= No
vfs objects = fake_perms
[homes]
path = /home/CORP
read only = No
browseable = No
--
Nick Semenkovich
Laboratory of Dr. Jeffrey I. Gordon
Medical Scientist Training Program
School of Medicine
Washington University in St. Louis
http://nick.semenkovich.com
Complete new user here. Setting up my first samba configuration, using
samba 4.0.6 as a primary domain controller. I have user profiles, network
shares, active directory, and domain controller working. But I can not
understand how to map windows userid to linux userid (and map groupid as
well).
team).
[I hope this helped ... maybe you already know all this stuff, and I
didn't understand your question .. it was fun trying anyway :)]
Good luck.
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Looks like bug https://bugzilla.samba.org/show_bug.cgi?id=9559 which
looks like it'll be fixed in git momentarily.
On Sat, Jun 1, 2013 at 1:59 AM, Gary Maurizi garymaur...@gmail.com wrote:
I just can't seem to get dynamic DNS updates working on CentOS 6.4 with
samba 4.0 .tar.gz from samba.org
Cool -- may be related to a similar issue I'm having with RSAT-created
directors and getfacl:
https://bugzilla.samba.org/show_bug.cgi?id=9842
On Fri, May 31, 2013 at 3:20 AM, Sandbox sandbox...@gmail.com wrote:
Hi,
LIttle update.
As I discovered this problem happens only when you make the
to interpret
** Failed to modify SPNs: https://bugzilla.samba.org/show_bug.cgi?id=9848
All those issues are pretty rare or minor.
Samba4 has been working great as an AD DC! Plus, the dev team is super
responsive if you have a real, significant bug.
- Nick
On Sat, May 25, 2013 at 9:09 AM, Ulrich
/samba/dropbox
read only = No
browseable = Yes
create mask = 664
directory mask = 775
guest ok = Yes
On Sat, May 25, 2013 at 12:08 PM, Ulrich Schneider
m...@ulrichschneider.dewrote:
Could you please post your smb.conf?
That would be great.
Thanks
Am 25.05.13 16:29, schrieb Nick
I think this depends on whether Register this connection's address in DNS
is checked.
See the screenshot at:
http://serverfault.com/questions/303026/what-do-all-the-settings-in-the-advanced-tcp-ip-properties-dns-tab-mean
On Wed, May 15, 2013 at 3:46 PM, Chris Rowson
I've been using Windows 8 with samba4 as an AD DC for a while (on
ubuntu 13.04) with no big issues.
Did you install using the git repo or apt?
My biggest issues were with DNS -- perhaps double-check that DNS
entries are correct and clients are also using the DNS server
on this error?
Is this ... bad? OK? Ignorable?
- Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
/samba_upgradeprovision
Is this tool no longer installed? (Should I file a bug against the
build/install system?)
- Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
+1 for this. Looks like a new dependency that just popped up in the
last few commits.
On Fri, May 3, 2013 at 6:02 AM, Michael De Groote
i...@sint-pietersschool.be wrote:
I tried building the latest master from git on debian wheezy.
It seems to require libncurses-dev.
I thought to add it into
thoughts on debugging / addressing these errors?
I've seen a number of suggestions regarding Samba 3, though I'm not
sure what's applicable to locking in Samba 4.
- Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options
=7366
https://lists.samba.org/archive/samba-technical/2011-January/075596.html
Best,
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
)
ipv4_record : 192.168.0.152
unexpected : DATA_BLOB length=0
On Wed, Apr 10, 2013 at 2:28 PM, Marc Muehlfeld sa...@marc-muehlfeld.de wrote:
Am 10.04.2013 20:29, schrieb Nick Semenkovich:
I'll take a look -- by what mechanism do clients update the AD with their
current
, since many clients are DHCP
assigned.
- Nick
On Wed, Apr 17, 2013 at 10:28 AM, Cristian Saavedra c...@asualcance.comwrote:
Hello
Last week we changed our ip range, every computer was shutdown and
everything is working, but we are still getting the old ip address on the
dns, my version
I also have this problem, using a very recent version from git. (see also:
http://www.mail-archive.com/samba@lists.samba.org/msg124657.html )
Periodically, winbind seems to simply crash, and getent passwd other ops
(e.g. htop) stall.
