samba - Feb 2015 - Can't create users with RSAT - "An error occurred. Contact you system administrator"

Hello,

I set up a new AD with the Sernet Samba 4.1 packages. I did the provisioning 
with "samba-tool domain provision --use-rfc2307 --interactive". I
checked the
dc, ldap, kerberos and dns services under linux. Everything seems to work 
fine.

Then I join a Windows 8.1 Enterprise running in as VM to the domain and login 
as administrator of the domain. When I install the RSAT and try to create a 
domain user I'm getting the error "An error occurred. Contact you
system
administrator". But I'm able to create groups and OUs.
Under Linux the user creating is working. If I set the UNIX attributes for the 
group, I'm getting the hint "Execution denied" (translated from
German).

I tried every hint that I found on google.
- Try with a different account with domain admin rights.
- Delete the admin local profile folder.
- Reinstall all OS and start new.

Nothing changed.

Does anyone have an idea what else to try?

Viele Gr??e
Andreas Hauffe

Hello Andreas,

Am 02.02.2015 um 13:00 schrieb Andreas Hauffe:
> I set up a new AD with the Sernet Samba 4.1 packages. I did the
provisioning
> with "samba-tool domain provision --use-rfc2307 --interactive". I
checked the
> dc, ldap, kerberos and dns services under linux. Everything seems to work 
> fine.
> 
> Then I join a Windows 8.1 Enterprise running in as VM to the domain and
login
> as administrator of the domain. When I install the RSAT and try to create a
> domain user I'm getting the error "An error occurred. Contact you
system
> administrator". But I'm able to create groups and OUs.
> Under Linux the user creating is working. If I set the UNIX attributes for
the
> group, I'm getting the hint "Execution denied" (translated
from German).

I tried it in my test environment (4.1.16 self-compiled) from ADUC on
W8.1: Works without problems. Which account do you use to create the new
user and in which container? The Domain Admin has all required
permissions, of course.


What does the Samba logfile says in the moment you receive the error?
Maybe you have to increase the log level.


Regards,
Marc

The best would be to post your configs (smb.conf, krb5.conf,...) to help on
this.

Viele Gr??e zur?ck
Tim

Am 2. Februar 2015 13:00:33 MEZ, schrieb Andreas Hauffe <andreas.hauffe at
tu-dresden.de>:
>Hello,
>
>I set up a new AD with the Sernet Samba 4.1 packages. I did the
>provisioning 
>with "samba-tool domain provision --use-rfc2307 --interactive". I
>checked the 
>dc, ldap, kerberos and dns services under linux. Everything seems to
>work 
>fine.
>
>Then I join a Windows 8.1 Enterprise running in as VM to the domain and
>login 
>as administrator of the domain. When I install the RSAT and try to
>create a 
>domain user I'm getting the error "An error occurred. Contact you
>system 
>administrator". But I'm able to create groups and OUs.
>Under Linux the user creating is working. If I set the UNIX attributes
>for the 
>group, I'm getting the hint "Execution denied" (translated
from
>German). 
>
>I tried every hint that I found on google.
>- Try with a different account with domain admin rights.
>- Delete the admin local profile folder.
>- Reinstall all OS and start new.
>
>Nothing changed.
>
>Does anyone have an idea what else to try?
>
>Viele Gr??e
>Andreas Hauffe
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

Am Montag, 2. Februar 2015, 17:44:53 schrieb Marc
Muehlfeld:
> Hello Andreas,
> 
> Am 02.02.2015 um 13:00 schrieb Andreas Hauffe:
> > I set up a new AD with the Sernet Samba 4.1 packages. I did the
> > provisioning with "samba-tool domain provision --use-rfc2307
> > --interactive". I checked the dc, ldap, kerberos and dns services
under
> > linux. Everything seems to work fine.
> > 
> > Then I join a Windows 8.1 Enterprise running in as VM to the domain
and
> > login as administrator of the domain. When I install the RSAT and try
to
> > create a domain user I'm getting the error "An error
occurred. Contact
> > you system administrator". But I'm able to create groups and
OUs.
> > Under Linux the user creating is working. If I set the UNIX attributes
for
> > the group, I'm getting the hint "Execution denied"
(translated from
> > German).
> I tried it in my test environment (4.1.16 self-compiled) from ADUC on
> W8.1: Works without problems. Which account do you use to create the new
> user and in which container? The Domain Admin has all required
> permissions, of course.
> 
> 
> What does the Samba logfile says in the moment you receive the error?
> Maybe you have to increase the log level.
> 
> 
> Regards,
> Marc
Hello,

at first thanks for your answer. I tried exactly the same with a WIndows 7 
Professional and it is working without any problem. So perhaps it's not a 
samba or DC problem. But it seems that I'm not the only one 
http://wiki.snet.at/samba_4_rsat

I did everything on a clean Active Directory with no extra users. So I used 
the administrator account and tried to create the users. I tried to create the 
new users in the "Users" container and inside newly created
containers.


smb.conf 

[global]
        workgroup = ILR
        realm = ILR.MW.TU-DRESDEN.DE
        netbios name = MLRDC1
        server role = active directory domain controller
        dns forwarder = 141.30.66.135
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/ilr.mw.tu-dresden.de/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

krb5.conf

[libdefaults]
        default_realm = ILR.MW.TU-DRESDEN.DE
        dns_lookup_realm = false
        dns_lookup_kdc = true

interfaces

allow-hotplug eth0
iface eth0 inet static
        address 141.30.156.32
        netmask 255.255.255.0
        network 141.30.156.0
        broadcast 141.30.156.255
        gateway 141.30.156.1
        dns-nameservers 127.0.0.1
        dns-search ilr.mw.tu-dresden.de



-- 
Viele Gr??e
Andreas Hauffe

Hello,
exactly same problem met also me :(
windows 7 - ok...no problem
windows 8 - after some updates ...bang!..RSAT can't create user.

same problem facing a few peoples with distribution Zentyal.

thnx for any help






--
View this message in context:
http://samba.2283325.n4.nabble.com/Can-t-create-users-with-RSAT-An-error-occurred-Contact-you-system-administrator-tp4680227p4687252.html
Sent from the Samba - General mailing list archive at Nabble.com.