search for: tmaerz

...ome things to check out for linux-based patch management of Windows (and other) clients: http://vfense.github.io/vFense/ <http://vfense.github.io/vFense/> http://www.opsi.org/en <http://www.opsi.org/en> Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> work: 573-364-0444 x1402 cell: 573-612-1349 CONFIDENTIALITY NOTICE This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constit...

Hello, Using this tool on a Samba 4.1.16 forest I get the following two errors. DC=ForestDnsZones,DC=domain,DC=local NamingContext 1 Failed Discovery: Property 'msds-sdreferencedomain' does not exist. DC=DomainDnsZones,DC=domain,DC=local NamingContext 1 Failed Discovery: Property 'msds-sdreferencedomain' does not exist. Replication does indeed work as I

...> when not acting as an AD Domain Controller. It is also the basis for > some of the features of FreeIPA and so it gets development attention > from that direction as well.” > > Thomas Maerz > Network/Systems Administrator > Brewer Science, Inc. > A+ NET+ CCENT MCDST > tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> > work: 573-364-0444 x1402 > cell:573-612-1349 > > CONFIDENTIALITY NOTICE > This message (and any of its attachments) is intended for the > addressee and may contain confidential information, may be > attorney-cl...

I would set up your server as a Samba AD and use the directory. Give each user a username and password on the server that they will authenticate to the server with and when they connect the permissions will act as you are expecting. Joining the machines to the domain is not necessary; it simply integrates the workstation with the server so that the user doesn’t have to enter the credentials

...9;m very excited to be approved to put this new infrastructure into production eventually, and I appreciate the group's help to get the platform solid and reliable so I can thoroughly test it before deployment! Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com work: 573-364-0444 x1402 cell: 573-612-1349 CONFIDENTIALITY NOTICE This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constitute inside or non-public information under...

.... This means that we still use this code, even when not acting as an AD Domain Controller. It is also the basis for some of the features of FreeIPA and so it gets development attention from that direction as well.” Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> work: 573-364-0444 x1402 cell: 573-612-1349 CONFIDENTIALITY NOTICE This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constit...

...-directory-cookbook/0596004648/ch17s09.html <https://www.safaribooksonline.com/library/view/active-directory-cookbook/0596004648/ch17s09.html> After I did this the AD Replication Status Tool started working. Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> work: 573-364-0444 x1402 cell: 573-612-1349 CONFIDENTIALITY NOTICE This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constit...

You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active

...e clients directly at the Samba4 domain controller DNS servers and that does not make any difference. Few of the computers are joined to the domain (They are macs). This domain is primarily used for authentication. Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> work: 573-364-0444 x1402 cell: 573-612-1349 CONFIDENTIALITY NOTICE This message (and any of its attachments) is intended for the addressee and may contain confidential information, may be attorney-client privileged, and may constit...

2016-05-06 9:39 GMT+02:00 Rowland penny <rpenny at samba.org>: > On 05/05/16 21:46, Thomas Maerz wrote: > >> Hello, >> >> We have an issue we’ve been struggling with for quite some time since we >> rolled out 10 Samba4 domain controllers at our main office and all remote >> sites about 3 years ago. >> >> Simplified Current Configuration:

I have also experienced this issue. Additionally, new objects created in AD would show up on both the S4 DCs (4.5.x) and the Server2008R2 DC, but the password would not sync between them in either direction after the initial join replication. Thomas Maerz > On Oct 31, 2016, at 12:52 PM, Wayne Andersen via samba <samba at lists.samba.org> wrote: > > I have a domain with multiple

Another old thread I’m resurrecting; apologies, but I have also been experiencing this issue. I have 10 international remote sites over very lossy WAN links. Getting traffic to them from HQ is a challenge; them trying to talk directly each other over umpteen paths is even worse. They are able to accomplish this (somewhat) because we have a mesh VPN setup with direct site-to-site connectivity, but

Hello, I am currently working on a solution to replace Apple OpenDirectory on some aging Xserve hardware. I currently have CentOS Samba4 AD DC?s replicating for redundancy using sernet-samba repositories. The third one has File/Print roles defind and it works perfectly EXCEPT on OSX 10.6. IT works great on any Windows workstation and OSX 10.7,10.8, 10.9 GNOME/Nautilus and even CIFS CLI mounting

This is actually a similar scenario to mine, I neglected to mention that before this happened, I had joined a Server 2008 R2 to the domain and promoted it to FSMO, then moved FSMO back to S4 DC and demoted the Server 2008 R2 controller. I did what you suggested and it worked! I am assuming this is a bug. Thank you for your suggestion. Thomas Maerz > On Nov 9, 2016, at 3:59 AM, Kelvin Yip via

Hello, As far as I know, there is no Wiki article for transferring FSMO Roles to Server 2008 R2 DC. This article’s focus is on joining a Server 2012 DC to a Samba4 domain, but it touches on the subject: https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD <https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD> I would

Hello, I can’t get a fully patched Server 2008 R2 DC to finish DCPROMO joining as a domain controller to my Samba4 AD domain. dcpromo.exe begins replication but gets stuck on “Replicating data CN=Configuration,DC=samdom,DC=contoso,DC=com: Received 1999 off of approximately 1999 objects and 74 out of approximately 74 distinguished name (DN) values… Examining the dcpromo.log file just shows

Hello, We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current Configuration: 2 DCs at main site with internal DNS using subdomain ad.companyname.com 2 BIND CentOS servers serving all intranet DNS requests — main zone: companyname.com 2 BIND CentOS servers