similar to: samba-tool user to edit users..?

Hi, I'm going classicupgrade our samba3 to samba4 next weekend, and suddenly realised something: I intent to keep my samba3 PDC machine called 'filehost' as a member server, to only serve files. However, after classicupgrade my new (freshly installed) DC1 will of course have the netbios name from my 'old' samba3 machine. ('filehost') Meaning I end up with two

On 10/21/2015 02:52 PM, Rowland Penny wrote: > I am now beginning to believe the above is not true. Before a user can > connect to their homeshare it must exist, it is the link to this, that > Samba creates i.e. it changes '[homes]' to the username and connects to > that. This is working for me on a Debian 4.1.17 DC just as it has always > done on a member server, I just

On 10/22/2015 11:37 AM, Rowland Penny wrote: >> However, I wouldn't want to use \\server\%username% as home dir >> location, was well. >> >> > > I wouldn't either, mostly because it wouldn't work. > > Rowland Well it has been working here for *many* years, pretty much already since samba 2.2.8 days. The only problem is that nowadays (when using

On 22/10/15 09:40, Ole Traupe wrote: > > > Am 22.10.2015 um 10:00 schrieb mourik jan heupink: >> >> >> On 10/21/2015 02:52 PM, Rowland Penny wrote: >>> I am now beginning to believe the above is not true. Before a user can >>> connect to their homeshare it must exist, it is the link to this, that >>> Samba creates i.e. it changes

Hi, On 10/21/2015 01:21 PM, Rowland Penny wrote: > I am now beginning to think it doesn't work at all, if samba4 is > involved in any way. I knew that it wouldn't work on a DC (probably > because the user is DOMAIN\username and not just username), but from my > experiment (see my earlier post) it doesn't seem to work at all, try > your setup with '[home]' and a

The next interesting question for me is: If I put '\\server\%username%' into ADUC Windows part (or \\server\username explicitly, for that matter), Samba on 'Ok/Apply' registers the attempt to access a non-existing share and applies the [homes] section (executes 'root preexec'). I tested that. However, the user doing this is the domain admin. So Samba would look that

Hi Ole, On 10/21/2015 02:38 PM, Ole Traupe wrote: > MJ, thanks a lot! Just to make sure I get you right: > > This section is in the smb.conf. > a) on the DC acting as file sever as well, or > b) on a separate file server running Samba 4.1.17? on a separate fileserver. DC's are 4.2.4, fileserver 4.1.17. > The user log-on happens on a third machine, that is neither DC nor

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

Am 06.10.2015 um 21:26 schrieb mourik jan c heupink: > I have checked all our policy directories on sysvol, and I have a > "Registery.pol" only in some "/Machine" directories, and none in "/User" > or "/Group Policy". Do you have any policy in the User tree in the GPME in that GPO? If you never defined one, then the file is missing. Try e. g.

On 10/01/2015 03:57 PM, David Whitney wrote: > Hi mourik...are you saying these messages in the logs are new, as in > suddenly these messages are appearing? > > What version of Samba are you running? > We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues for more than a year. I have never noticed them before, and a quick search in the logs doesn't

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Set up a samba 4 DC everything there seems fine. Set up a member server according to this article: https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server The setup went fine - also set up a home share according to this: https://wiki.samba.org/index.php/Setting_up_a_home_share I'm using sernet-samba-ad for the domain controller and sernet-samba-winbind for the member server both

Hi All I am tying to create a user in SAMBA 4 AD with ldapadd, but its not allow me to add multiple mail attributes, here is my ldif of user. dn: CN=ayesha,CN=Users,DC=samba4pdc,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: ayesha name: ayesha sAMAccountName: ayesha userPrincipalName: Ayesha Umar objectCategory:

Hi, On our sernet-samba 4.2.4 AD-style we see that for some (newer) machine accounts, they do not have a gidNumber and uidNumber. Users logging on to those machines experience no problems, but in those systems eventlog we see during boot:: This computer was not able to set up a secure session with a domain controller in domain OURDOMAIN due to the following: There are currently no logon

Hi Louis, Marc, list, Quick update: On 7-10-2015 12:25, L.P.H. van Belle wrote: > Marc, > > Its for mourik important, because he wants to know why he has this error in his event logs. (i want to know also.) (learning mode) > > Mourik Jan, reboot the computer and login again, do you still see the error message, just to check if this wasnt an old message. > And/or, maybe this pc

Hi, Meanwhile we've come many steps further, and a new issue has risen. In samba4 AD we have a user with: - homeDirectory \\server\username - homeDrive P: - scriptPath logon.bat When this user logs on, logon.bat is executed successfully, but homeDirectory is NOT mounted on P: and in the logs we see: canonicalize_connect_path failed for service username, path /\\server\username It seems