I'd also be happy to provide any debugging information
-1ubuntu8
- Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
On Wed, Apr 10, 2013 at 1:00 PM, Marc Muehlfeld sa...@marc-muehlfeld.dewrote:
Am 10.04.2013 04:54, schrieb Nick Semenkovich:
- If you look into the zone via the windows DNS snap-in - do you see the
correct IP for this record there?
No, it shows the incorrect record.
If you see
,
htop, etc.) would hang.
dmesg shows:
traps: samba[3728] trap invalid opcode ip:7fbaaff2e780 sp:7fff6859f158
error:0 in libservice.so[7fbaaff29000+7000]
I'll follow up if I can reproduce this, just wanted to start a thread in
case anyone else sees this.
- Nick
--
To unsubscribe from this list
, ttl=1200)
Any thoughts?
The machine (aio1) is definitely at .171 (not .168) and has been for days,
per the DHCP server logs.
Same situation for the ~10 other Windows 8 clients connected to the AD DC.
- Nick
--
To unsubscribe from this list go to the following URL and read the
instructions
samba4 for the IP]
$ dig +short @192.168.0.2 aio1.corp.example.com
192.168.0.168
^^ wrong ^^
The samba4 server's resolv.conf is:
nameserver 192.168.0.2
nameserver 192.168.0.1
search corp.example.com
smb.conf contains:
dns forwarder = 192.168.0.1
Any thoughts on how to debug this?
Best,
Nick
In case this helps anyone else with this issue:
Both these problems were resolved by switching from the Ubuntu/Debian
package (4.0.0+dfsg1-1) to the current git head (c932b139c8).
- Nick
On Fri, Feb 8, 2013 at 7:22 PM, Nick Semenkovich seme...@syndetics.net wrote:
Still can't figure this out
, Samba4 shows no DNS problems, and says Got a dns
update request. All updates allowed. http://pastebin.com/fYrd9F1W
- Nick
On Thu, Feb 7, 2013 at 8:59 PM, Nick Semenkovich seme...@syndetics.net wrote:
I've just configured Samba4 on Ubuntu (4.0.0+dfsg1-1), and can't seem
to get roaming
\\dcname.corp.domain.com\share or \\your_ip\share works?
Check also security tab on folder to set right permsission.
Il 07/02/2013 08.14, Nick Semenkovich ha scritto:
Hi:
I've just configured a Samba 4 install as an AD DC, following the Wiki
page at https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
machine), should that work?
Are there any other special / SRV records that Samba4's internal DNS
server is providing?
Thanks,
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
smb.conf to: http://pastebin.com/DQDkGxsv
Any advice?
Thanks!
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
the clients are Windows 8, I'm logged on as the domain
administrator, and all machine clocks are NTP synced.
Thanks,
Nick
$ cat /etc/samba/smb.conf
[global]
workgroup = CORP
realm = CORP.DOMAIN.COM
netbios name = DCNAME
server role = active directory domain
After searching Google for many days/weeks, I've discovered that apparently NO
ONE on the planet uses Windows 8 w/ roaming profiles and Samba!
Authentication server:
Windows Server 2003 R2 x64
File server:
FreeBSD 9.1
Samba 3.6.9
My configuration file is here:
drive. On the XP machine I am forcing it
yo use NetBIOS over TCP/IP and its WINS server entry is pointing to my
server. Its firewall is open to UDP/TCP 137-139 and 445. The PC is on
192.168.10.120.
Have I got something wrong or is there a problem with Samba?
Regards,
Nick
--
To unsubscribe
Never mind. User error. I'd forgotten to set the DHCP server to hand out
the WINS IP. :(
On 10/11/2012 08:44, Nick Howitt wrote:
Hi,
I've been running Samba 3.5.18 on ClearOS 5.2 for a while now. I have
a server on its own LAN's (192.168.2.0/24 and 192.168.3.0/24) and an
IPSec VPN through
the need/value to delete these temp files is appreciated.
4. Finally, does anyone have suggestions of other things I can try?
thanks very much.
best,
-Nick
[global] (from my smb.conf)
workgroup = CORP
server string = %h server (Samba, Ubuntu)
security = ADS
realm = CORP.xxx.COM
,
-Nick
On Aug 12, 2012, at 6:26 AM, Gémes Géza g...@kzsdabas.hu wrote:
Hi,
Hi all,
I'm still struggling with getting samba 3.6 to use the uids and gids from my
Active Directory 2008 R2 setup. I can see the users, I just can't get their
UIDs mapped onto my linux machine.
