Re: [Samba] Authenticating IMAP using kerberos

2013-06-05 Thread Justin Clacherty
Found the problem. When creating the SPN you shouldn't put @YOUR_REALM_NAME.TLD in the principal name (also shouldn't be there for the export). The wiki should probably be updated to reflect this. Cheers, Justin. Sent: Tuesday, 4 June 2013 5:42 PM Hi, I'm trying to get an IMAP server to

Re: [Samba] bug in samba-tool w.r.t. (sub)domains

2013-06-05 Thread NOC
On 06/04/2013 11:33 PM, Andrew Bartlett wrote: On Tue, 2013-06-04 at 12:20 +0200, NOC wrote: Hi all I'm trying to import our bind dns data for our domain into samba4 using sambatool. Unfortunately, our domain has lots of (unnecessary) subdomains, but that's hard to revert after a long time. So

[Samba] Symbolic links do NOT work if the source file is present BOTH on client server !!!

2013-06-05 Thread Catrinel Catrinescu
Dear all I struggle with a very annoying bug ! The problem is very simple to reproduce (NO Windows stuff needed, ONLY Linux !): 1. Samba 3.5.6 running on a Debian 6 (Squeeze) Server with following configuration: /etc/samba/smb.conf: security = user guest account = nobody

[Samba] domain not available

2013-06-05 Thread deconya
Hi list Im using samba 3.5.6 with openldap in a debian squeeze using a domain, and now Im with a problem inside the LAN using roaming profiles, only I can't join in the domain. Appears domain not available message. My smb.conf [profiles] comment = Users profiles path =

Re: [Samba] domain not available

2013-06-05 Thread deconya
More info doing netstat: tcp0 0 0.0.0.0:139 0.0.0.0:* LISTEN 5831/smbd but nmbd daemon not appear. log says: [2013/06/05 13:07:14, 2] nmbd/nmbd_become_lmb.c:538(become_local_master_browser) become_local_master_browser: Starting to become a master

Re: [Samba] domain not available

2013-06-05 Thread deconya
Hi in log.smbd appears the error [2013/06/05 13:13:43.397318, 2, pid=5831, effective(0, 0), real(0, 0)] getpeername failed. Error was Transport endpoint is not connected [2013/06/05 13:13:43.397427, 2, pid=5831, effective(0, 0), real(0, 0)] getpeername failed. Error was Transport endpoint

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Jim Potter
Hi JAB I've tried this every whichway, including making ranges not overlap. It looks to me to depend on this line: idmap config BECAUSE : range = 1000-8000 If I add it, wbinfo SID-ToUID option for jingram gives a UID of 2338, but no getent passwd entry. If I remove it, getent passwd jingram

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Rowland Penny
Hi, I gave up on winbind, it is just too complicated and most, if not all, of the webpages I found via google are incomplete or just down right wrong. Why not try sssd, it just works, all you need to do is add uidNumbers to your users, set up sssd and away you go, have a look here:

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Franz Strebel
Why not use the rid backend for your idmap. That is what I use for my member servers and my accounts have identical ids across machines. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Rowland Penny
Yes, he could do that, providing his users never go anywhere near any files or directories stored on a samba4 server, if they do, they will suddenly find that have a different id on the server, I have been there and it is just a mess, it took me a bit to realise why users did not own the files

Re: [Samba] Cross Compiling Samba 4.0.6 for ARM increases size of binaries

2013-06-05 Thread Andrew Bartlett
On Fri, 2013-05-31 at 11:05 -0700, pranav desai wrote: Hi, I have cross-compiled just the basic samba 4.0.6 using bitbake recipe for ARM, which succeeded. However the resulting binaries are large in size. I used the exact same configuration options in both the cases. There is at least a

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Jonathan Buzzard
On Wed, 2013-06-05 at 13:30 +0100, Rowland Penny wrote: Hi, I gave up on winbind, it is just too complicated and most, if not all, of the webpages I found via google are incomplete or just down right wrong. It's actually dead simple, and these days the manual page is actually accurate. Really

[Samba] Automated winbind domain join with kickstart

2013-06-05 Thread Luc Lalonde
Hello Folks, Would anyone know if it is possible to automate the joining of a Linux machine to a Samba 4 domain using Kickstart? It seems that it is not ready yet: https://fedoraproject.org/wiki/Features/AnacondaRealmIntegration We want to automate the installation of Linux winbind clients.

