Re: [Samba] New Windows 8 RSAT and "OU=Domain Controllers" support?

2013-04-25 Thread Andrew Bartlett
On Wed, 2013-04-24 at 17:39 +0300, Pekka L.J. Jalkanen wrote: > By the way, is a kerberos keytab actually necessary to decrypt the > GSS-API packets in Wireshark? Samba Wiki > (https://wiki.samba.org/index.php/Capture_Packets) doesn't say so (just > tells to capture the kerberos exchange), but I be

Re: [Samba] List Samba 4 shares using server's IP AND Kerberos authentication

2013-04-25 Thread Andrew Bartlett
On Fri, 2013-04-26 at 03:04 +0200, Kristofers wrote: > I am able to list the Samba 4.0.3 shares by using > "*smbclient -L myhostname -k*" command. > However I am unable to do the same by using > "*smbclient -L 192.168.1.2 -k*" > and I get the "session setup failed: NT_STATUS_LOGON_FAILURE" error. >

[Samba] List Samba 4 shares using server's IP AND Kerberos authentication

2013-04-25 Thread Kristofers
I am able to list the Samba 4.0.3 shares by using "*smbclient -L myhostname -k*" command. However I am unable to do the same by using "*smbclient -L 192.168.1.2 -k*" and I get the "session setup failed: NT_STATUS_LOGON_FAILURE" error. Nevertheless it does work when I try to do the same by using t

Re: [Samba] Samba4: W2k c­lients cannot set / sync ­time with samba4 AD DC

2013-04-25 Thread Andrew Bartlett
On Thu, 2013-04-25 at 08:13 -0700, Gregory Sloop wrote: > iM> Well, the NTP server on samba4 server is definitely (!) up and > iM> running. I can triple-check that by "ps", "netstat" and of course by > iM> getting the time of all my other clients (winxp, win7, linux, unix) so > iM> NTP server is

Re: [Samba] Samba4 and idmap backend (ad/rid)

2013-04-25 Thread Ali Bendriss
On Thursday, April 25, 2013 03:11:18 PM Jaymzwise Jaymzwise wrote: > Hi, > > I eventually managed to install and join a Samba4 server as a member in an > AD environment but I have a problem with the id command. > wbinfo commands work but when I launch id command with a domain user I get > "user un

Re: [Samba] Samba4 : Join as an AD domain member

2013-04-25 Thread Marc Muehlfeld
Hello, Am 25.04.2013 09:21, schrieb Jaymzwise Jaymzwise: I'm trying to join a samba4 (4.0.5) server as a domain member in an AD (2k8 server) environment. I used this command to compile samba4 ( https://wiki.samba.org/index.php/Samba4/Domain_Member) : ./configure --with-ads --with-shared-modules

Re: [Samba] Basic question

2013-04-25 Thread Marc Muehlfeld
Hello Jan, Am 25.04.2013 07:02, schrieb Jan Dušátko: I looking for help in this situation. I would like to configure system, allowing administrator configure rights and inherence using explorer "Security tab", where more than User, Group and "Everyone" can be setup (the best, two or more group,

Re: [Samba] Samba4: W2k c­lients cannot set / sync ­time with samba4 AD DC

2013-04-25 Thread Gregory Sloop
iM> Well, the NTP server on samba4 server is definitely (!) up and iM> running. I can triple-check that by "ps", "netstat" and of course by iM> getting the time of all my other clients (winxp, win7, linux, unix) so iM> NTP server is definitely running on samba4 host. Up and running doesn't mean

[Samba] nmbd broken in Centos 6.4

2013-04-25 Thread Moray Henderson
CentOS 6.4 appears to have been shipped with a broken Samba 3.6. The new NMBDSOCKETDIR option defaults to /var/nmbd, which of course is an invalid directory and should not be created[1]. While hopefully they can fix it with an option to their configure script at build time, could Samba itself pro

[Samba] SSL certificate in SAMBA4 LDAP?

2013-04-25 Thread Tim Vangehugten
Hello, Is it possible to load my signed certificate into samba4 ldap so the samba4 ldap would use it if a client connects to it? And if so, could someone provide me with the details on howto do this or point me in the right direction? Best Regards Tim Vangehugten -- To unsubscribe from this list

Re: [Samba] Samba4 and idmap backend (ad/rid)

2013-04-25 Thread Rowland Penny
On 25/04/13 14:11, Jaymzwise Jaymzwise wrote: Hi, I eventually managed to install and join a Samba4 server as a member in an AD environment but I have a problem with the id command. wbinfo commands work but when I launch id command with a domain user I get "user unknown". Here is my smb.conf (T

[Samba] Samba4 and idmap backend (ad/rid)

2013-04-25 Thread Jaymzwise Jaymzwise
Hi, I eventually managed to install and join a Samba4 server as a member in an AD environment but I have a problem with the id command. wbinfo commands work but when I launch id command with a domain user I get "user unknown". Here is my smb.conf (Took from Samba Wiki) : idmap config *:backend =

Re: [Samba] Samba4: W2k c­lients cannot set / sync ­time with samba4 AD DC

2013-04-25 Thread L . P . H . van Belle
Just hack the registry entry, on the pc's policies add "DOMAIN\Domain Users" to allow to sync time. Under, Computer policy, Windows settings, Security, Local .. , user rights, "systemtime change" With windows it works, because the time sync is done on pc level, not user level as far as i kn

Re: [Samba] Samba4: W2k c­lients cannot set / sync ­time with samba4 AD DC

2013-04-25 Thread ?icro MEGAS
Hello, I HAVE sniffed the network traffic for this w2k client and provided the link via paste.ubuntu.com, so everybody can look inside that without the need of extra-tools like wireshark. And as I realized you have looked into that sniffed result output. I did it this way, because I work on an

Re: [Samba] Samba4: W2k clients cannot set / sync time with samba4 AD DC

2013-04-25 Thread Andrew Bartlett
On Thu, 2013-04-25 at 11:47 +0400, ?icro MEGAS wrote: > As a follow-up to this thread > (https://lists.samba.org/archive/samba/2013-April/172892.html) I have > created an extra topic, because this is related only to NTP/time sync. > > I have done some more tests on this topic, as this really hur

[Samba] Samba4: W2k clients cannot set / sync time with samba4 AD DC

2013-04-25 Thread ?icro MEGAS
As a follow-up to this thread (https://lists.samba.org/archive/samba/2013-April/172892.html) I have created an extra topic, because this is related only to NTP/time sync. I have done some more tests on this topic, as this really hurts and I wouldn't be able to migrate to samba4 in productional

[Samba] Samba4 : Join as an AD domain member

2013-04-25 Thread Jaymzwise Jaymzwise
Hi, I'm trying to join a samba4 (4.0.5) server as a domain member in an AD (2k8 server) environment. I used this command to compile samba4 ( https://wiki.samba.org/index.php/Samba4/Domain_Member) : ./configure --with-ads --with-shared-modules=idmap_ad But I get this error : Active Directory suppo