Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.

learn more… | top users | synonyms

1
vote
1answer
11 views

SELinux rules in CentOS 7 with Samba and SSSD on Kerberos Ticket generation

I've built a simple File Server with Samba and Netatalk running on CentOS 7.2. Everything is working as expected except for SELinux that's denying Samba to authenticate due to a policy of denying ...
0
votes
1answer
18 views

Samba is ignoring file and directory create permissions

I am trying to create a SAMBA share but as usual I get a bunch of permissions problems. Here is my setup: [global] workgroup = WORKGROUP security = user map to guest = bad ...
1
vote
1answer
28 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
0
votes
1answer
15 views

Samba4 Bind9 client registration as A Host

I have setup an AD DC using Samba4 with Bind9. Everything works perfectly. The problem I'm seeing is after joining a computer to the domain, the computer doesn't appear in DNS as a Host (A) compared ...
0
votes
1answer
1k views

Migrate from MS Active Directory to Samba4

The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
2
votes
0answers
34 views

ZFS on linux with centos 7.2 sync reads slow to crawl when executing sync writes

We are running ZFS on linux with centos 7.2. The array has 26 6tb Seagate sas drives in a mirrored configuration and then stripped across the mirrors to form our pool. 128gb arc, 480GB l2arc PCI ...
0
votes
0answers
11 views

samba: ip working, hostname not

I have a ubuntu-smb server in my network with Windows Clients accessing it. I set up a networkdrive on the Clients to a share on the server and used for the link \\hostname\sharename$\. After a ...
0
votes
0answers
16 views

Sernet Samba 4.4 on Scientific Linux 7.2 cannot join AD as DC

I've bought a subscription, installed sernet-samba and sernet-samba-ad. I'm failing on doing the domain join from the Samba wiki. We've got SSSD and member server / computer domain auth working in ...
18
votes
4answers
42k views

Samba configuration for public shares

yesterday I upgraded my fedora box to the latest version, and with that, I also upgraded samba, now using samba 4. I used to access those share from any computer at home without user/password, but now ...
0
votes
1answer
28 views

Samba DC - NT_STATUS_OBJECT_NAME_NOT_FOUND

What am I doing wrong!!! Argh!!! I’m trying to get an Ubuntu 14.04 server running Samba as domain controller. Setup is a VM (10.0.0.1, samba.test.local) running a fresh & basic installation of ...
1
vote
0answers
11 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
1answer
69 views

OpenFire authentication against Samba Active Directory using StartTLS

I am trying to authenticate different services (specifically openfire for now) against Samba Active Directory over StartTLS (port 389). While setting openfire up, I checked this option (Use StartTLS),...
1
vote
3answers
3k views

SAMBA 4.1.6 create public share

I just upgraded Ubuntu server to 14.04 which took samba up to 4.1.6. My public share (local home network so not worried about security so much as family getting to files simply and anonymously), has ...
1
vote
2answers
27 views

Can a Unix host obtain Kerberos keytabs for another host from Active Directory?

We use Puppet to configure our servers, but creating Kerberos keytabs for them is currently a manual process. We would like the Kerberos keytabs of the Unix machines to be automatically generated, ...
0
votes
1answer
1k views

Samba4 and BIND9_DLZ - static records with samba_dnsupdate dynamic dlz

I have some records in bind for my DNS zone. Now I want to configure Samba4 Active Directory which wants to add some dynamic records into my zone. So I include /var/lib/samba/private/named.conf in my /...
0
votes
0answers
17 views

Samba 4x netlogon scripts not executing on Windows 7

I am in the process of migrating a domain configuration to another server, I am able to connect to the domain, and log in, plus get my X: drive, which is just the users home drive. The previous ...
0
votes
2answers
1k views

Samba 4.1 (Ubuntu 14.04) prompts for password when listing shares

I had to upgrade my Ubuntu Server to 14.04 which comes with Samba 4.1 (I used Samba 3 previously). I had to switch from security = share to security = user, because it looks like the first one seems ...
0
votes
1answer
29 views

samba 4.3.9 ntlm_auth: Memory allocation error (0xc0000017)

