Questions tagged [samba4]

Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.

377 questions
1
vote
4 answers

Samba 4: domain joined, but all users are mapped to nobody, and shares are inaccessible from Windows clients

I've got a Debian/Jessie Samba 4.2.14 running as an AD member. ADC is a Windows2008R2 server. Join worked without problem. # net ads testjoin Join is OK wbinfo -u and wbinfo -g work perfectly and provides a list of users and groups from the AD as…
wazoox
  • 6,918
  • 4
  • 31
  • 63
1
vote
2 answers

Samba4: Possible to build a AD Forest

currently I have to set up a completly new AD infrastructure. Right now most parts in that company are run by NT-DCs untill now. I bought a new Server installing a Samba 4 (Version 4.3) domain controller on it and started to migrate all user…
1
vote
0 answers

radius authentication -- spiking load ever two hours on the hour

We're using freeradius & winbindd in order to authenticate our EDUROAM Wifi users against the Active Directory domain. This is working like a charm, but we get load-spikes of 30 and more almost every two hours on the hour (during the work hours, at…
Ralf Hildebrandt
  • 489
  • 1
  • 3
  • 12
1
vote
0 answers

Samba4: Set unix properties of account

I've upgraded to samba4 (4.3) and now I can use the samba-tool to create users, add them to groups, ... but I can't set the unix attributes of user account. I tried looking around samba-tool but I haven't found any way to do it. SSSD is configured…
Jure1873
  • 3,702
  • 1
  • 22
  • 28
1
vote
1 answer

Samba 4 unix user != samba user

this may be an easy one for the samba pros out there: I have an archlinux box up and running as an samba 4 AD which works as expected. I want to add an user to the samba which lead me to 2 different solutions: Creating a samba only user with…
chrstnwhlrt
  • 325
  • 6
  • 15
1
vote
1 answer

SELinux rules in CentOS 7 with Samba and SSSD on Kerberos Ticket generation

I've built a simple File Server with Samba and Netatalk running on CentOS 7.2. Everything is working as expected except for SELinux that's denying Samba to authenticate due to a policy of denying writes on /var/tmp for the Kerberos Ticket. This is…
Vinícius Ferrão
  • 5,520
  • 11
  • 55
  • 95
1
vote
1 answer

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated by easyRSA or OpenSSL). Can somebody please guide…
Mohammed Noureldin
  • 541
  • 1
  • 11
  • 25
1
vote
1 answer

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e.g. realm, server address) and it does everything…
JCCyC
  • 680
  • 3
  • 13
  • 24
1
vote
1 answer

Samba is ignoring file and directory create permissions

I am trying to create a SAMBA share but as usual I get a bunch of permissions problems. Here is my setup: [global] workgroup = WORKGROUP security = user map to guest = bad user guest account = nobody #logging…
getack
  • 61
  • 8
1
vote
1 answer

Samba 4x netlogon scripts not executing on Windows 7

I am in the process of migrating a domain configuration to another server, I am able to connect to the domain, and log in, plus get my X: drive, which is just the users home drive. The previous machine was set up by someone else, but I have found…
tdoc210
  • 23
  • 1
  • 5
1
vote
2 answers

Can a Unix host obtain Kerberos keytabs for another host from Active Directory?

We use Puppet to configure our servers, but creating Kerberos keytabs for them is currently a manual process. We would like the Kerberos keytabs of the Unix machines to be automatically generated, when the machine is first bootstrapped. The various…
Mikhail T.
  • 2,338
  • 1
  • 24
  • 55
1
vote
0 answers

How to map domain users to a specific UID/GID in function of their domain groups?

I have a samba 4.4.3 file server set up as AD domain member. My current smb.conf file is: [global] workgroup = MYDOMAIN realm = MYDOMAIN.ROOT security = ADS encrypt passwords = yes idmap config *:backend =tdb idmap config *:range =…
user368507
  • 109
  • 5
1
vote
1 answer

Samba operations return NT_STATUS_INVALID_SID after initial setup

I am setting up Samba as sole AD controller for a new domain following the official instructions. Everything appears to go fine with the domain provisioning, and I can get a kerberos ticket with kinit just fine; after that, however, things fail: $…
Andrew
  • 1,134
  • 3
  • 10
  • 16
1
vote
0 answers

Check status of samba4 in debian

In samba3, I can use command /etc/init.d/samba status to check status of samba service. But in samba4, that command does not exist. So I want to ask how to check status of samba4?
Waveter
  • 564
  • 2
  • 6
  • 23
1
vote
0 answers

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would be to import the 2008R2 CA into Samba. I managed…