similar to: Samba acting as a domain member + netbios

Thanks for the advice about the security line, I won't use domain type anymore then. I know name_status_find is using NetBios, what I don't know is why this function is called when using 'security = ads', and as a result of the fail my domain is added to the failed connection cache. Then, every action that needs to have a look into the cache results in failing, and wbinfo -P

On Thu, 25 Jan 2024 15:48:39 +0000 Vincent DROUIN via samba <samba at lists.samba.org> wrote: > Hello, > > I'm trying to use to use a Samba share service with authentication > delegated to a Windows Active Directory Server. > > I manage to join successfully to the AD using net ads join command, > with or without Kerberos, using either "security = domain"

On Thu, 25 Jan 2024 16:28:57 +0000 Vincent DROUIN <vdrouin at chapsvision.com> wrote: > Thanks for the advice about the security line, I won't use domain > type anymore then. > > I know name_status_find is using NetBios, what I don't know is why > this function is called when using 'security = ads', and as a result > of the fail my domain is added to the

Active Directory running on Windows Server 2019 Samba 4.15.8 (built from buildroot, using heimdal & libgssapi_krb5) Samba is running on a custom Unix distribution, all ports are open for the tests Testparm -s result : # Global parameters [global] bind interfaces only = Yes disable spoolss = Yes idmap cache time = 300 idmap negative cache time = 0

I guess I should also do a backup of netlogon_creds_cli.tdb. Is this enough or is there's something else recommended to avoid some bad corner cases? -----Message d'origine----- De : samba <samba-bounces at lists.samba.org> De la part de Vincent DROUIN via samba Envoy? : vendredi 26 janvier 2024 18:38 ? : samba at lists.samba.org Objet : Re: [Samba] Samba acting as a domain member +

Okay the '%' were due to bad coy paste between the source code and a local smb.conf. The samba is running on a minimal and embedded environment, which is why it must be built using buildroot. It turns out that we might have been too restrictive with the samba libraries embedded in our environment. I've solved this issue using latest version available in buildroot (4.19.3) and making

On Fri, 26 Jan 2024 08:44:13 +0000 Vincent DROUIN <vdrouin at chapsvision.com> wrote: > Active Directory running on Windows Server 2019 > Samba 4.15.8 (built from buildroot, using heimdal & libgssapi_krb5) It sounds like you built Samba yourself, if so, why ? Also why use an old version ? > Samba is running on a custom Unix distribution, all ports are open > for the tests

Hi there, Im using for long time winbind + squid for my proxy server and it has been working very good... No problems at all. Some months ago, I decided to get rid of Netbios protocol and start to use only dns for name resolution on my domain. That's when my problem begin. All my windows servers and workstations are doing fine without netbios but I cant get winbind to work without

> > When at Unsecure 2, the laptops will not access the Windows server's > file share. Remember they will access the Samba file server on the same > subnet, Secure 1. The error says it can't find the share and asks to check > the name. To me, this is DNS and routing. Have laptops use a VPN to Sec2 whenever in Unsecure 2, and make sure that Sec1 is also routable through

Long-time Samba user. Love it! I have a dozen or so computers accessing several file (SMB) shares. All but two are in fixed locations. Some of those have fixed IPs, the rest DHCP IPs but they don't move between subnets. The last two, both laptops, are the problem. They move back and forth between two subnets. Specifically: There are three relevant subnets. I'll call them Secure 1,

On Wed, 22 Jan 2025 22:04:31 +0000 Stephen Brandli via samba <samba at lists.samba.org> wrote: > Long-time Samba user. Love it! > > I have a dozen or so computers accessing several file (SMB) shares. > All but two are in fixed locations. Some of those have fixed IPs, > the rest DHCP IPs but they don't move between subnets. The last two, > both laptops, are the

I have been trying in vain to get ADS domain authentication working. I can't figure out what is wrong and have read the docs and looked through the mailing lists. I'm not sure why better documentation hasn't been written on the web site for the ADS feature since it's pretty spectacular to be able join a Samba server natively to an AD domain. I have successfully joined the samba

Hi to all. Is it possible to disable unsecure POP3 protocol at all in Dovecot 2.1? There was "protocols" option in 1.x version, and there was separate pop3 and pop3s modules. There is no "pop3s" in configuration files in 2.1.

Thanks for the reply. I agree it's reasonable to expect me to update to see if that fixes the problem. I have started that very long process. I would not have bothered you all except, in the meantime, we have a real problem with the laptops. Also, since the fixed machines do not have the problem, I can see only two reasons for it: (1) The laptops are relying on broadcast, which isn't

I am trying to run the CyberMegaPhone demo to see the WebRTC Video Conference demonstration from AstriDevCon 2017 I have been able to make WebRTC work on this same box with SIPML5 demo but not the CMP2K. When I attempt to access the https://myip:8089/cmp2k I am prompted for the unsecure web. I enable unsecure web. (Using the asterisk local certificate generation from the SIPML5 demo). After

Hello, Before writing here I really tried almost everything, reading the archives here, the FAQ and dozens of more or less well commented online guides and posts. My environment is a Windows server, with IIS as web server (I know, blame and flame on me, but this was available on my hands at the time). The server is hosting several websites and an icecast 2.4.4 running an online radio. The radio

On 12/01/2023 10:53, Thorsten Marquardt via samba wrote: > Thank you so far. But unfortunately I could not fix the problems. So I > decided to start over again at a situation where all the fsmo roles > resides on the old controller. > > Here is a transcript of what I did and the errors reported: > > The inititial position > > srv-kb-dc1:~ # samba-tool fsmo show >

Our PDC accidentally crashed and to eliminate down time, I quickly set up one of the BDC to be the new PDC. I copied all the configuration file of PDC to the BDC. These files are slapd.conf, ldap.conf, smb.conf, etc.... Now that the PDC is up and running again, I want to put it back to the way it was since the BDC did not run to a functional state anyway. Here is a snippet of the debug when I

Thank you so far. But unfortunately I could not fix the problems. So I decided to start over again at a situation where all the fsmo roles resides on the old controller. Here is a transcript of what I did and the errors reported: The inititial position srv-kb-dc1:~ # samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=SRV-KB-PRIMDC,CN=Servers,CN=Default-Fi...

On 2017-04-25, 15:40, Andrew Bartlett via samba wrote: > This looks like the instructions: > https://social.technet.microsoft.com/wiki/contents/articles/2751.kerberos-interoperability-step-by-step-guide-for-windows-server-2003.aspx#Using_an_MIT_KDC_with_a_Stand-alone_Windows_Server_TwentyOhThree_Client Thanks Andrew! This is quiet useful info. > Also, you still have to create all the