System: Ubuntu 16.04 - samba Version 4.3.9-Ubuntu -> # ntlm_auth --request-nt-key --domain=VBA.LAN --username=[user] --password=[pw] NT_STATUS_NO_MEMORY: Memory allocation error (0xc0000017) ...
0
votes
1answer
5k views

Samba4 & Active Directory Kerberos [Cannot contact any KDC for realm 'INTERNAL.CORP.COM' while getting initial credentials

Yesterday I configured an Active Directory Server using Arch Linux and Samba 4 following this guide. I even added a client to the domain and was able to log in successfuly on my client. After a ...
0
votes
2answers
62 views

Password policy in Active Directory - inactivation of complexity without effect

In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers. In ...
0
votes
2answers
27 views

Targeted GPO deployments from Samba (4) DC

I've seem to be stuck. I come from a mostly POSIX background, & thrown into the deep-end on this one, so learning as I go along - so not sure if there's no solution, or if it's my own Dunning-...
0
votes
0answers
15 views

GPO - scripts not started using FQDN but UNC works

Assumptions: AD domain is called SAMDOM, FQDN for the domain is SAMDOM.EXAMPLE.COM. There is only one domain controller and it's called DC1. So, the FQDN for DC1 is DC1.SAMDOM.EXAMPLE.COM If I ...
0
votes
1answer
1k views

Samba 4.1 process_usershare_file: stat of /var/lib/samba/usershares/share failed. even though user can list that folder and stat file

I've got two identical users, one can access the share while the others not able to. The share's name is storage_photos, it's located in the folder /storage/photos/. $ getfacl /storage/photos ...
1
vote
2answers
170 views

smbclient: Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)

until yesterday I had a functioning Active Directory Primary Domain Controller running on a raspberry pi. Now it seems I cannot get the 'samba' service to listen at all. This is since performing an ...
1
vote
0answers
38 views

How to map domain users to a specific UID/GID in function of their domain groups?

I have a samba 4.4.3 file server set up as AD domain member. My current smb.conf file is: [global] workgroup = MYDOMAIN realm = MYDOMAIN.ROOT security = ADS encrypt passwords = yes idmap ...
2
votes
1answer
1k views

Samba 4.1.17-Debian Access denied to fileshare

I freshly installed Debian 8 (Jessie) on a virtual machine. I installed the Samba 4.1.17 server with the intention to have shared folders on my network. I didn't change anything to the configuration, ...
0
votes
0answers
46 views

Use Windows RSAT DHCP Server MMC SnapIn with Linux Samba 4 AD to manage dnsmasq/isc-dhcpd

This particular Active Directory installation uses a Samba 4 Domain Controller Forest running on up2date (05-2016) Debian Linux Jessie VMs. Remote Server Administration Tools (RSAT) are used from ...
1
vote
1answer
2k views

OpenLDAP to Samba 4 Migration, create middle layer / webservice for user initiated password migration/change?

for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). ...
0
votes
0answers
29 views

samba4 internal dns not resolving local computer names to ip

Welcome I have a problem with samba4 internal dns, on DC and on machines can't resolve machines name to its ip, only DC name is resolved to ip: host -t A dcname dc name is 1.2.3.4 ok but host ...
0
votes
0answers
12 views

Samba user expiration

I got a Samba4 Server running on a Debian. I let Linux user expire with the 'chage' command but I can't find a way to do so with the Samba user. The Samba users can still log in when the Linux user ...
0
votes
0answers
16 views

Unable to create indipendent shares for Virtual-Samba-Server

I'm using a VirtualBox-Centos7 (Samba-Server) and a Ubuntu-Mate-Xenial (client) machine; I would like to create two virtual servers and for every server one indipendent share. I've already created the ...
1
vote
1answer
87 views