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Rowland Penny
I never said that I couldn't get it to work, I just said that it is just too complicated. Yes I can read and there was no need to get personal You can have an smb.conf like this: [global] workgroup = DOMAIN security = ADS realm = DOMAIN.LAN encrypt passwords = yes

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Jonathan Buzzard
On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote: I never said that I couldn't get it to work, I just said that it is just too complicated. Yes I can read and there was no need to get personal You said you gave up because it was too complicated. Also if you are setting up a Samba file

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Rowland Penny
Oh yes it works ok on the samba4 server, using winbind getent passwd user DOMAIN\user:*:3001106:20513::/home/DOMAIN/user:/bin/bash uid=3001106(DOMAIN\user) gid=20513(DOMAIN\Domain Users) groups=20513(DOMAIN\Domain Users),21110(DOMAIN\linuxusers) change to sssd getent passwd user

[Samba] NT_STATUS_BAD_NETWORK_NAME for Windows Server 2008

2013-06-05 Thread samuel.ferencik
Hi, Our smbclient calls have started failing on connections to Windows 2008 AD servers. (Previously there were only Windows 2003 Servers, so we had no issues.) Domain=[INTRANET] OS=[Windows Server 2008 R2 Enterprise 7601 Service Pack 1] Server=[Windows Server 2008 R2 Enterprise 6.1] tree

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread steve
On Wed, 2013-06-05 at 16:22 +0100, Jonathan Buzzard wrote: On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote: I never said that I couldn't get it to work, I just said that it is just too complicated. Yes I can read and there was no need to get personal You said you gave up

Re: [Samba] SAMBA4 vs Windows 2008 AD

2013-06-05 Thread Gémes Géza
2013-06-05 09:29 keltezéssel, Mario Almeida írta: Thanks Geza, We only need for centralist authentication and for deploying group policies. Using windows XP I create group policy and keep in sysvol folder and sync the sysvol folder on BDC (samba) everything should work fine? Regards, Remy

[Samba] reverse zone dns updates

2013-06-05 Thread steve
Version 4.1.0pre1-GIT-1a6eac2 Hi I added a reverse zone to my internal dns. It won't update the reverse zone. With bind, it does. Before I go any further, is it possible that the internal dns server update the reverse zone from a nsupdate request? Cheers, Steve -- To unsubscribe from this

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Rowland Penny
Well said Steve From what I have read on the two samba mailing lists, Samba 4 is supposed to be a clone of windows AD, well windows AD does not have winbind, so I suppose this begs the question, why when running as a DC controller does Samba4? On 5 June 2013 17:56, steve st...@steve-ss.com

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread steve
On Wed, 2013-06-05 at 18:32 +0100, Rowland Penny wrote: Well said Steve From what I have read on the two samba mailing lists, Samba 4 is supposed to be a clone of windows AD, well windows AD does not have winbind, so I suppose this begs the question, why when running as a DC controller

[Samba] Upgrade Samba 3.5.6 to 3.6.6

2013-06-05 Thread Marcos Renato da Silva Junior
Hi, After ugrade samba (3.5.6) to 3.6.6 (debian wheezy), the command smbclient -L 127.0.0.1 -U user show a message error : session setup failed: NT_STATUS_UNSUCCESSFUL Thanks, Marcos. -- To unsubscribe from this list go to the following URL and read the instructions:

[Samba] Samba4 and NVSv4

2013-06-05 Thread Steve Thompson
Short story: cannot get Kerberized NFSv4 to work. I've googled a great deal and cannot find where I have goofed (and there sure is a lot of misleading and just plain incorrect information out there), so would appreciate another pair of eyes. NFSv4 without Kerberos does work fine, as does ID

Re: [Samba] Security = ADS and uidnumbers

2013-06-05 Thread Jonathan Buzzard
On 05/06/13 17:56, steve wrote: On Wed, 2013-06-05 at 16:22 +0100, Jonathan Buzzard wrote: On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote: I never said that I couldn't get it to work, I just said that it is just too complicated. Yes I can read and there was no need to get personal

[Samba] authentication problem with samba4 as a dcerpc server

2013-06-05 Thread eric gou
Hi All, I’m trying to configure samba4 to run as a dcerpc server, listend on TCP port 135 only for ncacn_ip_tcp. when the msrpc request comes for the GSSAPI authentication, it fails to find the account related information in local database. I join it into a AD domain as a member, I noticed

[Samba] Samba 4.0.6 update - login issues

2013-06-05 Thread Kristofer Pettijohn
I updated all 14 of our Domain Controllers to 4.0.6, and now I am having random authentication issues. Our radius server uses ntlm_auth to authenticate users. Every morning at 3AM since the update, ntlm_auth fails to authenticate. If I restart Samba 4 on the domain controller that the radius

autobuild: intermittent test failure detected

2013-06-05 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-06-05-0852/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch v3-6-test updated

2013-06-05 Thread Karolin Seeger
The branch, v3-6-test has been updated via fe51e23 Fix bug #9822 - Samba crashing during Win8 sync. via abff441 Remove dependency on detection of HAVE_DIRFD for use of fdopendir(). via 8d96eb3 Remove the Ugly hack that was the second use of dirfd(). via 93417c9 In

[SCM] Samba Shared Repository - branch v4-0-test updated

2013-06-05 Thread Karolin Seeger
The branch, v4-0-test has been updated via 1d610ce s4:winbind: don't leak libnet_context into the main event context (bug #9929) from 62e25dc Fix bug 9900: is_printer_published GUID retrieval http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log

autobuild: intermittent test failure detected

2013-06-05 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-06-05-1504/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2013-06-05 Thread Andrew Bartlett
The branch, master has been updated via 7d8354c smbd: Change logging when SET_OFFLINE is not supported from 1a6eac2 s4:samldb LDB module - permit userAccountControl modifications without acct. type http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log