similar to: Redirecting the computer container doesn't work in Samba 4.8.5

But if it worked in samba 4.4 something must have been changed to break this functionality in 4.8. On Sat, 22 Sep 2018, 18:29 Andrew Bartlett, <abartlet at samba.org> wrote: > On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > > Hello, > > > > Changing "CN=Computers" to another OU doesn't seem to work correctly > > in Samba 4.8.5. Running

On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > Hello, > > Changing "CN=Computers" to another OU doesn't seem to work correctly > in Samba 4.8.5. Running redircmp or changing the wellKnownObject > AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 > but > now the Windows clients don't seem to respect that entry. They > instead

Hi team, I meet problem when join AD domain with Samba failed, want to get some help from community, please let me put details. 1. Problem When run "net ads join -U username" on Linux client to join AD domain, it failed with error message: """ Failed to join domain: Failed to set machine spn: Operations error Do you have sufficient permissions to create machine

I'm in progress of doing a git bisect. Will report back when I'm done. On Sun, Sep 23, 2018 at 1:27 AM Andrew Bartlett <abartlet at samba.org> wrote: > > On Sat, 2018-09-22 at 19:14 +0200, Kacper wrote: > > But if it worked in samba 4.4 something must have been changed to > > break this functionality in 4.8. > > Sorry, I missed the 4.4 reference. All I can

Hi Rowland, Thank you so much for your comment, I don't know why I didn't receive your email, just see it in "Digest" mail. Answering your questions: Has your user hit the limit for joining computers ? [R] I followed this article to set limit: https://www.petenetlive.com/KB/Article/0001536, but not work, can you please guide me check more about it? Is your smb.conf set

Hi List, I'm attempting to join a win2k3 domain as a member server with great difficulty. I've read The HowTo, but am hung when attempting to join the Domain. I can kinit & klist Which seems good, but the ads join fails. Can someone help me understand what is causing the error listed below? Component particulars are: RH AS3, samba-3.0.14a compiled from source (./configure

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

I’m unable to successfully join a Windows 2008 R2 server DC to my Samba4 domain. I’ve followed the steps on the wiki of joining a Server 2008 R2 DC to a Samba domain. After I reboot the domain controller, I receive a blue screen in regards to a corrupt AD database. I’ve tried Samba v4.6.7 and Samba 4.9.0pre1. Prior to the reboot, I see the following three events on the Windows DC: ----- Attempt

I tried to change the default computers container with the redircmp.exe but it does not work. With this tool from microsoft it should be posiible to redirect computer accounts to a different ou. Does this tool work with samba4 or is there an other why to do this?

Clearly this is some kind of bug. Can you submit a bug report or should I? Also can you elaborate why it's bad practice to create files/folders as a local Unix user/group on a Samba DC? On Thu, Aug 16, 2018 at 9:50 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 16 Aug 2018 21:20:29 +0200 > Kacper <kacper at kacper.se> wrote: > > > The

Perhaps I'm rooting around at a lower level than I should be, and somewhat beyond what I can understand, but here is a bit of info I dug up. It might be helpful? The GUID in the first search matches the one referred to in the error message. $ sudo ldbsearch -H /var/lib/samba/private/sam.ldb.d/DC\=DOMAINDNSZONES\,DC\=REDACTED\,DC\=DOMAIN\,DC\=LOCAL.ldb "(DC=DomainDnsZones)" # record

The same thing happen if the group on a file is wheel or any other unix group. I also now observed that this also happens to unix users that are not mapped in idmap.ldb. For example: # useradd myunixuser # touch myfile # chown myunixuser myfile # chgrp SAMDOM\sambauser myfile alos crashes explorer. / Kacper On Thu, Aug 16, 2018 at 8:55 PM, Rowland Penny via samba < samba at

On Wed, 1 Nov 2017 19:49:32 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Wed, 1 Nov 2017 20:28:05 +0100 > Kacper Wirski <kacper.wirski at gmail.com> wrote: > > > I'm going to start with clean centos install, so I might as well use > > some additional guidelines, thank You. > > > > When You run kinit, does Your user have

By primary group I mean the group that is set by chgrp. that is the group returned after the pound key (#) from getfacl. In other words the Unix group and not the one managed by ACLs. / Kacper > Hello, > > I've seem to have found what looks like a bug in Samba 4.8.3. It's > the same problem as described in > https://lists.samba.org/archive/samba/2018-March/214589.html.

Hello, After upgrading to Samba 4.11 (from 4.10) I noticed that python scripts using tempfile.mkstemp fail when run against samba cifs mounts. Before I submit a bug report, could someone else try this out so it's not just my setup? How to reproduce: 1. Mount a Samba 4.11 share using the mount command: mount //server1/share /tmp/share1 2. Run python script that is using mkstemp: import

Hello, I've posted about this issue some time ago, but I maybe didn't explain myself enough and/or didn't supply enough information. My setup is centos 7.5 samba 4.8.4 AD DCwith BIND as dns backend. I noticed that some windows clients stopped doing secure dns dynamic updates because of insufficient rights error. Upon further digging I realized that all of the entries, that were

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

Ok, I finally could try it out, and it seems to actually work, but You need samba 4.7 on all machines, not only AD, but also server with freeradius. I didn't get a chance to test it locally, that is samba AD + freeradius on the same server. Setup: 4.7.6 AD server and 4.6.2 samba member + freeradius didn't work (got simple "nt_status_wrong_password") but: 4.7.6 AD and 4.7.1

Hi all I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ changetype: modify replace: unicodePwd unicodePwd: "Temporal2" I get this error: 0x32 (Insufficient access; error in module acl: insufficient access rights during LDB_MODIFY (50))

Hello, lately, I have been thinking about how to resolve the problem with that the program size increases enormously when including <iostream> when compiling with libstdc++. In this library, in <iostream> there is a static object __ioinit initialized like so: ... // For construction of filebuffers for cout, cin, cerr, clog et. al. static ios_base::Init __ioinit; ... This