Search results

[[Category:Active Directory]] [[Category:Domain Members]]

[[Category:Active Directory]] [[Category:NT4 Domains]]

[[Category:Active Directory]] [[Category:Domain Members]]

[[Category:Active Directory]] [[Category:Domain Members]]

[[Category:Active Directory]] [[Category:NT4 Domains]]

You can use this module with other VFS modules, such as [[Using_the_acl_xattr_VFS_Module|acl_xattr]] or [[Usin [[Category:Active Directory]]

[[Category:Active Directory]] [[Category:NT4 Domains]]

[[Category:Active Directory]] [[Category:Domain Members]]

[[Category:Active Directory]]

...ript that generates the port names from configuration files, databases, or other sources. ...on the printer or authentication on printer before printing, with snmp or other protocol used by the windows driver). For example:

* Check out the scripts help for other parameters, that might be useful [[Category:Active Directory]]

[[Category:Active Directory]]

[[Category:Active Directory]] [[Category:DNS]]

[[Category:GSOC]]

[[Category:Active Directory]]

[[Category:Active Directory]]

...AH]]</nowiki> tags as appropriate, e.g. [[:Category:Active Directory]], [[:Category:Printing]], etc. For a list of possible categories, see [[Special:Categorie ...te to provide a brief overview of the feature, and then simply link to the other pages to drill-down in more detail.

Active Directory (AD) uses DNS in the background, to locate other DCs and services, such as Kerberos. Thus AD domain members and servers must [[Category:Active Directory]]

...vents, such as authentication or Winbind-related events, while logging all other events on a different level. ...to set individual log levels for certain debug classes, while logging all other events on a different level.

Active Directory (AD) uses DNS to locate other Domain Controllers (DC) and services, like Kerberos. Thus, AD domain member [[Category:Active Directory]]

...debug level do you need to run to see messages of interest. Are there any other ways to verify the feature is doing what it should>'' [[Category:New Feature]]

[[Category:Active Directory]]

[[Category:Active Directory]] [[Category:Domain Members]]

These changes will have no effect to other clients except 192.168.0.123. For additional clients you can simply create [[Category:Domain Members]]

...side, when accessing a share through SMB! If the same folder is shared by other services like NFS, the access only depents on the underlaying filesystem AC [[Category:Active Directory]]

[[Category:Active Directory]] [[Category:Domain Members]]

[[Category:Active Directory]] [[Category:Domain Members]]

* Optionally, redirect other folders in the same way. [[Category:Active Directory]]

[[Category:Active Directory]] [[Category:DNS]]

[[Category:Active Directory]] [[Category:Domain Members]]

...combination with [[Selftest namespaces]] (i.e. USE_NAMESPACES=1) to point other network tools at the customdc. The testenv essentially becomes a mini-VM ru [[Category:Backup]][[Category:Testing]]

The transitive routing into the other forest is fully functional for kerberos, but not yet supported for NTLMSSP. * Both sides of the trust need to fully trust each other!

Category: Code<br/>

...es DNS to locate domain controllers (DC), resolve host names, and for many other tasks. Ensure that the client has at least one DNS server configured, that [[Category:Active Directory]]

[[Category:New Feature]] [[Category:Backup]]

[[Category:Active Directory]] [[Category:NT4 Domains]]

[[Category:Active Directory]] [[Category:DNS]]

| text = The ID ranges of the <code>*</code> default domain and all other domains configured in the <code>smb.conf</code> file must not overlap. ...s individually. The ID ranges of the <code>*</code> default domain and all other domains configured in the <code>smb.conf</code> file must not overlap.

[[Category:Active Directory]]

Active Directory (AD) uses DNS to locate other Domain Controllers (DC) and services, like Kerberos. Thus, AD domain member [[Category:Active Directory]]

...orid</code> for the default domain, you can use other winbind backends for other domains, but the ranges must not overlap. See the <code>idmap_autorid(8)</c ...amba started using it, you can only increase the top end of the range. Any other change on the range can result in new ID assignments, and thus in loosing f

[[Category:NT4 Domains]]

...esolve the Active Directory (AD) DNS zones. To enable recursive queries of other zones, set the <code>dns forwarder</code> parameter in the <code>smb.conf</ To verify that no other process uses the TCP and UDP port 53:

