Search results

Page title matches

• Active Directory Sites
  Whilst Active Directory Organizational Units represents the logical structure of a company, sites d ...d be part of the same domain - which can save administration work - Active Directory sites are the right choice.
  12 KB (1,683 words) - 04:29, 22 December 2021
• Active Directory Trusts
  = Support for Active Directory Trusts = [[Category:Active Directory]]
  727 bytes (118 words) - 09:52, 22 November 2016
• Authenticating Dovecot against Active Directory
  ..., you will have to create it yourself or symlink it from the Samba private directory (normally /usr/local/samba/private). Which ever method is used, /etc/krb5.c You will need a user in AD for Dovecot to connect to Active Directory. Create the user, with a random password, using 'samba-tool'
  3 KB (443 words) - 21:52, 26 February 2017
• Samba, Active Directory & LDAP
  =Integrating Samba, Active Directory and LDAP= ...inbind also configured, I discovered that when users mapped the Samba home directory, the uid/gid numbers that were being used were, in fact, coming from the Op
  5 KB (862 words) - 20:17, 14 May 2009
• Authenticating Freeradius against Active Directory
  [[Category:Active Directory]]
  3 KB (377 words) - 08:53, 15 April 2020
• Active Directory Domain Controller
  ...a_as_an_Active_Directory_Domain_Controller|Setting up a Samba as an Active Directory Domain Controller]] ...C_to_an_Existing_Active_Directory|Joining a Samba DC to an Existing Active Directory]]
  290 bytes (45 words) - 23:03, 5 March 2019
• Authenticating Apache against Active Directory
  Example of where you need this: You want Apache to permit access to a directory on your webserver just for AD users that are members of a defined AD group * Add the following to your .htaccess or your httpd.conf (vHost/directory/... directive):
  9 KB (1,359 words) - 21:52, 26 February 2017
• Active Directory Naming FAQ
  Picking an Active Directory domain name is one of the most important steps in setting up a domain. And = What is an Active Directory domain? =
  23 KB (3,912 words) - 08:31, 8 August 2023
• Downgrading an Active Directory DC
  In general, there are two ways to upgrade or downgrade a Samba Active Directory (AD) Domain Controller (DC): ...er to operate correctly (for example, in v4.8 the location of the bind-dns directory changed).
  11 KB (1,744 words) - 21:11, 12 November 2022
• Working with Active Directory encoded LDAP values
  Many values in Active Directory LDAP are not stored in a human-friendly format: this page is meant to provi [[Category:Active Directory]]
  2 KB (312 words) - 21:49, 26 February 2017
• Setup a Samba Active Directory Domain Controller
  #REDIRECT [[Setting up Samba as an Active Directory Domain Controller]]
  71 bytes (10 words) - 22:27, 22 October 2016
• Setting up Samba as an Active Directory Domain Controller
  ...g from version 4.0 (released in 2012,) Samba is able to serve as an Active Directory (AD) domain controller (DC). Samba operates at the forest functional level ...C_to_an_Existing_Active_Directory|Joining a Samba DC to an Existing Active Directory]].
  29 KB (3,995 words) - 12:03, 30 November 2023
• Joining a Samba DC to an Existing Active Directory
  ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]]. ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]] documentation.
  16 KB (2,434 words) - 10:26, 26 September 2023
• Building a Samba Active Directory Domain Controller on CentOS 6
  This tutorial will take you through building a Samba Active Directory Domain Controller on CentOS 6. As CentOS is derived from RHEL, the tutorial Make a directory on your machine to hold the source code. {{code|code=/root/source}} will do
  2 KB (282 words) - 08:34, 18 May 2013
• Join an additional Samba DC to an existing Active Directory
  #REDIRECT [[Joining a Samba DC to an Existing Active Directory]]
  64 bytes (10 words) - 13:32, 9 October 2016

Page text matches

• Authenticating other services against Samba AD
  ...ating_Apache_against_Active_Directory|Authenticating Apache against Active Directory]] ...ing_Dovecot_against_Active_Directory|Authenticating Dovecot against Active Directory]]
  400 bytes (40 words) - 14:44, 28 March 2018
• Directory Replication Service (DRS)
  DRS (Directory Replication Service) replicates the contents of the Active Directory (i.e. user/group management, ACL changes, etc.) and is part of Samba since ...hnet.microsoft.com/en-us/library/cc772726%28v=ws.10%29.aspx How the Active Directory Replication Model Works] at MS TechNet for further information about the AD
  400 bytes (58 words) - 21:24, 26 February 2017
• The Samba KCC
  ...ps://technet.microsoft.com/en-us/library/cc755994(v=ws.10).aspx How Active Directory Replication Topology Works] [[Category:Active Directory]]
  272 bytes (33 words) - 02:03, 13 May 2017
• Active Directory Domain Controller
  ...a_as_an_Active_Directory_Domain_Controller|Setting up a Samba as an Active Directory Domain Controller]] ...C_to_an_Existing_Active_Directory|Joining a Samba DC to an Existing Active Directory]]
  290 bytes (45 words) - 23:03, 5 March 2019
• User and Group management
  == Adding Users into Samba Active Directory == --home-directory=\\\\ADSMember.samdom.example.com\\fbaggins
  3 KB (381 words) - 11:21, 22 April 2020
• Raising the Functional Levels
  The Active Directory (AD) functional levels determine the domain or forest capabilities. For det ...ng-active-directory-functional-levels%28WS.10%29.aspx Understanding Active Directory Domain Services (AD DS) Functional Levels]
  4 KB (498 words) - 16:47, 12 April 2021
• Join an additional Samba DC to an existing Active Directory
  #REDIRECT [[Joining a Samba DC to an Existing Active Directory]]
  64 bytes (10 words) - 13:32, 9 October 2016
• Setup a Samba Active Directory Domain Controller
  #REDIRECT [[Setting up Samba as an Active Directory Domain Controller]]
  71 bytes (10 words) - 22:27, 22 October 2016
• AD Schema Version Support
  The official Active Directory (AD) schema versions are: !Directory Schema Version
  2 KB (303 words) - 03:20, 26 March 2024
• Samba 4.0 Whitepaper
  ...nts that were previously released in the Samba 3 software and adds "active directory domain controller" as a new server role. The existing Samba 3 configuration == Active Directory Compatible Server ==
  3 KB (404 words) - 03:37, 15 December 2012
• Active Directory Trusts
  = Support for Active Directory Trusts = [[Category:Active Directory]]
  727 bytes (118 words) - 09:52, 22 November 2016
• Delegation/Joining Machines to a Domain
  ...tive Directory (AD) enables the administrator to assign permissions in the directory to unprivileged. For example, to enable a help desk employees to join machi * Open the <code>Active Directory Users and Computers</code> (ADUC) console as domain administrator.
  2 KB (359 words) - 12:16, 28 June 2021
• Managing the Samba AD DC Service Using Systemd
  ...owing describes how to use <code>systemd</code> to manage the Samba Active Directory (AD) domain controller (DC) service. For further details about <code>system ...ovide a <code>systemd</code> service file. When you built the Samba Active Directory (AD) domain controller (DC) from the sources, you must manually create the
  3 KB (384 words) - 08:52, 22 September 2020
• The Samba AD DNS Back Ends
  In an Active Directory (AD), DNS is a very important service. It is used for: ...(DC) when using AD sites. For details, see [[Active_Directory_Sites|Active Directory Sites]].
