similar to: GPO permissions

IMHO, in short, learn to use encrypted connections. 2016-07-27 22:38 GMT+02:00 Kris Lou <klou at themusiclink.net>: > As of 4.2.11: https://www.samba.org/samba/security/CVE-2016-2112.html > > =================== > New smb.conf option > =================== > > ldap server require strong auth (G) > > The ldap server require strong auth defines whether the

CC: List Thanks for the tip! Kris Lou klou at themusiclink.net ---------- Forwarded message ---------- From: Andrew Bartlett <abartlet at samba.org> Date: Fri, Jul 15, 2016 at 3:23 PM Subject: Re: [Samba] Samba 4.2.14 Internal DNS not returning DNAME records? To: Kris Lou <klou at themusiclink.net> On Fri, 2016-07-15 at 14:41 -0700, Kris Lou wrote: > > On Fri, Jul 15, 2016

So you have to reset the other account flags after doing it? On 08/15/2019 02:43 PM, Kris Lou via samba wrote: > pdbedit -c="[]" <user> > > This clears the Account Flags (warning, clears ALL Account flags) that you > can also view via "pdbedit -Lv <user>" > > > Kris Lou > klou at themusiclink.net > > > On Thu, Aug 15, 2019 at 12:11

On Wed, Dec 27, 2023 at 12:21?PM Sonic <sonicsmith at gmail.com> wrote: > On Wed, Dec 27, 2023 at 2:31?PM Kris Lou via samba > <samba at lists.samba.org> wrote: > > > named.conf.local > > > ===================== > > > include "/usr/local/samba/private/named.conf"; > > > ===================== > > > > Is the correct

Well, this is interesting (to me, at least). I joined a W10 machine to the domain (4.8/4.9.4 mix, I'm working on it), then renamed it via "WMIC /node:<computer> computersystem where name="<computer>" call rename name="<newname>". Doing so changed the displayName, sAMAccountName, dNSHostName, and assorted servicePrincipalNames, but did not change the

I have a bit of an oddity here: I'm using Samba 4.2.14 with AD, using Samba's internal DNS to serve to my domain (and forwarding others to Google Public DNS 8.8.8.8). However, it looks like client queries (and subsequent forwards) to a vendor's URL (www.pitneybowes.us) fail, but are successful if I query Google directly: [root at XXXX~]# nslookup -type=any www.pitneybowes.us >

> > There is also Citrix XenServer for maxium > comfort. It offers GUI tools under Windows for managing VMs. The > drawback is, there are a lot of parameters you cannot set in the non > paid version. Just to throw it out there, there's also XCP-NG which is a rebranded (w/o Citrix) version of XenServer without all of the proprietary bits. The same people also produce

Shanks for the hint! Very strange that the default is only to use a deprecated protocol… Anyway, this option has no effect on this issue… Yvan Le 31/05/2019 à 18:53, Kris Lou via samba a écrit : > Most likely, your Windows 10 (file server) is disallowing SMB1 connections, > which is the default for smbclient. > > You can force smbclient to use a higher protocol with "smbclient

Hi Rob, I'm not sure you will get much pleasure out of VirtualBox on that hardware. It sits completely on top of the OS and it will grab most of the resources, even hogging from the OS. And it will run very hot. The Xen hypervisor (incl. XenServer, XCP-NG) is very resource efficient and with Linux guests (PV or PVHVM), it will run very smoothly. The same applies to KVM. My FX-6300 box

The internal DNS is NOT supporting round robin. As Rowland said use Bind9 Am 19.09.18 um 22:36 schrieb Kris Lou via samba: > Hi all, > > I seem to have run into a case where my DC's aren't being round-robin'ed by > DNS. I've got 3 DC's using Internal DNS, but every time I ping mydomain.com > and check the results (ipconfig /displaydns), it's always in the

Is DC4 listed in in an A record for your mycompany.com? Do logs show that it's answering requests during the course of a normal workday? If so ... time to simulate DC3 failure, I guess. Kris Lou klou at themusiclink.net On Tue, Feb 11, 2020 at 5:25 AM Paul Littlefield <info at paully.co.uk> wrote: > On 03/02/2020 18:49, Kris Lou via samba wrote: > > > > From windows:

The other thing is NTLMv2, also required by default in modern Samba versions. Andrew Bartlett On Wed, 2020-09-09 at 15:39 -0700, Kris Lou via samba wrote: > I've found that some embedded devices have older CIFS clients, which > can > only talk over SMB1. So, you can adjust your server to allow it, or > look > for another file transport. > > Kris Lou > klou at

Just be aware that using FTP is a bit like using telnet because you can't talk a modern version of SSH. It might be more compatible but it is just because everyone expects it to be totally insecure... Andrew Bartlett On Wed, 2020-09-09 at 16:35 -0700, Peter Pollock via samba wrote: > You're geniuses one and all! > > That looks to have fixed the problem! > > At a later

Perhaps try http://wing-repo.net/ for CentOS rpms? The readme is out of date -- inspecting the repo at http://wing-repo.net/wing will find 4.6, 4.7 (in extras), 4.8rc3. Kris Lou klou at themusiclink.net On Wed, Feb 21, 2018 at 8:27 PM, denis.shigapov via samba < samba at lists.samba.org> wrote: > We have the standard centos. > I have recompiled packages from Fedora, as well as all

Hi all, I seem to have run into a case where my DC's aren't being round-robin'ed by DNS. I've got 3 DC's using Internal DNS, but every time I ping mydomain.com and check the results (ipconfig /displaydns), it's always in the same order. The same order appears when I query the DC's directly, individually: # nslookup mydomain.com 172.23.51.5 Server:

Hai, I have/can recreate a build with this enable, but these would not make it into my repo. (yet) This is because i can not test the spotlight/tracker ( and/or TimeMachine ) settings. So.. There is the link with samba 4.6.7 builded for debian Jessie with spotlight enabled. Not signed, only amd64 arch. https://downloads.van-belle.nl/samba4/samba-spotlight-enabled.tar.gz Included :

Hi Kris, The LDAP is in the new Samba4 box. We need to make sure the setup first fine before migrating to AD Regards, Praveen Ghimire -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Kris Lou via samba Sent: Friday, 10 August 2018 3:16 PM To: samba at lists.samba.org Subject: Re: [Samba] LDAP SSL Why don't you import your LDAP database to

piggybacking on the "Syncing Sysvol" thread ... I had thought that the conventional wisdom was that ntacl sysvolreset should be mostly avoided once relative stability achieved and additional GPO's created. https://wiki.samba.org/index.php/Sysvolreset Has this changed recently? Kris Lou klou at themusiclink.net

You're geniuses one and all! That looks to have fixed the problem! At a later date I'll try to work out how to do it via ftp so I can avoid the smb1 protocol altogether, but for now I have a working solution so THANK YOU! On Wed, Sep 9, 2020, 3:45 PM Andrew Bartlett via samba < samba at lists.samba.org> wrote: > The other thing is NTLMv2, also required by default in modern

There are basically 3 ways: * dsconfigad (https://gist.github.com/bzerangue/6886182) * via Configuration Profile * via GUI, which you've found There's also a toggle "Allow Network Users to Log in" via System Prefs -> Users -> Login Options However ... * Network Homes is difficult (at best) * Changing passwords on the DC does not automatically refresh the local