[Samba] Samba with Domain

2013-09-21 Thread Michael Guinard
this as well Thanks a lot Michael Guinard -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] smbd looking for non existent files

2013-09-02 Thread Michael Wood
Is the load the same even if you turn down the logging? On 9/2/13, steve wrote: > On Sun, 2013-08-25 at 12:37 +0200, Michael Wood wrote: >> On 24 August 2013 22:39, steve wrote: >> On Sat, 2013-08-24 at 20:57 +0200, Michael Wood wrote: >> > Hi >>

[Samba] SAMBA Interdomain Trust relationships

2013-08-31 Thread Michael Starling
I have two SAMBA PDC's with an OpenLDAP backend. My goal is to establish an interdomain trust between the two domains so that users from each backend can login to Windows systems by specifying accounts from either domain. I've followed the steps to establish the trusts and I can see accounts and

Re: [Samba] smbd looking for non existent files

2013-08-25 Thread Michael Wood
On 24 August 2013 22:39, steve wrote: > On Sat, 2013-08-24 at 20:57 +0200, Michael Wood wrote: > > Hi > > > > On 24 August 2013 19:05, steve wrote: > > Hi > > 4.0.8 file server in a 4.0.8 domain > > > > After a user log

Re: [Samba] smbd looking for non existent files

2013-08-24 Thread Michael Wood
> > smbmap: > !Administrator = HH3\Administrator > > Client: > [global] > workgroup = HH3 > realm = HH3.SITE > security = ADS > kerberos method = system keytab > > Tested with sssd and nslcd. (yes, it's the same with winbind) > > Why is smbd looking for files wh

Re: [Samba] Server authentication

2013-08-19 Thread Michael Wood
rejoin all the machines to the domain. > I'm interested in behavior of Win XP, Vista, 7 and I can't install samba4. > > Thank you for any suggestions and pointing to further reading. > > M. Prymek -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Building with debug symbols and different optimisation levels

2013-07-18 Thread Michael Wood
searching but cannot find a way to do this in the build system, I > can't even find where the optimisation level is set, however, I am > unfamiliar with waf. Is there a (even hacky) way to do this? > Try asking on the IRC channel, or on samba-technical if you don't get an answer here

[Samba] Import samba3 passwords to samba4

2013-07-08 Thread Michael Fey Schottener Soziale Dienste
Hello, we want to import Samba3 (tdb) passwords to a new Samba4 domain (no classicupgrade). Is it possible to export the password(-hashes) from samba3 and import them in samba4, maybe with ldbmodify? Thanks -- Michael Fey IT-Abteilung Vogelsbergstraße 212 63679 Schotten Tel

Re: [Samba] Samba Domain Rename

2013-07-02 Thread Michael Leone
ike Michael said, samba 4 as an AD DC would probably not be happy if you > just change the 'workgroup = ' line in your smb.conf (as a matter of fact, > that line shouldn't exist in a AD DC setup in my opinion) the domain is > more than likely embedded very deep inside of the LD

Re: [Samba] file server or member server?

2013-07-02 Thread Michael Wood
waste of space to many, but it's merely the > tip of the iceberg for us. Our main problem is that we are not dealing > with native English speakers. The grammatical and interpretational > problems which this list and the samba documentation in general throw up > are at times insurmountable. > > Thank you all for the patience which you afford us. > -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba Domain Rename

2013-07-02 Thread Michael Wood
Team, > > > > I am using samba 4 Domain in my production environment and everything is > > working fine but now for some reason I have to rename the domain > > > > Can you please help on this, I need to do this asap > > > > Waiting for your response………

[Samba] Trouble Building RPMS v3.6.16

2013-06-26 Thread Michael
Hi, My system: OS: Centos 6.4  Samba: 3.6.16 I'm trying to build the RPMS from the packaging/RHEL directory.  After I patched the samba.spec file the build is successful.  All packages install without an issue. But when I try to install the SSSD, its dependencies get errors that it conflicts w

Re: [Samba] Problem compil samba 4.0.6

2013-06-24 Thread Michael Wood
_1.o,dbwrap_local_open_1.o > -> libdbwrap.so} > make: *** [all] Erreur 1 > > what's happen ? > > best regards, > > Stéphane Purnelle > > --- > Stéphane PURNELLE Admin. Systèmes et Réseaux > Servic

Re: [Samba] [PATCH] Workaround very slow nss_winbind, fix crash on the AD DC (particularly for backups)