  3 KB (477 words) - 18:10, 5 November 2021
• Setting up a Share Without Authentication
  [[Category:Active Directory]]
  250 bytes (34 words) - 14:31, 24 March 2017
• Replication
  :* [[Directory Replication Service (DRS)]] [[Category:Active Directory]]
  480 bytes (53 words) - 21:24, 26 February 2017
• Configuring Windows Profile Folder Redirections
  == In an Active Directory == [[Category:Active Directory]]
  2 KB (372 words) - 07:24, 2 November 2021
• MacOS DNS Configuration
  Active Directory (AD) uses DNS to locate other Domain Controllers (DC) and services, like Ke ...se the network adapter that is connected to the network running the Active Directory (AD) (Wi-Fi, Ethernet, etc.), then click on the <code>Advanced…</code> bu
  2 KB (286 words) - 04:14, 1 June 2023
• Identity Mapping Back Ends
  For setting up Winbindd a Samba Active Directory (AD) domain controller (DC), see [[Configuring_Winbindd_on_a_Samba_AD_DC|Co [[Category:Active Directory]]
  1 KB (195 words) - 08:57, 2 September 2018
• Using the acl xattr VFS Module
  ...ws ACLs in the <code>security.NTACL</code> extended attribute of a file or directory. Therefore, the file system of the share must support extended attributes. | text = On a Samba Active Directory (AD) domain controller (DC), the <code>acl_xattr</code> module is automatic
  1 KB (221 words) - 16:47, 1 November 2017
• Print Server Support
  [[Category:Active Directory]]
  508 bytes (68 words) - 07:09, 19 March 2023
• The different server roles
  ** [[Samba as an Active Directory Domain Controller]]
  246 bytes (34 words) - 17:18, 29 September 2014
• Delegating administrative permissions to non-administrators
  Active Directory allows you to delegate permission for administration tasks to users and/or ...ning), you'll loose all existing delegations. But you should fix the wrong directory ACLs that where provisioned by earlier versions!
  2 KB (292 words) - 21:47, 26 February 2017
• Managing the Samba AD DC Service
  [[Category:Active Directory]]
  353 bytes (56 words) - 20:36, 26 February 2017
• Windows DNS Configuration
  In an Active Directory (AD), DNS is an necessary component to locate domain controllers (DC) and s * Right-click to the network adapter connected the network running the Active Directory (AD) and select <code>Properties</code>.
  2 KB (342 words) - 21:01, 26 February 2017
• Joining a macOS Client to a Domain
  After setting up a [[Active_Directory_Domain_Controller|Samba Active Directory (AD) Domain Controller (DC)]], you can join machines to the domain. Only ma Active Directory support was added in Mac OS X Panther (version 10.3 released in 2003). Howe
  3 KB (508 words) - 04:34, 1 June 2023
• Azure AD Connect Cloud sync
  ...u will need it for the configuration wizard to connect to the local Active Directory). * Sign in to the Azure portal, and then go to Azure Active Directory
  3 KB (453 words) - 04:34, 6 April 2023
• Installing RSAT
  To administer Active Directory (AD) from Windows, use the Microsoft Remote Server Administration Tools (RS ...later, you install RSAT as an optional feature. Note that this requires an active internet connection.
  8 KB (1,160 words) - 16:29, 13 March 2023
• Samba4/HOWTO/Setup a Single Sign-On Website
  <Directory /> </Directory>
  3 KB (335 words) - 22:50, 22 October 2016
• Changing the IP Address of a Samba AD DC
  ...ress in a single-DC domain environment can cause problems with your Active Directory (AD). Verify that you have a restorable backup before changing the IP addre ...dns_update_list</code>. This file can be found in the <code>private</code> directory.
  3 KB (459 words) - 14:03, 16 July 2020
• Setting up RFC2307 in AD
  ...rage of Unix user and group information in an LDAP directory. In an Active Directory (AD) with Linux integration, this has several advantages: * Enable the administrator to set individual login shells and home directory paths for users.
  5 KB (795 words) - 15:17, 26 November 2023
• Linux and Unix DNS Configuration
  Active Directory (AD) uses DNS in the background, to locate other DCs and services, such as [[Category:Active Directory]]
  1 KB (230 words) - 17:38, 9 October 2023
• Roadmap
  * Directory leases - Prototype ([[User:slowfranklin|slow]]) == Active Directory Server ==
  4 KB (565 words) - 15:38, 20 January 2022
• User and group management
  <u>In an Active Directory:</u>
  260 bytes (38 words) - 14:17, 13 September 2018
• Winbindd
  For setting up Winbindd a Samba Active Directory (AD) domain controller (DC), see:
  359 bytes (59 words) - 16:56, 4 January 2017
• Joining a Windows Server 2008 / 2008 R2 DC to a Samba AD
  ...ows Server 2008 and 2008 R2 as an domain controller (DC) to a Samba Active Directory (AD). :* Enter the IP of a DNS server that is able to resolve the Active Directory (AD) DNS zone.
  5 KB (805 words) - 15:47, 27 March 2023
• Joining a Windows Client or Server to a Domain
  After setting up a [[Active_Directory_Domain_Controller|Samba Active Directory (AD)]] or an [[NT4_Domains|Samba NT4 domain]], you have to join machines to In an Active Directory (AD), a working DNS configuration is indispensable. AD uses DNS to locate d
  4 KB (684 words) - 11:53, 4 May 2020
• Samba Internal DNS Back End
  The Samba Active Directory (AD) domain controller (DC) provides an internal DNS server that supports t The internal DNS server is only able to resolve the Active Directory (AD) DNS zones. To enable recursive queries of other zones, set the <code>d
  3 KB (450 words) - 20:33, 29 February 2024
• Maintaining Unix Attributes in AD using ADUC
  * Run the admin-tools AppImage, then choose Active Directory Users and Computers. * Run the admin-tools AppImage, then choose Active Directory Users and Computers.
  4 KB (649 words) - 19:55, 6 August 2019
• Samba codebase organization overview
  ...organization#Source4|Source4]], which is code primarily used by the Active Directory Domain Controller.
  778 bytes (101 words) - 22:01, 12 June 2020
• User Documentation
  :* [[Active Directory Domain Controller]] ::* [[Active Directory Naming FAQ]]
  6 KB (791 words) - 17:26, 22 May 2023
• DRSUAPI
  ...eeds the existence of more than one Domain Controller (DC) for it's Active Directory (AD). For keeping an environment with more than one DC consistent, it is ne Most of the replication related tasks are specified on the Directory Replication Service (DRS) Remote Protocol. The Microsoft API which implemen
  3 KB (435 words) - 09:13, 25 July 2015
• Idmap config rid
  ...s a read-only API to retrieve account and group information from an Active Directory (AD) Domain Controller (DC) or NT4 primary domain controller (PDC). The bac ...controller (DC).<br />Do not add any idmap config lines to a Samba Active Directory (AD) domain controller (DC) smb.conf<br />For details, see [[Updating_Samba
  5 KB (741 words) - 11:01, 20 April 2023
• Configuring Winbindd on a Samba AD DC
  Configuring <code>Winbindd</code> on a Samba Active Directory (AD) domain controller (DC) is different than on a domain member. To config On a Samba Active Directory DC, <code>Winbindd</code> will always read the user IDs (UID) and group IDs
  6 KB (989 words) - 15:22, 8 August 2019
• Authenticating Domain Users Using PAM
  * On a Samba Active Directory (AD) domain controller (DC), configure Winbindd. For details, see [[Configu = Adding the <code>pam_winbind</code> Module to the PAM Modules Directory =
  3 KB (447 words) - 21:01, 26 February 2017
• ADWS / AD Powershell compatibility
  ...ndows-server-2008-R2-and-2008/dd391908(v=ws.10)?redirectedfrom=MSDN Active Directory Web Services] on a Windows DC. ...scripting/how-can-i-get-a-list-of-all-the-disabled-user-accounts-in-active-directory/ earlier approaches with VBScript].
