Questions tagged [samba4]
Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.
376
questions
0
votes
0
answers
58
views
Use Samba AD DC as Password Backend for Samba PDC
I've got the following situation:
Old Samba-server data.company.com Version 4.6.7
Configured as a PDC with workgroup = COMPANY for a population of Windows hosts with the following configuration:
[...
0
votes
1
answer
104
views
Active Directory Win2k19 DNS record refused
I am migrating a Samba domain to AD on Windows 2k19. The domain successfully replicated, and I transferred 5 of the 7 Samba FSMOs (there are 2 additional FSMOs that Samba claimed that Active ...
- 61
0
votes
0
answers
131
views
How to synchronize OpenLDAP and Samba4?
I have a samba 4 domain with internal LDAP. Now the need arose to copy OpenLDAP users and passwords to this domain. This copy must be made synchronously every time there is a change in OpenLDAP. ...
- 17
1
vote
0
answers
740
views
How do I use Group Policy to sync client time in an Active Directory domain with an external NTP server and not the domain controller?
I have an Active Directory domain, with a domain controller running on Samba on Linux.
I noticed that my Windows clients are having clock drift. I think this is because they really want the domain ...
- 323
0
votes
0
answers
289
views
Samba Windows ACL not working
I want to configure Samba to manage Windows ACL and manage them from Windows via the security tab.
The Samba server is standalone and not part of an AD tree; i already followed various offical and ...
- 101
0
votes
0
answers
74
views
Samba AD: huge DNS files in /var/lib/samba/{bind-dns/dns,private}/sam.ldb.d/
We have a small Samba AD server with around 20 users and 70 machines (including phones, printers, etc.).
The DC=DOMAINDNSZONES... .ldb files under /var/lib/samba/private/sam.ldb.d/ and /var/lib/samba/...
- 4,212
0
votes
0
answers
84
views
Guest Access to Samba server from two different machines
I've setup Samba 4.16.8 on a FreeBSD server with guest access, and found only one machine can connect at a time.
I can connect from the server using:
smbclient //172.16.23.24/worklist -U %
Then if I ...
- 327
0
votes
0
answers
97
views
Unable to change domain password from Windows 11 with samba4 domain controller
I've set up a samba dc on Ubuntu and connected successfully a blanc win 11 vm. Everything works fin so far, but when I try to change the password in that win11 vm using ctrl+alt+del, it does not work, ...
- 1
0
votes
0
answers
11
views
Removing First Samba AD Server from the forest
we have 3 Samba AD servers, the oldest one (v4.1.12) is running on Centos 6.10; although we have add 2 more servers with current v4.15.13-Ubuntu and All the Roles switched over to one of them however ...
0
votes
0
answers
18
views
Capitalize home directories and append string
In the [homes] section of my smba.conf file, %S is a variable holding the name of the current service. If %S is username, the folder /mnt/data/%S is displayed to user username as "username". ...
- 101
0
votes
1
answer
830
views
Understanding Samba VFS Operations for Full Audit
We have a TrueNAS System running TrueNAS-12.0-U8 for which we are required to log all successful and all failed file access attempts for a specific SMB share. The Samba version is 4.13.
Per guidance ...
- 843
0
votes
1
answer
443
views
Failed to join a computer to samba domain (Zentyal) - Couldn't join realm: Insufficient permissions to join the domain
I'm relatively new Zentyal user (few months), and I love it! But I've ran into a problem I hope someone can help me with.
In my deployment I have two Zentyal servers (zentyal-1.mydomain.com and ...
- 259
0
votes
0
answers
33
views
Ubuntu server 18.04 samba pdc
The problem I have is that when I want to connect a windows 10 client with a samba pdc server I get these errors:
[client][1]
error trying to join domain, specified domain does not exist or cannot be ...
0
votes
0
answers
181
views
How to configure FreeRadius on a different server than Samba4?
I want to set up a FreeRadius server that uses a Samba4 DC base.
I wanted FreeRadius to be on a different server that wasn't a DC Samba4. Is it possible?
Consulted links:
https://wiki.samba.org/index....
- 17
0
votes
0
answers
550
views
How to login as different users in samba?
I am able to setup a samba shares shared among 400 users on ubuntu 20 as file server. As a part of policy after any user have completed his/her work they disconnect from share. The problem arises for ...
- 175
1
vote
0
answers
117
views
2 Samba Configs: "config file" Parameter Fails
I am attempting to create 2 separate shares using 2 very different configs. I can get both going individually from the same system, but not together. Regretfully, I still have some legacy systems ...
- 23
0
votes
0
answers
74
views
Bind does not start on a DC Samba 4. What to do?
