similar to: samba AD directory and PHP

My ldaptest.php works now. Can't tell the "missing link" so far ... but it seems it's connect via ldaps now (and reading users etc)

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: donderdag 27 februari 2020 11:35 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] samba AD directory and PHP > > Am 27.02.20 um 11:32 schrieb L.P.H. van Belle via samba: > > But your missing the important part. >

Am 27.02.20 um 11:32 schrieb L.P.H. van Belle via samba: > But your missing the important part. > > How ? > > Kerberos ? NTLM ? LDAP ? > > ;-) Ah ok Actually I want to use secure LDAP from a PHP docker container. So far no Kerberos involved as far as I see. (I have to dockerize a php app which is badly written ... and I want to clean up a bit, and let it bind

Am 21.02.19 um 15:49 schrieb L.P.H. van Belle via samba: > Or... > > Set the creator group option. > > [Daten] > comment = Daten > create mask = 3660 > directory mask = 3770 did so, they test now. thanks

> > Did you add your own CA to /etc/ssl/certs/ca-certificates.crt > > Per example look here : > > https://www.brightbox.com/blog/2014/03/04/add-cacert-ubuntu-debian/ > > Is that > > dcX:/var/lib/samba/private/tls/ca.pem If YOU created the CA.pem and all server use that one, then yes. Then you should deploy that to all servers and pc.s XCA is a handy tool to

Stefan, If everythig works now. Then keep it as is. Most probly it was the firewall that caused the problem. @Rowland, good point. Im everytime amazed with all the commands you know.. :-) And SID: S-1-5-21domain-513 = domain users. These are "Samba Sids" S-1-22-[1-2] 1 useres 2 groups And thats corect with wbinfo -g 10513 shows all groups. Greetz, Louis >

Am 21.02.19 um 19:19 schrieb Stefan G. Weichinger via samba: > Am 21.02.19 um 16:51 schrieb Stefan G. Weichinger via samba: >> Am 21.02.19 um 15:49 schrieb L.P.H. van Belle via samba: >>> Or... >>> >>> Set the creator group option. >>> >>> [Daten] >>> comment = Daten >>> create mask = 3660 >>> directory mask =

I expect the next "you should know" here. How do you handle administrative accounts in your samba/windows domains? I have to provide some accounts for the so-called admin users at the customer ... in some cases they learned the main admin pwd (yes, bad) and used it for installing this and that. Add their own users to group "domain admins"? I'd like to take away the main

Am 03.09.18 um 15:12 schrieb Robert Marcano via samba: > On 09/03/2018 04:10 AM, Stefan G. Weichinger via samba wrote: >> >> As I am learning docker lately I came to the idea of using a docker >> container as a "fallback" DC at sites where there is no budget (or >> understanding) for a 2nd physical DC. >> >> That 2nd DC *might* run as docker

Ok, new test. Besides that i dont like the python errors shown, this still looks good. So i dont know.. See below, i can not make it error. for x in 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ; do samba-tool dns add dc1.internal.dom.tld $x.249.10.in-addr.arpa 158 PTR host-test.extrazone.dom.tld ; done Record added successfully Record added successfully Record added successfully Record added

Good morning Stefan, Hmm, yes, i notice some things also with the debian 9.8 upgrade, that killed my kopano server. Was a long night yesterday. :-( but fixed. Ive done all my servers here and no samba problems. I do know of more problems with docker. There is a small difference, i dont know exact were, but i detected that on the kopano forum. Kopano builds it packages within docker, the

As I am learning docker lately I came to the idea of using a docker container as a "fallback" DC at sites where there is no budget (or understanding) for a 2nd physical DC. That 2nd DC *might* run as docker container alongside the DM/fileserver, right? OK, it should get a separate IP, I assume etc Aside from the details: does anyone here actually do that?

hai,   Please keep it mailing to the list, this way is shows up of others also. A workaround for disabling SMBv1, you can make your server less secure but thats not what i would do. Setting these to enable NTLM v1 again. lanman auth = yes ntlm auth = yes raw NTLMv2 auth = yes I think also this is more a question for the free raduis list, but i would to for a ldap(s) setup. just dont mixup

Hai, That bond0 interface, you might want to change that the interface name to bond1 Depending on the bonding settings, you might have hit a reserved name. I lots my docu on that but i know i configured a bond1 because bond0 didn work right. And then check these. wbinfo -pPt ( or wbinfo -p && wbinfo -P && wbinfo -t ) wbinfo --sids-to-unix-ids S-1-22-2-10513 wbinfo -D

Am 21.02.19 um 15:00 schrieb Rowland Penny via samba: > Apart from a missing line: > > idmap config arbeitsgruppe : schema_mode = rfc2307 > > There doesn't seem to be anything really wrong. Added, thanks. Since my last mail I tested more and we found that ACLs were missing wrong, so I applied an ACL to give group "domain users" rwx here. Is create mask still

But your missing the important part. How ? Kerberos ? NTLM ? LDAP ? ;-) Greetz, Lous > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: donderdag 27 februari 2020 11:25 > Aan: samba > Onderwerp: [Samba] samba AD directory and PHP > > > I try to access AD via php

Hi Stefan, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: dinsdag 19 februari 2019 10:43 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos > > Am 18.02.19 um 08:38 schrieb L.P.H. van Belle via samba: > > Goood morning Stefan, ( and

While I wait for upgrading 2 customers from 4.8.6 to 4.9.x (hesitating not to break things) and checking the list for Louis publishing the 4.8.7 stretch packages ... ;-) - thanks, Louis!! - I once again wonder how to optimize these updates and minimize the risk of breaking things. One thought is to add a test DC to my ADS/samba-domains, running in a docker container, testing the upgrade there and

Hi I am trying to authenticate my mail server with samba ad. The only problem is that I don?t get it working. root at dna:/data/CA/EasyRSA-v3.0.6# ldapsearch -x -h gaia.rompen.lokaal -D 'vmail' -W -b 'cn=users,dc=rompen,dc=lokaal' Enter LDAP Password: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. I can not read

Ok, we might have found something here. I created a small script, see below, easy to adapt. So, after running this i see the same problem as in : https://bugzilla.samba.org/show_bug.cgi?id=14268 If i do it manualy everything works fine. But if i "past the commands or run the script" Then i see this problem.. So im thinking here, the speed of adding is creating somekind or