I've configured AD
,
-Nick
On Jul 24, 2012, at 4:15 AM, steve wrote:
On 18/07/12 03:52, Nick Triantos wrote:
It looks like uidNumber is the attribute that gets set (I've queried it with
ldapsearch). This is what AD Users Computers sets when I use their GUI to
configure a user.
Hi
How do you get ADUC
It looks like uidNumber is the attribute that gets set (I've queried it with
ldapsearch). This is what AD Users Computers sets when I use their GUI to
configure a user.
thanks,
-Nick
On Jul 17, 2012, at 6:00 PM, Rob Townley wrote:
Precisely what ldap attribute are you setting user id
attributes than the ldap
modules would look for.
cheers,
-Nick
On Jul 18, 2012, at 1:15 AM, steve wrote:
On 18/07/12 03:00, Rob Townley wrote:
Precisely what ldap attribute are you setting user id numbers in AD? You
may want to check. There are numerous attribute names that include uid and
gid
inspecting the code.. Is it
possible for me to map uids in AD but not gids? Currently, I've configured my
users, but not all of my security groups.
thanks,
-Nick
p.s. - This is happening with 3.6.3 on Ubuntu. I've been trying unsuccessfully
to build v3-6-stable from source so I can debug this. Samba
restarting smbd and winbindd, my ID came back as 10 instead of
the expected 1001.
Is there some other element missing from my idmap config CORP sections to
somehow associate it with this specific AD server? Or does the CORP
identifier suffice?
thanks again!
-Nick
On Jul 16, 2012, at 1:57 AM
incorrect, but whenever I've changed that to sfu, I
get no results. The docs are very terse about which is which (I'm using AD from
Windows Server 2008 R2, with the Services for Unix feature installed).
Any other suggestions?
BTW, I do very much appreciate all the help.
thanks,
-Nick
On Jul 16
of things I can try are greatly appreciated.
thanks!
-Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Hi Rowland,
Yes, I've added their unix attributes.
It looks like there is a long-open bug in winbind/samba 3.6.x that may be
causing the error below (https://bugzilla.samba.org/show_bug.cgi?id=8676). I'm
now stuck behind that so I'm trying to downgrade to 3.5.x.
regards,
-Nick
On Jul 11
study of the list over the past few
days, that a large number of questions seem to be focused on connecting samba
with AD. Hopefully this can be made more rock-solid in the future.
regards,
-Nick
On Jul 11, 2012, at 10:50 AM, Rowland Penny wrote:
On 11/07/12 17:38, Nick Triantos wrote:
Hi
, or some other config that needs to be changed beyond the
settings in smb.conf?
thanks again!
-Nick
My updated smb.conf:
workgroup = CORP
security = ADS
#password server = 192.168.77.251
realm = CORP.MYCOMPANY.COM
allow trusted domains = yes
winbind use default domain = yes
winbind
wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user someuser
The relevant parts of my smb.conf are below. I've tried patching this together
from various tuts and help pages. Any guidance would be very helpful.
thanks!
-Nick
[global]
workgroup = CORP
security = ADS
password
I have same situation. Samba 3.5 Ubuntu 11.10.
When user login in
their linux account (desktop environment, or via ssh, or whatever...)
samba password is reset to linux password. This is very annoying if
you wish to keep different passwords.
Can anybody tell me what mechanism set samba
Ok, I found the answer myself:
the mechanism that set samba password same as linux password is pam!
Commenting lines with pam_smbpass.so from /etc/pam.d/common-auth and
/etc/pam.d/common-password solved my problem. Maybe Harmut problem to.
From: Greg Nick
of the configuration somewhere? Any pointers
in the right direction would be most appreciated. smb.conf pasted below.
Regards,Nick
#=== Global Settings ===
[global]
## Browsing/Identification ###
workgroup = SUBDOM security = ads encrypt passwords = true
Jonathan Buzzard wrote:
Any way try adding map untrusted to domain = yes and see if that
helps. See the smb.conf manual page for details, the behaviour changed
in 3.4
That was the trick, thank you!
