samba - Feb 2015 - Can't create users with RSAT - "An error occurred. Contact you system administrator"

Am Montag, 2. Februar 2015, 17:44:53 schrieb Marc
Muehlfeld:
> Hello Andreas,
> 
> Am 02.02.2015 um 13:00 schrieb Andreas Hauffe:
> > I set up a new AD with the Sernet Samba 4.1 packages. I did the
> > provisioning with "samba-tool domain provision --use-rfc2307
> > --interactive". I checked the dc, ldap, kerberos and dns services
under
> > linux. Everything seems to work fine.
> > 
> > Then I join a Windows 8.1 Enterprise running in as VM to the domain
and
> > login as administrator of the domain. When I install the RSAT and try
to
> > create a domain user I'm getting the error "An error
occurred. Contact
> > you system administrator". But I'm able to create groups and
OUs.
> > Under Linux the user creating is working. If I set the UNIX attributes
for
> > the group, I'm getting the hint "Execution denied"
(translated from
> > German).
> I tried it in my test environment (4.1.16 self-compiled) from ADUC on
> W8.1: Works without problems. Which account do you use to create the new
> user and in which container? The Domain Admin has all required
> permissions, of course.
> 
> 
> What does the Samba logfile says in the moment you receive the error?
> Maybe you have to increase the log level.
> 
> 
> Regards,
> Marc
Hello,

at first thanks for your answer. I tried exactly the same with a WIndows 7 
Professional and it is working without any problem. So perhaps it's not a 
samba or DC problem. But it seems that I'm not the only one 
http://wiki.snet.at/samba_4_rsat

I did everything on a clean Active Directory with no extra users. So I used 
the administrator account and tried to create the users. I tried to create the 
new users in the "Users" container and inside newly created
containers.


smb.conf 

[global]
        workgroup = ILR
        realm = ILR.MW.TU-DRESDEN.DE
        netbios name = MLRDC1
        server role = active directory domain controller
        dns forwarder = 141.30.66.135
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/ilr.mw.tu-dresden.de/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

krb5.conf

[libdefaults]
        default_realm = ILR.MW.TU-DRESDEN.DE
        dns_lookup_realm = false
        dns_lookup_kdc = true

interfaces

allow-hotplug eth0
iface eth0 inet static
        address 141.30.156.32
        netmask 255.255.255.0
        network 141.30.156.0
        broadcast 141.30.156.255
        gateway 141.30.156.1
        dns-nameservers 127.0.0.1
        dns-search ilr.mw.tu-dresden.de



-- 
Viele Gr??e
Andreas Hauffe

Your configs seem fine to.

The circumstances with removement of that hotfixes was topic a few days ago here
on the list.
Did you check this.

Am 2. Februar 2015 21:00:16 MEZ, schrieb Andreas Hauffe <andreas.hauffe at
tu-dresden.de>:
>Am Montag, 2. Februar 2015, 17:44:53 schrieb Marc Muehlfeld:
>> Hello Andreas,
>> 
>> Am 02.02.2015 um 13:00 schrieb Andreas Hauffe:
>> > I set up a new AD with the Sernet Samba 4.1 packages. I did the
>> > provisioning with "samba-tool domain provision --use-rfc2307
>> > --interactive". I checked the dc, ldap, kerberos and dns
services
>under
>> > linux. Everything seems to work fine.
>> > 
>> > Then I join a Windows 8.1 Enterprise running in as VM to the
domain
>and
>> > login as administrator of the domain. When I install the RSAT and
>try to
>> > create a domain user I'm getting the error "An error
occurred.
>Contact
>> > you system administrator". But I'm able to create groups
and OUs.
>> > Under Linux the user creating is working. If I set the UNIX
>attributes for
>> > the group, I'm getting the hint "Execution denied"
(translated from
>> > German).
>> I tried it in my test environment (4.1.16 self-compiled) from ADUC on
>> W8.1: Works without problems. Which account do you use to create the
>new
>> user and in which container? The Domain Admin has all required
>> permissions, of course.
>> 
>> 
>> What does the Samba logfile says in the moment you receive the error?
>> Maybe you have to increase the log level.
>> 
>> 
>> Regards,
>> Marc
>
>Hello,
>
>at first thanks for your answer. I tried exactly the same with a
>WIndows 7 
>Professional and it is working without any problem. So perhaps it's not
>a 
>samba or DC problem. But it seems that I'm not the only one 
>http://wiki.snet.at/samba_4_rsat
>
>I did everything on a clean Active Directory with no extra users. So I
>used 
>the administrator account and tried to create the users. I tried to
>create the 
>new users in the "Users" container and inside newly created
containers.
>
>
>smb.conf 
>
>[global]
>        workgroup = ILR
>        realm = ILR.MW.TU-DRESDEN.DE
>        netbios name = MLRDC1
>        server role = active directory domain controller
>        dns forwarder = 141.30.66.135
>        idmap_ldb:use rfc2307 = yes
>
>[netlogon]
>        path = /var/lib/samba/sysvol/ilr.mw.tu-dresden.de/scripts
>        read only = No
>
>[sysvol]
>        path = /var/lib/samba/sysvol
>        read only = No
>
>krb5.conf
>
>[libdefaults]
>        default_realm = ILR.MW.TU-DRESDEN.DE
>        dns_lookup_realm = false
>        dns_lookup_kdc = true
>
>interfaces
>
>allow-hotplug eth0                                                     
>                                                                       
>iface eth0 inet static                                                 
>                                                                       
>address 141.30.156.32                                                  
>                                                                       
>netmask 255.255.255.0                                                  
>                                                                       
>network 141.30.156.0                                                   
>                                                                       
>broadcast 141.30.156.255                                               
>                                                                       
>        gateway 141.30.156.1
>dns-nameservers 127.0.0.1                                              
>                                                                       
>        dns-search ilr.mw.tu-dresden.de
>
>
>
>-- 
>Viele Gr??e
>Andreas Hauffe
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

Am 02.02.2015 um 21:00 schrieb Andreas Hauffe:
> at first thanks for your answer. I tried exactly the same with a WIndows 7 
> Professional and it is working without any problem. So perhaps it's not
a
> samba or DC problem. But it seems that I'm not the only one 
> http://wiki.snet.at/samba_4_rsat

OK. Maybe this is the reason, why it works here. I don't know when I
last updated my W81 machine. Maybe both updates aren't applied yet or I
got a second revision of the hotfix, which doesn't have this problem.

What happens, after you uninstall both updates, reboot (if neccessary)
and then search for updates and install, if new ones are available?


Regards,
Marc

Hi,

KB2992611 was never installed on this machine and I wasn't able to uninstall
KB3000850 which
was directly installed from my installation source during the OS installation.
So I don't know.

-- 
Viele Gr??e
Andreas Hauffe

Am Montag, 2. Februar 2015, 21:16:45 schrieb Marc
Muehlfeld:
> Am 02.02.2015 um 21:00 schrieb Andreas Hauffe:
> > at first thanks for your answer. I tried exactly the same with a
WIndows 7
> > Professional and it is working without any problem. So perhaps
it's not a
> > samba or DC problem. But it seems that I'm not the only one
> > http://wiki.snet.at/samba_4_rsat
> 
> OK. Maybe this is the reason, why it works here. I don't know when I
> last updated my W81 machine. Maybe both updates aren't applied yet or I
> got a second revision of the hotfix, which doesn't have this problem.
> 
> What happens, after you uninstall both updates, reboot (if neccessary)
> and then search for updates and install, if new ones are available?
> 
> 
> Regards,
> Marc