similar to: samba AD problem after re-join domain

On 10/12/2020 4:06 AM, Rowland penny via samba wrote: > On 12/10/2020 02:54, Jason Keltz via samba wrote: >> I've been working on a Samba AD setup with a bunch of test machines - >> the one DC, and a bunch of clients. Last night, I ended up switching >> the name of the test machines temporarily (except the DC), and >> re-joining the domain (that's for another

On 12/10/2020 16:11, Jason Keltz wrote: > >> Hi Rowland, >> >> I did not leave the domain, but I did delete the entry by either the >> Windows AD tool or "samba-tool computer delete" option.? I can't >> remember which one at this point.? I think that clears up all the >> bits.? Is that correct?? On the local host, I also deleted the >>

Hello Mailing List! I've got a few random issues with a Samba installation on a Netgear Ready Nas and I was wondering whether any clever so and so could explain what it means. Log entry [2010/04/13 15:40:17, 1] libads/kerberos.c:130(smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt) no krb5_error [2010/04/13 15:40:17, 1] libads/authdata.c:401(kerberos_return_pac) kinit failed for

Samba4-winbind (sernet-samba-4.0.9) on RHEL 6.4 dumps core on password authentication for a domain user (su/sudo), and so domain password authentication fails.? The machine is a standalone server in a Windows AD (2008R2) domain. PuTTY logins using GSSAPI work fine, kdestroy/kinit succeeds with AD password, but su'ing to the userid from a puttty session fails. The issue seems to be related to

I'm trying to put my Samba Server in AD Win2008, as I did in the past with Win2003. I'm using smbd Version 3.2.5, winbindd Version 3.2.5, MIT Kerberos 1.6.1-1 and ntpdate synchronized with AD, I follow this howto http://wiki.samba.org/index.php/Samba_%26_Active_Directory and this https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto All my tests demonstrate the successful when I

Hi, I recently upgraded my servers from 3.0.28 to 3.0.31 trying to solve the winbind issue previously reported (Bug# 5551) but the issue is still happening in my servers. I have an ftp server (vsftpd), configured to use pam_winbind with krb5_auth and I see some random disconnects and my users cant login. My samba servers are member of a Windows 2003 domain. The relevant lines on my

Hello, I have an issue as stated in topic. My samba 4.8.3 file server, which is AD member frequently shows winbind errors (pasted below). From user perspective it seems to work fine, but I'm worried that I have something misconfigured and in the long run, I might run into some errors. My AD DC are running on samba 4.9.x (two of them), compiled from source with BIND as DNS backend (running on

Hello, I have a customer that complains about slow AD authentication when accessing the share, eventually succeed (Samba is a DC memer) In the logs I can see the following errors: [2020/02/24 14:11:16.775884,? 1] ../source3/libads/ldap_utils.c:93(ads_do_search_retry_internal) ? Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT [2020/02/24 14:11:16.775902,? 3]

On 04/05/15 17:03, Daniel Carrasco Mar?n wrote: > Hi, > > Just a moments ago i've sent a message to other user saying that I've a > working server with CUPS authentication using AD groups. Well, that > authentication is not working anymore and i've not changed anything... > > The thursday I was configuring the server to allow the management of cups > with AD

Everyone, Here is a challenge for all of you samba experts! Lately I have been seeing a problem where winbind is not correctly identifying a user as a member of a group he most certainly belong to. This is with a Domain Local group so I know samba should support it. Users access a HTTPS (SSL) webpage that is secured by a Domain Local group. Sometimes they get in,

On 7/28/2020 4:11 PM, Jason Keltz wrote: > > On 7/28/2020 3:59 PM, Jason Keltz via samba wrote: >> I'm experimenting with smb + winbind. >> >> My host is joined to AD and I can login to my host fine using my AD >> credentials via SSH.?? The only issue is that I don't get a Kerberos >> ticket generated. >> >> In

On 10/12/2020 10:36 AM, Jason Keltz wrote: > > On 10/12/2020 4:06 AM, Rowland penny via samba wrote: >> On 12/10/2020 02:54, Jason Keltz via samba wrote: >>> I've been working on a Samba AD setup with a bunch of test machines >>> - the one DC, and a bunch of clients. Last night, I ended up >>> switching the name of the test machines temporarily (except

On Thu, 19 Oct 2023 15:34:46 -0400 Jason Keltz via samba <samba at lists.samba.org> wrote: > Hi. > > I'm running the latest Samba 4.18 on our dc (Linux - Rocky 8.8), and > the clients are running the latest 4.17 (Linux - Rocky 8.8) to be > upgraded to 4.18 soon. > > I've noticed an issue for awhile that is really quite strange and > wonder if anyone has any

Dear List! I have the problem described at http://lists.samba.org/archive/samba/2008-February/138451.html It is materialized after an upgrade of samba/winbind. Everything was working before. I could not find the solution neither on the net, nor from people originally having the problem, so here I am. This problem is a showstopper for me. (I can login by changing pam_winbind to pam_krb5, but this

Hi! The problem lies in the "winbind separator" settings. If I use winbind separator = \\ everything goes well. I believe this is due to a bug. As I don't want to register to yet another bugzilla, please someone issue the report there. Explanation: winbindd_raw_kerberos_login uses parse_domain_user to generate the kerberos principal from state->request.data.auth.user at this

Hi, I'm getting below error with "fillup_password_policy" while authenticating users from default domain. [2014/09/30 03:15:26, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host dev003.namdev.myserv.net returned 16 bytes. [2014/09/30 03:15:26, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_QueryDomainInfo: struct samr_QueryDomainInfo

On 12/04/2017 02:15 PM, Rowland Penny via samba wrote: > Possibly, if, by using the old config, Samba is ignoring the 'idmap > config DOMAIN' lines and putting everything into the '*' domain, then > you may (probably would) have more than your original set up allowed. > If this fixes it, you have found another bug ;-) > It should work with the old lines. I now

All, After upgrading to samba 3.0.30 on gentoo amd64 because of my recent best friend CVE-2008-1105 My winbind daemon is 'hanging up', and refusing to respond to pings after a few minutes of activity. Wbinfo -u, getent passwd all work successfully, then after a bit wbinfo -p just tells me winbind dies. I have 3.0.30/winbind on another machine, also amd64 that is working.... So

2015-05-04 18:16 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 04/05/15 17:03, Daniel Carrasco Mar?n wrote: > >> Hi, >> >> Just a moments ago i've sent a message to other user saying that I've a >> working server with CUPS authentication using AD groups. Well, that >> authentication is not working anymore and i've not changed

Hi, Just a moments ago i've sent a message to other user saying that I've a working server with CUPS authentication using AD groups. Well, that authentication is not working anymore and i've not changed anything... The thursday I was configuring the server to allow the management of cups with AD groups and was working perfect. After that i've added some printer alias to samba