-ND
--
To unsubscribe from this list go to the
-cts-hmac-sha1-96
aes128-cts-hmac-sha1-96
-=Andrew
So what do your Samba settings look like, then? I tried putting the stuff you
have above into my krb5.conf file, and that doesn't change my ability to
connect to the Samba services from a 2008 machine.
Thanks,
Nick
This e-mail
Nick,
I would suggest looking at your available encryption types available to
Solaris. We ran into this before and this bug supplied a work around
that fixed us.
http://bugs.opensolaris.org/bugdatabase/printableBug.do?bug_id=6534506
If you want to find out the encryption levels
2003, and I'm not
sure what kerberos keytab has to do with remote connections to the machine.
Any hints would be greatly appreciate.
Thanks,
Nick
[2010/08/10 20:05:22, 5] smbd/uid.c:(338)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2010/08/10 20:05:22, 3] smbd/negprot.c:(505)
Requested
take your profile
directory specified in your SAM (NT, Samba, or AD) database and just tack on
the .V2 to get the path of the new profile.
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email is not intended
may have a
firewall or WAN link between the two sites, is it safe and/or useful to use
this option and point the WINS servers at each other?
Thanks, in advance, for any insight!
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended
Try setting the required names to be sticky (i.e. infinite ttl) in the
wins.dat file
that nmbd reads on startup.
Jeremy.
Apologies in advance for the ignorance...what's the best way to go about doing
that??
Thanks,
Nick
This e-mail may contain confidential and privileged
have to shut down the old and
hope the new works correctly. I'm also concerned about a single WINS server
being sufficient.
Thanks for any input!
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email
We have several Samba systems of varying versions joined to our Windows
Server 2008 Active Directory domain. I don't recall having to do
anything special to get it working.
-Nick
On 2010/06/30 at 09:23, jiri.kout...@rb.cz wrote:
Hi,
We have installed Samba version 3.3.7 on AIX server
Various versions - 3.3.x, for the most part, I believe. Are you running Server
2008 or Server 2008 R2?
On 2010/07/01 at 12:30, Indexer inde...@internode.on.net wrote:
On 02/07/2010, at 3:34 AM, Nick Couchman wrote:
We have several Samba systems of varying versions joined to our Windows
: SLES11 2.6.27.45-0.1-xen x86_64
Samba: 3.2.7-11.9.1-2306-SUSE-CODE11
Thanks,
Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email is not intended for you, or you are
not responsible for the delivery of this message
Must be it...I'll have to go run down the source package for this version of
Samba that comes with SLES11 and look for that backport. As soon as I set unix
extensions to no, it started working.
Thanks!!
-Nick
On 2010/06/17 at 11:57, Dale Schroeder d...@briannassaladdressing.com
wrote
(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(5304, 5304, SIGABRT) = 0
--- SIGABRT (Aborted) @ 0 (0) ---
+++ killed by SIGABRT +++
Any ideas what would cause a SIGABRT on this process?
Thanks,
Nick
This e-mail may contain confidential and privileged material for the sole use
On 2010/05/27 at 08:48, Nick Couchman nick.couch...@seakr.com wrote:
I'm having trouble getting a host to join an ADS domain/realm. I have
smb.conf set correctly, with the workgroup, realm, and security = ads
specified. However, when I try to join with the command: net ads join -U
to print out sensitive documents -
e.g. personnel reviews - so that they have a place to print it to that is
password protected and so that it's not sitting on the printer. Most of the
printing we do does not fall under that heading, so having it print immediately
is desirable.
-Nick
file provided by Ricoh does not contain
the option for the Document Server functionality on the copier, so I can't send
jobs to the Hold Queue or document mailboxes on the copier. I'm going to
hit Ricoh up about that one - seems like something that should be in the PPD
file.
-Nick
? The main place where I need the job hold
support is for Windows-based clients, so I need to make sure it works okay
there.
Thanks!
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email is not intended for you
The -o job-hold-until=when option tells CUPS to delay printing until the
when time, which can be one of the following:
Well, I found the option in the Printing Preferences under the Windows
driver, but setting it has no effect - the job prints immediately. Something
else I need to do?
specify the hostname/IP address that they can
talk to for the bi-di support, but the Ricoh drivers seem to rely on the
ability to communicate directly with the printer, and they seem to rely on
Windows to deliver the correct port information to attempt that communication.