[[Category:Domain Members]]

[[Category:GSOC]]

[[Category:New Feature]] [[Category:Testing]]

[[Category:Release Notes]]

[[Category:Active Directory]] [[Category:User Management]]

[[Category:Active Directory]] [[Category:Domain Members‏‎]]

[[Category:Active Directory]] [[Category:Domain Members]]

* The other fields are not enabled until the "NIS Domain" is chosen. Fill the values as * The other fields are not enabled until the "NIS Domain" is chosen, fill the values as

...lex, requires third party script, each DC requires a cron job against each other DC ...lex, requires third party script, each DC requires a cron job against each other DC

...to manipulate, then use the up and down arrows accordingly). Deselect any other drives as they are unnecessary and only increase boot time while seeking me # Select the “Storage” category. This displays a Storage Tree to the left where we can see what disks are c

[[Category:Active Directory]] [[Category:DNS]]

[[Category:Active Directory]] [[Category:Domain Control]]

[[Category:Active Directory]]

[[Category:Active Directory]]

...s support setting permissions for one owner, one group, and everyone else (other). If you need to set multiple ACLs on a directory, see [[#Setting_Extended_ ...the owner and the <code>Domain Users</code> group, and deny access to all other users, enter:

[[Category:Domain Control]] [[Category:NT4 Domains]]

::<nowiki>*</nowiki> You can alternatively set other groups, to enable the group members to store their user profile on the shar other::---

[[Category:Active Directory]] [[Category:NT4 Domains]]

...run the two domains at the same time, without them interferring with each other. The renamed/alternate domain provides the core Samba network services, whi ...in will have a single new DC (whose name is specified by --newservername). Other DCs can subsequently be joined to the new DC to repopulate the samba networ

[[Category:Active Directory]]

''For other tools, ask the respective vendor for SMB2 FSCTL_SRV_COPYCHUNK support.'' ...r-Side_Copy_Offload|Btrfs]] in comparison with [[#Server-Side_Copy_Offload|other filesystems]]. FSCTL_DUPLICATE_EXTENTS_TO_FILE is currently only supported

[[Category:Active Directory]]

[[Category:Group Policy Management]]

...and GPO settings are not supported by these tables for replacing names and other AD domain-specific data when performing migrations. By having simple XML, a [[Category:New Feature]]

[[Category:Active Directory]]

[[Category:Domain Members]] [[Category:NT4 Domains]]

[[Category:GSOC]]

...ix Admins' group you were advised to create above. However, if you use any other winbind idmap backend (autorid or rid, for instance), then you can use the * To enable accounts other than the domain user <code>Administrator</code> to set permissions on Windo

[[Category:Active Directory]] [[Category:Group Policy Management]]

[[Category:Active Directory]]

...e access for the <code>Domain Admins</code> group and read permissions for other users to be able to download the drivers: ...to print components that modify how Windows machines communicate with each other during printing or print related operations. For example, the changes come

[[Category:Active Directory]]

[[Category:User Management]]

...d uses native TCP names (rather than RFC1001, Netbios names). Unlike some other network file systems all key network function including authentication is p [[Category:CIFSclient]]

[[Category:Active Directory]] [[Category:Domain Control]]

[[Category:Active Directory]]

...s to have longer password lengths, or relax the complexity constraints for other users, and so on. PSOs can be applied to groups or to individual users. ...the PSO settings are correct. The PSO should work exactly the same for any other user (i.e. as long as <code>samba-tool domain passwordsettings pso show-use

[[Category:Active Directory]]

[[Category:CIFSclient]] * Python + a C python module for the syscalls and other ioctl which would not be so practical from python.

