similar to: Samba as a domain member:

Hi, I followed the instructions in the section "Squid (transparent) Running on the Firewall" on http://www.shorewall.net/Shorewall_Squid_Usage.html to setup Squid transparently on a Linux gateway. My net is as follows: loc subnet --- fw Linux Gateway --- ADSL router 192.168.1.0/24 192.168.1.92 (eth1) WAN.WAN.WAN.2 (gw = WAN.WAN.WAN.WAN (eth0) 192.168.1.92) (gw =

Are shorewall-shell and shorewall-common required at compile time even if one only wishes to use shorewall-perl (4.0.9)? ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

Does anyone know of a script that can act as a "helper" for Shorewall''s dynamic blacklist capabilities? Briefly said, I''d like to know if someone already wrote a script/program that, e.g., parses log files (/var/log/messages, etc) and picks up for example all IP addresses that failed SSH login more than X times and then executes a command such as shorewall drop

In my peculiar setup I need my shorewall router to do one-to-one NAT with RFC1918 addresses. The "external" addresses are 10.215.0.0 and the internal addresses are 192.168.0.0. I can ping, vnc, http, smb from 10.215.144.48 to 10.215.145.237 which is 192.168.44.237 internally. >From 192.168.44.237 I can do http, rdp, ping to 10.215.0.0 hosts. So all seems fine except for the fact

Hello, I''m reading this guide on ipv6 (really just getting my "feet wet"): http://www.shorewall.net/6to4.htm In the section "Configuring IPv6 using my script" I can read that the IPv6 interfaces are: INTERFACES="eth2 eth4" and that correlates fine with the first diagram/figure. However, further down I read "You will notice that sit1, eth0 and eth2

Yes: # getent group GROUP group:x:17573: # getent group group2 group2:x:11010: # getent group GROUP3 group3:x:21178: # wbinfo --group-info GROUP group:x:17573: # wbinfo -n GROUP S-1-5-21-948789634-15155995-928725530-7573 SID_DOM_GROUP (2)

Debian, already 'root'. Isn't the objective to get a 'SAMDOMDomain Admins' group onto the member server? In the usual way to add any group to a linux box? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-03-10 06:57, Rowland Penny wrote: > On 10/03/15 11:48,

On 10/03/15 11:48, Bob of Donelson Trophy wrote: > > > Okay, so I tried a "Bob thing" and it made no difference. So, no comment > on that. However, I am learning. > > This is 'wbinfo -*' from my DC1: > > root at tdc01:~# wbinfo -u > Administrator > Guest > krbtgt > dns-tdc01 > dns-TDC02 > root at tdc01:~# wbinfo -g > Enterprise

I'm trying to use the txfax application based on spandsp in Asterisk 1.2. It seems to be working but I would need a way to reliably check whether the fax has been completely transferred or not. I'm using a mail2fax system (as with email2fax and .call files) but I can't seem to get it working. If I use "Application" and "Data" in the .call file, there doesn't

Sorry, "encrypt passwords" was added by mistake. I see it is deprecated now. In any case, even without removing it, I decided to remove the member from the domain and added it again as I saw other posts with similar issues. I ran a "net ads leave" followed by a "net ads join" again, and after the message that it had joined successfully, now wbinfo -t and the likes

OK, interesting debate, but I still can't convert to SID. I still get messages such as this one: AUTH-PAM: BACKGROUND: my_conv[0] query='Cannot convert group GROUP to sid, please contact your administrator to see if group GROUP is valid.' style=4 # wbinfo -t checking the trust secret for domain DOMAIN via RPC calls succeeded # wbinfo --ping-dc checking the NETLOGON for

I''m new to openvpn and maybe I should be asking on openvpn''s list... But I read the tutorial: http://www.shorewall.net/OPENVPN.html#id2452626 and saw the following: " On System A: ifconfig 192.168.99.1 192.168.99.2 " I don''t understand the reason for using these "virual" IPs. For instance, I configured openvpn on my peers so that the IPs on the

It's Gentoo Linux. System uname: Linux-5.4.38-gentoo-x86_64-x86_64-AMD_EPYC_7272_12-Core_Processor-with-gentoo-2.6 KiB Mem: 32746472 total, 27513712 free KiB Swap: 37005244 total, 37005244 free Timestamp of repository gentoo: Fri, 29 May 2020 00:45:01 +0000 Head commit of repository gentoo: 9e5f0b894af4ad7780998a137656d0835b73213e sh bash 5.0_p17 ld GNU ld (Gentoo 2.33.1 p2) 2.33.1

Nice call. It almost worked except for a small error in 'man pam_winbind' -- DOMAIN\\GROUP should actually be DOMAIN\GROUP in the pam.d file. Now, I'm a bit confused. The pam module 'pam_winbind' is from the Samba suite. OpenVPN is just passing on the authentication decision to Samba. However, I was expecting to just use the group name without the domain name since I have

OK for the DC. I noticed that converting users and groups to sid with the example below seems to work fine: # wbinfo -n DOMAIN\\user S-1-5-21-948789634-15155995-928725530-6864 SID_USER (1) # wbinfo -n DOMAIN\\group S-1-5-21-948789634-15155995-928725530-11178 SID_DOM_GROUP (2) However, applications using PAM and winbind seem to fail when trying to convert to sid. For instance, just to name one,

On 07/06/16 07:31, Alexis RIES wrote: > Hi, here it attached my smb.conf and Winbind debug log after reboot. > My OS is Debian Jessie and has a fixed ip. > > Thank you > > On 06/06/2016 22:05, Rowland penny wrote: >> On 06/06/16 14:52, Alexis RIES wrote: >>> Hello, >>> >>> After each reboot, my Samba AD member server lost domain join after

On 07/06/16 10:13, Alexis RIES wrote: > Yes, the /etc/krb5.keytab file is created when the domain-join. > > I just noticed that it's not only after a reboot I have this problem. > I lost the domain-join on my first SMB server, it has not been restarted. > > Note that I use Cluster Mode (CTDB), but the problem is the same when > I remove the cluster configuration. >

Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins

Yes, the /etc/krb5.keytab file is created when the domain-join. I just noticed that it's not only after a reboot I have this problem. I lost the domain-join on my first SMB server, it has not been restarted. Note that I use Cluster Mode (CTDB), but the problem is the same when I remove the cluster configuration. Attached is the requested files. Thank you, Alexis. On 07/06/2016 09:43,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have setup two domains (example1.net) and (example2.net). Then I created a trust, in two different ways (Yes, one after the other, not at the same time): 1. samba-tool domain trust create example2 --type=forest --direction=both - --create-location=both -U administrator at EXAMPLE2.NET 2. samba-tool domain trust create EXAMPLE2.NET