2013-06-24 Thread Michael Wood
0 lo > > bind interfaces only = yes > > > > help? > > > > Also, does reverting (with 'git revert HASH', where HASH is the commit id > > your bisect identified) help? > > > > Finally, can you run Samba under valgrind again? The error you s

Re: [Samba] Samba 4 Additional DC existing domain

2013-06-11 Thread Michael De Groote
rrect assumption? > > And finally, rebooting the server does not automatically start samba. I > have to start it manually. Do I need to create a script in /etc/init.d/ and > if that's the case, is there a template for that somewhere? > > Thanks in advance. > > Dino

Re: [Samba] Please Help! Dynamic DNS just will not work: " failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure"

2013-06-01 Thread Michael De Groote
ppened every single time. > > > > Everything else seems to be functioning, I can manage everything from a > > windows client with the AD snap-ins and the computer shows up in > 'Computers > > and Users' snap in, it just does NOT have a DNS A record! > > >

Re: [Samba] Hello Mailing List, I really need some help/advice.

2013-06-01 Thread Michael De Groote
do it... (well; see my posts on this list about samba4 and dfs, and you'll see it's not all that simple/working) Just try to solve the DNS issues first... correctly working DNS is critical for the rest of the setup, and can save you headaches later on... Michael 2013/6/1 Gary Maurizi > P

Re: [Samba] samba4 & (domain) dfs

2013-05-31 Thread Michael De Groote
ccess to some machines, and for packet capturing on a windows machine, well.. that's way more convenient) it would be awesome if there was a way to have more debugging output from the win7 client, like the way one can do e.g. with smbclient -d 5 2013/5/31 Michael De Groote > grr.. rep

[Samba] Fwd: samba4 & (domain) dfs

2013-05-31 Thread Michael De Groote
grr.. replied to wrong address before :/ *sigh* -- Forwarded message -- From: Michael De Groote Date: 2013/5/31 Subject: Re: [Samba] samba4 & (domain) dfs To: Scott Lovenberg A short update: Using a samba client, i CAN access the dfs shares, so it seems to be a problem

Re: [Samba] Winbind does not update groups

2013-05-29 Thread Michael Schmitz
It is not even installed. So no, im still lost --Mike -Original Message- From: Volker Lendecke [mailto:volker.lende...@sernet.de] Sent: Wednesday, May 29, 2013 2:42 PM To: Michael Schmitz Cc: samba@lists.samba.org Subject: Re: [Samba] Winbind does not update groups On Wed, May 29

[Samba] Winbind does not update groups

2013-05-29 Thread Michael Schmitz
I setup winbind as an authentication method on my Ubuntu server and the only issue I have is when I change a user's group in Active Director it doesn't update after a relogin. It shows up with a wbinfo -G but when I use the groups command or try to operate as a member. The only groups I am in ar

Re: [Samba] smb.conf sync

2013-05-29 Thread Michael Wood
g/~abartlet/ > Authentication Developer, Samba Team http://samba.org -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] smb.conf sync

2013-05-27 Thread Michael De Groote
the config, and trying to wipe the offending entries in the ._msdcs.blablabla zone, it kept spamming my logs every 5 secs about something (which i unfortunately dont remember now) so the simplest route was to reprovision. Lucky for me it was only a test setup :) Michael 2013/5/27 Sandbox >

Re: [Samba] samba4 & (domain) dfs

2013-05-26 Thread Michael De Groote
Bah, i forgot to mention the version: Version 4.1.0pre1-GIT-392b01f 2013/5/26 Michael De Groote > Hi all > > I'm trying to set up dfs for (among other things) profiles (i don't know > if this is a good example, but that is out of the scope of my current > question) &g

[Samba] samba4 & (domain) dfs

2013-05-26 Thread Michael De Groote
Does it just not work yet in samba4 and do i need to be patient? 3. Is there some other logger i need to turn on the see what is going wrong, and if so, what logger would that be? (i could also turn on all on level 10, but i fear i would be swamped...) -- Michael De Groote ICT-coordinator S

Re: [Samba] [Announce] Samba 4.0.6 Available for Download : crash of winbind after ls -la ...sysvol

2013-05-24 Thread Michael Wood
ugs, Our Responsibility. > > == The Samba Team > > == > > > > > > > > Download Details > > > > > > The uncompressed tarballs and patch files have been signed using GnuPG > (ID > > 6568B7EA). The source code can be downloaded > > from: > > > > http://download.samba.org/samba/ftp/stable/ > > > > The release notes are available online at: > > > > http://www.samba.org/samba/history/samba-4.0.6.html > > > > Binary packages will be made available on a volunteer basis from > > > > http://download.samba.org/samba/ftp/Binary_Packages/ > > > > Our Code, Our Bugs, Our Responsibility. > > (https://bugzilla.samba.org/) > > > > --Enjoy > > The Samba Team > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] User policy in samba