...the new machine as a DC]] again. Everything will be synchronized from the other running DC(s) - except SysVol replication, which isn't implemented yet. [[Category:Active Directory]] [[Category:Backup]]

...at only the NETLOGON RPC gets distributed amongst the worker threads - all other RPC is handled by the first worker process, i.e. <code>rpc_server(worker 0) [[Category: Active Directory]]

[[Category:Backup]] [[Category:Active Directory]]

...odifications is necessary since modifications done in the SysVol folder of other hosts will be overwritten when using a unidirectional syncing workaround li [[Category:Active Directory]]

| text = The ID ranges of the <code>*</code> default domain and all other domains configured in the <code>smb.conf</code> file must not overlap. ...nts enable the new user, computer, or group to access files created by the other or previous ID owner. When using the ADUC utility, the user and group IDs a

...as well as other issues. We'd like to see this fixed [[Category:CIFSclient]]

...ion functions, but these appear to be used elsewhere in the code (for uses other than creating index keys). This is why we introduced the index_format_fn in ...l indexing code and this involves a number of intermediary allocations and other unnecessary work particularly if the GUID is the only attribute of interest

...sses into names and vice versa. Clients find their Domain Controller/s and other important AD services by DNS queries, this means that your clients must use [[Category:Active Directory]]

[[Category:Active Directory]] [[Category:GSOC]]

| text = Depending on your installation, services other than <code>samba</code> can open additional ports required for your AD envi [[Category:Active Directory]]

...apply to non-replicated attributes and modifications are not replicated to other DCs. The tool cannot be run over LDAP. ...se problems will propagate throughout the domain DCs, via DRS replication. Other problems might be localized to a specific DC, as they may affect a non-repl

...ss to your DC to just this one host and the LDAP port 389, all services on other hosts in your DMZ will access the AD using the proxy. [[Category:Active Directory]]

So there are other methods that allow developers to get CI results in a similar way: ...can run against public 'runners', which gitlab provides for free. However, other tests need a specially configured CI box, due to memory or ext4 filesystem

| text = Samba AD is not compatible with other DNS servers, even if those that supports tkey-gss updates, because parts of ...conf</code>, Shouldn't need modification, as it just contains links to the other <code>named.conf</code> files:

...o make winbind work, so I had to stub these out. The advantage is that the other code will automagically start to work correctly once these functions are im ...ing, PAC/info3 caching was discarded. Caching is only interesting once the other features are working and will be implemented eventually.

contents are updated with some other method), and DFS-R can to shared directories on other servers. The clients first ask the

...unning as an AD DC. OpenLDAP can also be used to control mail delivery and other things. You can find OpenLDAP at [[http://www.openldap.org]] [[Category:NT4 Domains]]

...t resolve to the <code>127.0.0.1</code> IP address or any other IP address other than the one used on the LAN interface of the domain member. ...his is optional). The ID ranges of the default (<code>*</code>) domain and other domains configured in the <code>smb.conf</code> file must not overlap.

...to enable RFC2307 ID mappings on the DC for whatever reason e.g. you have other shares on the DC (not recommended) and are using the winbind 'ad' backend o [[Category:Active Directory]]

[[Category:Active Directory]]

[[Category:Active Directory]]

[[Category:NT4 Domains]]

...ode> command displays the inbound and outbound replication agreements with other DC in the AD forest. The output is reported from the viewpoint of the Samba [[Category:Active Directory]]

[[Category:Active Directory]]

...y other DC you have and the complete sync will be perform next sync to all other servers. (Not tested) ** DC1 <> Any other DCs you may have

...e the 'nameserver' to the new DCs ipaddress, do not use '127.0.0.1' or any other IP. Other parameters frequently used with the <code>samba-tool domain join</code> com

...is on a standalone DC, as otherwise there's potential for DB corruption if other operations (e.g. DRS replication) are happening in the background. [[Category: Active Directory]]

...probably unlikely for most users, it is suggested you consider one of the other methods to replicate Sysvol. ...hich you do all modifications (GPO edits, logon script changes, etc.). All other DC's retrieve the changes from this host, this is because modifications on

[[Category:Active Directory]]

...able to resolve them using the <code>nslookup</code>, <code>host</code> or other DNS lookup tools, the database hard links can got lost. This happens, for e [[Category:Active Directory]]

...rforming a read without properly validating a later write (to check if any other changes have already occurred). Normally the way to guard against this is b [[Category:Active Directory]]

...ports coherent mmap for CTDB/Samba, but it's nice for bragging points over other cluster filesystems. If your cluster filesystem doesn't pass this test then [[Category:Testing]]

...ans that they are done always on one special DC and then replicated to all other. Active Directory uses roles, that are assigned to DC(s), for these special * Password changes performed by other DCs in a domain are replicated preferentially to the PDC Emulator.