  1 KB (153 words) - 01:31, 13 April 2021
• Joining a Windows Server 2012 / 2012 R2 DC to a Samba AD
  Samba supports Active Directory (AD) schema version 47, 56 and 69. This enables you to join Windows Server :* Enter the IP of a DNS server that is able to resolve the Active Directory (AD) DNS zone.
  8 KB (1,195 words) - 08:27, 19 July 2023
• Windows User Home Folders
  ...lt-in <code>[homes]</code> section that dynamically shares the user's home directory using the <code>\\server\''user_name''\</code> path. While this can be help ...his feature, and certain settings, such as folder redirection in an Active Directory (AD), require a workaround instead and you cannot use the official solution
  12 KB (1,996 words) - 09:57, 1 February 2024
• Authenticating Dovecot against Active Directory
  ..., you will have to create it yourself or symlink it from the Samba private directory (normally /usr/local/samba/private). Which ever method is used, /etc/krb5.c You will need a user in AD for Dovecot to connect to Active Directory. Create the user, with a random password, using 'samba-tool'
  3 KB (443 words) - 21:52, 26 February 2017
• Nslcd
  ...cal system to load users and groups from an LDAP directory, such as Active Directory (AD). To enable the <code>nslcd</code> service to authenticate to Active Directory (AD) using Kerberos:
  5 KB (699 words) - 11:30, 28 January 2022
• Using the streams xattr VFS Module
  ...e <code>user.DosStream.''ADS_name''</code> extended attribute of a file or directory. Therefore, the file system of the share must support extended attributes. [[Category:Active Directory]]
  1 KB (203 words) - 16:47, 1 November 2017
• Active Directory Sites
  Whilst Active Directory Organizational Units represents the logical structure of a company, sites d ...d be part of the same domain - which can save administration work - Active Directory sites are the right choice.
  12 KB (1,683 words) - 04:29, 22 December 2021
• Changing the DNS Back End of a Samba AD DC
  ...INTERNAL_DNS</code> and <code>BIND9_DLZ</code> DNS back end on your Active Directory (AD) domain controller (DC) without losing data. [[Category:Active Directory]]
  2 KB (363 words) - 18:49, 1 November 2023
• Dns tkey negotiategss: TKEY is unacceptable
  On a Samba Active Directory (AD) domain controller (DC) using the <code>BIND9_DLZ</code> DNS back end, ...account BIND uses on this domain controller (DC), to connect to the Active Directory (AD). For example, to delete the account for the <code>DC1</code> domain co
  5 KB (782 words) - 20:07, 1 November 2023
• Samba, Active Directory & LDAP
  =Integrating Samba, Active Directory and LDAP= ...inbind also configured, I discovered that when users mapped the Samba home directory, the uid/gid numbers that were being used were, in fact, coming from the Op
  5 KB (862 words) - 20:17, 14 May 2009
• Pam winbind Link
  ...bind.so</code> library provided by Samba. Create a link in the PAM modules directory to enable PAM to use Winbind. | text = Do not copy the library to the directory. Otherwise you must replace it manually after every Samba update.
  2 KB (375 words) - 14:01, 29 September 2017
• Main Page
  ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]] ...C_to_an_Existing_Active_Directory|Joining a Samba DC to an Existing Active Directory]]
  3 KB (468 words) - 07:40, 8 April 2024
• Creating Custom Paper Sizes
  [[Category:Active Directory]]
  1 KB (152 words) - 21:14, 26 February 2017
• Working with Active Directory encoded LDAP values
  Many values in Active Directory LDAP are not stored in a human-friendly format: this page is meant to provi [[Category:Active Directory]]
  2 KB (312 words) - 21:49, 26 February 2017
• Manually Replicating Directory Partitions
  In certain situations, it is necessary to manually replicate an Active Directory (AD) partition from one domain controller (DC) to another. = Manually Replicating Directory Partitions =
  2 KB (230 words) - 21:23, 12 May 2017
• Managing the Samba AD DC Service Using an Init Script
  The following describes how to use an init script to manage the Samba Active Directory (AD) domain controller (DC) service. Depending on your operating system, th # description: Samba Active Directory Domain Controller
  7 KB (869 words) - 13:36, 22 September 2020
• CVE-2020-25717
  Windows Active Directory (AD) domains have by default a feature to allow users to create computer ac ...he right to create new users or computers in both Samba and Windows Active Directory Domains.
  7 KB (1,090 words) - 12:19, 10 November 2021
• Adding users with samba tool
  Adding Users into Samba Active Directory | text = When running Samba 4 as an Active Directory domain, unlike Samba 3, you cannot have a local Unix user for each Samba us
  5 KB (745 words) - 08:19, 11 June 2017
• Idmap config ad
  ...plements a read-only API to read account and group information from Active Directory (AD). The back end is based on RFC 2307. For further details, see https://w ...controller (DC).<br />Do not add any idmap config lines to a Samba Active Directory (AD) domain controller (DC) smb.conf<br />For details, see [[Updating_Samba
  12 KB (1,950 words) - 18:44, 1 April 2023
• Configure Samba to Bind to Specific Interfaces
  [[Category:Active Directory]]
  1,007 bytes (159 words) - 21:50, 26 February 2017
• Idmap config autorid
  ...controller (DC).<br />Do not add any idmap config lines to a Samba Active Directory (AD) domain controller (DC) smb.conf<br />For details, see [[Updating_Samba * All domain users get the same login shell and home directory assigned. However, you can use variables.
  5 KB (819 words) - 11:11, 20 April 2023
• CMake
  ...it is undocumented, it is hard for people to understand it and there is no active development to improve it. CMake could be a very good replacement for the o ...t have to create thousand of entries in .gitignore. You can create a build directory for *every local git branch* you create. CMake can be invoked by differnet
  10 KB (1,731 words) - 13:00, 3 January 2011
• Performance Tuning
  :* Type of the installation: Active Directory (AD) domain controller (DC), NT4 primary domain controller (PDC), AD or NT4 ...on the share are created using lowercase. Samba no longer has to scan the directory for upper- and lowercase. This improves the performance. For further detail
  3 KB (535 words) - 21:49, 26 February 2017
• Roaming Windows User Profiles
  ...including per-user configuration files and registry settings. In an Active Directory or NT4 domain you can set that the profile of a user is stored on a server. ...g Windows access control lists (ACL). This will not work on a Samba Active Directory Controller.
  12 KB (1,951 words) - 12:20, 30 November 2023
• Flexible Single-Master Operations (FSMO) Roles
  Active Directory was designed as a multi-master enabled database. The great advantage is tha ...are done always on one special DC and then replicated to all other. Active Directory uses roles, that are assigned to DC(s), for these special tasks. Because th
  8 KB (1,354 words) - 14:56, 4 July 2019
• OpenLDAP as proxy to AD
  = openLDAP as proxy to Active Directory = # Mappings for Active Directory
  5 KB (665 words) - 21:52, 26 February 2017
• Delegation/Account management
  [[Category:Active Directory]]
  1 KB (165 words) - 21:48, 26 February 2017
• Testing Dynamic DNS Updates
  [[Category:Active Directory]]
  1 KB (187 words) - 20:35, 26 February 2017
• Developer Documentation
  * [[ActiveProjects|Active projects]] * [[Franky|Franky]]: A Hybrid Samba Active Directory Controller (outdated!)