2013-05-22 Thread Michael Wood
Hi Sorry, I did not read your e-mail properly. I don't believe it's currently possible in Samba to do this on a per user basis. On 22 May 2013 18:39, Michael Wood wrote: > Samba currently does this via the "samba-tool domain passwordsettings" > command. > >

Re: [Samba] User policy in samba

2013-05-22 Thread Michael Wood
owing URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [Samba4] modifying attributes: no write access to self

2013-05-20 Thread Michael De Groote
*really* need to look into these things called "principals" ... i honestly don't know what i'm playing with here, and i'm kinda ashamed to do so.. so next days i'll be reading up :) micahel 2013/5/20 Michael De Groote > Hi all > > *Context:* >

[Samba] [Samba4] modifying attributes: no write access to self

2013-05-20 Thread Michael De Groote
NAL 05/20/13 10:37:42 05/20/13 19:34:48 ldap/samba4-3.stp4.stp.inter...@stp4.stp.INTERNAL thanx in advance ! -- Michael De Groote ICT-coordinator Sint-Pietersschool Korbeek-Lo ICT-support Sancta Maria Basisschool Leuven -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] frequent tdb corruption

2013-05-16 Thread Michael Wood
filesystem at a time. HAST's homepage says the same: "HAST works in Primary-Secondary (Master-Backup, Master-Slave) configuration, which means that only one of the cluster nodes can be active at any given time." I think Andrew was asking if perhaps you had two machine accessing the file

Re: [Samba] Samba 4.0.0 upgrade to 4.0.5 from source

2013-05-13 Thread Michael De Groote
ischind...@gmx.de > > To: samba@lists.samba.org > > Subject: Re: [Samba] Samba 4.0.0 upgrade to 4.0.5 from source > > > > Am 13.05.2013 11:21, schrieb Michael De Groote: > > > > > (check for 'dns' on the 'server services' line in smb.conf,) > &

Re: [Samba] SSL certificate in SAMBA4 LDAP?

2013-05-13 Thread Michael De Groote
seems like interesting info for the wiki Michael 2013/5/10 Tim Vangehugten > Today I have looked again at the SSL certs from samba and I got them to > work with intermediate certificates. If you want to do this you need to > have to following: > > IntermediateCA.crt &

Re: [Samba] Samba 4.0.0 upgrade to 4.0.5 from source

2013-05-13 Thread Michael De Groote
samba4 from source?! > I read upgrading-samba4.txt before trying to upgrade.Thanks in advance! > > kind regards,Martins > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > --

[Samba] "passwd program" in samba4

2013-05-10 Thread Dr. Michael Cinti
is there anyone who can explain me how to use "passwd program" in samba4 -- *Dr. Michael Cinti* *mi.ci...@ausl.fe.it <mailto:mi.ci...@ausl.fe.it>* U.O. Tecnologia della Comunicazione e della Informazione (I.C.T.) Azienda Usl Ferrara Ospedale del Delta - via Valle Oppio, 2 - 440

Re: [Samba] many smbd processes when sync'ing sysvol

2013-05-07 Thread Michael Mol
On May 7, 2013 4:56 PM, "Alex Matthews" wrote: > > Hi there, > > I have three S4 servers running as AD DCs. > In order to keep the sysvol share in sync I'm using crontab to run the following command: > > /usr/bin/rsync -PavAX --delete root@:/var/lib/samba/sysvol/ /var/lib/samba/sysvol/ > > However

Re: [Samba] ntp and samba4

2013-05-07 Thread Michael Mol
On 05/07/2013 03:25 PM, Andrew Bartlett wrote: > On Mon, 2013-05-06 at 17:15 +0200, Michael De Groote wrote: >> Hi all >> >> Recently i noticed that upon starting the samba4 'samba' daemon, that it >> changes the group ownership of the socket for ntpd to *sta

[Samba] ntp and samba4

2013-05-06 Thread Michael De Groote
(FYI: i'm running this on debian wheezy) I have just added ntp to group staff, but that seems like a workaround... -- Michael De Groote ICT-coordinator Sint-Pietersschool Korbeek-Lo ICT-support Sancta Maria Basisschool Leuven -- To unsubscribe from this list go to the following U

