[Samba] Fix the Issue Windows 8 cannot join if a example.com domain

2013-06-20 Thread Daniel Müller
Dear all, could anyone approve if the issue windows 8 could not join a samba3 old style dot domain, ex.: 'example.com' would not join-- but 'example' join well!, is solved in any hack? Greetings Daniel --- EDV Daniel Müller Leitung EDV Tropenklinik

[Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Philipp Lies
Hi, I'm trying to get my new samba server running for a few days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and 100 users, all having a unix and a samba NT password stored in the LDAP as well as a User SID

[Samba] how to delete a locked file in smbclient.

2013-06-20 Thread Hu Jing
I have a samba server in linux and two samba client in windows. in window xp, I use jcifs to access the file in samba server. sometimes, a client will lock a file and the other client can't want to delete the file. but the client will delete the locked file unsuccesssfully, this is not my

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Gaiseric Vandal
If I follow correctly the LDAP server is NOT in the domain? The Samba accounts should be using the SID of the Samba PDC not the SID of the LDAP server. This of course means that a Samba member server can't use the same LDAP back end (at least for Samba authentication.) Long and short

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Ricky Nance
You might look into net getlocalsid, net getdomainsid, net setlocalsid and net setdomainsid commands, you may be able to set the samba servers the same as your ldap sid... just a though. Remember, messing around with SID's can cause major issues, so export all sids to file and be ready set them

Re: [Samba] Fix the Issue Windows 8 cannot join if a example.com domain

2013-06-20 Thread Carlos R. Pena Evertsz
Hi Daniel, Try modifying the Network Security: LAN Manager authorization Level. Run SecPol.msc SelectLocal PoliciesSecurity OptionsNetwork Security: LAN Manager authorization Level Double click and change to Send LM NTLM - use NTLMv2 session security if option in the combo box.

Re: [Samba] Samba+LDAP: NT_STATUS_UNSUCCESSFUL because of primary group SID mismatch

2013-06-20 Thread Gaiseric Vandal
OK. I understand (at least a little better.) So the correct behaviour would be for the standalone workgroup machines to say I don't know who DOMAIN/user1 is, so I will map to local user1. The standalone servers should be using LDAP for unix accounts put I don't think you really should

Re: [Samba] Clustered Samba 3.6.6 connection issues

2013-06-20 Thread Adi Kriegisch
Dear Samba Community, (answering my own request) we recently did upgrade our data server cluster from Debian Squeeze (Samba 3.5.6) to Debian Wheezy (Samba 3.6.6). The cluster is configured to act as BDC too. After the upgrade, connecting to the server works for a short while and then users

[Samba] DNS replication and BDCs

2013-06-20 Thread David González Herrera - [DGHVoIP]
Hi, For normal readers you kn ow already my setup, but for those new here, I have a Samba4 PDC and two BDCs one a samba4 and the other a W2k8 R2 machine. Yesterday we had problems with our upstream service provider and my PDC (Backend BIND 9 DLZ) went down for some hours, as you might guess

Re: [Samba] Fix the Issue Windows 8 cannot join if a example.com domain

2013-06-20 Thread Christophe Dezé
hi read this https://www.multifake.net/2013/01/windows-8-not-joining-certain-samba-domains/ Le 20/06/2013 16:25, Carlos R. Pena Evertsz a écrit : Hi Daniel, Try modifying the Network Security: LAN Manager authorization Level. Run SecPol.msc SelectLocal PoliciesSecurity OptionsNetwork

Re: [Samba] Shared drives not writeable

2013-06-20 Thread Chris Nighswonger
No takers? On Thu, Jun 6, 2013 at 12:04 PM, Chris Nighswonger cnighswon...@foundations.edu wrote: I am running Samba 3.6.6 on a Ubuntu 12.10 Samba domain member server. Users are authenticated against a Samba DC running 3.6.9 over an LDAP backend. I have a share configured as show below.

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Fri, 14 Jun 2013, Steve Thompson wrote: I still have an issue with user access to the NFSv4 mount, and a workaround for it, but that's for another time. And now is another time (but I am at the point on giving up on this for now, as it has become a large consumer of time). To reiterate,

Re: [Samba] Fix the Issue Windows 8 cannot join if a example.com domain

2013-06-20 Thread Carlos R. Pena Evertsz
Ok Thank you Christophe On Jun/20/2013 2:38 PM, Christophe Dezé wrote: hi read this https://www.multifake.net/2013/01/windows-8-not-joining-certain-samba-domains/ Le 20/06/2013 16:25, Carlos R. Pena Evertsz a écrit : Hi Daniel, Try modifying the Network Security: LAN Manager

