similar to: password server not sending authentication requests to a specified DC

Hi, I am running samba/winbind 4.2.14 on Debian 8 which is joined to an Active Directory and would like to know if you have any idea with my issue. In my case, ntlm authentification is enabled in squid (proxy). Here is the problem that I am facing : "wbinfo -t" takes sometimes more than 30 secondes to display the result. For some reason, the server loses it's connection to the

Hi Under what conditon does samba switch between domain controllers ? Are there any special conditions or situations in which samba decides to use  "DC B" rather than  "DC A" ? In my case samba switches very often. Thanks, Michel

Our goal is to have a particular DC which will be used by our proxy for user authentication. We tried to use only the required DC as a nameserver but that doesn't work, queries are still sent to other DCs. Michel

On 15/05/2019 09:08, LOKO MESO Michel wrote: > Yes, our DCs are equal but we added a new one that will only be used > by the server where samba is installed. This is where it gets difficult, I get the feeling that the original DC's are Windows DC's, not that this matters. By default, All domain members (including DC's) are in the 'Default-First-Site-Name' site and

On Thu, 14 Feb 2019 12:04:06 +0100 LOKO MESO Michel <mmeso at olfeo.com> wrote: > Here is my smb.conf : > > [global] > workgroup = MY > netbios name = sd01 > realm = my.domain > server string = Olfeo Samba Server > log file = /var/log/samba/%m.log > max log size = 50 > security = ADS > encrypt passwords = yes > ;  smb passwd file = /etc/samba/smbpasswd

On Thu, 14 Feb 2019 13:36:43 +0100 LOKO MESO Michel <mmeso at olfeo.com> wrote: > In my case samba is not a domain controller and the server is joined > to an Active Directory. > Users don't need to login locally. > > Are the 'idmap config' not useful with an Active Directory ? Quite the contrary, they are mandatory, just because your users don't login

On Fri, 15 Feb 2019 10:00:12 +0100 LOKO MESO Michel <mmeso at olfeo.com> wrote: > Thank you for your response. > > My server (debian) is joined to an AD and I'm trying to understand > how the communication between the two servers works. > > Does winbind check  the response time of the DCs before switching to > the  fastest ? Is it possible to specify which DC

Hello, I would be very grateful if someone could give me a hand with my split plot design problems. So here is my design : I am studying the crossed-effects of water (wet/dry) and mowing (mowed/not-mowed = nm) on plant height (PH) within 2 types of plant communities (Xerobromion and Mesobromion) : - Within each type of communities, I have localised 4 blocks - In each block, I have defined

Hello everybody! I've got a network with a working Windows2000 Server (acting as a file server and being responsible for user authentification) and some Win2000 Professional Clients. I want to do the following: I want to integrate other Workstations to the existing Domain and I want to integrate a Linux computer. Therefor I want to use Samba to share disk space with the Win Clients. But there

Hi ! We are planing on deploying an ldap master and replica to serve as our new authentication server for our soon to be RedHat cluster. But, we need to be able to function if the master is down for whatever reason. So, I tried to specify 2 servers in the setup-authentification servername section, separated by a comma, but it doesn't seem to work. So, is it possible to specifying 2 ldap

Hi, I'm trying to set up a squid with ntlm authentification, and as I follow the instructions I read in the squid FAQ I run into this problem. When I try to do a ``wbinfo -a <domain>\\<user>%<passwd>'' the process tells me that the authentification did not succeded (both, plaintext passwords authentification and challenge/response password authentification). This

Hello, thanks for the tips on updating packages for 1.8.0. The updating is a real problem for me, since I've to do it sort of manually using my web-browser or wget. I'm behind a firewall that requires http/ftp authentification (username and passwd) for every request it sends to a server outside our intranet. Therefore all the nice tools for automatic updating (cran, cpan ...) don't

Hi, today we came across the idea of adding an external authentification- module for listening to icecast2. There have recently been talks with artists and music labels that they would like to receive "a small fee" per listener to e.g. a concert streamed live over the internet. What do you think of adding an external authentification-module so that the user could listen to a stream

Hello, I've a samba 3.0.2a on a mandrake 9.2 with double authentification. A local authentification for users not on my domain and AD authentification for users on my domain. AD where on two win 2k servers. One of these server was moved on win 2003 server and then the AD authentification don't work any more. Here is my smb.conf file. getent passwd give only local users [global]

  Hi,    it there  any way how to look into samba ldap in the same way I can look into OpenLdap via LDAPAdmin, ldap tools etc, when I know OpenLDAP "root" dn and password? Is there such "root" user for Samba AD LDAP?    We have a lot of scripts based on "ldapsearch" (without authentification) and "ldapmodify" (with ldap authentification). It would be very

---------- Původní e-mail ---------- Od: Rowland Penny via samba <samba at lists.samba.org> Komu: samba at lists.samba.org Datum: 27. 6. 2018 11:49:38 Předmět: Re: [Samba] AD LDAP "On Wed, 27 Jun 2018 11:31:15 +0200 (CEST) Michal via samba <samba at lists.samba.org> wrote: >   Hi, >   >  it there  any way how to look into samba ldap in the same way I can > look

Hi, I'm using RHEL4 and since the dovecot RPM is present in the main repository, I'm thinking about switching from courier-imap (with whom I've got trouble to update) to Dovecot. Here are two questions about Dovecot (google didn't answer me): 1. Is it possible for dovecot to use the bind mecanism against ldap for authentification purpose. My main concern is to avoid the

hi all, after havong some other trouble with my server i finally managed to recompile and install dovecot. installed it in /usr/local (the dafault). below u see a dump of my config file. i want to use "normal" shadow passwords for authentification. i adjustet the pathes from /usr/ to /usr/local/. when i login with outlook express 4 example i get the error: unsupported authentification

Hi, I'm looking a wiki or share experience for replace NIS authentication by an existing Active directory Server (W2003). The problem is on the management of id and gid. How to move 1000 actual NIS users to AD ? How to keep the same id and gid for this 1000 users ? What's happen with nfs linux server and acess with gid and/id ? Use the same user/password for linux and Windows clients

Hi, I'v been googling around for information using a samba server as authentification and fileserver for mac os x clients. At the moment I have all useraccounts and (home-)shares configured on the samba server and I can manually connect to the server from the os x clients. My Questions: Has someone a how to configure a loginscript for mounting the samba shares? Or has someone a how to