Re: [Samba] passwd program on samba4

2013-05-06 Thread Dr. Michael Cinti
impossible to migrate extra-domain user or changing web services authentication method. I would like to maintain two separate LDAP for user authentication and passwords's sync by "passwd program". Regards Michael Il 05/05/2013 23:03, Marc Muehlfeld ha scritto: Hello Michael, Am 0

[Samba] passwd program on samba4

2013-05-05 Thread Dr Michael Cinti
controller idmap_ldb:use rfc2307 = yes dns forwarder = 192.168.1.1 unix password sync = yes passwd program = /root/mypasswd.sh %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n template shell = /bin/bash I probably forgot some step... Regard

[Samba] [samba4] Build requires libncurses-dev

2013-05-03 Thread Michael De Groote
dependency that will be removed? -- Michael De Groote ICT-coordinator Sint-Pietersschool Korbeek-Lo ICT-support Sancta Maria Basisschool Leuven -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] guest share on a " security = user" server

2013-05-03 Thread Michael Wood
On 3 May 2013 12:42, Michael Wood wrote: [...] > Maybe the "map to guest" option will help you solve your problem? Never mind, I see you've tried that. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.o

Re: [Samba] guest share on a " security = user" server

2013-05-03 Thread Michael Wood
quot;writable = no". It makes no sense to have both specified. Maybe the "map to guest" option will help you solve your problem? -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] Multiple DNS update issues in samba4

2013-05-02 Thread Michael Mol
So far, I have three machines in the domain: kaylee -- the DC. Gentoo. samba 4.0.3 saffron -- client. Gentoo. Samba 3.6.12 wash -- client (Also network router). Debian. Samba 3.5.6 I'm using bind_dlz as a backend, for the record. I've joined saffron to the domain successfully, and the record sho

Re: [Samba] Can't ping on the samba server with it's name

2013-04-30 Thread Michael De Groote
FIrst thing that comes to mind: is the machine that the samba4 AD DC is on also set as primary DNS on the client? A little bit more details about the setup would be welcome (clients receive ip-settings via dhcp? or static ips in a test-env?) Michael 2013/4/21 Ikram Dissem > Hi, > > I

Re: [Samba] Samba 3 dynamically enable or disable share

2013-04-29 Thread Michael De Groote
r the rest of the system. You would still have to configure your other machines to handle disk full failures and maybe subsequently try another share... Michael 2013/4/29 Mauricio Alvarez > Hello, > >I wonder if it is possible to dynamically enable/disable samba 3 > shares. >

Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

2013-04-29 Thread Michael Wood
h 4.0.4, in this case NO problem. > > best regards > philippe > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] SSL certificate in SAMBA4 LDAP?

2013-04-27 Thread Michael Wood
related to samba :) OK, not sure how it works with intermediate CAs. Maybe you need to have both root and intermediate CA certs in ca.pem, but I haven't tried it. > 2013/4/26 Michael Wood >> >> On 25 April 2013 15:38, Tim Vangehugten wrote: >> > Hello, >> >

Re: [Samba] SSL certificate in SAMBA4 LDAP?

2013-04-26 Thread Michael Wood
ght > direction? Yes. Make sure you have the GnuTLS development libraries installed before compiling Samba. Then put your CA cert, cert and key in /usr/local/samba/private/tls. They should be named ca.pem, cert.pem and key.pem. I think you'll also need a DH params file. -- Michael Wood

Re: [Samba] New Windows 8 RSAT and "OU=Domain Controllers" support?

2013-04-23 Thread Michael Wood
W2k8 R2, and all this still >> didn't >> > affect the actual RSAT / ldb: acl_read error at all. The issue >> is still >> > reproducible! >> > >> > I don't know if running the MS adprep tool on the Win

Re: [Samba] Error + Syncing problems

2013-04-23 Thread Michael Wood
DC2 (DC1 was still down). After that I pluged in DC1 > back and restarted samba on it and waited for 5 min. No sync happened back > from DC2 to DC1. Waited 30min, no result > Result: Failure > > Can anyone help me or explain why DC2 won't sync back to DC1? Also can > some

Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

2013-04-22 Thread Michael Wood
Hi On 21 April 2013 14:07, François Lafont wrote: > Hello, > > Le 20/04/2013 20:00, Michael Wood a écrit : > >> As Andrew suggested it would be good if you could run it under >> valgrind and reproduce the crash. > > I don't know valgrind sorry.

Re: [Samba] [samba4] crash of winbind after "ls -l /usr/local/samba/var/locks/sysvol"

2013-04-20 Thread Michael Wood
https://lists.samba.org/mailman/options/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Can we update idmap documentation for 3.6?

