d5" fails

Hello list. I’m using samba4 authorization with debian 8 without any problems. But in debian 9 very same config causes problems - unable to change GID. Here is my smb.conf: [global] netbios name = testvm security = ADS workgroup = WRKGRP realm = EXAMPLE.COM password server = 172.24.0.253 wins server = 172.24.0.253 wins proxy = no

On 10/11/2017 12:43 PM, Rowland Penny via samba wrote: > I want to mount a users folder on one machine into the users folder on > another machine. > i.e. mount \\dc1\users\rowland on client /home/rowland/mnt That sounds similar to our use case. > Sods law has kicked in, I have now got a mount to work with pam_mount, > but there is a major problem, anything created in the share

Hi, I have installed samba 3.0.6 based on the "Official HOWTO" to join out Active Directory environment, with winbind and pam support. I have join the samba to the domain using "net ads join -Umyloginame". I can do the "wbinfo -g", "getent passwd" and "getent group" correctly. I also can list shares on other machine, using kerberos: # kinit

Hai Mourik-Jan, This looks all good. Only one thing in the config, you can remove : winbind nss info = rfc2307 Since your alread set ( for 4.6.x) : idmap config INTECH:unix_nss_info = yes Can you check the content of the keytab? klist -ke /etc/krb5.keytab post ( if needed anonymized ) the content you see. run : net ads keytab list -UAdministrator And did you by accident run : net ads

We have to Samba DCs and a couple of Synology NAS connected/bound to the Samba AD. On regular basis the Synology NAS (I believe Samba 4.4.16) looses its connection to the AD outputting the error message, that the domain cannot be found. In the logs of the NAS I can only find the error message ?synowin: domain_test_join.c:59 net ads test join fail?. In the logs of the DC I notice that from one

On Wed, 11 Oct 2017 10:13:35 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > If you mean, Linux <=> Linux , use automounting, of dedicated mounts. > Cifs/nfs, depending on you setup and what you need. > > The problem is, they don't seem to work any more. They all seem to rely on mount.cifs and you need to be root to run this. When

Hello, I have joined the Linux server (Suse 11.2) to the Windows domain (win2003) and users can login to the server using their window's domain credentials. Also can view all of the domain groups using 'wbinfo -g', however when I try to set the acls on a local dir' I get the follow error; #setfacl -m g:DOMAIN\\groupname:r /tmp/testacl setfacl: Option -m: Invalid argument near

Hello, I have set up audit logging and I find many entries of this type : ./auth/auth_log.c:760(log_authentication_event_human_readable) Auth: [SMB2,(null)] user [MYDOMAIN]\[MYWORKSTATION$] at [mar., 23 juil. 2019 07:49:43.486619 -03] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [MYWORKSTATION] remote host [ipv4:10.x.x.x:49472] mapped to [MYDOMAIN]\[MYWORKSTATION$]. local host

Hi! My DC is running Samba 4.8.2(Ubuntu 16) I have windows 2016(member domain), running IIS... But my site in IIS, use user the DC (in portal), but now dont worked , is much erro in log.samba when autentcation in site with user dc... Any Idea? Regards ---------------------------- [2018/05/28 17:35:52.085263,  0] ../lib/util/fault.c:78(fault_report)  

The only thing related to 'addresses' in my /etc/samba/smb.conf file is a "hosts allow": hosts allow = 192.168.3.0/24 127.1 I'm going to ignore the 'local hosts case, as if I solve the other, the localhost case may get solved by inference. I thought the 'hosts allow' would allow any host on the local 192.168.3.0/24 subnet. The hosts have no problems

On 10/11/2017 12:09 PM, Rowland Penny via samba wrote: > I did all of this, I have read everything I could find on the internet > and I just couldn't make it work. > > I am now a leading expert on what doesn't work ;-) > > Rowland ok, that is an unusual situation... you having a problem, and things working here :-) So perhaps we're doing different things: we

Hello I have a Problem with one windows 10 client. [2020/10/05 09:21:47.356628, 2] ../source3/auth/auth.c:334(auth_check_ntlm_password) check_ntlm_password: Authentication for user [ap31] -> [ap31] FAILED with error NT_STATUS_WRONG_PASSWORD, authoritative=1 [2020/10/05 09:21:47.356724, 2] ../auth/auth_log.c:610(log_authentication_event_human_readable) Auth: [SMB2,(null)] user [.]\[ap31]

Out of curiosity: is QNAP as bad as Synology or is there another ?mainstream? NAS solution with more vanilla Samba out there? Alexander On 25. March 2020 at 11:40:08, Ralph Boehme via samba (samba at lists.samba.org) wrote: Am 3/25/20 um 11:36 AM schrieb Rowland penny via samba: > Thanks Ralph, didn't know that, but shouldn't they provide source code > somewhere ? they

Hi, I am trying to install samba on the RHEL. The installation completes but after that I get the smbd dead message upon checking the status: [root@usps-dc1-pc12 share]# [root@usps-dc1-pc12 share]# service smb status smbd dead but pid file exists nmbd (pid 8078) is running... [root@usps-dc1-pc12 share]# The version of RHEL and samba are as follows:

Hi I just ran into this problem as well. The MS Access Runtime tells me: "This file is located outside your intranetor on an untrusted site. <application name> will not open the file due to potential security problems. To open the file, copy it to your machine or an accessible network location." The file is in the regular wine location. The Runtime is started as follows: env

Hi there, I'm trying to get FreeRADIUS to authenticate against my Samba DC. It's Samba 4.7.6-ubuntu running on Ubuntu 18 (kernel version 4.15.0-66-generic). It came nicely packaged with Zentyal, which provides a nice GUI for managing a domain, as well as a CA and lots of cool small features. That same Zentyal also includes support for FreeRADIUS (3.0.16). This is my smb.conf:

On 19-4-2016 9:18, Denis Cardon wrote: > Hi lists at merit.unu.edu, > >> I updated our servers to 4.2.11, and I have a problem, but I'm not sure >> if the problem is related to the update. > > I've had a call from a client yesterday who had issue with his copiers' > scan2folder feature after badlock samba file server upgrade. The > mount.cifs ntlm basic

Hi, For some users I am trying to deny file access to our domain member servers, yet keeping their AD account for all other purposes, like email and ldap authorized clients. So I figured I removed the unix attributes from a user in ADUC, while keeping the rest. I expected that would make the user 'invisible' for the domain member (file) servers, while maintaining the account for

Hello,     I recently upgrade Samba to 4.7.0 and enabled the Authentication and Authorization audit support. One of the first events I see is from a disabled user account. [2017/09/26 12:24:17.894767,  3, pid=1257, effective(0, 0), real(0, 0)] ../auth/auth_log.c:760(log_authentication_event_human_readable)   Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[bdiley at