[[Category:Release Notes]]

There are other options but they are not that important to be usefull beside performance an [[Category:CIFSclient]]

== Other == ...t (sometimes due to a network failure, or a server or file system hang, or other bug). In addition "dmesg" (the kernel message buffer) will often show a me

...945F-00C04FB984F9}). You'll need this GUID in order to identify the GPO in other <code>samba-tool gpo</code> commands. Other VGP Message extensions are available for compatibility with Vintela's MOTD

* Upgrade all other Samba DCs one at a time, with those holding FSMO roles last, and always ver .... Wait until after you've restarted the samba executable before making any other changes to the local database.

# samba-tool domain demote --remove-other-dead-server=DC2 [[Category:Active Directory]]

* Whilst these are only minimal smb.conf files, you can add other parameters, such as 'unix password sync = yes' to ensure the Unix & Samba p ...ccess to members of the <code>demoGroup</code> group in both directories. Other users have read access in the <code>/srv/samba/guest/</code> and no access

=== Other Windows compatibility issues === [[Category:Active Directory]]

[[Category:Active Directory]]

...However, old Samba versions without sanity checks, wrong manual changes or other things, could have allowed duplicate SID's in your environment. These need To find duplicate SID's on other passdb backends (smbpasswd, tdbsam), you have to script around the output o

* Split the resulting file into two, one containing the attributes, the other containing the objectclasses [[Category:Active Directory]]

[[Category:Active Directory]] [[Category:DNS]]

* ECT: <integer> The event category; this depends on the message file -- primarily used as a means of filtering ...gin events received over syslog are the same as login events received over other transports.

Note that while the other backup commands are available from Samba v4.9 onwards, the offline command [[Category:Backup]] [[Category:Active Directory]]

[[Category:Active Directory]]

Note that you should avoid making any other modifications to the database between running 'samba_downgrade_db' and star ...oles to a single DC so only that DC needs a database format downgrade. The other DCs can simply be demoted and rejoined after the downgrade.

[[Category:CIFSclient]] No mechanism currently in place to reconnect to server other than the one that you have mounted against (e.g. we do not fail over to an

[[Category:Testing]]

...or_Other_LDAP_Servers_as_Back_End.3F|Does Samba AD DCs Support OpenLDAP or Other LDAP Servers as Back End?]] ...and has been built using the <code>--with-system-mitkrb5</code> option. In other cases Samba uses the Heimdal KDC included in Samba. For further details abo

...language is when there is a task to be completed. I have exposure to many other programming and scripting languages such as actionscript (used in flash), J ...launcher window that would present all 5 utilities windows as tabs or some other form. This way the user would access all the utilities from one location, w

...requires intermediate certificates also store it in same directory as the other files (e. g. myIntermediate.pem). [[Category:Active Directory]]

There are several category groups you can work on, e.g.: Push the current branch, overwriting any other changes there:

nastype = other [[Category:Active Directory]]

[[Category:CIFSclient]] There are various requirements for full POSIX compatibility, and other

...make the service, not to wrap libgpo, so a lot of things had to be left so other more relevant things could be focused on, ...PO will also have other attributes, such as a GPLINK, a linking order, and other network related things. If one can merely create this .inf file and give it

[[Category:Release Notes]]

...portant). A number of these details will obviously apply more generally to other Windows versions. ...hich are unimplemented, although their functionality is reproduced in some other way e.g. eventlog6 logging.

...ding, these cases are in fact impossible to hit (but allow refactoring and other unexpected external changes to preserve the correct behaviour). One other caveat with the generated code is that there is a significant amount of dea

...s and NAS appliances implement those protocols, limiting the usefulness of other (non-SMB/CIFS or SMB2) network file system clients. With the release of de ...ernel, as cifs module is considered stable and used by many. As with most other examples among Linux kernel file systems, this is easiest to achieve by mak

[[Category:CIFSclient]] * '''Required''' (req): the client/server must fail if the other end cannot use it.

[[Category:Release Notes]]

The passdb tdbsam version has been raised as among other things the RID counter has been moved from the winbindd_idmap.tdb to the pa [[Category:Release Notes]]

...phone book that can be used to rapidly translate computer names to IPs (or other sorts of data). However this phone book is of gigantic size (there are ~4 b ...ither, they can correspond to multiple other records and can even refer to other records recursively using records like a CNAME.