  5 KB (657 words) - 18:29, 10 December 2022
• Troubleshooting Samba Domain Members
  ...t problems users can encounter when running Samba as a member in an Active Directory (AD) forest or NT4 domain. = Domain Members in an Active Directory Forest =
  9 KB (1,357 words) - 12:44, 24 August 2023
• Demoting a Samba AD DC
  ...nd it necessary to permanently remove a domain controller (DC) from Active Directory (AD). Removing a regular domain member only requires the deletion of the ma * If the DC used the <code>BIND9_DLZ</code> DNS back end for the Active Directory (AD) zones:
  11 KB (1,798 words) - 15:27, 11 June 2023
• PAM Offline Authentication
  ...g.cgi?id=14618 Bug #14618] is fixed, the workaround is to place <code>lock directory = /var/cache/samba</code> in your <code>smb.conf</code>. [[Category:Active Directory]]
  3 KB (513 words) - 08:33, 24 June 2023
• Building a Samba Active Directory Domain Controller on CentOS 6
  This tutorial will take you through building a Samba Active Directory Domain Controller on CentOS 6. As CentOS is derived from RHEL, the tutorial Make a directory on your machine to hold the source code. {{code|code=/root/source}} will do
  2 KB (282 words) - 08:34, 18 May 2013
• Managing local groups on domain members via GPO restricted groups
  ...OM\Wks Admins“. Groups can be added to the AD using 'samba-tool' or Active Directory User and Computer (ADUC). * Create a domain group „Wks Admins“, using 'samba-tool' or Active Directory Users and Computers from the Remote Server Administration Tools (RSAT).
  8 KB (1,132 words) - 13:01, 16 November 2021
• Samba codebase organization
  ...codebase layout in more detail. This is not intended to be a comprehensive directory, and just covers the major components. ...ode was located in either the <code>source3</code> or <code>source4</code> directory. Over time, as duplicate code between the two branches becomes merged or us
  13 KB (2,282 words) - 22:01, 12 June 2020
• Robocopy based SysVol replication workaround
  Samba Active Directory Domain Controllers currently don't support SysVol replication through Distr [[Category:Active Directory]]
  4 KB (565 words) - 15:34, 28 June 2023
• DNS Administration
  If you're running Samba as Active Directory Domain Controller, you also have to administer a DNS server. ...is the ForestDNSZone, that contains several service records for the entire directory.
  11 KB (1,642 words) - 15:19, 25 April 2023
• Upgrading a Samba AD DC
  Use the following steps when you update a Samba Active Directory (AD) domain controller (DC). * Avoid making changes to the AD directory during the upgrade. Administrators should refrain from adding users or chan
  8 KB (1,399 words) - 20:37, 28 September 2021
• Using the xattr tdb VFS Module
  [[Category:Active Directory]]
  1 KB (231 words) - 18:30, 28 February 2020
• Terms and Abbreviations
  ...trol_Entry_.28ACE.29|ACE]]'s that define the permissions of a share, file, directory, etc.<br><br> == Active Directory (AD) ==
  14 KB (2,228 words) - 21:06, 24 July 2014
• SysVol replication (DFS-R)
  [[Category:Active Directory]]
  2 KB (255 words) - 15:57, 6 December 2023
• Verifying and Creating a DC DNS Record
  If you join a domain controller (DC) to an Active Directory (AD), certain DNS records must exist in the AD DNS zone to enable the DC to The directory replication automatically distributes the new record to all DCs.
  3 KB (514 words) - 16:57, 16 July 2017
• Certificate Auto Enrollment
  ...ate Auto Enrollment] allows devices to enroll for certificates from Active Directory Certificate Services. It is enabled by Group Policy using Samba's samba-gpu '''Prerequisite''': An Active Directory domain and a Samba domain member already joined.
  7 KB (789 words) - 10:17, 15 February 2024
• Samba AD DC Port Usage
  To identify ports and network interfaces your Samba Active Directory (AD) Domain Controller (DC) is listening on, run: [[Category:Active Directory]]
  7 KB (486 words) - 15:19, 31 May 2018
• Setting up a Share Using POSIX ACLs
  | text = On a Samba Active Directory (AD) domain controller (DC), Windows ACL support is enabled globally, and t To share the <code>/srv/samba/Demo/</code> directory using the <code>Demo</code> share name:
  10 KB (1,627 words) - 16:01, 16 June 2023
• Required Settings for Samba NT4 Domains
  ...tems with a Samba NT4 domain. Anyway, consider migrating to a Samba Active Directory (AD) to avoid problems if a future update from Microsoft disables or remove | text = If you are running Samba Active Directory (AD), do not set any of the modifications mentioned on this page.
  6 KB (918 words) - 10:26, 24 January 2020
• Updating Samba
  If you want to migrate a Samba NT4 domain to Samba Active Directory (AD), see [[Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade)|Migr ...ide not to fix a break. Samba, like Microsoft, advises upgrading to Active Directory.
  15 KB (2,277 words) - 07:24, 26 September 2021
• Lessons learned first tutorial
  ...sig2=lxVeOAP1hK_NoCB2YO2L5A Stefan Metzmacher Bachelor Thesis about Active Directory Replication (English translated version) ] * [http://msdn.microsoft.com/en-us/library/cc228086(PROT.13).aspx MS-DRSR: Directory Replication Service (DRS) Remote Protocol Specification at msdn.microsoft.c
  4 KB (627 words) - 11:41, 3 December 2009
• Package Dependencies Required to Build Samba
  |Required only on [[Active_Directory_Domain_Controller|Samba Active Directory domain controllers]] and member servers using [[Setting_up_a_Share_Using_Wi |Required only on [[Active_Directory_Domain_Controller|Samba Active Directory domain controllers]] and member servers using [[Setting_up_a_Share_Using_Wi
  12 KB (1,705 words) - 08:30, 4 August 2023
• Verifying the Directory Replication Statuses
  Directory replication is important in an Active Directory (AD) forest with multiple domain controllers (DC) for fail-over and load ba ...rieved in the previous step and use <code>samba-tool</code> to display the directory replication status. See [[#Displaying_the_Replication_Statuses_on_a_Samba_D
  8 KB (1,148 words) - 17:06, 17 May 2017
• Samba4/videos
  the domain via the Active Directory Users and Computers tool
  2 KB (264 words) - 17:48, 9 November 2016
• Joining a Samba DC to an Existing Active Directory
  ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]]. ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]] documentation.
  16 KB (2,434 words) - 10:26, 26 September 2023
• Generating Keytabs
  Active directory requires Kerberos service principal names to be mapped to a user account be
  2 KB (278 words) - 09:24, 15 September 2016
• Troubleshooting SELinux on a Samba AD DC
  ...ng for Active Directory users on a Red Hat Enterprise Linux Samba 4 Active Directory domain controller. Here are some things I learned that I hope will be usef ...nked to the libraries that were installed in /usr/local/samba/lib, but the directory permissions would not allow applications running under other user permissio
  5 KB (843 words) - 16:57, 4 January 2017
• FAQ
  = Samba as an Active Directory Domain Controller = === Is Samba as an Active Directory Domain Controller Stable Enough for an Production Environment? ===
  17 KB (2,768 words) - 13:42, 11 February 2022
• Samba4/ActiveDirectory
  This is the Samba 4 Active Directory TODO list as assembled by metze. For making samba4 compatible with the Active Directory Schema
  28 KB (4,369 words) - 21:18, 11 December 2008
• Security/Dollar Ticket Attack
  This page attempts to document the "Dollar Ticket Attack" on Active Directory servers and targets (Kerberos enabled services). ...operates after [https://support.microsoft.com/en-us/topic/kb5008102-active-directory-security-accounts-manager-hardening-changes-cve-2021-42278-5975b463-4c95-45
  9 KB (1,249 words) - 22:20, 14 July 2022
• Migrating the ntvfs File Server Back End to s3fs
  [[Category:Active Directory]]
  2 KB (305 words) - 20:37, 26 February 2017
• Setting up a Share Using Windows ACLs
  * Active Directory (AD) domain controllers (DC) ...ave been built with ACL support enabled. A Samba host working as an Active Directory (AD) domain controller (DC), is always enabled with extended ACL support.
