Hervé Hénoch
2015-Mar-18 13:25 UTC
[Samba] Can add with net rpc command but NOT with dsa.msc
I say that I'm logged on a Windows 2012R2 server with domain administrator account (the server is naturally in the domain). When I add a user i've the message : an error has occurend contact your system adminsitrator. # Global parameters [global] workgroup = <domain> realm = <domain>.local netbios name = <PDC NAME> server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes #idmap uid = 15000-30000 #idmap gid = 50000-60000 log level = 4 printcap name = /dev/null load printers = no dsdb:schema update allowed = yes [netlogon] path = /var/lib/samba/sysvol/<domain>.local/scripts read only = No [sysvol] path = /var/lib/samba/sysvol read only = No Le 18/03/2015 12:36, L.P.H. van Belle a ?crit :> net rpc ? > and you dont mean : samba-tool user create username > >> "An error occured. Contact your administrator" ... > This if from a pc which joined the AD and your login was "DOMAIN\Adminsitrator" > and not "PCNAME\Administrator" > > > Greetz, > > Loius > > >> -----Oorspronkelijk bericht----- >> Van: h.henoch at isc84.org [mailto:samba-bounces at lists.samba.org] >> Namens Herv? H?noch >> Verzonden: woensdag 18 maart 2015 12:08 >> Aan: samba at lists.samba.org >> Onderwerp: [Samba] Can add with net rpc command but NOT with dsa.msc >> >> Hello >> >> I've a little problem : I can add samba4 user with net rpc command but >> with dsa.msc I've the error : "An error occured. Contact your >> administrator" ... >> >> However, I can add group by dsa.msc and modify an existing user ... >> >> I'm on jessie with Samba 4.1.17-Debian (Linux vspdc 3.16.0-4-amd64 #1 >> SMP Debian 3.16.7-ckt7-1 (2015-03-01) x86_64 GNU/Linux) >> >> An idea ? >> >> Regard >> >> -- >> >> Herv? H?noch >> Responsable informatique >> Institut Sainte Catherine >> 250 chemin de Baigne-Pieds >> CS 80005 ? 84918 AVIGNON cedex 9 >> T?l?phone : 04.90.27.57.44 >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >>-- Herv? H?noch Responsable informatique Institut Sainte Catherine 250 chemin de Baigne-Pieds CS 80005 ? 84918 AVIGNON cedex 9 T?l?phone : 04.90.27.57.44
Rowland Penny
2015-Mar-18 13:32 UTC
[Samba] Can add with net rpc command but NOT with dsa.msc
On 18/03/15 13:25, Herv? H?noch wrote:> I say that I'm logged on a Windows 2012R2 server with domain > administrator account (the server is naturally in the domain). > > When I add a user i've the message : an error has occurend contact > your system adminsitrator. > > # Global parameters > [global] > workgroup = <domain> > realm = <domain>.local > netbios name = <PDC NAME> > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, > drepl, winbind, ntp_signd, kcc, dnsupdate > idmap_ldb:use rfc2307 = yes > #idmap uid = 15000-30000 > #idmap gid = 50000-60000 > log level = 4 > printcap name = /dev/null > load printers = no > dsdb:schema update allowed = yes > > > [netlogon] > path = /var/lib/samba/sysvol/<domain>.local/scripts > read only = No > > [sysvol] > path = /var/lib/samba/sysvol > read only = No > > > > > Le 18/03/2015 12:36, L.P.H. van Belle a ?crit : >> net rpc ? >> and you dont mean : samba-tool user create username >> >>> "An error occured. Contact your administrator" ... >> This if from a pc which joined the AD and your login was >> "DOMAIN\Adminsitrator" >> and not "PCNAME\Administrator" >> >> >> Greetz, >> >> Loius >> >> >>> -----Oorspronkelijk bericht----- >>> Van: h.henoch at isc84.org [mailto:samba-bounces at lists.samba.org] >>> Namens Herv? H?noch >>> Verzonden: woensdag 18 maart 2015 12:08 >>> Aan: samba at lists.samba.org >>> Onderwerp: [Samba] Can add with net rpc command but NOT with dsa.msc >>> >>> Hello >>> >>> I've a little problem : I can add samba4 user with net rpc command but >>> with dsa.msc I've the error : "An error occured. Contact your >>> administrator" ... >>> >>> However, I can add group by dsa.msc and modify an existing user ... >>> >>> I'm on jessie with Samba 4.1.17-Debian (Linux vspdc 3.16.0-4-amd64 #1 >>> SMP Debian 3.16.7-ckt7-1 (2015-03-01) x86_64 GNU/Linux) >>> >>> An idea ? >>> >>> Regard >>> >>> -- >>> >>> Herv? H?noch >>> Responsable informatique >>> Institut Sainte Catherine >>> 250 chemin de Baigne-Pieds >>> CS 80005 ? 