Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
On Jan 9, 2012, at 2:34 PM, Natxo Asenjo wrote: > On Mon, Jan 9, 2012 at 4:47 PM, mikel king wrote: >> I am sure this pops up on the list ever once in a while. I have inherited a >> LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course >> because bean counters have to use fina

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Natxo Asenjo
On Mon, Jan 9, 2012 at 4:47 PM, mikel king wrote: > I am sure this pops up on the list ever once in a while. I have inherited a > LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course > because bean counters have to use financial apps that only run on Windows. My > long term go

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Charles Tryon
The other "gotcha" is the question of, how comfortable are you (or perhaps more important, your BOSS) with running software that is still technically in Alpha release? This is exactly the question I'm trying to resolve with the head of our IT department. This is a complicated question, since the

Re: [Samba] samba share permission

2012-01-09 Thread Charles Tryon
Malvin, You say you are talking about an NFS share. Are your users on Windows or Linux? Of course, if you really are using NFS, then the Samba config isn't going to control that. On Fri, Jan 6, 2012 at 4:03 PM, tung wrote: > hi, > > i am very new to samba and have run into an issue wi

Re: [Samba] Samba4 and Bind with DLZ

2012-01-09 Thread felix
> On Wed, 2011-12-07 at 13:13 -0500, fe...@epepm.cupet.cu wrote: >> Could you, please, give me some clue on how to configure dlz in Bind to >> work with Samba4? >> I installed samba4 from git check out from a week ago, then I >> provisioned >> it but DNS is not working. Now with a more recent chec

Re: [Samba] SOLVED The Group Policy Client service failed the logon. Access is denied.

2012-01-09 Thread Mat Enders
I am not sure how it got fixed but now it works. I deleted the registry key, deleted, and deleted their roaming profile from their home directory. And all works now. --Original Message-- From: Menders To: samba@lists.samba.org Subject: The Group Policy Client service failed the logon. A

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread steve
On 01/09/2012 05:18 PM, mikel king wrote: On Jan 9, 2012, at 10:48 AM, Adam Tauno Williams wrote: On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of cou

[Samba] samba4 and ntp

2012-01-09 Thread felix
I have configured samba4 and ntp following the official HowTO. Client computers running Windows XP synchronize their time correctly but only when windows starts or after a restart (same thing). My ntp.conf is the same found in the HowTo. ntp version is 4.2.6p4 and I set the following domain poli

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
On Jan 9, 2012, at 10:48 AM, Adam Tauno Williams wrote: > On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: >> I am sure this pops up on the list ever once in a while. I have >> inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux >> and of course because bean counters have to

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread steve
On 01/09/2012 04:48 PM, Adam Tauno Williams wrote: On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial a

Re: [Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread Adam Tauno Williams
On Mon, 2012-01-09 at 10:47 -0500, mikel king wrote: > I am sure this pops up on the list ever once in a while. I have > inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux > and of course because bean counters have to use financial apps that > only run on Windows. My long term goa

[Samba] Can Samba + (OpenLDAP & Kerberos) completely replace ActiveDirectory?

2012-01-09 Thread mikel king
I am sure this pops up on the list ever once in a while. I have inherited a LAN that have a large amount of Mac OS X, FreeBSD, Linux and of course because bean counters have to use financial apps that only run on Windows. My long term goal is to install some sort of central management system and

Re: [Samba] Set primary group of file on samba share from windows

2012-01-09 Thread TAKAHASHI Motonobu
From: Hubert Kario Date: Mon, 9 Jan 2012 11:53:26 +0100 > > As far as I examined there is no way to display/change the owner group > > of files via Samba. Also in Samba 3.x, we cannot set any groups to > > an owner of a file. > > > > I think it's difficult to implement because Windows does not ha

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 14:30, steve wrote: > On 09/01/12 12:12, Michael Wood wrote: >> >> On 9 January 2012 12:56, steve  wrote: [...] >>> Hi >>> Rename the keytab, touch /etc/krb5.keytab to start with a blank keytab >>> and >>> add only the nfs principal? What about all the other stuff about cifs and

Re: [Samba] smb.conf 'use kerberos keytab = true'

2012-01-09 Thread Jim McDonough
On Sun, Jan 8, 2012 at 8:43 AM, steve wrote: > openSUSE 12.1, Samba 3.61 joined to Samba 4 Domain > > /etc/samba/smb.conf on the Linux client is as follows: > > workgroup = CACTUS > realm = HH3.SITE > security = ADS > use kerberos keytab = true > > testparm tells me it is ignoring the 'use kerbero

[Samba] Could not write response[27830:AUTH_CRAP] to client: Broken pipe

2012-01-09 Thread Chris Howley
Hello, We're using FreeRADIUS and winbind to authenticate access to our wireless network. The problem we're experiencing is that the secure channel between the wbind daemon and the DC appears to be unstable. The outages last for about 30 seconds and coincide with a series of "...Broken pipe" me

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 12:56, steve wrote: > On 01/09/2012 11:50 AM, Michael Wood wrote: >> >> On 9 January 2012 12:34, steve  wrote: >>> >>> On 01/09/2012 09:47 AM, Gémes Géza wrote: >> >> [...] > > samba-tool user add steve4 > (the spn stuff you mention doesn't seem to be needed?) > s

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Michael Wood
On 9 January 2012 12:34, steve wrote: > On 01/09/2012 09:47 AM, Gémes Géza wrote: [...] >>> samba-tool user add steve4 >>> (the spn stuff you mention doesn't seem to be needed?) >>> samba-tool domain exportkeytab /etc/krb5.keytab --principal=steve4 >> >> You don't need the last step (see before).

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread steve
On 01/09/2012 09:47 AM, Gémes Géza wrote: Hi, Comments in-line: On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined t

[Samba] Take hold Computer name Property/Attribute

2012-01-09 Thread Jessica Guynn
Hi guys, Back to my old problem. Successfully integrated windows 2008 ADS with Samba using winbind and PAM (thanks to Kukks and everyone in the forum and irc). By authenticating with ADS I am able to point ownership to a domain user , but how do you change the computer name field so when subdire

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread Gémes Géza
Hi, Comments in-line: On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined the domain, users can logon. But I have a me

Re: [Samba] Samba 4 krb5.keytab confusion

2012-01-09 Thread steve
On 01/09/2012 07:38 AM, Gémes Géza wrote: 2012-01-08 10:13 keltezéssel, steve írta: Hi I have Samba 4 installed and working. I recently changed FQDN to dns name hh3.hh3.site. It works OK and e.g. on a windows 7 box which joined the domain, users can logon. But I have a mess in the keytab: klist