  13 KB (2,052 words) - 09:00, 1 February 2024
• Code Coverage
  ...e RPC interfaces are generally for DCE/RPC protocols implemented by Active Directory and internal messaging. They are often stubbed and allow manual implementat ...own patches. Although this forms a critical component of the Samba Active Directory implementation, a number of the components in the Heimdal code base which w
  13 KB (2,089 words) - 04:48, 28 April 2021
• Running a Samba AD DC with MIT Kerberos KDC
  On an Active Directory (AD) domain controller (DC), Samba uses an external application to provide ...> file is stored in Samba's <code>private</code> directory. To locate this directory:
  8 KB (1,139 words) - 08:08, 2 February 2023
• Samba AD schema extensions
  = Schema Extension in Samba Active Directory = Samba AD supports the same kind of schema extensions as Microsoft Active Directory. Schema updates in AD are a sensitive action and you must be prepared to do
  10 KB (1,486 words) - 09:54, 30 March 2024
• Windows 2012 Server compatibility
  [[Category:Active Directory]] = Active Directory Domain member =
  16 KB (2,478 words) - 00:58, 13 April 2021
• Create a samba lab-domain
  ...<tt>/usr/local/samba/labdom/</tt>), if you wanted to. We'll refer to this directory a lot in the next few commands, so let's set it as a bash variable. The new lab domain will contain all of the [[Active Directory Sites|AD Sites]] in your production domain, but none of the production DCs.
  9 KB (1,571 words) - 11:41, 1 June 2021
• BIND9 DLZ AppArmor and SELinux Integration
  directory and it's own zone file(s). # Samba DLZ and Active Directory Zones (default source installation)
  3 KB (545 words) - 18:54, 2 November 2023
• Distributed File System (DFS)
  Technically DFS provides access to a shared directory that contains no files, The main use of this is to create an alternative name space (directory tree view),
  5 KB (827 words) - 15:25, 7 September 2023
• Testing the DNS Name Resolution
  Active Directory (AD) uses SRV records to locate services, such as Kerberos and LDAP. To ver
  2 KB (295 words) - 12:11, 6 March 2022
• Setting up Samba as a Domain Member
  ...domain services, such as an NT4 primary domain controller (PDC) or Active Directory (AD) domain controller (DC). == Preparing a Domain Member to Join an Active Directory Domain ==
  19 KB (3,152 words) - 14:59, 5 March 2024
• Release Planning for Samba 4.1
  ...me.cgi?name=CVE-2014-8143 CVE-2014-8143] (Elevation of privilege to Active Directory). ...me=CVE-2013-6442 CVE-2013-6442] (smbcacls will remove the ACL on a file or directory when changing owner or group owner).
  8 KB (1,002 words) - 09:41, 16 September 2016
• Setting up a BIND DNS Server
  If you are planning to set up a Samba Active Directory (AD) domain controller (DC) using the <code>BIND9_DLZ</code> back end, you ...because the <code>BIND9_DLZ</code> must be able to access the Samba Active Directory (AD) database files directly.
  11 KB (1,575 words) - 19:58, 1 November 2023
• Using the samba backup script
  ...run more than one DC: Never restore a DC from a backup. You'll corrupt the directory as the replication meta data will get out of sync! ...sn't installed by 'make install'. You need to you copy it from the sources directory (source4/scripting/bin/samba_backup) to somewhere like /usr/sbin, and set s
  7 KB (1,158 words) - 16:20, 18 February 2022
• Documenting new features
  ...ki>[[Category:BLAH]]</nowiki> tags as appropriate, e.g. [[:Category:Active Directory]], [[:Category:Printing]], etc. For a list of possible categories, see [[Sp
  2 KB (329 words) - 05:22, 13 September 2018
• Setting up a Windows failover cluster
  Proceed to install the '''Active Directory Domain Services''' and '''iSCSI target server''' roles: Once roles are installed, provision the Active Directory domain following the Wizard:
  10 KB (1,355 words) - 14:04, 11 November 2020
• LDB Greater than and Less than indexing
  ...ag on the appropriate schema object in the database as per standard Active Directory. Active Directory domain controller databases using the older indexing scheme will need to be
  8 KB (1,321 words) - 02:10, 31 July 2019
• GSOC cockpit samba ad dc
  ...iguration file (smb.conf) to make sure that the server is set as an Active Directory Domain Controller (AD DC). If the server is not, the user is prompted to se * Display a Computer Active Directory object
  10 KB (1,438 words) - 14:54, 20 August 2023
• BIND9 DLZ DNS Back End
  ...upport for using the BIND DNS server as the DNS back end on a Samba Active Directory (AD) domain controller (DC). The <code>BIND9_DLZ</code> back end is recomme ...e>BIND9_DLZ</code> module is a BIND9 plugin that accesses the Samba Active Directory (AD) database directly for registered zones. For this reason:
  15 KB (2,327 words) - 13:10, 3 June 2022
• Virtual File System Modules
  |Sors directory content alphabetically before sending the entries to the client. |Moves files to a temporary directory rather than deleting them immediately.
  6 KB (881 words) - 11:48, 18 May 2018
• Build Samba from Source
  ...ocumentation is valid for every type of Samba installation, like an Active Directory (AD) domain controller (DC), a domain member (AD and NT4 domain), an NT4 PD Change into the directory with the extracted sources:
  11 KB (1,660 words) - 10:41, 4 August 2023
• Setting up Network Printer Ports
  [[Category:Active Directory]]
  3 KB (401 words) - 18:07, 5 March 2023
• Release Planning for Samba 4.0
  ...me.cgi?name=CVE-2014-8143 CVE-2014-8143] (Elevation of privilege to Active Directory). ...me=CVE-2013-6442 CVE-2013-6442] (smbcacls will remove the ACL on a file or directory when changing owner or group owner).
  9 KB (1,149 words) - 14:36, 8 September 2015
• Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)
  ...ou have a Samba NT4-style domain, that you want to upgrade to Samba Active Directory!''' ...ovides a way to migrate an existing NT4-style domain to a new Samba Active Directory. The following guide describes the upgrade scenario. It is suitable for upg
  20 KB (3,145 words) - 13:14, 18 July 2020
• CVE-2018-1057
  No, this only impacts on the Samba Active Directory DC. No, this only impacts on the Samba Active Directory DC.