2013-04-17 Thread Michael Adam
e. > Can we have a sane effort to publish updated documentation for id > mapping that's relevant to Samba 3.6? Firstly, I do again want to point you to the manual pages shipped with the samba version as the authoritative source of documentation for the release. Secondly, I d

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-17 Thread Michael Wood
remove one of them (e.g. by running "make install") the other one will still be there, pointing to the original file on disk. i.e. hard links point to the actual file. Symbolic links are names that point to other names. -- Michael Wood -- To unsubscribe from this list go to the f

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-17 Thread Michael Wood
Hi On 5 April 2013 17:19, Graeme Porter wrote: > Thanks Michael, I've got my domain controller back! > > I'm now rather distinctly annoyed. I *was* using a symbolic link in /usr/bin > called "samba" that was pointing to /usr/local/samba/sbin/samba - this was &g

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-17 Thread Michael Wood
to the system, so I know it's something to do with the > Samba4 upgrade/install process. The samba build system does not copy things to /usr/bin (unless you fiddle with things like --prefix etc.) How exactly did you make the symlinks? -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] [PATCH] Force python for Samba on platforms with a too old installed python (eg RHEL 5.9)

2013-04-09 Thread Michael Adam
pushed On 2013-04-08 at 18:59 +1000, Andrew Bartlett wrote: > Phil, > > I've tried following your mails, and your trials, but got totally lost. > > So what I've done is write up a patch, which should address the one > issue I've been able to distil out of this, which is that when Samba is > buil

Re: [Samba] Samba4 fails to work following upgrade - library version errors

2013-04-05 Thread Michael Wood
; > The /usr/local/samba folder structure was recreated, but even after > completion, when I type "samba -V" I still get the list of errors above. > > Help! :( It sounds like the "samba" binary on your PATH is the old version. What does the following print: $ which

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop wrote: > ML> Well, it's a lot more work, but you could use the Windows utilities > ML> FILEMON and REGMON to monitor what file and registry access your > ML> applications require on the local machine, and then grant the local > ML> user access to ju

Re: [Samba] Making users local administrators

2013-03-21 Thread Michael Leone
On Thu, Mar 21, 2013 at 11:24 AM, Terry Austin wrote: > On 21 Mar 2013 at 10:29, L.P.H. van Belle wrote: > >> DONT DO IT !! >> >> This is Administrators 1ste rule !! >> NEVER, but then NEVER giver users Administrator/PowerUser rights. > > I have no choice. There's too much stuff out of my control

Re: [Samba] windbindd / AD / DNS Updates

2013-03-21 Thread Michael Arndt
Hello * Volker, thank you for your fast help / answer :-) !!! different question: is there a (nonzero possibility, that an vendor provided samba ( SLES11 SP1 ) could try to trigger DNS Updates, in spite of the server role cited below: testparm Load smb config files from /etc/samba//smb.conf

[Samba] windbindd / AD / machine password

2013-03-21 Thread Michael Arndt
Hello *, would samba / winbindd try to refresh the machine password in an AD / Kerberos Environment ? Details / Versions pls see below. thx Micha Versions: SLES 11 SP1: samba-client-3.4.3-1.17.2 samba-winbind-3.2.7-11.6 samba-3.4.3-1.17.2 smb.conf: wo

Re: [Samba] Samba 4 AD DC and BIND

2013-03-17 Thread Michael Leone
On Sun, Mar 17, 2013 at 5:10 PM, Thomas Simmons wrote: > Ideally you should not use the same domain name for your AD domain. > Microsoft used to use "domain.local" for a default configuration, but this > can cause problems with certain external services (Exchange/Office365 for > example) and it al

Re: [Samba] Making Linux and domain users the same

2013-03-08 Thread Michael DePaulo
Can somebody confirm that idmap_nss works on Samba4 in AD DC mode? If nobody can, I can test it on my Samba 4.0.3 machine. Currently I'm editing idmap.ldb to map domain users to local unix users. FYI, here is the current manpage: http://fossies.org/unix/misc/samba-4.0.3.tar.gz:a/samba-4.0.3/docs/

Re: [Samba] "Samba 4" - "smbd"; "can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL" error but only for a single domain user ("Server 2008 R2" domain, "Server 2008" functional level forest).

