similar to: Spotlight indexing with fscrawler for multiple shares

So I have two issues. 1) Using Samba 4.19.2 with spotlight and elasticsearch 8.10.3 doesn?t work. Errors: [2023/10/22 09:04:17, 0] ../../source3/rpc_server/mdssvc/mdssvc_es.c:755(mds_es_search_http_read_done) mds_es_search_http_read_done: json_loadb failed 2) Using Samba 4.19.2 with spotlight and elasticsearch 7.17.10 works. There is a bug where when the samba server is running and files

Hey Kees, fs2es-indexer is designed to be a lightweight alternative to FSCrawler. So no ... it doesnt do any content indexing or saves much of the metadata. As far as I understand it the OCR and other stuff makes FScrawler that big. And we dont need any of that - we just want to search for file names. BUT Im open for merge requests ;-) I currently getting away with a lot less complexity

Hi Alexander, I'm terribly sorry. We didnt have the "ntlm auth" parameter configured on the DCs at all. I added it and it just works. Thanks for your help. Now I just need to figure out how I can make WLAN-specific LDAP-Group authentication. e. g. production WLAN needs LDAP group "wlan_production" and management WLAN needs the "wlan_management" group. I

Hi Matthias, we?re using Debian Bullseye with the backports repo. So version is a mixture of - Samba version 4.17.3-Debian - Samba version 4.17.7-Debian We?ve installed it directly on the DC?s as well. In my opinion using "ntlm auth = yes? should be fine. Did you try using a simple RADIUS secret? In my experience long secrets or ones containing special characters don?t work very well. I

I can share my notes, we authenticate UniFi clients via Freeradius against Samba AD. We also check group membership which you might or might not need: ## 4 FreeRADIUS ### 4.1 Basics ```bash apt install freeradius freeradius-ldap freeradius-utils # create new DH-params openssl dhparam -out /etc/freeradius/3.0/certs/dh 2048 ``` ### 4.2 Configure Authentication - modify mschap to use winbind,

13.07.2023 19:17, Adi Kriegisch wrote: > Hi! > >> I was looking at the code this morning trying to figure out how to >> reject packet with lvl2 properly, - unfortunately I don't know samba >> well enough to be able to find the place "quickly" and I got distracted >> by other things. It was my first thought when someone posted the debug >> info

Hello Alexander, thanks Alexander for these configuration snippets. Which version of Samba are you using? Is this on debian bullseye? Is the FreeRADIUS server installed on a DC or on a Domain Member? (I just tested the latter). is "ntlm auth = yes" OK for the DCs and the domain member or does it have to be "mschapv2-and-ntlmv2-only" for all servers (DCs + Member)? It

Dear All, Well, this is very embarrassing.... It seems that running 'smbcontrol all reload-config' isn't sufficient for reloading the ntlm config parameters. I tried restarting the whole samba service on the DC my FR box was authenticating against (systemctl restart sernet-samba-ad) and my test laptop is now connected to the network on the correct VLAN. I apologise for wasting

Hello, yes sadly update 8.9 of elasticsearch broke the samba integration. Seems like 8.10 is still broken. Stay on 8.8 until this is fixed. Ive emailed Ralph B?hme of Sernet already, but hes got no time for it atm. Im not sure about the second part of your bug report though: > There is a bug where when the samba server is running and files are being indexed while samba is running finder

Hi, I'm running Samba Active Directory 4.16.9 with packages from Sernet. Domain members are Linux servers (Ubuntu 20.04, RHEL 8) with Sernet Samba 4.16.x. I'm getting crazy with group memberships syncing from AD to Linux members. It is completely random as when changes in AD group are visible in Linux OS (or more precise: winbind), it might take minutes, hours or days as when these

Hello Tim, Hello samba-people, is there an uptodate guide for authenticating via freeradius somewhere? I have some Ubiquiti APs plus a Cloud Key and I want to authenticate WLAN clients via WPA2-Enterprise instead of a (shared) PSK. It seems like https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory is missing some steps (basic setup of freeradius). Can you

On 29/06/2023 07:38, Ingo Asche via samba wrote: > Hi, > > there is some progress, even I would'nt call it that. At least they > admitted it's caused through some changes from their side. > > @Rowland: Remember that "old Samba method" part? > > This is their answer. I don't know what to make of it. Maybe someone > with more knowledge about the

Hi Louis, I used your excellent packages but also tried building from source. I?m trying to get Tracker working. Elasticsearch was simpler to get going but it doesn?t really suite the use case due to limitations in fscrawler. I actually created the mdssvc user but also tried directly under root once the dedicated user didn?t work. The problem might be somewhere in D-Bus configuration but I

Hi, Is anyone using Spotlight with Elasticsearch in production and what kind of tweaking have you had to do? Certain search types seem to work out of the box, but others not. Perhaps fscrawler and Elasticsearch need some customization that the wiki doesn?t mention. There also seems to be a difference in using the main search box in the Finder window or the more granular options below, even if

Hi Noel, As we discussed on the list, I busy getting the bits and pieces in place to be able to test your windows search work. I am running all my stuff on Debian Bullseye, with Samba code in 3 lxc-containers. Two are for the DCs, one is the fileserver. Everything is managed by Ansible code, I try to avoid manual changes to my environment(s) as much as possible. Generally manual changes are

Hallo, just my 2 cents: So Samba 4.12 works, but 4.13+ doesnt? Maybe you can use the same strategy here as used for Win XP or older OS: Setup an isolated (virtualized?) DC with samba 4.12 just for the synology to connect to? You could use firewalld/ufw rules to only allow traffic to the samba ports from one single source IP-adress (the synology) to limit the exposure... Just until synology

Howdy! Am 10/2/20 um 6:02 PM schrieb Perttu Aaltonen via samba: > I used your excellent packages but also tried building from source. I?m trying to get Tracker working. Elasticsearch was simpler to get going but it doesn?t really suite the use case due to limitations in fscrawler. hm, a customer is using this with good results on laaaaaaarge datasets. I had seen you mentioning problems in an

Hello samba-people, Ive upgraded our Debian Bullseye servers to Samba 4.18 (thanks to mjt's repositories) and zabbix-server refuses to start with a seg fault. Downgrading back to 4.17 (from bullseye-backports) fixes the issue. This happens with Zabbix Server 6.2.7, 6.2.8, 6.2.9, 6.4.0 and 6.4.1. Ive created a bug report for zabbix here: https://support.zabbix.com/browse/ZBX-22658. You

need to remember to mail from my samba.org address :-) -------- Forwarded Message -------- Subject: Re: [Samba] Wsearch Date: Fri, 17 Feb 2023 16:28:29 +0000 From: Noel Power <nopower at suse.de> To: Kees van Vloten <keesvanvloten at gmail.com>, npower via samba <samba at lists.samba.org> Hi Kees On 17/02/2023 10:56, Kees van Vloten via samba wrote: > Hi Noel, >

Hi Louis, The idea I had with this thread is to just get an honest comparison between Windows and Samba when it comes to file sharing needs in the Windows world, the missing Windows Search capability was just an example to get the discussion going. If I understand your reference correctly, there is a solution, compatible with Apple's Spotlight, to index files on a Samba server using