  7 KB (1,125 words) - 11:00, 14 March 2018
• Using the worm VFS Module
  ...through a configuration option (grace_period), to pause turning a file or directory read-only for a defined time. The grace period is based on the change time [[Category:Active Directory]]
  4 KB (679 words) - 15:59, 1 November 2017
• Virtual PDF Printer
  [[Category:Active Directory]]
  3 KB (387 words) - 13:26, 6 October 2021
• Implementing System Policies with Samba
  ...workstation. Since then, Microsoft incorporated Policies into it's Active Directory Service and renamed them to Group Policy Objects. When this happened the bi Currently Samba, the Free Software SMB Server, does not implement Active Directory functionality when using it as a Primary Domain Controller. If you deploy a
  14 KB (2,384 words) - 21:59, 28 April 2008
• Active Directory Naming FAQ
  Picking an Active Directory domain name is one of the most important steps in setting up a domain. And = What is an Active Directory domain? =
  23 KB (3,912 words) - 08:31, 8 August 2023
• Samba AD DC Troubleshooting
  ...troubleshoot problems users can encounter when running Samba as an Active Directory (AD) domain controller (DC). If you have any problems with your Active Directory (AD) domain controller (DC) after updating Samba, see: [[Updating_Samba#Not
  8 KB (1,174 words) - 10:32, 26 February 2023
• CVE-2020-14323
  ...s into names in one request. This was done for performance reasons: Active Directory domain controllers can do multiple SID to name translations in one RPC call
  2 KB (320 words) - 11:41, 2 November 2020
• Samba4/Proposal for IPA to AD forest trust
  ===Virtual Directory=== #Client locates it's own DC in Active Directory with CLDAP
  9 KB (1,583 words) - 12:26, 27 February 2009
• Authenticating Freeradius against Active Directory
  [[Category:Active Directory]]
  3 KB (377 words) - 08:53, 15 April 2020
• Franky
  ...parts of Samba3 and Samba4 to form '''Franky''' - a complete Samba Active Directory server that is also a performant file server and a print server. = The Idea - A Hybrid Samba Active Directory Controller =
  7 KB (1,102 words) - 08:01, 9 May 2012
• Setting up Audit Logging
  * The Kerberos key distribution center (KDC) on an Active Directory (AD) domain controller (DC) logs an <u>authentication</u> event when a user [[Category:Active Directory]]
  7 KB (1,075 words) - 23:00, 13 January 2023
• Password Settings Objects
  To create a PSO using the Windows GUI, open Active Directory Administrative Center, then navigate to System -> Password Settings Contain [[Category:Active Directory]]
  7 KB (1,135 words) - 23:50, 28 March 2019
• Authenticating Apache against Active Directory
  Example of where you need this: You want Apache to permit access to a directory on your webserver just for AD users that are members of a defined AD group * Add the following to your .htaccess or your httpd.conf (vHost/directory/... directive):
  9 KB (1,359 words) - 21:52, 26 February 2017
• Samba4/Linking AD and unix directories
  Similarly, the KDC will use it's directory knowledge (presumably the Active Directory has a growing array of different ways that it can be
  11 KB (1,813 words) - 06:08, 23 February 2009
• Spotlight with Gnome Tracker Backend
  ...ory as Tracker stores its database and configuration inside the users home directory. ...command '''gsettings''', but this requires a '''user''' dbus session to be active:
  11 KB (1,491 words) - 10:53, 11 May 2023
• The SYSTEM Account
  The following example describes how a Windows Active Directory (AD) domain member downloads and applies group policy objects (GPO):
  4 KB (612 words) - 20:33, 6 May 2017
• Samba server process model
  [[Category: Active Directory]]
  3 KB (528 words) - 04:56, 28 May 2019
• File System Support
  ...e user and system <code>xattr</code> name space enabled. On a Samba Active Directory (AD) domain controller (DC), <code>samba-tool</code> verifies this setting
  3 KB (464 words) - 20:35, 25 August 2023
• Samba 3.2 Features added/changed
  ...as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. ====Winbind and Active Directory Integration:====
  15 KB (2,180 words) - 21:09, 26 February 2017
• Configuring LDAP over SSL (LDAPS) on a Samba AD DC
  Active Directory uses the LDAP (Lightweight Directory Access Protocol) for read and write access. By default LDAP connections are * Change into the directory you want to store the key and certificate
  11 KB (1,639 words) - 19:10, 26 November 2021
• Setting up Samba as an NT4 PDC (Quick Start)
  ...commend setting up Samba as an [[Active_Directory_Domain_Controller|Active Directory (AD) domain controller (DC)]], because Microsoft officially stopped the sup : Omit the <code>-M</code> parameter if the user requires a home directory on this host. For Samba access, the account does not require a valid shell.
  5 KB (804 words) - 16:07, 14 July 2022
• Distribution-specific Package Installation
  ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]] page.
  3 KB (470 words) - 19:34, 29 March 2023
• Configuring Logging on a Samba Server
  [[Category:Active Directory]]
  4 KB (598 words) - 02:58, 6 January 2023
• Domain rename tool
  ...realm's filepath, e.g. sysvol/samba.example.com/Policies. A default sysvol directory is also created using the new realm's filepath, e.g. sysvol/new.renamed.com [[Category:Backup]] [[Category:Active Directory]]
  5 KB (825 words) - 11:20, 28 July 2019
• Keytab Extraction
  There are two ways to obtain a keytab from an Active Directory Domain with Samba:
  3 KB (501 words) - 13:34, 9 October 2016
• Setting up Samba as a Standalone Server
  ...often do not want to set up an [[Active_Directory_Domain_Controller|Active Directory]] or [[NT4_Domains|NT4 domain]]. :Omit the <code>-M</code> parameter if the user requires a home directory on this host. For Samba access, the account does not require a valid shell.
  9 KB (1,399 words) - 13:24, 3 February 2023
• Transferring and Seizing FSMO Roles
  ...t one DC in the domain is still working. The replication could mix up your directory! [[Category:Active Directory]]
  7 KB (1,080 words) - 21:04, 25 March 2019
• Setting up Automatic Printer Driver Downloads for Windows Clients
  * Create the directory: | text = When setting up a Samba print server on an Active Directory (AD) domain controller (DC), you cannot use POSIX access control lists (ACL
  16 KB (2,458 words) - 09:17, 5 March 2023
• Rsync based SysVol replication workaround
  created directory /usr/local/samba/var/locks/sysvol... ...really your SysVol folder, because the command will replicate to the given directory and removes everything in it that isn't also on the source! You could damag
  9 KB (1,094 words) - 18:26, 5 October 2021
• Samba 4.20 Features added/changed
  ...ires MIT 1.21 when built against a system MIT Krb5 and acting as an Active Directory DC. This addresses the issues that were fixed in [https://cve.mitre.org/cg ...Samba for major distributions are found in the bootstrap/generated-dists/ directory of a Samba source tree. While there will be some differences - due to feat
  13 KB (1,967 words) - 08:44, 28 March 2024
• Writing Tests
  ...it easy to write Python client code that exercises the server-side Active Directory behaviour.
  4 KB (644 words) - 05:14, 4 June 2020
• Time Synchronisation
  ...he access is denied. As a result, a user cannot access shares or query the directory. ...The time daemon must have read permissions in the <code>ntp_signed</code> directory. To list the permissions, enter:
  16 KB (2,531 words) - 15:58, 27 October 2023
• Domain backup and rename
  [[Category:Active Directory]]
  4 KB (587 words) - 05:21, 1 May 2019
• 2.0: Configuring LDAP
  ...and the slave when adding additional replicas. It is also no longer under active development. Change to the openldap directory.
  25 KB (3,433 words) - 03:56, 21 September 2007
• VPN Single SignOn with Samba AD
  ...samba4 on Debian/Ubuntu Server, please see [[Setting up Samba as an Active Directory Domain Controller]].<BR> ...eradius_against_Active_Directory, Authenticating Freeradius against Active Directory]
  13 KB (1,793 words) - 07:05, 20 April 2020
• Presentations
  ...dateOnActiveDirectoryIntegration.pdf An update on Samba and FreeIPA Active Directory integration], Alexander Bokovoy (Red Hat), Andreas Schneider (Red Hat) ...DirectoryUsersAndGroupsIn.pdf Handling POSIX attributes for trusted Active Directory users and groups in FreeIPA], Alexander Bokovoy (Red Hat)
  41 KB (5,336 words) - 12:59, 18 June 2020
• Downgrading an Active Directory DC
  In general, there are two ways to upgrade or downgrade a Samba Active Directory (AD) Domain Controller (DC): ...er to operate correctly (for example, in v4.8 the location of the bind-dns directory changed).
