[Samba] OpenSSH auth in SAMBA4 LDAP

2013-08-25 Thread Bruno Vane
Hi, I have some Ubuntu LTS servers running openssh server authenticating to external openldap. I installed a new Ubuntu LTS server with Samba4 to create a domain and is working very well. I managed to make a pfsense firewall authenticate users in this Samba4 ldap. How to make openssh in Ubuntu

Re: [Samba] OpenSSH auth in SAMBA4 LDAP

2013-08-25 Thread Marc Muehlfeld
Hello Bruno, Am 25.08.2013 09:27, schrieb Bruno Vane: I have some Ubuntu LTS servers running openssh server authenticating to external openldap. I installed a new Ubuntu LTS server with Samba4 to create a domain and is working very well. I managed to make a pfsense firewall authenticate users

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread steve
On Sat, 2013-08-24 at 23:02 +, dahopk...@comcast.net wrote: Notice that the group id and uid are both different. Why? How did you provision the second DC? Are they replicating OK? When they are, both DC's need: idmap_ldb use:rfc2307 = Yes in the [global] of their smb.conf On either DC,

Re: [Samba] smbd looking for non existent files

2013-08-25 Thread Michael Wood
On 24 August 2013 22:39, steve st...@steve-ss.com wrote: On Sat, 2013-08-24 at 20:57 +0200, Michael Wood wrote: Hi On 24 August 2013 19:05, steve st...@steve-ss.com wrote: Hi 4.0.8 file server in a 4.0.8 domain After a user logs in on a Linux client which is

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread steve
On Sat, 2013-08-24 at 23:27 +, dahopk...@comcast.net wrote: A quick follow-on ... if I examine the local sam.ldb on the server2 via ldbedit, it appears the information is correct, but wbinfo still reports different numbers: Replication OK then. wbinfo -i Test24.User

[Samba] Set User cannot change password from command/script

2013-08-25 Thread Jacobo221
Hi, We implemented a Samba4 server which syncs hourly with a database containing (among lots of other data) a list of users with their passwords, etc. So far everything works fine except that users shouldn't be allowed to change their samba4 password from within Windows, but only through the

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread Rowland Penny
On 25/08/13 08:56, steve wrote: On Sat, 2013-08-24 at 23:02 +, dahopk...@comcast.net wrote: Notice that the group id and uid are both different. Why? How did you provision the second DC? Are they replicating OK? When they are, both DC's need: idmap_ldb use:rfc2307 = Yes in the [global]

[Samba] adding samba4 member to samba4 domain

2013-08-25 Thread Christian Huldt
I'm having some problems I don't quite understand adding a samba4 member to a samba4 domain. The member joins without problems, but no one can login. I'm guessing it might be an idmap problem (well, see below for more details) - the login server is several times updated, and started using

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread dahopkins
Steve and Rowland, Thanks! I checked smb.conf on both servers and they are identical except for the netbios name. I still get different uid/gid numbers between the servers with wbinfo, even for accounts such as mine (dhopkins) that have been active for years (previous ldap+samba

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread Rowland Penny
On 25/08/13 15:06, dahopk...@comcast.net wrote: Steve and Rowland, Thanks! I checked smb.conf on both servers and they are identical except for the netbios name. I still get different uid/gid numbers between the servers with wbinfo, even for accounts such as mine (dhopkins) that have been

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread dahopkins
Hi, could you please post the smb.conf from both the RHEL5.9 Ubuntu 12.04 fileservers I made minimal changes to either of these. Just noticed that on the RHEL5.9/Samba3 fileserver that I don't have idmap_ldp:use rfc2307 = yes, but that system is working correctly (at least in the sense

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread Rowland Penny
On 25/08/13 15:36, dahopk...@comcast.net wrote: Hi, could you please post the smb.conf from both the RHEL5.9 Ubuntu 12.04 fileservers I made minimal changes to either of these. Just noticed that on the RHEL5.9/Samba3 fileserver that I don't have idmap_ldp:use rfc2307 = yes, but that

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread dahopkins
Hello, I am not surprised that you are getting different uids gids, you do not seem to have anything in smb.conf to pull the uidNumber gidNumber from the AD server, unless you are using sssd. You can either use Steve's original nlscd setup, or install sssd or use winbind. If you use

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread Rowland Penny
On 25/08/13 16:16, dahopk...@comcast.net wrote: Hello, I am not surprised that you are getting different uids gids, you do not seem to have anything in smb.conf to pull the uidNumber gidNumber from the AD server, unless you are using sssd. You can either use Steve's original nlscd setup,

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread dahopkins
Hi, Where does Windows 2008R2 fit into this setup, is it in the same domain? is it the primary AD server? It is a member server in the same domain on which we ran ADUC. It was a member of the prior samba3/LDAP authentication system. I can now log back onto this server and launch ADUC.

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread Rowland Penny
On 25/08/13 16:52, dahopk...@comcast.net wrote: Hi, Where does Windows 2008R2 fit into this setup, is it in the same domain? is it the primary AD server? It is a member server in the same domain on which we ran ADUC. It was a member of the prior samba3/LDAP authentication system. I can now

Re: [Samba] Problem authenticating from standalone servers via Samba 3.0.34 domain member servers to Samba 3.2.5 domain controller

2013-08-25 Thread Eric Shubert
I think I've come across this same problem, although I'm migrating from 3.0.33 (CentOS5) to 3.6 (CentOS6). I've migrated the domain controller from 3.0.33 to 3.6 first. I dumped and restored the passwd, secrets and schannel_store tdb files from 3.0 to 3.6, and also migrated the linux accounts

Re: [Samba] Odd Samba 4 (4.2.0pre1-GIT-b505111; actually only using client) behaviour #2 - accept: Software caused connection abort.

2013-08-25 Thread Tris Mabbs
Probably should have posted this to samba-technical in the first place, so re-posting in case anyone has any useful ideas . From: Tris Mabbs Sent: 12 August 2013 23:08 To: 'samba@lists.samba.org' Subject: Odd Samba 4 (4.2.0pre1-GIT-b505111; actually only using client)

Re: [Samba] Odd Samba 4 (4.2.0pre1-GIT-b505111; actually only using client) behaviour #1 - Could not fetch trust account password for domain ....

2013-08-25 Thread Tris Mabbs
So after much playing around, leaving and re-joining, etc. I am now at the stage where I can successfully use wbinfo to map UID to SID and back again. However I am still getting log files filled (sometimes many, many entries per second) with lines such as:

Re: [Samba] issue with multiple Samba DC and uid/gid assignment.

2013-08-25 Thread steve
On Sun, 2013-08-25 at 17:03 +0100, Rowland Penny wrote: On 25/08/13 16:52, dahopk...@comcast.net wrote: Hi, Where does Windows 2008R2 fit into this setup, is it in the same domain? is it the primary AD server? It is a member server in the same domain on which we ran ADUC. It was a

Re: [Samba] OpenSSH auth in SAMBA4 LDAP

2013-08-25 Thread Bruno Vane
Hello Marc, Yes I read these sections, but I want something different. Users will join on AD domain (Samba 4) and will connect to an entry SSH server, and from this server they can access other SSH servers on the network. All SSH servers are configured with /etc/hosts.allow to allow SSH

autobuild: intermittent test failure detected

2013-08-25 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-08-25-0942/flakey.log The samba3 build logs are available here:

autobuild: intermittent test failure detected

2013-08-25 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-08-25-1336/flakey.log The samba3 build logs are available here: