similar to: samba AD integration

I have a quick question on hooking Samba to a large AD domain. Following the excellent recipe at: http://wiki.samba.org/index.php/Samba_&_Active_Directory I see it states about half way down to join the machine to AD "Now to join your machine to the active directory. You will need the user-name and password to a Domain Administrator account to do this. The command you need to join

I'm hoping someone can give me a clue what I am doing wrong here, Running Debian Etch AMD64, I followed the samba wiki at: http://wiki.samba.org/index.php/Samba_ <http://wiki.samba.org/index.php/Samba_&_Active_Directory#Prerequisites> &_Active_Directory#Prerequisites. I get mostly good results, except when I try to run 'getent passwd' or 'getent group' only

Hi Henrik, Am 18.03.2017 um 16:06 schrieb Henrik Johansson via samba: > Old version was 3.5.8 and the new version on the virtual host that does not work is 3.6.25. That's not really a step forward to a supported Samba version. :-) https://wiki.samba.org/index.php/Samba_Release_Planning > # Global parameters > [global] > log file = /var/samba/log/clientlog.%m >

On Mon, 21 Jan 2019 15:53:47 +0530 venkat ramu <ramut123 at gmail.com> wrote: > > [inherit] > path = /srv/samba/test/inherit > valid users = +"SBX\Inherit-Group", at +"SBX\Inherit-Group" > invalid users = +"SBX\Test-Group" > writeable = yes > > [inherit1] > writeable = yes > comment = inherit1 > valid users =

Hi, I was able to configure Samba AD DC on Centos 6.5. I successfully connected it to windows 8.1 and 10 servers. I wrote a short howto. See following: Installing an Active Directory Domain Controller on a Linux based server running Samba is very simple. Installing and configuring the Samba server and configuring a Windows server to authenticate against the Samba server takes less than 20

On Thu, 16 Nov 2017 10:08:32 +0000 Stephen Parry via samba <samba at lists.samba.org> wrote: > Thanks for your reply Rowland. > > > The id ranges are what you choose, reading this may help: > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > > > >/Is there any working way of controlling

On Tue, 6 Feb 2018 11:01:52 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Thank you. > > Yes to the first point. > > We are using Bind9 but to continue using it is not necessarily set in > stone. If you are going to have more than one AD DC, then using Bind9 makes sense. > If using Samba Internal DNS makes more sense then we can

I'm trying to configure a Fedora 7 machine to authenticate access to shares via AD. This works fine on other RHEL machines, but the same configuration on Fedora maddeningly does not. I've tried oodles of different configurations, and am currently using something based on: http://wiki.samba.org/index.php/Samba_&_Active_Directory Here is my krb5.conf file: [logging] default =

Here is the smb.conf. [global] workgroup = SBX security = ADS realm = SBX.LAN dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab server string = Data %h winbind use default domain = yes winbind expand groups = 4 winbind nss info = rfc2307 winbind refresh tickets = Yes winbind offline logon = yes winbind normalize names =

Hi Rowland, As you suggested, I have added below in my config file but still it is not working as expected. I am trying to setup as suggested from " https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs " for windows "*Granting the SeDiskOperatorPrivilege Privilege*" but getting error "Failed to grant privileges for sbx\Domain Admins

Hi Rowland, Following the https://wiki.samba.org/index.php/Changing_the_DNS_Back_End_of_a_Samba_AD_DC, ran some tests migrating from Bind9 to Samba Internal with the following results Stopped the BIND, Samba-AD-DC services samba_upgradedns --dns-backend=SAMBA_INTERNAL Reading domain information DNS accounts already exist Reading records from zone file

Hi Rowland, I don't want to to run an AD DC on firewall device, barely DHCP and maybe DNS. What you have pointed me to is similar to what I have in place: https://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/ and which is working fine. NOW I want to switch DHCP from isc-dhcp-server 4.2.2 on Debian to DHCP on pfSense firewall (based on

I am running a Samba Box as a Domain Member in a Windows ADS Domain (Windows Server 2003). The Box has joined the ADS domain and the kerberos authentication works, I can see "smbd" processes running with AD user accounts. But I can not set ACLs on the directories or the files located on the share. If I change them using Windows Explorer, they either will be ignored by samba, or I get the

Thanks for your reply Rowland. > The id ranges are what you choose, reading this may help: > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > >/Is there any working way of controlling those ranges, />/given idmap breaks stuff? / > What do you mean 'idmap breaks things' ? > Sorry, should have made it

On Mon, 21 Jan 2019 15:21:03 +0530 venkat ramu <ramut123 at gmail.com> wrote: > Hi Rowland, > > I have created folder /srv/samba/test and > subfolder /srv/samba/test/inherit1 (Inherit1 is inside test folder). > below are the config. When I try to access inherit1 from widows > getting you do not have permission to access > \\xxx.xxx.xxx.xxx\inherit1. Could you please

I have questions regarding the operation of AD and integrating NIS or LDAP with it. I have a small heterogenous network consisting of various computing devices running either Windows 10 pro or a flavour of Linux. I am setting up a NAS box running Debian Stretch and Samba 4.5.12 to be the central file server and authenticator for the network, including LDAP aware software such as owncloud. I have

On Sat, 18 Mar 2017 17:26:11 +0100 Marc Muehlfeld via samba <samba at lists.samba.org> wrote: > Hi Henrik, > > Am 18.03.2017 um 16:06 schrieb Henrik Johansson via samba: > > Old version was 3.5.8 and the new version on the virtual host that > > does not work is 3.6.25. > > That's not really a step forward to a supported Samba version. :-) >

On Wed, 7 Feb 2018 10:02:10 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Following the > https://wiki.samba.org/index.php/Changing_the_DNS_Back_End_of_a_Samba_AD_DC, > ran some tests migrating from Bind9 to Samba Internal with the > following results > > Stopped the BIND, Samba-AD-DC services > > samba_upgradedns

On Tue, 2018-02-06 at 03:05 +0000, Praveen Ghimire via samba wrote: > Hi, > > We migrated from Samba 3 to 4 (4.6.7-Ubuntu) and added promoted a > Server 2008R2 as a Domain Controller. We've come across the following > issues and request some suggestions to resolve them > > > - The migration didn't generate DNS entries for the new > realm. We had to

>> idmapping does not work for AD Domain Controllers. > >It does ;-) > Does that mean that the warning in the docs is out of date? Does it work on the version of Samba in the Stretch repository (Samba 4.5.12), or do I need to find a repo with a more recent build? >>Other pages >> suggest many of the winbind parameters are simply ignored and I can >> confirm this