  11 KB (1,744 words) - 21:11, 12 November 2022
• Bidirectional Rsync/osync based SysVol replication workaround
  ...really your SysVol folder, because the command will replicate to the given directory and sync everything in it that isn't also on the source! You could damage y [[Category:Active Directory]]
  6 KB (955 words) - 09:43, 9 March 2022
• Azure AD Connect
  ** If you use Exchange in your on-premises Active Directory instance, you can also enable hybrid deployments in Exchange. Enable this o
  4 KB (641 words) - 04:35, 6 April 2023
• Linux Kernel Server
  LDAP, Active Directory Domain Controller, and a cross platform file server
  5 KB (610 words) - 13:47, 1 April 2021
• MIT Build
  ...ole used by Samba 3 and needed for FreeIPA cross-forest trusts with Active Directory Currently Samba 4 is developed from the perspective of building an Active
  13 KB (2,189 words) - 17:54, 18 February 2014
• Dbcheck
  [[Category:Active Directory]]
  4 KB (700 words) - 04:03, 31 July 2019
• 3.0: Initialization LDAP Database
  The future of Samba is changing to Active Directory; we keep this in mind when creating the database so it can be an easier upg description: Directory Manager
  22 KB (2,932 words) - 12:49, 14 March 2007
• Bidirectional Rsync/Unison based SysVol replication workaround
  You now use rsync to create the directory structure with extended attributes [[Category:Active Directory]]
  6 KB (935 words) - 08:13, 1 January 2024
• Samba AD on CentOS7
  This page describe Samba4 Active Directory installation on CentOS 7. The environment is composed by 2 DCs with replica
  4 KB (588 words) - 13:32, 15 December 2015
• Paged Results
  There are not that many ways to correlate data across the directory by default, and maintaining this data is quite difficult because of the lac [[Category:Active Directory]]
  7 KB (1,098 words) - 03:41, 13 May 2019
• Setting up Samba as an Active Directory Domain Controller
  ...g from version 4.0 (released in 2012,) Samba is able to serve as an Active Directory (AD) domain controller (DC). Samba operates at the forest functional level ...C_to_an_Existing_Active_Directory|Joining a Samba DC to an Existing Active Directory]].
  29 KB (3,995 words) - 12:03, 30 November 2023
• Samba 4.19 Features added/changed
  :* [https://bugzilla.samba.org/show_bug.cgi?id=12421 BUG 12421]: Fake directory create times has no effect. ...blished behaviour of Microsoft's Active Directory) when Samba is an Active Directory Domain Controller.
  25 KB (3,618 words) - 08:34, 28 March 2024
• Samba AD Smart Card Login for macOS clients
  Smart card logon was added in macOS Sierra 10.12 and Directory logon in macOS High Sierra 10.13. ...mba_as_an_Active_Directory_Domain_Controller|Setting up Samba as an Active Directory Domain Controller]] page using Debian.
  31 KB (4,000 words) - 15:15, 3 July 2023
• Capture Packets
  ...n the other hand if it concerns things related to authentication or Active Directory protocols it's often better to do the tracing from the server as most of th
  5 KB (820 words) - 08:00, 9 August 2017
• GlusterFS
  ...ge or to store data in a local network. It can be used to set up an active-active filesystem cluster with failover and loadbalancing via DNS-round robin. Tog ...asy to get a stupid form of split brain. Node A is shut down and node B is active, updating information in persistent databases (perhaps id-mapping info?).
  16 KB (2,563 words) - 17:19, 22 February 2020
• Setting up Samba as a Print Server
  * To create the spool directory, enter: [[Category:Active Directory]]
  8 KB (1,297 words) - 21:30, 25 July 2023
• GSOC GPO
  ...late hours were spent face-deep in Microsofts documentation on how Active Directory works, the protocols, how the server is employed, and what happens with GPO ...es, password configurations). This project entailed many aspects of Active Directory, Linux, git, and wireshark that I was unaware of prior to doing this projec
  12 KB (2,069 words) - 08:30, 17 November 2021
• OpenSSH Single sign-on
  [[Category:Active Directory]]
  6 KB (1,008 words) - 21:52, 26 February 2017
• CVE-2020-1472
  ...applies to Samba used as domain controller only (most seriously the Active Directory DC, but also the classic/NT4-style DC).
  6 KB (957 words) - 17:10, 18 September 2020
• Back up and Restoring a Samba AD DC
  ...e backup, login on the DC you're backing up, and simply specify the target-directory location to write the backup-file to. E.g. Note that the target-directory specified must be empty (or non-existent). This means it's not practical to
  24 KB (4,038 words) - 09:39, 17 March 2021
• Traffic replay
  [[Category: Active Directory]]
  7 KB (1,118 words) - 00:43, 5 June 2019
• Samba CTDB GlusterFS Cluster HowTo
  ...dependencies you will find a directory <code>/etc/ctdb</code>. Inside tis directory you need some configuration files for CTDB. ...will have no local path in the share-configuration. The share points to a directory on your gluster-volume, so CTDB can`t check the path. So if you going to us
  28 KB (4,203 words) - 09:46, 2 February 2023
• Samba 3.3 Features added/changed
  ...as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. * Splitting of library directory into library directory and separate modules directory.
  20 KB (2,917 words) - 21:09, 26 February 2017
• Samba 4.18 Features added/changed
  :* [https://bugzilla.samba.org/show_bug.cgi?id=12421 BUG 12421]: Fake directory create times has no effect. ...blished behaviour of Microsoft's Active Directory) when Samba is an Active Directory Domain Controller.
  34 KB (4,920 words) - 08:33, 28 March 2024
• Samba4/DRS TODO List
  * '''showrepl''' - Displays the replication partners for each directory partition on the specified domain controller ===Fix 'net vampire' and other python commands in 'net' to run in installed directory===
  24 KB (4,087 words) - 23:01, 18 June 2014
• Samba AD Smart Card Login
  ...functionality working on Windows 7/8 clients that are joined to an Active Directory domain hosted by a Samba 4 AD domain controller. The Active Directory domain was provisioned as follows:
  55 KB (8,205 words) - 14:19, 17 December 2022
• LDB
  ...LDAP compliance where possible, although Samba’s higher priority is Active Directory compliance. We do aim for LDAP compliance where it doesn’t conflict. ...ons around the world to manage their, well, organisation – eg all of their directory services (things such as person information, IT information (machine detail
  51 KB (7,097 words) - 15:59, 9 December 2019
• Xfstest-results-windows
  |Te3st whether a tarred directory structure can be untarred |test rename for various directory sizes
  22 KB (3,043 words) - 02:08, 23 July 2022
• Samba 4.3 Features added/changed
  ...led memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP ...nection to an insecure one may allow an attacker to take control of Active Directory object handles created on a connection created from an Administrator accoun
  76 KB (11,563 words) - 22:02, 17 September 2019
• Samba 4.16 Features added/changed
  ::A Samba Active Directory DC will issue weak rc4-hmac session keys for use between modern clients and ::On Samba Active Directory DCs and members 'kerberos encryption types = legacy' would force rc4-hmac a
  43 KB (6,283 words) - 12:59, 6 September 2023
• Samba 3.6 Features added/changed
  ...ry Domain Controller or man-in-the-middle attacker impersonating an Active Directory Domain Controller could achieve root-level access by compromising the winbi ...75] (ACLs are not checked on opening an alternate data stream on a file or directory) .
