Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.
Questions tagged [samba4]
377 questions
1
vote
4 answers
Samba 4: domain joined, but all users are mapped to nobody, and shares are inaccessible from Windows clients
I've got a Debian/Jessie Samba 4.2.14 running as an AD member. ADC is a Windows2008R2 server. Join worked without problem.
# net ads testjoin
Join is OK
wbinfo -u and wbinfo -g work perfectly and provides a list of users and groups from the AD as…

wazoox
- 6,918
- 4
- 31
- 63
1
vote
2 answers
Samba4: Possible to build a AD Forest
currently I have to set up a completly new AD infrastructure. Right now most parts in that company are run by NT-DCs untill now.
I bought a new Server installing a Samba 4 (Version 4.3) domain controller on it and started to migrate all user…

Christian Heß
- 19
- 1
- 2
1
vote
0 answers
radius authentication -- spiking load ever two hours on the hour
We're using freeradius & winbindd in order to authenticate our EDUROAM Wifi users against the Active Directory domain.
This is working like a charm, but we get load-spikes of 30 and more almost every two hours on the hour (during the work hours, at…

Ralf Hildebrandt
- 489
- 1
- 3
- 12
1
vote
0 answers
Samba4: Set unix properties of account
I've upgraded to samba4 (4.3) and now I can use the samba-tool to create users, add them to groups, ... but I can't set the unix attributes of user account.
I tried looking around samba-tool but I haven't found any way to do it. SSSD is configured…

Jure1873
- 3,702
- 1
- 22
- 28
1
vote
1 answer
Samba 4 unix user != samba user
this may be an easy one for the samba pros out there:
I have an archlinux box up and running as an samba 4 AD which works as expected. I want to add an user to the samba which lead me to 2 different solutions:
Creating a samba only user with…

chrstnwhlrt
- 325
- 6
- 15
1
vote
1 answer
SELinux rules in CentOS 7 with Samba and SSSD on Kerberos Ticket generation
I've built a simple File Server with Samba and Netatalk running on CentOS 7.2. Everything is working as expected except for SELinux that's denying Samba to authenticate due to a policy of denying writes on /var/tmp for the Kerberos Ticket.
This is…

Vinícius Ferrão
- 5,520
- 11
- 55
- 95
1
vote
1 answer
Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem
I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem.
And now I want to use the same CA of samba to sign the new certificates (maybe generated by easyRSA or OpenSSL).
Can somebody please guide…

Mohammed Noureldin
- 541
- 1
- 11
- 25
1
vote
1 answer
Easier method of setting up Winbind auth in LMDE?
Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e.g. realm, server address) and it does everything…

JCCyC
- 680
- 3
- 13
- 24
1
vote
1 answer
Samba is ignoring file and directory create permissions
I am trying to create a SAMBA share but as usual I get a bunch of permissions problems.
Here is my setup:
[global]
workgroup = WORKGROUP
security = user
map to guest = bad user
guest account = nobody
#logging…

getack
- 61
- 8
1
vote
1 answer
Samba 4x netlogon scripts not executing on Windows 7
I am in the process of migrating a domain configuration to another server, I am able to connect to the domain, and log in, plus get my X: drive, which is just the users home drive. The previous machine was set up by someone else, but I have found…

tdoc210
- 23
- 1
- 5
1
vote
2 answers
Can a Unix host obtain Kerberos keytabs for another host from Active Directory?
We use Puppet to configure our servers, but creating Kerberos keytabs for them is currently a manual process. We would like the Kerberos keytabs of the Unix machines to be automatically generated, when the machine is first bootstrapped.
The various…

Mikhail T.
- 2,338
- 1
- 24
- 55
1
vote
0 answers
How to map domain users to a specific UID/GID in function of their domain groups?
I have a samba 4.4.3 file server set up as AD domain member.
My current smb.conf file is:
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.ROOT
security = ADS
encrypt passwords = yes
idmap config *:backend =tdb
idmap config *:range =…

user368507
- 109
- 5
1
vote
1 answer
Samba operations return NT_STATUS_INVALID_SID after initial setup
I am setting up Samba as sole AD controller for a new domain following the official instructions. Everything appears to go fine with the domain provisioning, and I can get a kerberos ticket with kinit just fine; after that, however, things fail:
$…

Andrew
- 1,134
- 3
- 10
- 16
1
vote
0 answers
Check status of samba4 in debian
In samba3, I can use command /etc/init.d/samba status to check status of samba service. But in samba4, that command does not exist. So I want to ask how to check status of samba4?

Waveter
- 564
- 2
- 6
- 23
1
vote
0 answers
Import Windows 2008R2 .p12 certificate into Samba4 SDC
In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would be to import the 2008R2 CA into Samba. I managed…

llgxela
- 11
- 1