2013-03-08 Thread Michael Wood
Hi On 8 March 2013 13:37, Tris Mabbs wrote: > Hiya Michael, > > Many thanks for that - very much appreciated. > > I think I should learn more about "git" than currently I know - however this > is not the time to do so. > So I ran your commands, first not worrying

Re: [Samba] "Samba 4" - "smbd"; "can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL" error but only for a single domain user ("Server 2008 R2" domain, "Server 2008" functional level forest).

2013-03-08 Thread Michael Wood
28 February 2013 15:09 > To: Tris Mabbs > Cc: samba@lists.samba.org > Subject: Re: [Samba] "Samba 4" - "smbd"; "can't parse the PAC: > NT_STATUS_BUFFER_TOO_SMALL" error but only for a single domain user ("Server > 2008 R2" domain, "Ser

Re: [Samba] ldap-query operating system attribute

2013-03-07 Thread Michael Wood
Hi On 7 March 2013 11:40, Ali Bendriss wrote: > Hello, > > On Thursday, March 07, 2013 09:47:21 AM Michael Wood wrote: >> Hi >> >> On 6 March 2013 19:09, Ali Bendriss wrote: >> > On Wednesday, March 06, 2013 06:50:46 PM Michael Wood wrote: >> &g

Re: [Samba] ldap-query operating system attribute

2013-03-06 Thread Michael Wood
Hi On 6 March 2013 19:09, Ali Bendriss wrote: > On Wednesday, March 06, 2013 06:50:46 PM Michael Wood wrote: >> Hi >> >> On 6 March 2013 16:43, Ali Bendriss wrote: >> > Hello, >> > >> > I'm running samba 4.0.3. >> > when I quer

Re: [Samba] ldap-query operating system attribute

2013-03-06 Thread Michael Wood
character (like   in HTML). > For other system, it's fine, I've got "Windows XP Professional", "Mac OS X", > "Windows 7 Professionnel" > I've got only the problem for the 'N' version. > > Could someone let me know if he can

[Samba] Samba 4, dynamic DNS, Kerberos

2013-03-04 Thread Michael Mol
Dynamic DNS updating is failing (which is bizarre, because I could have sworn I'd had it working before). Help? Setup: Samba 4 DC running bind 9.9.2, Samba 3.6.3 member The output of "net -d10 ads join" is attached, compressed. Interesting portions of named.conf: options { (no allow-updates

[Samba] samr_Connect failed

2013-02-27 Thread Michael Wilke
e standard ubuntu samba 4 packages. but it didn't work, so I deleted the computer from ou=Computer in the AD. Any ideas? Best regards Michael Wilke -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] "Samba 4" - "smbd"; "can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL" error but only for a single domain user ("Server 2008 R2" domain, "Server 2008" functional level forest).

2013-02-25 Thread Michael Wood
ode to > dig this problem out - with over 30 years 'C' experience (including working > as a kernel/system developer on "mainstream" Unix) I'm quite happy to dive > in and add code to the source tree, if that would contribute any useful > information. > > > > So can anyone suggest any way forward to resolve this please? It would > appear that something is incorrectly being decoded somewhere, so it's > probably to everyone's advantage to get this sorted out - I know it would > certainly be to mine :-) > > > > Many thanks, and regards, > > > > Tris Mabbs. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] NXDOMAIN dual-stacked, Samba4/Samba 3 AD setup

2013-02-22 Thread Michael Mol
On my network, I'm finding that if I run host saffron on any machine on my network, I see saffron's IPv4 address, but not its IPv6 address. This is true regardless of which joined machine I run. I'd like to figure out how to fix this... For any other machine on the network, host $hostna

Re: [Samba] Centos samba-3x / samba-3.6.6 - win7 will not join domain

2013-02-18 Thread Michael Wood
which are generally not needed on a modern version of Linux and might slow things down. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] S4 Cannot Unlock Account

2013-02-12 Thread Michael Wood
should probably create a bug report in bugzilla with the details. e.g.: * What is userAccountControl set to initially? * Can you log in? What errors do you get? * What you do to "unlock" the account? * What is userAccountControl set to now? * Can you log in? What errors do you get?

Re: [Samba] S4 Cannot Unlock Account

2013-02-12 Thread Michael Wood
values other than 512. A few were 6X - which appears to > be correct as these accounts are set to "never expire". In any event, thank > you. > > > On Tue, Feb 12, 2013 at 11:16 AM, Michael Wood wrote: > >> Hi >> >> On 12 February 2013 16:03, Tho

Re: [Samba] Replication Ok, or not?

