similar to: [Re: Samba4 and sysvol share]

> Hello Felix, > > Sorry for the very late answer, > > Well I remade a test today, in gpmc.msc (group policy management console), I have no errors from Windows about the ACLs of the folders for my policies. Thanks a lot for your answers, Matthieu and Christopher. It makes me happy to know that you guys don't forget to answer the questions of samba users. My first solution was

Hello. I noticed that any domain user can delete the content of the shared folder sysvol in the domain controller from a windows client. How can I avoid that? Greetings, Felix

Recently I migrated to samba4 in my company. So far so good. debian 6 samba4.1.0pre1 bind9.9.1-P1 (working pretty well. it even updates the reverse zone and no problems at all with the forwarder) ntp-4.2.6p5 All services authenticating with samba4: mail (postfix + dovecot + squirrelmail), jabber (openfire), proxy (squid), even MS Sql server 2000, Net Support Manager and GFI Endpoint Security.

I followed this http://linuxcostablanca.blogspot.com/2012/01/samba-4-ubuntu.html and got dynamic dns updates working in forward zone. any ideas to get it working in the reverse zone too? By the way, nice article Steve. Best regards, Felix.

I've just installed samba4 beta 7 with defaults and everything went OK. As I download bind9.9.1 tarball and compiled it I had to follow steve's advice: to declare we'll be using DLZ_DLOPEN_VERSION 2 in /samba-master/source4/dns_server/dlz_minimal.h /*#ifdef BIND_VERSION_9_8 #define DLZ_DLOPEN_VERSION 1 #else #define DLZ_DLOPEN_VERSION 2 #endif */ #define DLZ_DLOPEN_VERSION 2 I

Hello. How can I have my windows clients synchronized with my Samba4 domain controller without using startup scripts?? I've played with Group Policies the same way they are configured when a w2k3 server is used and I couldn't make it this way. I also tried installing ntpd. I'm using Samba4 alpha 15 in a Debian Lenny Box. Any suggestions?? Thanks in advance. Regards, Felix.

Reading Whatsnew.txt in samba I understand that If I use s3fs, as it is set by default in the provision step, I won't be able to modify GPOs later, right? So I have a couple of questions: - What's the advantage of using s3fs over ntvfs in new installations? - If I'm planning to deploy a new Domain, probably needing to change GPOs later, should I select ntvfs??? Best regards, Felix

Hi I have s4 with bind9 working fine. I see that it sets up a forward zone without using zone files (is that the dlz bit?) Is it possible to get it to produce a reverse zone? Thanks, Steve pp lcb

Hello: I would like to know what is wrong in my configuration. I can't see this server in network neighborhood. samba 3.5.6 joined to my active directory domain. [global] # message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' & security = ADS netbios name = dos realm = EPEPM.CUPET.CU password server = ad.epepm.cupet.cu workgroup =

Could you, please, give me some clue on how to configure dlz in Bind to work with Samba4? I installed samba4 from git check out from a week ago, then I provisioned it but DNS is not working. Best regards, Felix.

I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO Using: -Samba4 alpha15 -Bind9.8.0 When I added an XP PC (192.168.123.244) to my domain I got this in syslog: May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update 'mydomain.com/IN' denied May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result == (((1) << 16) + 28) || result == 0) failed,

> On Wed, 2011-12-07 at 13:13 -0500, felix at epepm.cupet.cu wrote: >> Could you, please, give me some clue on how to configure dlz in Bind to >> work with Samba4? >> I installed samba4 from git check out from a week ago, then I >> provisioned >> it but DNS is not working. Now with a more recent checkout my DNS is working. Maybe it was me. there are no documents

Hello to everyone >From one day to another my internal dns server in samba4 stopped forwarding queries. It was resolving well my domain. I had to restart samba4 then it worked fine. Cheers, Felix.

The problem was definitely SELinux and/or firewall (iptables). Thank you for the help. On Wed, Jan 9, 2013 at 8:38 PM, Andrew Bartlett <abartlet at samba.org> wrote: > On Wed, 2013-01-09 at 09:47 -0500, felix at epepm.cupet.cu wrote: > > > I am not able to get the Samba4 internal DNS server to respond to DNS > > > requests on the network. > > > > > >

I provisioned using the defaults. So now I'm using the internal DNS server. Since I've been having some issues with it (see Internal dns server stops forwarding) I would like to change to bind9, but now I don't have the files samba4 creates to use with it because I started using the internal dns server. How can I switch from internal dns server to bind9??? Cheers, Felix.

On 18/03/15 14:40, Adriana Moga wrote: > Of course, the sysvol is located on a windows controller from the forest. > > mount -t cifs -o username=domain_admin_user > //windowsDC.myDomain.local/SYSVOL /mnt/smb/sysvol > > and copied the files with -R --preserve to > /usr/local/samba/var/locks/sysvol/ > > Below logs are provided from /usr/local/samba/var/log.smbd file.

I'm getting an interesting problem. I can create/rename/delete/edit policies, but I can't change the security filtering or delegation settings. When I first open any policy, I get the following: "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. To change the SYSVOL permissions

On 18/03/15 15:03, Adriana Moga wrote: > Sorry, I have omitted to post the config file. > > # cat /usr/local/samba/etc/smb.conf > [global] > workgroup = myDomain > realm = myDomain.local > netbios name = DCLINUX > server role = active directory domain controller > > dsdb:schema update allowed = yes > > [netlogon] >

On Tue, 06 Nov 2018 17:18:27 +0000 Sandy via samba <samba at lists.samba.org> wrote: > the big question, how do I restore it again > I take it that 'sysvol' is at /var/lib/samba, change it if it isn't, replace 'domain.tld' with your dns domain. mkdir -p /var/lib/samba/sysvol/domain.tld/Policies/\{31B2F340-016D-11D2-945F-00C04FB984F9\}/MACHINE/ mkdir

On 18/03/15 13:17, Adriana Moga wrote: > Hello, > > I have manually mounted the SYSVOL share, sync it with samba and run > samba-tool ntacl sysvolreset. What do you mean 'manually mounted the SYSVOL share' ? how did you do this ? > But I'm not sure if all windows policies are acceptable by samba because of > errors logs: > > 2015/03/18 09:30:52.197934, 0]