Re: [Samba] Samba 4 as member server

2013-08-06 Thread Klaus Rörig
Hi Steve, when I start samba without the 'server services' optinion I get: At this time the 'samba' binary should only be used for either: 'server role = active directory domain controller' or to access the ntvfs file server with 'server services= +smb' oder the rpc proxy with 'dcerpc

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
On Tue, 2013-08-06 at 09:21 +0200, Klaus Rörig wrote: But there are no smb/nmbd/winbindd binaries. Hi Oh, I see. The Ubuntu packages must only be for AD then. Sorry, I missed that you only wanted ntvfs. -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Klaus Rörig
OK, than I have to use the Samba 3.6 packages shipped with Ubuntu. Anything special I have to care about? Am 06.08.2013 09:33, schrieb steve: On Tue, 2013-08-06 at 09:21 +0200, Klaus Rörig wrote: But there are no smb/nmbd/winbindd binaries. Hi Oh, I see. The Ubuntu packages must only be for

[Samba] Samba4 using existing DNS and LDAP

2013-08-06 Thread Olivier Nicole
Hi, I have been using Samba3 (and 2) for years, with an openLDAP backend for authentication. This is working fine, my directory includes a number of local settings for my specific needs. Now I would like to move to Samba4. I understand that Samba4 comes with its own DNS and LDAP servers. By

Re: [Samba] TLS between winbind and openldap

2013-08-06 Thread thierry DeTheGeek
Hi, I found a possible workaround to my issue myself. It seems to be working. After reading one more time about ldap.conf I tried to export environment variables to set my private key and my certificate. This seems to be working on both debian 6 and debian 7: I dommented out TLS_KEY and

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
On Tue, 2013-08-06 at 10:57 +0200, Klaus Rörig wrote: OK, than I have to use the Samba 3.6 packages shipped with Ubuntu. Anything special I have to care about? Hi, no, but as you have only a few clients, it may be simpler to use the dc itself as file server, especially as you have specified

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Klaus Rörig
Hi, it seems that the ntvfs module is not working on Ubuntu, I get lots of error messages about this. I don't see Samba4 servers on network neighborhood, so users cannot browses shares but I do see Samba3 servers, so I have to get Samba3 working with Samba4. Or I have to build Samba4 by

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
On Tue, 2013-08-06 at 12:36 +0200, Klaus Rörig wrote: Hi, it seems that the ntvfs module is not working on Ubuntu, I get lots of error messages about this. I don't see Samba4 servers on network neighborhood, so users cannot browses shares but I do see Samba3 servers, so I have to get

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Klaus Rörig
Hi! I set up s3 on the fileserver now but I cannot connect to my share. 'wbinfo -u' lists all user 'wbinfo-g' lists all groups getent also list the queried user. But when I try to connect from Win7 to my s3 share, it asks for creds but does not accept any. I cannot see any log entries.

Re: [Samba] Samba 4 as member server

2013-08-06 Thread steve
On Tue, 2013-08-06 at 14:34 +0200, Klaus Rörig wrote: Hi! I set up s3 on the fileserver now but I cannot connect to my share. 'wbinfo -u' lists all user 'wbinfo-g' lists all groups getent also list the queried user. But when I try to connect from Win7 to my s3 share, it asks for

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Klaus Rörig
Hi! Authentication works when I set 'password server = server01', but then testparm complains: WARNING: The setting 'security=ads' should NOT be combined with the 'password server' parameter. (by default Samba will discover the correct DC to contact automatically). But Samba doesn't. DNS is

Re: [Samba] TLS between winbind and openldap

2013-08-06 Thread Gaiseric Vandal
Did you try using LDAPS (ldap over SSL, typically on port 636.) I can't speak specifically about it with winbind BUT I have found that in other situations LDAPS creates less headaches with CA cert issues. On 08/06/13 05:27, thierry DeTheGeek wrote: Hi, I found a possible workaround to

Re: [Samba] Samba 4 as member server

2013-08-06 Thread Ricky Nance
How does your /etc/krb5.conf file look? On Tue, Aug 6, 2013 at 2:21 PM, Klaus Rörig kroe...@gmail.com wrote: Hi! Authentication works when I set 'password server = server01', but then testparm complains: WARNING: The setting 'security=ads' should NOT be combined with the 'password server'

Re: [Samba] Samba 4 internal DNS - how to modify SOA record

2013-08-06 Thread Rustam K.
Hello, I have the very same problem, does anybody know a way? I am thinking of converting to BIND, modifying and then converting it back to Internal DNS implementation. Hello. How could one modify a SOA record in rc3? For example, NS part (not NS record) of SOA record points to an absent

Re: [Samba] Samba 4 internal DNS - how to modify SOA record

2013-08-06 Thread Dmitry Khromov
How could one modify a SOA record in rc3? For example, NS part (not NS record) of SOA record points to an absent Windows server. This effectively breaks DNS updates, since there is no such server and if corresponding A record is added, update requests from clients will come unsigned.

Re: [Samba] Samba4 using existing DNS and LDAP

2013-08-06 Thread Alex Ferrara
Hi Olivier, I had a similar situation for many of my clients, and I am not anywhere near the end of it yet. I can offer some of my experience though. The upgrade procedure is documented in https://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTO and I ended up using

Re: [Samba] Debian Package Updates

2013-08-06 Thread Alex Ferrara
Hi Andrew, Would it be possible to upload the packages to the samba team ppa? Sent from my iPhone On 05/08/2013, at 10:28 AM, Andrew Bartlett abart...@samba.org wrote: On Fri, 2013-08-02 at 14:41 +0100, Dominic Evans wrote: The debian package of samba4 is still sitting at 4.0.3 in

Re: [Samba] Samba 4 internal DNS - how to modify SOA record

2013-08-06 Thread Matthieu Patou
On 08/06/2013 02:34 PM, Rustam K. wrote: Hello, I have the very same problem, does anybody know a way? I am thinking of converting to BIND, modifying and then converting it back to Internal DNS implementation. Did you had a look at samba-tool dns update to do this ? Kai has a good experience

Re: [Samba] Samba4 using existing DNS and LDAP

2013-08-06 Thread Matthieu Patou
On 08/06/2013 02:08 AM, Olivier Nicole wrote: Hi, I have been using Samba3 (and 2) for years, with an openLDAP backend for authentication. This is working fine, my directory includes a number of local settings for my specific needs. Now I would like to move to Samba4. I understand that Samba4

[SCM] Samba Shared Repository - branch master updated

2013-08-06 Thread Günther Deschner
The branch, master has been updated via 8b1a214 s3-netlogon: Connecting with the system token should be sufficient. via 4520787 s3-rpc_server: Grant the system token full access. via 0ede70c libcli: Add security_token_system_privilege(). from eb50fb8