similar to: I can not use a domain group in the DC filesystem

Good morning people from Argentine. again bothering with a doubt, It is posiblle, audit change password, create-delete-change users? and more? i have a file server with audit and works really really well and now I want more! any ideas? thanks for samba....i love it

Because of other issues using ADUC, I tried to remove a domain member using: > samba-tool group removemembers "Domain Computers" MARKA\$ Removed members from group Domain Computers As shown, it say it "Removed members", but ... > samba-tool group listmembers "Domain Computers" : LABRAT$ : OHPRSSTORAGE$ MARKA$ : COMMON$ : listmembers still shows the computer

Hi Louis, normally you are building these wonderful samba debian packages for us :-) Is there a reason, that you didnt create packages for samba 4.8? Tfh! Oliver

When trying to join a new DC to an existing Samba4 domain, I am getting this WERR_DS_DRA_MISSING_PARENT error. Does any have any suggestions on how to fix it? My original 6 dc's are running the last free Sernet (4.2.14) on CentOS6 and the error occurs if I use Sernet 4.2.14 or 4.7.5-Debian. I finally have time to upgrade and something is broke. Thanks, Steve # samba-tool domain join

I want to migrate old 2003 domain to Samba - join SAMBA 4.6(DC2) to win 2003 domain like DC, move sysvol, FSMO, demote old server(DC1), etc., etc. - https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory My problem are DNS Updates, I have kerberos working (added enctypes = rc4-hmac for compatibility), SAMBA join without errors, I have created DNS records, can

hi! Query, I have 3 DCs, in each of the servers should have configured the other two DCs in the resolv.conf? or with only the primary is enough? Maybe that's my problem that does not replicate the dc3 with the dc2 thanks to all!

Hi all, I'm running in circles trying to debug replication failures on samba 4.7.6: dc00 : is a VM on KVM host (attached to a bridge on local LAN) dc01 : is a similarly configured VM on another KVM host. I've forcibly demoted and re-promoted dc01 but I still cannot get automatic replication to work: root at dc00 ~]# samba-tool drs showrepl Krynn\DC00 DSA Options: 0x00000001 DSA

Hi guys. I've got working samba AD server. It is playing nicely with Windows 10 and also successfully authenticating Linux machines with SSSD. On the Windows machines I have our EMC storage smb mounted via group policy. Managing permissions for users and groups there, as you know, happens with right click, security etc.. As you may have already guessed the troubles come when my Linux

Hi: I'm trying to join a samba 4.3.4 (as an additional domain controller) to a domain with Zentyal 4.3 (That has samba 4.3.4 inside). I know that this is an old samba version but I cann't upgrade zentyal first. So, When I can join the samba 4.3.4 to the domain I will demote the Zentyal. But when I try: samba-tool domain join dtcf.etecsa.cu DC -U "DTCF\administrator"

Hello Folks, We're using Samba as AD servers along with Windows AD Servers (2008R2 FL). We also use SCCM (Current Branch) that is dependent on AD for lab deployments (Windows 10). Currently, SCCM (current branch) supports 2008R2 FL, but for how long??? Samba does not support 2012R2, 2016, 2019 FL. We'd like to remove the Windows Servers from our AD infrastructure, but would also like

Dear list, I had to change the name of the AD DC on a test setup (only one DC). What changes do I have to apply for samba? This is using bind9_DLZ. Thanks, Christian

Hi list, are there preparations for upgrading a samba 4.8.5 to 4.9.1 via van-belle-repository to change the backend db? Is there some handwork necessary? Regards, Oliver

Hi Guys, We're trying to add a BDC in Samb4 classic domain setup. The Samba 3 How -To and Samb3 by Example covers this but uses the old slapd.conf option, we are using the slapd.d config. I couldn't find a similar document for Samba4 Can you please advise that the following steps will work? LDAP in the existing PDC is working using the smbldap tools - Setup the LDAP in BDC

Hi All, I started using Samba as an AD DC on el7 a few weeks ago. I have some questions for others who mights also be using Wing's rpms on el7 (http://wing-net.ddo.jp/wing). A) Is there a wiki/issues page for that repo? I could not find any.. B) is that the only repo of samba rpms available for el7/centos7? C) Is there a reason why samba46-4.6.14 is the latest available version? Are

I just installed a samba4 dc and I see that Power Users group is missing, is possible to create that group so that a workstation joined in the domain can install software using users belonging to that group and how it can be done? actually simply creating a group with that name doesn't get any privilege to that group users.

For my current small office configuration, the machine serving as a NT4 Style PDC is also the main file server. Works fine. In reading up on creating an updated configuration, I see The Samba Wiki states the following: "The Samba AD DC is able to provide file shares, just like all other installation modes. However, the Samba team does not recommend using a DC as a file server" Does

I tried to run this script on a system running 4.5.15 built from source under Ubuntu 16.04, but I get the following exception: # PYTHONPATH="/usr/local/samba/lib/python2.7/site-packages/" ./samba_CVE-2018-1057_helper --lock-pwchange Temporarily overriding 'dsdb:schema update allowed' setting Traceback (most recent call last):   File "./samba_CVE-2018-1057_helper",

Hello, A client is asking about disabling, deleting or renaming the domain "Administrator" account on a Samba AD. I've seen this done on Windows AD domains for security purposes. Assuming the risk of being locked-out is mitigated (i.e. an equivalent user is created and is a member of the same groups), is there any reason this can't be done on a Samba AD as well? Is the

I'm trying to move my current Samba AD DC VM from EXSi vSphere to XenServer (XCP-NG). I was able to export the VM to .OVA file & import it into XCP-NG fine. I was able to open ADUC & the DNS manager in Windows without an issue. But my web server had a lot of these errors in the log & couldn't mount the SMB shares from the file server: kerberos_kinit_password <HOSTNAME>

Over time I have ignored the fact that my AD administrator has stopped being able to administer. For example, the Ad administrator cannot install drivers or updates. Once a week now, I logout as workstation user and login as the "local administrator" to install drivers or run windows updates (in today's case a printer driver on the workstation.) Does this falls into that "gray