-Nick
This e
it and see how you go it can't do any harm.
Will do.
Thanks!
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email is not intended for you, or you are
not responsible for the delivery of this message to the intended
the
old ones. I realize this will break stuff on the filesystem, but am
prepared to fix it by hand.
Thanks,
--
Nick Irvine
IT and Network Administrator
Artona Group
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
things like Standard TCP/IP Ports.
Ideas? Suggestions? Work-arounds? Advice?
Thanks!
-Nick
This e-mail may contain confidential and privileged material for the sole use
of the intended recipient. If this email is not intended for you, or you are
not responsible for the delivery
), duplexing, hole punching, stapling, N-up, etc. I have not tried the
CUPS printer drivers, yet, so perhaps these features get passed through, but
some of those features aren't even present in the PPD file that I use for CUPS.
-Nick
This e-mail may contain confidential and privileged
my smb.conf file below...
Thanks - Nick
[global]
workgroup = MYDOMAIN
passdb backend = tdbsam
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Never
domain logons = No
domain
Hi All,
This is my first post, and I'm new to Samba...
I'm working on a Squid project running on RHEL5.3. Samba v 3.4.5-42 x86 and
have run into a problem. I use Kerberos authentication on my Squid box. After
configuring Squid I joined my RH to my AD domain and then used Samba to
generate a
and it
makes no different it wont save across reboots. Has anyone run into this
behavior before or have any ideas?
Thank you for your time,
Nick Pappin
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
On Fri, Dec 11, 2009 at 8:27 AM, Gaiseric Vandal
gaiseric.van...@gmail.comwrote:
On 12/10/09 14:39, Nick Pappin wrote:
On Tue, Dec 8, 2009 at 4:40 PM, Nick Pappinnpap...@latahfcu.org wrote:
Hey Everyone,
So here is what is going on I have two computers on the same network
On Tue, Dec 8, 2009 at 4:40 PM, Nick Pappin npap...@latahfcu.org wrote:
Hey Everyone,
So here is what is going on I have two computers on the same network
that are both connected to the PDC of a samba domain (on the same network
segment
(1721)
matchname: host name/name mismatch: FOO != FOO.bar.com
Could this be causing my problem and how should I troubleshoot this problem.
Any ideas would be greatly appreciated.
Thanks,
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https
Check out luma it is a graphical ldap editor that allows you to only delete
a certain attribute.
--
W. Nick Pappin
On Wed, Nov 25, 2009 at 6:53 AM, Bruno Steven aspe...@gmail.com wrote:
Hello
I need remove the follow atributes from my user bruno
sambaHomePath: \\PDC-SRV\root
by idmap_rid).
Now, if only I could get
https://bugzilla.samba.org/show_bug.cgi?id=6766 fixed I would be all
set...
On Fri, Nov 13, 2009 at 4:45 PM, Nick t...@2thebatcave.com wrote:
We are in an environment where several AD domains are being
consolidated into one larger domain using sidhistory
We are in an environment where several AD domains are being
consolidated into one larger domain using sidhistory. The samba
winbind configuration is using 'allow trusted domains = no' as we do
not care about what is in the other domains (as well as the problem
that many of them are unreachable
Is it possible for the uid/gid numbers that are generated by the
idmap_rid and idmap_hash to collide if there are a large number of
users or groups? I cannot seem to find any documentation on the
limitations of these plugins. Before using I want to make absolutely
sure that there won't be any
be logged at the default log level.
Cheers
Nick Boyce
--
Leave the Olympics in Greece, where they belong.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Ok so my understanding is you need to have add user script and add group
script set up on all of the DC's however you can have them pointing to one
server.
--
W. Nick Pappin
IT Staff
Latah Federal Credit Union
208.874.4394
On Tue, Oct 13, 2009 at 11:06 AM, Mariano Absatz el.b...@gmail.com wrote
still having the problem? If so can you try to do a rename from My
Computer - Properties and pastebin the /var/log/samba/log.smbd file for the
five minutes around when you do it. And can you pastebin your smb.conf.
Nick
--
To unsubscribe from this list go to the following URL and read
.
