[Samba] Can't get idmap connected to AD unix attribs

2012-07-09 Thread Nick Triantos
Hi, I'm trying to get an Ubuntu 12.04 system's Samba (3.6.3) and Winbind to map userids and groups to the unix attributes in an AD 2008 server. I can see that when I perform an ldapsearch, I'm able to read the attributes, and for one of my accounts, the id should be 1001. However, when I run 'w

[Samba] Bind9 Error

2012-07-09 Thread Alex McWhirter
This server is running on Debian Squeeze, update to unstable. When configuring bind for kerberos (step 8 in the how to) it errors out. This is what i get in syslog, using bind 9.8. Jul 8 01:43:58 dc named[1590]: starting BIND 9.8.1-P1 -u bind Jul 8 01:43:58 dc named[1590]: built with '--prefix=/

Re: [Samba] Samba4 and Bind9

2012-07-09 Thread Amitay Isaacs
Hi Steve, On Tue, Jul 10, 2012 at 7:17 AM, Steve Thompson wrote: > CentOS 6.2, Samba 4.0.0beta3, Bind 9.9.1-P1. > > I have a workking Bind9 installation which includes several different zone > files. Foward and reverse lookups work fine. > > When I include > > include "/usr/local/samba4/p

Re: [Samba] oLschema2ldif & nis

2012-07-09 Thread Bob Miller
Hi have messed with the oLschema2ldif program a time or two. As far as I know you are correct that it is an independent program. I can also tell you that sometimes it works, and sometimes it doesn't, depends on which schema you are trying to import. I can also tell you, based on my experience

[Samba] Samba4 and Bind9

2012-07-09 Thread Steve Thompson
CentOS 6.2, Samba 4.0.0beta3, Bind 9.9.1-P1. I have a workking Bind9 installation which includes several different zone files. Foward and reverse lookups work fine. When I include include "/usr/local/samba4/private/named.conf"; in the named.conf, named will no longer start: Jul 9 1

Re: [Samba] oLschema2ldif & nis

2012-07-09 Thread Steve Thompson
On Mon, 9 Jul 2012, Rowland Penny wrote: On 09/07/12 17:57, Steve Thompson wrote: oLschema2ldif (version 4.0.0beta3-GIT-666dba3) segfaults when presented with the nis.schema from an RHEL5 system. That could be because what is in nis.schema is already in the samba4.schema, Indeed that may b

Re: [Samba] oLschema2ldif & nis

2012-07-09 Thread Rowland Penny
On 09/07/12 17:57, Steve Thompson wrote: oLschema2ldif (version 4.0.0beta3-GIT-666dba3) segfaults when presented with the nis.schema from an RHEL5 system. -s That could be because what is in nis.schema is already in the samba4.schema, see: /usr/local/samba/share/setup/ad-schema/MS-AD_Schema

[Samba] oLschema2ldif & nis

2012-07-09 Thread Steve Thompson
oLschema2ldif (version 4.0.0beta3-GIT-666dba3) segfaults when presented with the nis.schema from an RHEL5 system. -s -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] upgrade

2012-07-09 Thread sandy . napoles
Hello list, I need update my samba, I run firtly ./configure.developer, and when I run make I get this message 123/3913] Compiling lib/replace/replace.c In file included from ../lib/replace/replace.c:26: ../lib/replace/replace.h:112:24: error: bsd/string.h: No such file or directory ../lib/replac

Re: [Samba] How do I join a samba 3 client to a samba 4 AD server?

2012-07-09 Thread steve
On 09/07/12 14:17, Quinn Plattel wrote: Should be posted on the list too... br, Quinn On Mon, Jul 9, 2012 at 2:16 PM, Quinn Plattel wrote: Thanks Steve, Looks like I got it working now: # net ADS JOIN -U Administrator Enter Administrator's password: Using short domain name -- MYDOMAIN Join

Re: [Samba] How do I get an ssh client to authenticatewith samba4's kerberos GSSAPI?