84918 AVIGNON cedex 9 >>> T?l?phone : 04.90.27.57.44 >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >You are supposed to use samba-tool to add users to a Samba4 AD, but I thought that it wasn't possible to add a Samba4 DC to a 2012 domain, so how did you join it ? Rowland
Hervé Hénoch
2015-Mar-19 06:38 UTC
[Samba] Can add with net rpc command but NOT with dsa.msc
My 2012 server is IN the samba domain obviously !!! I've installed in this server dsa.msc tools to manage samba4 users. I specify that on Debian wheezy with compiled version of samba4 (Version 4.1.13) I CAN add users in samba4 directory with dsa.msc. But on a jessie with packaged version (Version 4.1.17-Debian) I CAN'T add user with dsa.msc : i've got the error message I've already mentionned. Le 18/03/2015 14:32, Rowland Penny a ?crit :> On 18/03/15 13:25, Herv? H?noch wrote: >> I say that I'm logged on a Windows 2012R2 server with domain >> administrator account (the server is naturally in the domain). >> >> When I add a user i've the message : an error has occurend contact >> your system adminsitrator. >> >> # Global parameters >> [global] >> workgroup = <domain> >> realm = <domain>.local >> netbios name = <PDC NAME> >> server role = active directory domain controller >> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, >> drepl, winbind, ntp_signd, kcc, dnsupdate >> idmap_ldb:use rfc2307 = yes >> #idmap uid = 15000-30000 >> #idmap gid = 50000-60000 >> log level = 4 >> printcap name = /dev/null >> load printers = no >> dsdb:schema update allowed = yes >> >> >> [netlogon] >> path = /var/lib/samba/sysvol/<domain>.local/scripts >> read only = No >> >> [sysvol] >> path = /var/lib/samba/sysvol >> read only = No >> >> >> >> >> Le 18/03/2015 12:36, L.P.H. van Belle a ?crit : >>> net rpc ? >>> and you dont mean : samba-tool user create username >>> >>>> "An error occured. Contact your administrator" ... >>> This if from a pc which joined the AD and your login was >>> "DOMAIN\Adminsitrator" >>> and not "PCNAME\Administrator" >>> >>> >>> Greetz, >>> >>> Loius >>> >>> >>>> -----Oorspronkelijk bericht----- >>>> Van: h.henoch at isc84.org [mailto:samba-bounces at lists.samba.org] >>>> Namens Herv? H?noch >>>> Verzonden: woensdag 18 maart 2015 12:08 >>>> Aan: samba at lists.samba.org >>>> Onderwerp: [Samba] Can add with net rpc command but NOT with dsa.msc >>>> >>>> Hello >>>> >>>> I've a little problem : I can add samba4 user with net rpc command but >>>> with dsa.msc I've the error : "An error occured. Contact your >>>> administrator" ... >>>> >>>> However, I can add group by dsa.msc and modify an existing user ... >>>> >>>> I'm on jessie with Samba 4.1.17-Debian (Linux vspdc 3.16.0-4-amd64 #1 >>>> SMP Debian 3.16.7-ckt7-1 (2015-03-01) x86_64 GNU/Linux) >>>> >>>> An idea ? >>>> >>>> Regard >>>> >>>> -- >>>> >>>> Herv? H?noch >>>> Responsable informatique >>>> Institut Sainte Catherine >>>> 250 chemin de Baigne-Pieds >>>> CS 80005 ? 84918 AVIGNON cedex 9 >>>> T?l?phone : 04.90.27.57.44 >>>> -- >>>> To unsubscribe from this list go to the following URL and read the >>>> instructions: https://lists.samba.org/mailman/options/samba >>>> >> > > You are supposed to use samba-tool to add users to a Samba4 AD, but I > thought that it wasn't possible to add a Samba4 DC to a 2012 domain, > so how did you join it ? > > Rowland-- Herv? H?noch Responsable informatique Institut Sainte Catherine 250 chemin de Baigne-Pieds CS 80005 ? 84918 AVIGNON cedex 9 T?l?phone : 04.90.27.57.44