On Sun, Sep 20, 2009 at 6:45 PM, Nick t...@2thebatcave.com wrote:
Has anyone thus far used the machine account to perform ldap queries
to the active directory ldap server? Essentially what I am trying to
do is have some cron scripts perform ldap queries to the AD server to
get things like
Has anyone thus far used the machine account to perform ldap queries
to the active directory ldap server? Essentially what I am trying to
do is have some cron scripts perform ldap queries to the AD server to
get things like account status and such. I realize that technically
the AD server can be
I think that half a meg should always be more than enough text even if you
attach a pcap or a log file. If it is going to be over 512K it needs to go
into a bug report.
--
W. Nick Pappin
On Wed, Jul 22, 2009 at 6:10 PM, Adam Tauno Williams awill...@whitemice.org
wrote:
On Wed, 2009-07-22
the security risk that comes with doing it this way.
Thanks for the help,
Nick
--
W. Nick Pappin
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
the
wrong security descriptor and you should be using user and not ads.
--
W. Nick Pappin
On Wed, Jul 1, 2009 at 12:21 AM, Alessandro Tinivelli
alessandro.tinive...@monrif.net wrote:
yes, i'm in security = ADS.
The client computer interested in the problem is out of the domain, logged
documented here;
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#acctm
gmttools
Nick Sharp | Systems Engineer
Valuation Exchange Pty Ltd
Level 11, 100 Waymouth Street, Adelaide SA 5000
P : 1300 660 051 | F : 1300 550 167 | D : 08 8104 8812
nick.sh...@valex.com.au
to be individual to each server. So I am wondering how should
I be copying these from my pdc should I just have the pdc overwrite
everything or should I have the bdc create the files as well and have it run
with its own files?
--
W. Nick Pappin
On Thu, Jun 25, 2009 at 1:55 AM, Daniel Müller muel
that the file needs to be moved to all of the other servers or does it even
matter if this file is the same on the pdc and the bdc because the bdc
doesnt do account policy enforcement. However how does this effect the other
files such as ntdrivers.tdb or registry.tdb.
--
W. Nick Pappin
IT Staff
Latah
each of these files do? I was hoping that someone could do a brief sentence
or two about what each of these files do. Thanks for the help.
--
W. Nick Pappin
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
I have an annoying problem I'm hoping to get some guidance on.
I am able to use winbind with our local domain, however it does not work
with a remote trusted domain (it works fine for a local trusted domain).
From the looks of things, winbind requires port 445 or 139 to be open to the
remote
The first problem I think you are running into is you are using a smbpasswd
backend. Unfortunatly this doesn't have the support for the attributes you
need to run a domain. To fix this you need to be running a TDBSAM backend.
You would probably find the samba 3 by example handy, (
\Software\Microsoft\Windows\CurrentVersion\Explorer\User
Shell Folders]
Personal=h:\\
My Pictures=h:\\My Pictures
My Music=h:\\My Music
Assuming h: is the users mapped drive letter.
Nick
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org
I've came across what appears to be a bug, but I wanted to get some feedback
on the list before reporting it to make sure I'm not doing something
stupid. I'm using 3.2.7.
I see that when I do getent passwd, I get an entry like this:
testuser:*:1000:20:Test User:/home/poo/testuser:/bin/bash
But
Is there a way to completely disable trusted domains in samba/winbind? Some
of the trusted domains are inaccessible to the client machines, which causes
winbind not to work due to all the timeouts/errors. I tried setting allow
trusted domains = no, but when looking at the debug logs it's obvious
policy. Samba doesn't know how to stop
workstations using usb. You cannot use samba for Group Policy.
--
Regards
Nick Sharp
e [EMAIL PROTECTED]
p 08 8373 5522
--
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
http://www.pcc-services.com/articles/implement_sys_policies.html is pretty
good (linked from the samba policies page) I'm testing it right now!
--
Regards
Nick Sharp
e [EMAIL PROTECTED]
p 08 8373 5522
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
. The secondary (with winbindd) has no configuration for ldap
in smb.conf but users authenticate against their domain credentials.
man windbindd
--
Regards
Nick Sharp
e [EMAIL PROTECTED]
p 08 8373 5522
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
FC Mario Patty
1 - 100 of 237 matches
Mail list logo