similar to: outgoing realm trust from windows to samba4

Greetings, James Fromm! > Is it still possible to join a Windows 2012 Server R2 system as a member > to a 'pre-NT5' Samba (3.6.23) domain controller? Yes, at least for Win7 Pro. You have to disable DNS lookups. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]

Is it still possible to join a Windows 2012 Server R2 system as a member to a 'pre-NT5' Samba (3.6.23) domain controller? The Windows 'Domain Change' GUI errors immediately after failing the SRV lookup for the AD server. Even with the SRV record in place, the GUI fails trying to connect to the non-existent LDAP port. Netdom on the command line tries to work if the DC name

Wwe are doing some testing in preparation for our migration from Samba 3.6 to Samba 4.x. Because we must share networks with other groups, we want to use the "hosts allow" parameter in smb.conf to restrict who can connect to our Samba domain. This works great in 3.6. I'm unable to get it to work with 4.1.16. That is, I'm unable to join a Windows 7 PC to the Samba 4

All, I've got a Samba 3 PDC serving numerous XP clients, and I'm getting an error I wouldn't have expected. When trying to rename an XP machine joined to the domain (via "netdom renamecomputer"), the command fails unless the specified domain user has UID 0. The command in question: netdom renamecomputer %COMPUTERNAME% /newname:%NEWNAME% /userD:DOMAIN\USER

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

I don't have anything but Server 2003, 2008 and 2012 to test with. 2003 joins the domain without issue. 2008 and 2012 will not. The registry has been updated on both: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters] "DNSNameResolutionRequired"=dword:00000000

as i promise last week, a incomplete documentation about configuring a trust beetween a heimdal kdc and a windows AD domain really sorry for non-french speakers of course, i'm very interresting in any feedback... Pascal configuration - le realm Kerberos est DEMO.LOCAL - le realm du domaine AD est ad.demo.local La configuration du KDC lui m?me ne pr?sente pas de difficult?

I'm still trying to fix this problem. Hopefully someone can help. I've upgraded dovecot to 2.3.3 # dovecot --version 2.3.3 (dcead646b) That didn't help. Next I switched 10-auth.conf to use a local password file (instead of LDAP) ======================================= # cache all authentication results for one hour auth_cache_size = 10M auth_cache_ttl = 1 hour

Hi, I'm getting errors with my IMAP setup. Basically, everything seems to work. Mail is delivered nicely from Postfix to Dovecot via LMTP. Dovecot does the authentication to LDAP (also for Postfix). Users are able to send mail via authenticated submission (Postfix) and login into IMAP and POP. However, IMAP connections are dropped frequently with an "ERROR: Connection dropped by IMAP

> Il 04/07/2014 18:19, Marc Muehlfeld ha scritto: > It's on the "Roadmap" page > (https://wiki.samba.org/index.php/Roadmap#Trust_support). But no > timeline or planned version yet. By reading https://wiki.samba.org/index.php/Roadmap#Trust_support seems that trust support is not finished yet, btw in changelogs seems that in 4.2.* (with winbindd) interdomain trusts are

From: Dave Airlie <airlied at redhat.com> This needs the proper division macros. Signed-off-by: Dave Airlie <airlied at redhat.com> --- drivers/gpu/drm/nouveau/nvkm/engine/fifo/r535.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/nouveau/nvkm/engine/fifo/r535.c b/drivers/gpu/drm/nouveau/nvkm/engine/fifo/r535.c index 14a67cf96204..0f9b8087d5e6

Hi, Andrew, Thank you very much for your answer. Now our case is as below: 1, our client machine is the windows 2000 2, We want our Kerberos run in the Unix box. 3, We also want the samba as PDC for all windows user and machine. 4, We want integrate the Kerberos Authentication with samba authentication. So in this situation, can we get the kerberos login from the windows

2016-05-19 19:06 GMT+02:00 Rowland penny <rpenny at samba.org>: > On 19/05/16 17:37, lejeczek wrote: > >> >> >> On 19/05/16 16:49, Rowland penny wrote: >> >>> On 19/05/16 15:50, lejeczek wrote: >>> >>>> fellow users >>>> >>>> I'd like to ask is it possible, and if yes what's the correct way to

Hi, as i read from https://wiki.samba.org/index.php/Roadmap#Trust_support two-way forest trusts are on the way. Is there any rc date available? Thanks, Sergio.

Trust support is still considered experimental per the wiki. https://wiki.samba.org/index.php/FAQ#Trust_Support One of the limitations is "You cannot add users and groups of a trusted domain into domain groups." This may be applicable to your issue. On 10/24/2016 9:59 PM, Владимир Ельцов via samba wrote: > Really nobody uses Samba 4 AD with trust relationships and GPOs? > --

On Tue, 2015-03-10 at 11:37 +0100, Klaus Hartnegg wrote: > Am 10.03.2015 um 11:00 schrieb Sergio Rizzi: > > By reading https://wiki.samba.org/index.php/Roadmap#Trust_support seems > > that trust support is not finished yet, btw in changelogs seems that in > > 4.2.* (with winbindd) interdomain trusts are now working. > > The release notes say that windindd "paves

Hi All, I am using Samba 3.0.10 on IBM server with REHL 4 Os. The detailed infromation as below. ----------------------------------------------------------------- [root@ufhkglx02 samba]# uname -a Linux ufhkglx02 2.6.9-67.ELsmp #1 SMP Wed Nov 7 13:58:04 EST 2007 i686 i686 i386 GNU/Linux [root@ufhkglx02 samba]# cat /etc/redhat-release Red Hat Enterprise Linux ES release 4 (Nahant Update 6)

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

Hi Valery, First thank you for this detailed information about your searches. I find them very interesting. Here I'm thinking of two workarounds. The first one would be to list deleted objects RIDs, to verify RID=2002 is really the last one used, being sure there is no deleted object with RID=2003 and so on. Then once you get the last RID used, you could change RidNextRid to match this

Hi all! Today, after two years of production, I get this error: samba-tool user create test20160627 testpassword ERROR(ldb): Failed to add user 'test20160627': - ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=test20160627,CN=Users,DC=ad... - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=test20160627,CN=Users,DC=ad... Help me