similar to: samba domain member strange behavior lost users and shares

On 10.01.20 10:30, Rowland penny via samba wrote: > On 10/01/2020 09:01, basti via samba wrote: >> Hello, >> my samba domain member file server do some strange thinks. >> >> First of all Version 4.9.5-Debian and smb.conf is this: >> >> [global] >> ??? workgroup = SAMDOM >> ??? security = ADS >> ??? realm = SAMDOM.EXAMPLE.COM >>

Hello, i try to setup a linux laptop for homeoffice with login for ad users. The last few days it work like expected. today wbinfo -u return no user, getent passwd <username> also. wbinfo -a "SAMDOM\user" Enter SAMDOM\user's password: plaintext password authentication succeeded Enter SAMDOM\user's password: challenge/response password authentication succeeded wbinfo -D

On 10.07.20 12:25, Rowland penny via samba wrote: > On 10/07/2020 11:10, basti via samba wrote: >> Hello, >> i try to setup a linux laptop for homeoffice with login for ad users. >> The last few days it work like expected. >> >> today wbinfo -u return no user, getent passwd <username> also. >> >> wbinfo -a "SAMDOM\user" >> Enter

On 10.07.20 12:39, Rowland penny via samba wrote: >>> What OS and version is this ? >> debian 10 >>> What Samba version ? >> 2:4.9.5+dfsg-5+deb10u1 >> >> only winbind installed. > So you only require authentication > > Have you tried restarting winbind ? yes, restart winbind, network and the hole system does not help I have start winbind in

On 10.07.20 13:01, Rowland penny via samba wrote: > On 10/07/2020 11:45, basti via samba wrote: >> >> On 10.07.20 12:39, Rowland penny via samba wrote: >> >>>>> What OS and version is this ? >>>> debian 10 >>>>> What Samba version ? >>>> 2:4.9.5+dfsg-5+deb10u1 >>>> >>>> only winbind installed.

cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. passwd: files winbind group: files winbind shadow: files gshadow: files hosts:

> I think all is clean fine. You "think"..?? .. You must verify this ! Asumption is the mother of all fuckups an old boss of me always said.. And he is right. Run : samba-tool fsmo show And verify both servers. https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record#The_objectGUID_CNAME_Record And go through :

Hello everybody, I been at this for more then a week and went through the archives and wiki but can not get it to work. I been trying to follow these steps: https://wiki.samba.org/index.php/User_Home_Folders wanted behavior: samba-tool user create jdoe pass01 --login-shell /bin/bash --given-name "John Doe" --home-drive=H --home-directory="\\\SAMBA01\users\jdoe

hello, is there a way to map usergroups via winbind? I need 'getent passwd': testuser:x:7072:513::/home/users/testuser:/bin/bash but I get: testuser:x:7072:30000::/home/users/testuser:/bin/bash gidNumber is set to 513 in samba-ldap. cat /etc/nsswitch.conf passwd: compat winbind group: compat winbind cat /etc/samba/smb.conf [global] security = ADS

https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html#libdefaults Kerberos ticket_lifetime it default 1 day. What does the auth.log show? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > basti via samba > Verzonden: vrijdag 10 juli 2020 12:29 > Aan: samba at lists.samba.org >

root at dc1:~# cat /tmp/samba-debug-info.txt Collected config --- 2020-09-11-12:35 ----------- Hostname: dc1 DNS Domain: samdom.example.com FQDN: dc1.samdom.example.com ipaddress: 193.137.1.133 ----------- Kerberos SRV _kerberos._tcp.samdom.example.com record verified ok, sample output: Server: 193.137.1.133 Address: 193.137.1.133#53 _kerberos._tcp.samdom.example.com service = 0 100 88

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All

On 10/07/2020 11:31, basti via samba wrote: > > On 10.07.20 12:25, Rowland penny via samba wrote: >> On 10/07/2020 11:10, basti via samba wrote: >>> Hello, >>> i try to setup a linux laptop for homeoffice with login for ad users. >>> The last few days it work like expected. >>> >>> today wbinfo -u return no user, getent passwd

Hello, on my samba AD i have set homedir to /home/users/<username>. Now i have setup a linux client with pam-winbind and nss-winbind. getent passwd <username> show /home/users/<username> as home directory. And that's dir is create on login. Why it is use the path set on AD and not the path set in smb.conf ? grep home -r /etc/pam.d/ /etc/samba/smb.conf

Yes, the /etc/krb5.keytab file is created when the domain-join. I just noticed that it's not only after a reboot I have this problem. I lost the domain-join on my first SMB server, it has not been restarted. Note that I use Cluster Mode (CTDB), but the problem is the same when I remove the cluster configuration. Attached is the requested files. Thank you, Alexis. On 07/06/2016 09:43,

I put the usermapping but this does not solve the problem. I do not use libpam_winbind and libpam-krb5 because I did not need to log in server using domain accounts, it seems to me that this is not mandatory, you confirm ? Here are the permissions of the file /etc/krb5.keytab: root at smb1:/home/adminlocal# ls -l /etc/krb5.keytab -rw------- 1 root root 2312 Jun 7 14:44 /etc/krb5.keytab Avahi

I think I found my problem, when configuring my second domain controller, I have created by mistake a round robin DNS entry on "Forward Lookup Zones -> ad.samdom.local". I speak of round-robin because I have two fields A pointing to the same domain Now I'm lost, you have a second domain controller in failover? If so, could you give me your DNS configuration? I need information

OK, for now it seem to work. Server: dovecot.my.fqdn.com Security: STARTTLS Auth: Kerberos/GSSAPI Possible Problems: - Keytabfile (samba-tool delegation show dovecot\$) ? - IP as Servername - SSL/TLS Port 993 ? Maybe someone can complete the wiki with thunderbird settings? P.S. Roland kinit -V5 DOVECOTUSER at MY.FQDN.COM did also work I use the samba wiki, dont know why only export 3

I conducted many tests and I noticed that I lose the domain-join on SMB1 soon as I joined SMB2 in the domain. Step 1: SMB1 "net ads join -Uadministrator" -> OK Step 2: SMB1 "net ads testjoin" -> OK Step 3: SMB2 "net ads join -Uadministrator" -> OK Step 4: SMB2 "net ads testjoin" -> OK Step 5: SMB1 "net ads testjoin" ->

Hi, I tried samba 4.12.0 on our file server which is a domain member and exporting some shares. We're getting some strange errors on some shares since the update. Right after starting or restarting smbd everything is fine. After short while (seconds or a few minutes) users are getting errors when trying to access the shares, e.q. "Invalid Handle Error", "An unexpected