2012-07-09 Thread Onotsky, Steve x55328
-Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Ritter, Marcel - RRZE Sent: July 9, 2012 11:17 To: 'Quinn Plattel'; 'samba' Subject: Re: [Samba] How do I get an ssh client to authenticatewith samba4's kerberos GSSAPI? >> The only

Re: [Samba] How do I get an ssh client to authenticate with samba4's kerberos GSSAPI?

2012-07-09 Thread Ritter, Marcel - RRZE
Hi Quinn, I've tried to get ssh Kerberos/gssapi login working on my Samba4 DC, no luck so far. However, after joining two VMs to this domain using Samba 3, ssh logins work between those two machines (not towards the DC). The only relevant difference I found while searching for a solution, were d

Re: [Samba] Netbios over VPN

2012-07-09 Thread Fernando Lozano
Niels Dettenbach escreveu: Am Montag, 9. Juli 2012, 08:29:00 schrieb Daniel Müller: > This is right. Openvpn does the job perfectly fine here connecting our far > away office in our network and Samba-Domain. We can recommend OpenVPN too. The "easiest" way to connect to a Samba by VPN in the ma

Re: [Samba] How do I get an ssh client to authenticate with samba4's kerberos GSSAPI?

2012-07-09 Thread Quinn Plattel
Hi, Forgot to mention that the client side's ssh configuration (/etc/ssh/ssh_config) has the following lines: GSSAPIAuthentication yes GSSAPIDelegateCredentials yes GSSAPITrustDns yes The server side ssh configuration (/etc/ssh/sshd_config) has the following lines: GSSAPIAuthentic

[Samba] How do I get an ssh client to authenticate with samba4's kerberos GSSAPI?

2012-07-09 Thread Quinn Plattel
Hi, I am doing some kerberos testing with samba4 using ssh. I have setup samba4 using the howto at http://wiki.samba.org/index.php/Samba4/HOWTO and active directory seems to be working both with Windows and Linux clients. ssh unfortunately is not kerberos authenticating via GSSAPI. The client kr

Re: [Samba] How do I join a samba 3 client to a samba 4 AD server?

2012-07-09 Thread Quinn Plattel
Should be posted on the list too... br, Quinn On Mon, Jul 9, 2012 at 2:16 PM, Quinn Plattel wrote: > Thanks Steve, > > Looks like I got it working now: > > # net ADS JOIN -U Administrator > Enter Administrator's password: > Using short domain name -- MYDOMAIN > Joined 'UBUNTU-TEST' to realm 'my

Re: [Samba] How do I join a samba 3 client to a samba 4 AD server?

2012-07-09 Thread steve
On 09/07/12 12:27, Quinn Plattel wrote: # net ADS JOIN -U Administrator Enter Administrator's password: Failed to join domain: failed to lookup DC info for domain 'MYDOMAIN.NET' over rpc: Invalid server state Hi Quinn We got a similar message when DNS wasn't working. We added the server IP

Re: [Samba] Netbios over VPN

2012-07-09 Thread Niels Dettenbach
Am Montag, 9. Juli 2012, 08:29:00 schrieb Daniel Müller: > This is right. Openvpn does the job perfectly fine here connecting our far > away office in our network and Samba-Domain. We can recommend OpenVPN too. The "easiest" way to connect to a Samba by VPN in the majority of scenarios should be

[Samba] How do I join a samba 3 client to a samba 4 AD server?

2012-07-09 Thread Quinn Plattel
Hi, I have set up a standard samba4 server via http://wiki.samba.org/index.php/Samba4/HOWTO and have tested that windows machines can join the samba4 AD. Now I am trying to join an Ubuntu machine to the same samba4 ad but it is failing for me with the following message: # net ADS JOIN -U Administ

Re: [Samba] Suggestions? Multiple servers/storages one domain

2012-07-09 Thread Daniel Müller
Hi, it seems that your problem is more the "netlogon script" than the ldap/samba. The easiest way is to do it with the script. All user will logon to the same DOMAIN? Are the profile on Server 1 and Server 2 the same? Do you drbd or gluster them so they are identical? Greetings Daniel ---