  41 KB (6,189 words) - 21:09, 26 February 2017
• Samba 4.17 Features added/changed
  :* [https://bugzilla.samba.org/show_bug.cgi?id=15313 BUG 15313]: Large directory optimization broken for non-lcomp path elements. ....org/show_bug.cgi?id=15283 BUG 15283]: vfs_virusfilter segfault on access, directory edgecase (accessing NULL value).
  47 KB (6,842 words) - 08:32, 28 March 2024
• Samba 4.4 Features added/changed
  ...2017-2619 CVE-2017-2619]: Symlink race permits opening files outside share directory. ...2017-2619 CVE-2017-2619]: Symlink race permits opening files outside share directory.
  78 KB (11,799 words) - 22:01, 17 September 2019
• Samba CTDB GPFS Cluster HowTo
  ...stem that is always available ?, A system that integrates with your Active Directory, supports SMB2 protocol and ACL's. Then read on... Next create the directory /usr/local/var
  17 KB (2,682 words) - 06:25, 17 September 2018
• Samba 4.1 Features added/changed
  ...e.cgi?name=CVE-2015-3223 CVE-2015-3223] (Denial of service in Samba Active Directory server) ...-2015-8467 CVE-2015-8467] (Denial of service attack against Windows Active Directory server)
  80 KB (11,979 words) - 22:04, 17 September 2019
• Samba 4.15 Features added/changed
  ::A Samba Active Directory DC will issue weak rc4-hmac session keys for use between modern clients and ::On Samba Active Directory DCs and members 'kerberos encryption types = legacy' would force rc4-hmac a
  57 KB (8,418 words) - 16:59, 9 March 2023
• Samba 4.5 Features added/changed
  ...2017-2619 CVE-2017-2619]: Symlink race permits opening files outside share directory. ...2017-2619 CVE-2017-2619]: Symlink race permits opening files outside share directory.
  61 KB (8,962 words) - 21:57, 17 September 2019
• Samba Security Documentation
  * An Active Directory Domain Controller, which provides directory-based network authentication (as well as all the Samba file server function ...ools for Linux-based clients to access Windows-based file shares or Active Directory services. Samba also provides Domain Member and NT4-like Domain Controller
  129 KB (20,269 words) - 04:00, 1 June 2023
• Samba 4.0 Features added/changed
  ...me.cgi?name=CVE-2014-8143 CVE-2014-8143] (Elevation of privilege to Active Directory Domain Controller). ...ename.cgi?name=CVE-2013-6442 CVE-2013-6442] (smbcacls can remove a file or directory ACL by mistake).
  78 KB (11,609 words) - 22:05, 17 September 2019
• Samba 4.8 Features added/changed
  ...me=CVE-2018-10858 CVE-2018-10858] (Insufficient input validation on client directory listing in libsmbclient.) ...cgi?name=CVE-2018-10858 CVE-2018-10858]: A malicious server could return a directory entry that could corrupt libsmbclient memory.
  56 KB (8,271 words) - 21:43, 17 September 2019
• Group Policy
  ...mba ADMX templates to the <code><domain>/Policies/PolicyDefinitions</code> directory on the SYSVOL share. [[Category:Active Directory]]
  24 KB (3,276 words) - 15:52, 6 December 2023
• Hardening Samba as an AD DC
  ...amba_advanced_methods.html Tranquil IT's Advanced features of Samba Active Directory]
  11 KB (1,748 words) - 23:48, 19 June 2023
• Samba 4.2 Features added/changed
  ...nection to an insecure one may allow an attacker to take control of Active Directory object handles created on a connection created from an Administrator accoun As an active directory member server LDAP is also used by the winbindd service when connecting to
  94 KB (14,313 words) - 22:03, 17 September 2019
• SoC/Ideas
  ===Samba AD DC as the ideal POSIX Directory=== Samba is a great Active Directory Domain Controller, but it is not an ideal directory server for a large, passionate and important user base: Sites with Samba S
  27 KB (4,255 words) - 08:35, 17 November 2021
• Interpreting JSON Audit Logs
  These log when a client triggers a significant change in the Active Directory Database (known, sometimes, as DSDB internally in Samba). Some specific cha
  15 KB (2,125 words) - 23:14, 13 January 2023
• Xfstest-results-azure
  |test rename for various directory sizes | fail (directory mtime and ctime not updated when moving file)
  16 KB (2,116 words) - 05:10, 10 March 2024
• Samba 4.13 Features added/changed
  ...nerable to a malicious client using an SMB1 or NFS symlink race to allow a directory to be created in an area of the server file system not exported under the s ...nticated user must have permissions to create a directory under the target directory of the symlink.
  46 KB (6,847 words) - 08:20, 22 March 2022
• Samba 4.7 Features added/changed
  ...me=CVE-2018-10858 CVE-2018-10858] (Insufficient input validation on client directory listing in libsmbclient.) ...cgi?name=CVE-2018-10858 CVE-2018-10858]: A malicious server could return a directory entry that could corrupt libsmbclient memory.
  66 KB (9,866 words) - 21:40, 17 September 2019
• Samba 4.10 Features added/changed
  ...applies to Samba used as domain controller only (most seriously the Active Directory DC, but also the classic/NT4-style DC). ...2 CVE-2019-14902]: Replication of ACLs set to inherit down a subtree on AD Directory not automatic.
  63 KB (9,242 words) - 20:37, 22 September 2020
• Samba 4.11 Features added/changed
  ...of "ChangeNotify", where a client can request file name notification on a directory handle when a condition such as "new file creation" or "file size change" o ...server. These replies contain information that should not be available to directory handles open for FILE_READ_ATTRIBUTE only.
  55 KB (8,076 words) - 14:14, 10 March 2021
• Samba 4.14 Features added/changed
  ...org/show_bug.cgi?id=14971 BUG 14971]: virusfilter_vfs_openat: Not scanned: Directory or special file. :* [https://bugzilla.samba.org/show_bug.cgi?id=14878 BUG #14878]: Recursive directory delete with veto files is broken.
  42 KB (6,293 words) - 19:33, 13 September 2022
• Samba 4.6 Features added/changed
  ...me=CVE-2018-10858 CVE-2018-10858] (Insufficient input validation on client directory listing in libsmbclient.) ...cgi?name=CVE-2018-10858 CVE-2018-10858]: A malicious server could return a directory entry that could corrupt libsmbclient memory.
  59 KB (8,725 words) - 21:51, 17 September 2019
• Configure DHCP to update DNS records
  [[Category:Active Directory]]
  22 KB (2,942 words) - 13:11, 11 August 2023
• Samba 4.12 Features added/changed
  ...of "ChangeNotify", where a client can request file name notification on a directory handle when a condition such as "new file creation" or "file size change" o ...server. These replies contain information that should not be available to directory handles open for FILE_READ_ATTRIBUTE only.
  47 KB (7,093 words) - 15:21, 20 September 2021
• Samba 4.9 Features added/changed
  ...2 CVE-2019-14902]: Replication of ACLs set to inherit down a subtree on AD Directory not automatic. ...ame=CVE-2019-14902 CVE-2019-14902]: Replication of ACLs down subtree on AD Directory not automatic.
  76 KB (11,334 words) - 15:03, 3 March 2020