[[Category:CIFSclient]]

...rated into a malicious web page via a frame or iframe and then overlaid by other content, an attacker could trick an administrator to potentially change Sam ...indows when using Kerberos against a CIFS server in smbclient, Winbind and other Samba client tools. This will change which servers we will successfully ne

...SMB3.02/SMB3/SMB2.1 dialects are requested by default). CIFS protocol (and other old dialects) can be selected (by specifying "vers=1.0" or "vers=2.02" in t [[Category:CIFSclient]]

...d functions as a backstop. That is, it will be called in the event that no other module implements a particular function or will be called last if the funct ...back into Samba, usually via the sys_xxx routines, but sometimes it calls other modules.

There are likely many other parts of Samba which link to large things ...end the docker container used from just Ubuntu 14.04 to later versions and other distributions.

...he main node in a group through which traffic is routed and "follower" for other members of a group. The command for determining the leader has changed to [[Category:Release Notes]]

...#14568]: s3: spoolss: Make parameters in call to user_ok_token() match all other uses. ...sing the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for a

...ns and acts as a backstop. That is, it will be called in the event that no other module implements a particular function or will be called last if the funct ...back into Samba, usually via the sys_xxx routines, but sometimes it calls other modules.

...g tdbs (ntprinting.tdb, ntforms.tdb, ntdrivers.tdb) which are in latin1 or other encodings. When updating from Samba 3.5 or earlier to Samba 3.6 or 4.0 thes ...rated into a malicious web page via a frame or iframe and then overlaid by other content, an attacker could trick an administrator to potentially change Sam

...#14568]: s3: spoolss: Make parameters in call to user_ok_token() match all other uses. ...sing the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for a

...gainst remote DCs (including Windows) using the --local-dc-ipaddress= (and other --local-dc-* options). ...ber of options were requiring to specify values in one tool and not in the other, some options meant different in different tools.

..._search_asin_title?ie=UTF8&psc=1 Zoweetek USB PIV Smart Card Reader]. Any other PIV Smart Card reader that is compatible with windows should work. ..._yo_dt_b_search_asin_title?ie=UTF8&psc=1 PIVKey C910 PKI Smart Card]. Any other PIV Smart Card should work.

...sing the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for a It also means client tools like smbclient and other, as well as applications making use of libsmbclient are no longer able to c

...name.cgi?name=CVE-2018-1057 CVE-2018-1057] (Authenticated users can change other users' password.) ...s to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users.

* Both sides of the trust need to fully trust each other! ...n the queue of a busy child, while later requests could get served fine by other children.

[[Category:Release Notes]]

...name.cgi?name=CVE-2018-1057 CVE-2018-1057] (Authenticated users can change other users' password.) ...s to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users.

...name.cgi?name=CVE-2018-1057 CVE-2018-1057] (Authenticated users can change other users' password.) ...s to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users.

...gi?id=11961 BUG #11961]: idmap_autorid allocates ids for unknown SIDs from other backends. By default, other tools in Samba are unprotected, but rarely they are configured to use smb s

...s to have longer password lengths, or relax the complexity constraints for other users, and so on. PSOs can be applied to groups or to individual users. Whe ...re' command. Once the backed-up domain DB has been restored on the new DC, other DCs can then subsequently be joined to the new DC, in order to repopulate t

...n process to become unresponsive, preventing the server from servicing any other requests. ...low the client to follow a symlink pointing to a file or directory in that other directory, even if the share parameter "wide links" is set to "no" (the def

...gi?id=11961 BUG #11961]: idmap_autorid allocates ids for unknown SIDs from other backends. By default, other tools in Samba are unprotected, but rarely they are configured to use smb s

...g tdbs (ntprinting.tdb, ntforms.tdb, ntdrivers.tdb) which are in latin1 or other encodings. When updating from Samba 3.5 or earlier to Samba 3.6 or 4.0 thes ...rated into a malicious web page via a frame or iframe and then overlaid by other content, an attacker could trick an administrator to potentially change Sam

By default, other tools in Samba are unprotected, but rarely they are configured to use smb s If both these conditions are met, then this issue would also apply to these other tools, including command line tools like smbcacls, smbcquota, smbclient, sm