I'm migrating a Samba DC that uses Bind9, but when I try to start Bind on the new DC, a permission error is displayed. Reading some links I saw that the apparmor can be a problem, however it is not ...
- 17
-2
votes
2
answers
230
views
Samba server showing user still logged on despite shutdown/restart of the Windows 10 client
I have since years an issue with Samba 4.3.11 and Windows 10 in a Domain with Samba Active Directory:
The Users on Windows 10 will be shown as further logged on on the samba server (smbstatus -b) even ...
- 97
1
vote
0
answers
268
views
Samba AD sysvol sync unison permissions issue
I'm having an issue with syncing the unix permissions and ownership on the sysvol between two Ubuntu Samba AD DCs using unison. I have copied the idmap.ldb file from DC1 to DC2 and the Windows ...
0
votes
1
answer
1k
views
Windows 10 Doesn't connect with Samba4 server
I'm facing a problem with my samba server.
I had a Samba server but it was a very old configuration so I have reinstalled the OS (Debian 5.10.140-1) and the Samba (Samba version 4.13.13). But now all ...
0
votes
1
answer
647
views
Samba 4.16 integration with openldap 2.6 on Centos8 for 2FA
I want to setup 2factor authentication for both Linux and windows machine and want to manage the password via LDAP server.
For this, I am using LDAP(which provides TOTP functionality) to authenticate ...
0
votes
0
answers
63
views
wrong count of files samba windows/linux
i have a problem, i have a shared folder via samba, it works perfectly except if it has allot of files/folders, for example: one subfolder has 885 pdf's and browsing with linux i can see all of them, ...
2
votes
3
answers
493
views
Restrict Samba4 authentication by user + VPN IP address pair
We're working towards a zero trust security model in our office, with servers secured behind a WireGuard VPN. We already use WireGuard for remote access, so this is the simplest way to ensure ...
- 141
0
votes
1
answer
2k
views
Windows client connecting to Samba 4.1.12 failing to join DC, latest Windows 11 Update?
I'm writing this here just in case someone can help me out a little bit here, since I'm kind of lost. I'm managing a domain controller through Samba version 4.1.12 (installed in a Debian 7), a little ...
0
votes
2
answers
822
views
access based share enum not working as expected
On a long-term (2years) Arch Linux server, I am running a small samba configuration with several shares.
I would like users to only see the shares which they have access to - which is why I am using ...
- 1
2
votes
1
answer
1k
views
disable samba usershare feature
Is there a way to completely disable usershare in Samba?
Don't be confused with the users home share:
man smb.conf
Starting with Samba version 3.0.23 the capability for non-root users to add, modify, ...
- 242
0
votes
2
answers
214
views
is There ANY WAY To acess a NAS server over the internet without using any VPN or any ip router config
I'm trying to acess my samba server over the internet but I don't know how to do it without setting up a VPN or something which I don't want to do. I can't do anything with VPN's or router configs ...
- 1
1
vote
0
answers
564
views
Migrate from Zentyal to Samba4AD
I'm really new in Active Directory world and I plan to migrate from Zentyal 7 (a stack of multiple tools packaged in an Ubuntu OS) to a pure Samba4 Active Directory, and keep the same domain name.
I ...
- 771
0
votes
1
answer
676
views
How do I import an smbpasswd file into a different samba server
I'm attempting to export my samba users and then import them (the ultimate goal is to do this between machines, but right now I just want to do the one test user on my newly installed server). I've ...
- 2,344
0
votes
1
answer
262
views
Samba AD GPO “Display information about previous logons during user logon” does not apply and makes it impossible to logon
We are performing tests to deploy a Univention UCS domain with samba Active Directory in our company and, to comply with a security normative, we need to activate the GPO "Display information ...
- 1
1
vote
2
answers
3k
views
Can Samba close a single user session coming from a shared host?
If I want to close a user session on a Samba server, the smbcontrol close-share and smbcontrol kill-client-ip commands are available to achieve this. However when dealing with a shared client (a ...
- 1,774
0
votes
1
answer
222
views
Ubuntu 21.10 with Samba AD unable to create domain trust account
I am trying to add domain trust account for additional kerberos5 (MIT) domain
in Samba AD DC with command:
net rpc trustdom add <domain_name>
-UAdministrator%<administrator_password>
What ...
2
votes
1
answer
2k
views
Samba AD: Create keytab for computer without net ads join?
Gist: I have set up a samba as AD DC. I'd like to export a keytab for SPNs for a computer account only without having the computer to run samba itself, or issue net ads join. Running samba-tool domain ...