Control Windows permissions on Samba share from linux

I have a Debian 8 with Samba 4 as a AD domain member. The DC is Windows Server 2008. The shares are able to handle Windows permissions - I use IDMAP backend = rid, since I cannot add uidNumber and ...
0
votes
0answers
15 views

samba on linux, osx client spawns a flood of panic actions

We are trying to set up a samba share using ubuntu (Version 4.3.9-Ubuntu). We are now using a very very basic config with one share defined. [homes] comment = Home Directories browseable = yes ...
1
vote
0answers
24 views

`smbstatus` not showing NetBIOS name

I'm upgrading a Samba server from 3.0.37 to 4.4.3, and it seems that on 4.4.3, the smbstatus utility no longer displays the NetBIOS name of connected clients. On 3.0.37, smbstatus -p looks like this: ...
0
votes
0answers
20 views

What is the effect of provisioning the same active directory schema twice

if a domain has been provisioned once using samba-tool with the name, say 'MYDOMAIN', can this be repeated? If so will this result in an update of the existing records, or will a fresh domain with ...
0
votes
0answers
79 views

Samba operations return NT_STATUS_INVALID_SID after initial setup

I am setting up Samba as sole AD controller for a new domain following the official instructions. Everything appears to go fine with the domain provisioning, and I can get a kerberos ticket with kinit ...
0
votes
0answers
12 views

Apache 2.4 won't start with non-local DocumentRoot

To avoid bitrot, I'm consolidating all files on a fileserver running FreeBSD 10.2 with ZFS and Samba 4.2. Trying to move my toy webserver's pages onto the fileserver while leaving Apache on my dev ...
2
votes
2answers
1k views

Windows 10: AD Domain Admin with missing rights?

Maybe my title is not correct but I wouldn't know how else to name it at this point. If I log into a Windows 10 machine with the main AD Domain Admin Account, I get an error message when entering ...
0
votes
0answers
65 views

How to join a linux host to a Samba4 active directory

I have been attempting to coerce a pair of linux domain members to a Samba4 active directory. Although I have numerous niggles and unanswered questions raised during the setup, there are currently ...
3
votes
0answers
30 views

Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name

We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current ...
1
vote
0answers
37 views

Check status of samba4 in debian

In samba3, I can use command /etc/init.d/samba status to check status of samba service. But in samba4, that command does not exist. So I want to ask how to check status of samba4?
1
vote
0answers
29 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
2
votes
1answer
208 views

wbinfo -u does not show AD users (is empty)

We have a problem on a Ubuntu Server 14.04 (fileserver) connected to AD on a Windows Server 2008 R2 using Samba (version 4.3.8)/WinBind and Kerberos. The problem is that users do not have writing ...
1
vote
0answers
132 views

samba4: session setup failed: NT_STATUS_UNSUCCESSFUL

I am having trouble with my samba4 installation. For a long time it has been working without issue. I use webmin to configure users and although the module is only supposed to support samba3 it works ...
2
votes
1answer
67 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
0answers
55 views

Cannot set ACL permission at Samba share

I have setup samba share at xfs file system. Samba 4.2 runs at CentOS 7. Setting POSIX ACLs and extended attributes works as expected (setfacl -m user:joe:rw example.txt, setfattr -n user.example -v ...
10
votes
1answer
103 views

How many FSMO roles are there?

I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
0
votes
0answers
500 views

Samba4 Active Directory, Dovecot/Postfix LDAP auth lookups

I have 2 Ubuntu linux 14.04 servers with Samba4 on them. One is the AD master, the other is the AD backup. Before the Samba 3.8.4 update, my Postfix+Dovecot servers were able to do user lookups and ...
1
vote
1answer
102 views

samba classicupgrade from samba3 to samba4

I'm very confused with doing samba upgrade from samba 3.5 (debian squezze) to samba 4.1 (ubuntu 14.04 lts) What i'm done now? all from official samba wiki: [https://wiki.samba.org/index.php/...
2
votes
1answer
558 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...