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 15:21 -0400, Steve Thompson wrote: mount -t nfs4 -o sec=krb5 server_fqdn:/data /mnt What do you have in /etc/idmapd.conf What does ps aux | grep rpc give? Can the user browse using nfs3? mount -t nfs3 -o sec=krb5 server_fqdn:/data /mnt Have a look at the gotchas. There's

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Thu, 20 Jun 2013, steve wrote: Thanks for your reply! I am really pulling my hair out over this one, and I don't have that much left :( What do you have in /etc/idmapd.conf The content of this file is correct as far as I understand it, as it works with NFSv3 and NFSv4 with sec=sys:

Re: [Samba] Problems when saving AutoCAD files

2013-06-20 Thread Santiago Pestarini
2013/6/14 Santiago Pestarini santiago...@gmail.com: Hi! I was searching for info about this issue and found almost nothing. So, let's go directly to the matters... - Problem: AutoCAD says You do not have permission to save to this location. when trying to save the file in the samba share

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 16:57 -0400, Steve Thompson wrote: On Thu, 20 Jun 2013, steve wrote: Thanks for your reply! I am really pulling my hair out over this one, and I don't have that much left :( What do you have in /etc/idmapd.conf The content of this file is correct as far as I

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Thu, 20 Jun 2013, steve wrote: Nobody agrees with anything for nfs4, so don't worry! :) And boy oh boy is there a lot of just plain nonsense out there! Ok, that narrows it down to kerberos I suppose. What does the mount look like: rpc.gssd -fvvv and the idmapping: rpc.idmapd -fvvv

Re: [Samba] Problems when saving AutoCAD files

2013-06-20 Thread Jeremy Allison
On Thu, Jun 20, 2013 at 06:15:34PM -0300, Santiago Pestarini wrote: 2013/6/14 Santiago Pestarini santiago...@gmail.com: Hi! I was searching for info about this issue and found almost nothing. So, let's go directly to the matters... - Problem: AutoCAD says You do not have permission to

Re: [Samba] Problems when saving AutoCAD files

2013-06-20 Thread Gaiseric Vandal
Is this on all saves ? Can you do a save as and create a new doc? I had an issue with Office 2003 on Samba 3.0.x , Solaris 10 with ZFS file system.For the 1st 6 saves the MS app would modify the file. Every 7th (?) save MS would delete the file and write a new one. The probably

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread Steve Thompson
On Thu, 20 Jun 2013, John Hodrien wrote: Is it possible that Samba4 includes a large PAC on the kerberos credential and you're going over the limit in kernel? Well, that is a good avenue to explore. The user that I am testing with (me) is only in five groups, but nevertheless I will take a

Re: [Samba] Shared drives not writeable

2013-06-20 Thread steve
On Thu, 2013-06-20 at 15:05 -0400, Chris Nighswonger wrote: No takers? On Thu, Jun 6, 2013 at 12:04 PM, Chris Nighswonger cnighswon...@foundations.edu wrote: I am running Samba 3.6.6 on a Ubuntu 12.10 Samba domain member server. Users are authenticated against a Samba DC running 3.6.9

Re: [Samba] [CentOS] Samba4 and NFSv4

2013-06-20 Thread steve
On Thu, 2013-06-20 at 17:44 -0400, Steve Thompson wrote: On Thu, 20 Jun 2013, John Hodrien wrote: Five minutes later: holy crap! That is it. I took a user in only one group: permission denied. I set the NO_AUTH_DATA_REQUIRED flag in userAccountControl (via ldbedit), and hey presto

[Samba] pdbedit error

2013-06-20 Thread Robert Steinmetz AIA
Samba Version 3.6.3 on Ubuntu 12.04 tbdsam back end. I discovered a couple of accounts we created before the Domain was configured was was an account named administrator intended to be the Smaba Administrator account. In order to change the domain ai ran this command # pdbedit -I DOMAINNAME

Re: [Samba] DNS replication and BDCs

2013-06-20 Thread Marc Muehlfeld
Hello David, Am 20.06.2013 19:55, schrieb David González Herrera - [DGHVoIP]: I would like youi to point me or tell me how do I create a fail-over or high availability system so that when one of the DCs is down the other takes over Auth tasks and obviously DNS. I've thought a solution would be

[SCM] Samba Shared Repository - branch master updated

2013-06-20 Thread Andrew Bartlett
The branch, master has been updated via 88c72fc s4-winbind: Add special case for BUILTIN domain via d4091c5 Fix bug #9166 - Starting smbd or nmbd with stdin from /dev/null results in EOF on stdin from fc13489 build: Build with system md5.h on OpenIndiana