- 141
4
votes
1
answer
5k
views
Cannot access SMB share from Windows 10 via OpenVPN Connect
I'm sure this problem must have been solved a thousand times but nothing I do seems to work.
Summary:
On Windows 10 client, using file explorer, and OpenVPN Connect client 3.3.4, can't access a NAS ...
- 41
3
votes
2
answers
2k
views
Windows 10 clients flooding Samba servers with phantom guest login attempts
I am currently running a Samba server for file sharing on a SOHO network.
I have noticed that one of the recent patches to Windows 10 seems to have introduced some sort of nasty bug with SMB that ...
- 131
0
votes
0
answers
1k
views
Windows 10 login fails at Samba NT domain member
I have the following setup:
A Samba server PDC acting as the Primary Domain Controller of a NT domain MYDOMAIN (not Active Directory!)
A Windows 10 pro PC Win10 which is also a member of that domain
...
- 607
2
votes
1
answer
2k
views
Students can't install Extensions in Visual Studio Code
We are a school and would like to use Visual Studio Code together with the Omnisharp extension.
The students' working environment has the following characteristics
Server-stored home directories
...
- 121
0
votes
1
answer
598
views
Ubuntu login fails with a user of a trusted IDM domain (AD)
We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux).
So we created a user 'usupru2' on Samba AD DC under adtest.uy domain.
Then we ...
- 11
0
votes
1
answer
972
views
Access denied when listing Samba shares
I've installed Samba to share files with Windows 10 machines. The setup works correctly to access individual shares using their path such as \\myhost\sejf, but listing shares on \\myhost fails with ...
- 613
0
votes
1
answer
3k
views
Windows 2019 and truenas SMB share access problems
I'm having all sorts of trouble getting a FRESH Windows Server 2019 to connect to a samba share on Truenas 12.
Originally, when I tried to log in, Windows kept saying You Can't Access This Shared ...
user609425
0
votes
0
answers
2k
views
Unable to join a dc I just created with samba ad dc
I followed these instructions: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
These instructions didn't work exactly as they read. There was one step I ...
- 31
0
votes
1
answer
356
views
Where does Sendmail get authentication from?
For reasons I can't get into at the moment, I'm authenticating to an SMB domain (using Samba 4.9.5 on a Debian host as the DC, if it matters) with a Mint Linux server in the domain with Samba 4.11.6 ...
- 1,406
0
votes
1
answer
1k
views
How to overcome the Weaker MD4 hash issue with samba
We are using samba configuration on our RedHat(RHEL7.9) systems, where SMB authentication is based on a NTLM password hash which basically a clear-text credential
for a challenge-response ...
- 105
0
votes
2
answers
1k
views
Samba AD Groups appear empty on Unix
Environment:
fresh Debian 10 Samba 4.9.5-Debian as AD-DC, using internal LDAP, internal DNS, RFC2307 enabled, libnss-winbind enabled and configured, libpam-winbind enabled and configured
fresh Debian ...
- 401
0
votes
1
answer
626
views
Compiled samba from source upgrade - version mismatch
I'm testing Samba 4 AD (test environment) on CentOS 8. First attemp was with version 4.13.5 without cups support because I have installed packages listed in section "Manually maintained ...
- 33
0
votes
1
answer
927
views
how to export permissions/ACLs from Samba share to clients?
I have a Synology NAS running Samba that serves up shares in my network. I've set up autofs, LDAP and sssd and can mount Samba home directories on the fly when I log into Linux and MacOS machines.
My ...
- 165
1
vote
0
answers
418
views
Kerberos issues with Samba4 AD DC when resolv.conf not set to use localhost
I recently did a "classis conversion" of our small NT4 Samba domain to an AD one on my Debian 10 "Buster" system. I got everything working as far as I can tell, but I don't ...
- 111
0
votes
1
answer
57
views
Odd user display discrepancy in standalone Samba server ("Account Unknown" vs "Unix User")
I am using a standalone Samba server on Ubuntu 18.04 (Samba 4.7.6). When an employee leaves the company, their Unix account ist locked (but not deleted). Their Samba account, however, is deleted via ...
- 183
0
votes
1
answer
1k
views
samba-tool tool missing on Centos8 after samba412 package install
Cant find samba-tool on Centos8 after samba412 package install...
dnf cant find it as well.
dnf provides samba-tool
Error: No Matches found
What's more, there is no
/usr/local/samba/bin
folder ...
...
- 151
0
votes
1
answer
257
views
Centos8: Selinux blocking Samba service from starting
My Samba4 service is being blocked from starting using systemctl. The audit log shows:
type=AVC msg=audit(1606428851.446:87): avc: denied { execute } for pid=1748 comm="(samba)"
name=&...
- 151