similar to: getent doesn't works

Per chi vuole guardare il log generato aggiungo una piccola legenda: ZIZI (192.168.70.3) ? il server samba, win7pro-v01 (192.168.64.12) ? il client win7; inoltre il dominio AD si chiama CSATEST mentre il dominio NT (anche se non compare nei logs) si chiama DOMINIOCSA. Piviul

Hi all, I have a problem in libpam-winbind: offline logon doesn't seems to work. The first version of samba in which I have found the problem is 4.1 and the last is 4.7 but I fear that newer version are affected too. Hopefully there is a workaround: you have to remove krb5_ccache_type=FILE from /etc/pam.d/common-auth I have opened a bug report[¹] where you can find more details. Any one

Rowland penny via samba ha scritto il 24/08/20 alle 17:39: > [...] > As far as I am aware, SMBv1 is still readily available on Win7, but from > Samba 4.11.0, it is now disabled on Samba, so if you must use SMBv1, you > will need to set: > > client min protocol = NT1 > > server min protocol = NT1 > > in smb.conf ok, the samba server I'm using as test has

Il 16/02/19 18:15, Rowland Penny via samba ha scritto: > On Thu, 14 Feb 2019 09:30:00 +0100 > [...] > Hi Piviul, I have read that bug report and sorry but your smb.conf is > incorrect. > > try this one: > > [global] > workgroup = DOMINIOCSA > security = ADS from man smb.conf: SECURITY = ADS In this mode, Samba will act as a domain member in an ADS realm.

Rowland penny via samba ha scritto il 25/08/20 alle 18:20: > [...] > Even though your users may have the same username in AD as in the > NT4-style domain, they are different users, so a few thoughts. You have > 'map to guest = bad user', so I take it you must have 'guest ok = yes' > set in the shares (you haven't shown us the shares), in effect there is no

Mandi! Rowland penny via samba In chel di` si favelave... > You have 'allow trusted domains = No' in 'global' and from 'man smb.conf': I've had not noted that. I can confirm that my working setup had NOT 'allow trusted domains = No'. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia''

Mandi! Rowland penny via samba In chel di` si favelave... > Even though your users may have the same username in AD as in the NT4-style > domain, they are different users, so a few thoughts. You have 'map to guest > = bad user', so I take it you must have 'guest ok = yes' set in the shares > (you haven't shown us the shares), so try changing 'bad user' to

Marco Gaiarin via samba ha scritto il 03/11/20 alle 16:22: > Mandi! Piviul via samba > In chel di` si favelave... > >> smb ports parameter; in effect in man smb.conf I can read: This parameter is >> not available when Samba listens on port 445. There is no way yo have the >> client name? All %m, %M, %I contains ip address... > > No and yes. > > >

Marco Gaiarin via samba ha scritto il 25/08/20 alle 18:53: > [...] >> The only other thing I can think of at the moment is to remove >> 'winbind use default domain = yes' > > It was a try, i think in NT mode don't bother at all. on my samba server with 'winbind use default domain" set to yes dominioNT\ is removed from users and groups names... >

On 16/11/2020 10:34, Piviul via samba wrote: > Piviul via samba ha scritto il 04/11/20 alle 14:15: >> [...] >> Someone knows why %J variable substitution is performed before the >> print command variable substitution? > I've found that on debian bullseye (samba version 4.12.5) the %J macro > is expanded correctly so I argue that it's a bug solved on recent

Il 14/02/19 19:25, Data Control Systems - Mike Elkevizth via samba ha scritto: > I experienced this same issue (with the default packages from Ubuntu) and > switched to using sssd for all my Linux clients specifically because of > this issue. thanks Mike, have you tried the workaround I suggest i.e. remove krb5_ccache_type=FILE from the winbind row of the file /etc/pam.d/common-auth?

On Thu, 14 Feb 2019 09:30:00 +0100 Piviul via samba <samba at lists.samba.org> wrote: > Hi all, I have a problem in libpam-winbind: offline logon doesn't > seems to work. The first version of samba in which I have found the > problem is 4.1 and the last is 4.7 but I fear that newer version are > affected too. Hopefully there is a workaround: you have to remove >

That is because.. Your not sending the DOMAIN\username but COMPUTER\username, so access denied. I know its something like that in the backgrond, but i dont code "Windows" ;-) So, this is the only part i use: net use g: \\server.fqdn.tld\share /persistent:yes /user:NT4DOM\%username% net use k: \\server.fqdn.tld\share /persistent:yes /user:ADDOM\%username% Stop using :

On 25/08/2020 08:28, Piviul via samba wrote: > Rowland penny via samba ha scritto il 24/08/20 alle 17:39: >> [...] >> As far as I am aware, SMBv1 is still readily available on Win7, but >> from Samba 4.11.0, it is now disabled on Samba, so if you must use >> SMBv1, you will need to set: >> >> client min protocol = NT1 >> >> server min protocol =

Rowland penny via samba ha scritto il 25/08/20 alle 12:21: > [...] > Try adding 'nltm auth = yes' to the smb.conf, it defaulted to 'no' at 4.5.0 thanks Rowland I have tried to change ntlm auth to yes but AD users continue to have problems connecting to the shares... Piviul

Rowland penny via samba ha scritto il 27/08/20 alle 16:43: > [...] > Netbios is intrinsically tied to SMBv1 and? LLMNR (Link-Local Multicast > Name Resolution) is also connected in a way, it allows name resolutions > without a nameserver. So, if you are using it, I personally wouldn't, > ever heard of MITM ? Just to understand a little more... NetBIOS with a wins server

Version 4.0.6-GIT-4bebda4 Hi I have sssd up and running. It works fine except that getent only returns domain users if I specify the object e.g. getent passwd and getent group return only local users but getent passwd steve2 steve2:*:3000034:20513:steve2:/home/users/steve2:/bin/bash and getent group Domain\ Users Domain Users:*:20513: work fine. /etc/nsswitch.conf passwd: compat sss group:

On 26/08/2020 08:07, Piviul via samba wrote: > I've send this message yesterday but I've not received it from > samba at lists.samba.org: I try to send it again... > > Piviul > > -------- Messaggio Inoltrato -------- > Oggetto: Re: [Samba] accessing foreign AD users to NT domain > Data: Tue, 25 Aug 2020 13:05:35 +0200 > Mittente: Piviul <piviul at

On 26/08/2020 09:26, Piviul via samba wrote: > Rowland penny via samba ha scritto il 25/08/20 alle 18:20: >> [...] >> Even though your users may have the same username in AD as in the >> NT4-style domain, they are different users, so a few thoughts. You >> have 'map to guest = bad user', so I take it you must have 'guest ok >> = yes' set in the

On Mon, 1 Oct 2018 19:28:29 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi Louis and Rowland, > > I'm just reporting back on this, in case it may help somebody else. > > Getting a working getent (or id) under the current version of CentOS > with winbind just doesn't seems possible. I haven't got a clue where > the problem is. I have