2013-02-12 Thread Michael Ray
I just set-up replication this morning and saw a similar situation. I tested it by simply turning off my PDC and seeing what happened -- and everything worked just fine. I then also added a new user to this alternate DC, brought up the PDC, killed the alternate DC after a minute, and checked to

Re: [Samba] S4 Cannot Unlock Account

2013-02-12 Thread Michael Wood
; loginShell: /bin/bash >>> > msDS-SupportedEncryptionTypes: 0 >>> > userAccountControl: 528 >>> > accountExpires: 0 >>> > pwdLastSet: 13005098906000 >>> > userParameters: >>> > IAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgAC >>> > >>> > >>> >>> AAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAUAAEABoACAA >>> > >>> > >>> >>> BAEMAdAB4AEMAZgBnAFAAcgBlAHMAZQBuAHQANTUxZTBiYjAYAAgAAQBDAHQAeABDAGYAZwBGAGwA >>> > >>> > >>> >>> YQBnAHMAMQAwMGUwMDAxMBIACAABAEMAdAB4AFMAaABhAGQAbwB3ADAxMDAwMDAwKgACAAEAQwB0A >>> > HgATQBpAG4ARQBuAGMAcgB5AHAAdABpAG8AbgBMAGUAdgBlAGwAMDA= >>> > whenChanged: 20130211233014.0Z >>> > uSNChanged: 8816 >>> > distinguishedName: CN=Duser M. >>> Scott,CN=Users,DC=internal,DC=domain,DC=com >>> > >>> > # search result >>> > search: 2 >>> > result: 0 Success >>> > >>> > # numResponses: 2 >>> > # numEntries: 1 >>> > >>> >>> It seems that the problem for this user is the userAccountControl >>> attribute >>> having a value of 528 locks the account. Changing it to 512 (what most >>> users are set to) unlocks the account. Is there any way to do this without >>> directly modifying the LDAP entry? >>> >> >> >> >> -- >> >> -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] smbclient fails to connect wuth krb + signing

2013-02-07 Thread Michael Wilke
Dear all, I hope you could assist me in finding a problem with samba and krb connects when packet signing is activated in a domain. I have a samba server as a AD 2k3 domain member and the connects are working well, but when I try to use krb auth to connect to another Windows server in the network

Re: [Samba] AD uid/gid attributes

2013-02-07 Thread Michael Ray
. - Original Message - From: "Michael Ray" To: samba@lists.samba.org Sent: Thursday, February 7, 2013 3:49:01 PM Subject: Re: [Samba] AD uid/gid attributes Here is the solution that worked for me, on the off chance another poor soul has trouble figuring this all out: (That is assumin

Re: [Samba] AD uid/gid attributes

2013-02-07 Thread Michael Ray
example, a user with uidNumber 1001 would not show up in getent passwd) Of course, for this to work, you must also have /etc/nsswitch.conf configured for winbind and /etc/krb5.conf configured for your domain. - Original Message - From: "Michael Ray" To: samba@lists.s

[Samba] AD uid/gid attributes

2013-02-06 Thread Michael Ray
Hey all- I know this kind of post has come up before, but I was unable to get results following previous postings, so if anyone can shed a little light on this, I'd be very grateful: The gist of the situation is this: PDC: Samba4 [4.1.0pre1-GIT-394622e ] Member: Samba3 (being used as a file

Re: [Samba] fail to display xfs quotas instead of smbcquotas on Win clients

2013-02-05 Thread Michael Wood
he > smbcquotas. Is there a way how to do that? Have a look at the "get quota command" option. It might be what you're looking for, or it might be a workaround anyway. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] pam.d conf local logins

2013-02-05 Thread Michael Ray
Hey all, I've got a notion of how I think pam.d works and I used guides online to set-it up correctly on various boxes. However, when I tried this configuration (see link) on Ubuntu 12.04 and joined that machine to the domain, the local logins were taking forever to resolve and the whole machi

Re: [Samba] msdfs proxy question

2013-02-04 Thread Michael Wilke
gt; Tel.: 07071/206-463, Fax: 07071/206-499 > eMail: muel...@tropenklinik.de > Internet: www.tropenklinik.de > --- > > -Ursprüngliche Nachricht- > Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im >

[Samba] msdfs proxy question

2013-02-03 Thread Michael Wilke
- --- ... softwareDisk Software ... If I access the msdfs share from the sec. network (10.10.12.0) with an IP in the first network (10.10.10.0) then the connection redirects me to the gunter server and everything works, but I need a "pr

