similar to: [Curiosity] 'netbios aliases' works in AD mode?

On Tue, 2017-12-05 at 16:14 +0100, mj via samba wrote: > We haved used it on a domain member server, yes. > > Only one thing: when you have a compteraccount memberserver$ in your AD, > you cannot use "memberserver" as an alias on another machine) And you should register any such alias as a servicePrincpalName. Andrew Bartlett -- Andrew Bartlett

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > We haved used it on a domain member server, yes. > > Only one thing: when you have a compteraccount memberserver$ in your AD, > > you cannot use "memberserver" as an alias on another machine) > And you should register any such alias as a servicePrincpalName. Ahem, looking at the wiki ad google does

On Wed, 2017-12-06 at 11:19 +0100, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > > > We haved used it on a domain member server, yes. > > > Only one thing: when you have a compteraccount memberserver$ in your AD, > > > you cannot use "memberserver" as an alias on another machine) > > >

Only b is needed. Im connecting here from a win 10 to a samba 3.6.6 smb1 through an CNAME. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: dinsdag 19 december 2017 13:45 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [Curiosity] 'netbios aliases' works

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > I dont get what your goal is, sorry.. :-/ And Rowland: > Why do you think you need 'netbios aliases' ? Simply: i was (ab)used to have, in my NT domain, some aliases for my servers, so i can change servers (and move services) but keeping things consistent. Eg, all my printers are connected to

Ahem no one reply me. A little fast-rewind: i need to have some 'aliases' to my servers (DM); seems i need to add in smb.conf: netbios aliases = FILESV but also add a 'SPN'; trying to look around for an examples, lead me to ''nothing'', or to examples that seems to me unrelated. Supposing the domain is 'ad.fvg.lnf.it' and the FQDN of the real host is

On Thu, 2017-12-07 at 10:48 +0100, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > > > This lead me to another question: in this way, aliases are ''domain > > > wide'' right? Eg, i cannot have a DM aliased 'file' in a LAN and > > > another DM aliased 'file' in another LAN, as

Mandi! Rowland Penny via samba In chel di` si favelave... > OK, NT4-style domains use netbios to find computers. > AD domains use dns Ok, this is clear. > So, my advice would be to use CNAME records in AD. > What Andrew said was correct, but netbios is on the way out, it relies > on SMB1 and the latest Win10 has this turned off by default. Ok, trying to sumarize: if i

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > This lead me to another question: in this way, aliases are ''domain > > wide'' right? Eg, i cannot have a DM aliased 'file' in a LAN and > > another DM aliased 'file' in another LAN, as was used before with NT > > like domains (two different domains). > Correct, you

Mandi! Andrew Bartlett via samba In chel di` si favelave... > No, it will ask for 'file'. If the servicePrincipalName is not unique, > the lookup will fail. OK. Thanks. Sorry again, but really i don't find examples for SPN definition. The commandline: samba-tool spn add host/vdmsv1.ad.fvg.lnf.it file.ad.fvg.lnf.it is corect to define alias 'FILE' for domain

> Ahem no one reply me. Still no feedback. I've done some test by myself. a) i've added in smb.conf: netbios aliases = CUPSSV FILESV b) i've registered the alias as SPNs, now i've: root at vdcsv1:~# samba-tool spn list vdmsv1$ vdmsv1$ User CN=VDMSV1,OU=Computers,OU=SanVito,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it has the following servicePrincipalName: HOST/VDMSV1

Hai Marco, I dont get what your goal is, sorry.. :-/ If you follow this template. The computername should always have an A + PTR recored. Now create an CNAME and point to the computer name, and this one can be in any zone. Does not have to be the primary dns zone, as long as the zones are withing the kerberos domain. On a member you have, by default : dns proxy = yes , man smb.conf for

Reding the thread in list about gluster, i've found that in your samba packages 4.5.12+dfsg-2+deb9u2~bpo8+1 there's no vfs_glusterfs module, only the manpage. root at vdmsv1:~# grep glusterfs /var/lib/dpkg/info/samba*.list /var/lib/dpkg/info/samba-vfs-modules.list:/usr/share/man/man8/vfs_glusterfs.8.gz root at vdmsv1:~# grep /vfs/ /var/lib/dpkg/info/samba*.list

Mandi! Andrew Bartlett via samba In chel di` si favelave... > I hope this clarifies things, Super-clear! Thanks! -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t

Reading here i've understod that for LDAP query it is better to use SAMAccountName as 'login', but today i've found: https://docs.microsoft.com/it-it/windows/desktop/ADSchema/a-samaccountname so, 'SAMAccountName' is a compatibility field with NT mode, limited to 20 chars. Someone here use 21 chars logins? ;-) -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66

Debian stretch, louis packages 4.9.16+dfsg-0.1~stretch~1 . After some time (roughly: two weeks) my DC with FSMO roles (seems that other DC are unaffected) goes suddenly on trash: memory jump from 50% (3GB) to 100%, container start to swap and slow down (load 10-15) al the phisical server. A simple restart solve all the troubles. Some hint on how to debug that? Thanks. -- dott. Marco Gaiarin

I need to close a site. No, no people fired, i've defined sites and DC because i hope that get (re)opened, but... There's some care i need to have to remove a DC (clearly, without FSMO roles)? I've looked on wiki to 'remove a DC' but i was not able to find something... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra

I need to do a simple query, against some LDAP data in 'laster draft schema' format i've added to te samba/AD schema. All LDAP query return the same result on all (6) of the DC: root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember Enter LDAP Password:

Mandi! Rowland Penny via samba In chel di` si favelave... > > But my question really is: why this policy apply, if i've not enabled > > in GPO? > Probably because GPOs have no effect on a Samba AD DC, they will only > effect Windows clients. Rowland, i'm speaking about windows clients, not samba servers! I've enabled 'complexity checks' in samba servers,

Samba 4.8 (Louis debian repo), DM. Today i've had to recovery a deleted file in that share, that use 'vfs_recycle' modules: [Work] comment = Spazio di Lavoro Utente map acl inherit = Yes path = /srv/work read only = No store dos attributes = Yes vfs objects = acl_xattr recycle full_audit volume = Work full_audit:failure = none full_audit:success = mkdir rmdir read pread