similar to: Samba 4.10.13-1 as a domain member, AIX 7100-05-05

Please disregard unless this conclusion is wrong. We would be running in AD mode, not NT4 mode with Server 2016. Regards, Bob Wyatt From: Bob Wyatt <bwyatt_sub at comcast.net> Sent: Tuesday, April 21, 2020 4:32 PM To: 'sambalist' <samba at lists.samba.org> Subject: Samba 4.10.13-1 as a domain member, AIX 7100-05-05 In perusing Red Hat manuals for a

Posted some time ago on 4.6 - updated it to 4.10.13-1 as released by IBM. Added a Kerberos configuration file, updated smb.conf, changed the startup order to nmbd first, winbindd next, then smbd. Now nmbd and smbd start, while winbindd does not. Content from log.winbindd: [2020/04/18 00:00:17.100243, 0] ../../source3/winbindd/winbindd.c:1731(main) winbindd version 4.10.13 started.

Posted some time ago on 4.6 - updated it to 4.10.13-1 as released by IBM. Added a Kerberos configuration file, updated smb.conf, changed the startup order to nmbd first, winbindd next, then smbd. Now nmbd and smbd start, while winbindd does not. Content from log.winbindd: [2020/04/18 00:00:17.100243, 0] ../../source3/winbindd/winbindd.c:1731(main) winbindd version 4.10.13 started.

Sorry... A couple more questions... I've installed krb5-libs and krb-workstation... this is all I need? I ask because the krb5 config file was not created on the system... One was "installed" to /opt/freeware/etc/krb5.conf, which could be copied over... Do I need to install samba-winbind-krb5-locator? Thank you for everything! Regards, Bob Wyatt -----Original Message----- From:

Thanks to you and Louis for your guidance. I really apologize for my lack of knowledge of AD and Samba; and I appreciate your patience and willingness to help. And I apologize for not trimming the reply - don't know how much to retain... The referenced document seems to be leveraging domain services that we're not using. We are only using AD user authentication to access shares on AIX. No

Thanks again for the continued help... Current thinking is using rid for the backend does not place any new administrative functions on the staff - agree? Begs questions of what is being written in smbpasswd, and do we have administrative work on AIX? Such as adding users and a group or two in the range specified for idmap? A mapping "table"? If rid is hands-off administration,

In some spare time, been trying to get Samba 4.10.6-1 working on AIX. Several earlier posts handled by Louis and Rowland. Which were much appreciated and beneficial. Using this stripped (leaving comments out of it) GLOBALS section of smb.conf: [global] workgroup = boost realm = BOOST.COM server string = Samba Server Version %v interfaces = lo eth0

Rowland, The wiki suggested doing "smbd -b | grep HAVE_LIBACL" and expecting to get back "HAVE_LIBACL". This is not the case on our IBM system with 4.10.6. The current version from IBM is 4.10.13 - considering upgrading in the hopes "HAVE_LIBACL" is present if I really need it. On the other hand, "smbd -b" does report that smbd was built with vfs_aixacl

I'm installing Samba 4.10.6.1 on an AIX 7.1 system. I have to use the IBM variant because of their SSL package, or so I think. I'm down to one requisite needed for samba-common-4.10.6-1. Which is libldb-key-value-samba4.so. If it is available on their Toolbox site, I can't find which library package I need to get it. I tried yum on CentOS 6 to get a clue, no such luck. I

The below Globals section is reporting some testparm failures that don't make sense to me. Perhaps someone could shine a light for me? This is a new installation - from 3.6.23 to 4.10.6-1. Necessitated by a Windows Server 2016 DC being installed. The testparm command, when run, reports the following error(s): # testparm Load smb config files from /etc/samba/smb.conf Loaded

Rowland, If you were up for another hint at rid versus ad... I'd like to understand a bit more. With rid, I map the administrator to root only... no mapping of users in AIX. How does Samba figure out that bobw at mydomain.com should use the samba user ID bobwsmb? If I use ad, I would use rfc2307 attributes to address that (I think). It seems more "specific" to use ad, but

Upgraded an AIX Server from AIX 5.3 TL3 with Samba 2.2.7 to AIX 7.1 TL3 with 3.3.12. Client uses AD authentication. Upgrade did not change smb.passwd or smb.conf. Windows users trying to mount a share are presented a request for their credentials; whether they supply the AD or AIX credentials, the access is denied - "Logon failure: unknown user name or bad password." The smbd and

I know it's an old release, and my apologies for wasting anyone's time. I've been asked about an older version of AIX 7.1 with Samba 3.6.23 installed. The requestor is moving to a Windows Server 2012 R2 domain. They want AIX/Samba 3.6.23 to be a domain member, using the 2012 R2 AD to authenticate users to access Samba shares on the AIX server. This is the way it's working

My apologies (again!) for asking about this old, venerable release. The client is upgrading to 4.10 or 4.11 in early December. The AIX server was joined to a functional Windows 2000 domain in 2015. The AD server has since been upgraded to functional Windows Server 2003 sometime since. They have 2 AD servers - primary is Joe, secondary is Jane. Joe has encountered severe Registry issues

Has anyone successfully installed and configured Samba as a domain member from the various RPM's offered from the IBM Toolbox website? Can you offer any advice for getting it up and running? Any advice would be greatly appreciated. Here was my last post latish Friday night US Eastern Time. ====================== Posted some time ago on 4.6 - updated it to 4.10.13-1 as released by IBM.

On 26/03/2020 20:08, Bob Wyatt wrote: > From: Rowland penny <rpenny at samba.org> > Sent: Saturday, February 29, 2020 8:48 AM > To: sambalist <samba at lists.samba.org> > Subject: Re: [Samba] net ADS join MEMBER > > On 28/02/2020 23:22, Bob Wyatt wrote: >> Hi, Rowland, >> >> Joined the domain successfully. >> Winbindd and smbd started without

On 30/10/2019 17:49, Bob Wyatt wrote: > -----Original Message----- > From: Rowland penny <rpenny at samba.org> > Sent: Wednesday, October 30, 2019 4:06 AM > To: samba at lists.samba.org > Subject: Re: [Samba] Samba 3.6.23 (IBM version), Windows AD at the functional 2003 level > > On 29/10/2019 22:47, Bob Wyatt via samba wrote: >> My apologies (again!) for asking

Hi, I have a AIX 5.3 machine with Samba 3.0.24c joined into one Windows 2003 ADS server OK. I can request basic information, user lookup, domain lookup(wbinfo, id, net groupmap). When I want to acces the share \\node05\brom from one Windows station I receive a popup window password. In the log of the samba for that machine I found: [2007/04/27 10:48:27, 2] auth/auth.c:check_ntlm_password(319)

We have several Samba servers, and a few running PVCS . The group that manages, supports PVCS (Version 7.5.1 ) is having a problem deleting files from Samba shares on an AIX Server version 5.2 They do not have a similar problem on 2 of our Solaris Servers, 2.8 The difference we see between the AIX server and the 2 Solaris Servers, is the version of Samba. On The Solaris Servers Samba is version

I have 2 AIX systems that run Samba. We are currently on an NT4 domain and moving to Active directory. I am trying to find out what all would be needed to make that transition. The only authenification is for users connecting to their shares. I read one site via Google that states I need to create a user (Rocky) on both Samba and the AD server with different passwords but this does not seem