[Samba] Group Policy Linux Machines

2013-02-01 Thread Michael Ray
Hey all- So linux machines in my domain, served by a Samba4 PDC, show up in the Administrative Tools. I was testing GP to see if it would apply to linux machines -- a basic one, just trying to deny a user from logging in. It does nothing; though from samba-tool, I can verify this policy is lin

Re: [Samba] Questions for minimal AD DC, DNS setup and Posix use

2013-02-01 Thread Michael Wood
On 1 February 2013 13:13, Andrew Bartlett wrote: > On Fri, 2013-02-01 at 10:50 +0200, Michael Wood wrote: >> Hi >> >> On 1 February 2013 04:18, Andrew Bartlett wrote: >> > On Fri, 2013-02-01 at 07:45 +1100, Dewayne Geraghty wrote: >> [...] >> >> An

Re: [Samba] Questions for minimal AD DC, DNS setup and Posix use

2013-02-01 Thread Michael Wood
commenting out any share definitions seems to stop smbd from starting, but I have no idea whether or not that will break anything. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Questions for minimal AD DC, DNS setup and Posix use

2013-01-31 Thread Michael Wood
as something may be in progress. I think tdb is safe for > kill -9 these days, but it has always been best not to do this as a > first choice. I think for the above two questions he's asking how to run the "samba" binary without it spawning irrelevant (to him) things like smbd and winbindd. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

[Samba] problems with samba samba-3.5.10-125.el6.x86_64 on 2.6.32-279.14.1.el6.x86_64

2013-01-30 Thread Michael Schmid
Hi, I am not sure if this is the right eMail-list to ask questions. I have the problem that with a second connect to a samba share the user is authenticated as guest. The first authentication was right done on my own user account. What i am doing wrong ? Thansk Michael [2013/01/02 11:06

Re: [Samba] Samba4 pwdLastSet Attribute

2013-01-30 Thread Michael Wood
screw >>> up my calculations. Is this normal Active Directory behavior? I can alter >>> the script to specifically look for those values and take some action if >>> this is normal behavior - I simply want to make sure. Are there any other >>> cases where pwdLastSet would not be a "proper" AD timestamp? >>> >>> Thanks, >>> Thomas -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Fw: Re: Creating users via Perl Net::LDAP

2013-01-28 Thread Michael Ray
Pablo- >From the linux side, using samba-tool: samba-tool user enable : this enables a specific user samba-tool user setpassword : allows you to set a new password for a user >From the MS side, using AD tools: (in Computers and Users) Right click on user and click 'enable' to allow this

Re: [Samba] Creating users via Perl Net::LDAP

2013-01-28 Thread Michael Ray
Pablo- I'm certainly no expert on the matter, but what comes to mind quickly: is the user account enabled? If it is enabled, is a password set? It may be this simple, as I have just added a user to AD via the windows ldifde tool and he was defined as far as a CN and objectClass. When I look hi

Re: [Samba] Samba3 File Server + Winbind -- AD Authentication Flaky/Inconsistent/Unreliable

2013-01-28 Thread Michael Ray
ate shell'). I'll try to be more diligent for future posts. Thanks Mike Ray - Original Message - From: "Nico Kadel-Garcia" To: "Michael Ray" Cc: samba@lists.samba.org Sent: Friday, January 25, 2013 8:24:26 PM Subject: Re: [Samba] Samba3

[Samba] Samba3 File Server + Winbind -- AD Authentication Flaky/Inconsistent/Unreliable

2013-01-25 Thread Michael Ray
Hey all, So, there are about a billion guides on the interwebs about how to have a samba3 file share authenticate against a samba4 AD. However, I am having two giant problems: one problem is that my problems are not consistent and the second problem is that it isn't working (presently). Lon

[Samba] MS AD Tools

2013-01-23 Thread Michael Ray
Hello all, I'm in the process of trying to get Samba4 up and running as AD for my company. It's been a bumpy, but productive road. However, one thing that I'd like clarification on before we go live (which hopefully isn't too far out), is the use of MS Administrative Tools. The wiki mentione

Re: [Samba] Accsse Deny

2013-01-21 Thread Michael Wood
file. Why? I think this is a red herring. It looks like it's just looking for the en_US.UTF-8 version of the Samba localised messages and not finding them. It shouldn't impact on the behaviour of ntlm_auth. To silence it, you could try something like: export LANG=en_US ntlm_auth ... or

Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Michael Wood
rictly required for Samba 4? > > Many thanks! Try --without-gettext. It should not be required. Sorry I don't have time to try it myself. Also, you might want to try gcc. -- Michael Wood -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

  1   2   3   4   5   6   7   8   9   10   >