samba - Oct 2016 - GID mappings of built-in groups when addin additional dc

Hi,

I have a samba 4.4.5 AD domain and is working perfect, but now I need to
add a second samba 4 AD, I have found that in
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory
is detailed the correct steps, my question is about step related with
winbind (tdbbackup) builtin groups, appears a message "*NOTE: Only do this
if you are running a version of Samba before 4.2.0 or are using the
built-in winbind.*" but I'm not sure if in my environment I have to
make
this step.

I have installed and configured samba 4.4.5 from sources and only added
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind
https://wiki.samba.org/index.php/Libnss_winbind_links

In my environment is needed tdbbackup when you adds second dc?

Thanks

On Sun, 2 Oct 2016 08:20:33 +0200
Trenta sis via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> I have a samba 4.4.5 AD domain and is working perfect, but now I need
> to add a second samba 4 AD, I have found that in
>
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory
> is detailed the correct steps, my question is about step related with
> winbind (tdbbackup) builtin groups, appears a message "*NOTE: Only do
> this if you are running a version of Samba before 4.2.0 or are using
> the built-in winbind.*" but I'm not sure if in my environment I
have
> to make this step.
> 
> I have installed and configured samba 4.4.5 from sources and only
> added
>
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind
> https://wiki.samba.org/index.php/Libnss_winbind_links
> 
> In my environment is needed tdbbackup when you adds second dc?
> 
> Thanks

Would you understand the note better if it said this:

NOTE: Only do this if you are running a version of Samba before 4.2.0
or you are using a later version and have manually changed to using the built-in
winbind.

Rowland

Hi,

My question is that I don't know if I'm using builtin winbind... we use
samba 4.4.5 from sources.. I'm using builtind winbind or not, and I have to
make tdbbackup...?
Thanks

2016-10-02 10:25 GMT+02:00 Rowland Penny <rpenny at samba.org>:
> On Sun, 2 Oct 2016 08:20:33 +0200
> Trenta sis via samba <samba at lists.samba.org> wrote:
>
> > Hi,
> >
> > I have a samba 4.4.5 AD domain and is working perfect, but now I need
> > to add a second samba 4 AD, I have found that in
> > https://wiki.samba.org/index.php/Join_an_additional_Samba_
> DC_to_an_existing_Active_Directory
> > is detailed the correct steps, my question is about step related with
> > winbind (tdbbackup) builtin groups, appears a message "*NOTE:
Only do
> > this if you are running a version of Samba before 4.2.0 or are using
> > the built-in winbind.*" but I'm not sure if in my environment
I have
> > to make this step.
> >
> > I have installed and configured samba 4.4.5 from sources and only
> > added
> > https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_
> Domain_Member#libnss_winbind
> > https://wiki.samba.org/index.php/Libnss_winbind_links
> >
> > In my environment is needed tdbbackup when you adds second dc?
> >
> > Thanks
>
>
> Would you understand the note better if it said this:
>
> NOTE: Only do this if you are running a version of Samba before 4.2.0
> or you are using a later version and have manually changed to using the
> built-in
> winbind.
>
> Rowland
>

Am 02.10.2016 um 08:20 schrieb Trenta sis via samba:
> Hi,
>
> I have a samba 4.4.5 AD domain and is working perfect, but now I need to
> add a second samba 4 AD, I have found that in
>
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory
> is detailed the correct steps, my question is about step related with
> winbind (tdbbackup) builtin groups, appears a message "*NOTE: Only do
this
> if you are running a version of Samba before 4.2.0 or are using the
> built-in winbind.*" but I'm not sure if in my environment I have
to make
> this step.
>
> I have installed and configured samba 4.4.5 from sources and only added
>
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind
> https://wiki.samba.org/index.php/Libnss_winbind_links
>
> In my environment is needed tdbbackup when you adds second dc?
>
> Thanks
The step "GID mapping of build-in groups" is still required with
4.4.5,
no matter if you use winbind or winbindd.

On Sun, 2 Oct 2016 08:20:33 +0200
Trenta sis via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> I have a samba 4.4.5 AD domain and is working perfect, but now I need
> to add a second samba 4 AD, I have found that in
>
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory
> is detailed the correct steps, my question is about step related with
> winbind (tdbbackup) builtin groups, appears a message "*NOTE: Only do
> this if you are running a version of Samba before 4.2.0 or are using
> the built-in winbind.*" but I'm not sure if in my environment I
have
> to make this step.
> 
> I have installed and configured samba 4.4.5 from sources and only
> added
>
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind
> https://wiki.samba.org/index.php/Libnss_winbind_links
> 
> In my environment is needed tdbbackup when you adds second dc?
> 
> Thanks
OK, you obviously didn't understand that, how about this:

NOTE: Only do this if you are running a version of Samba before 4.2.0
or if you are using a later version, that by default uses winbindd, and
you have manually changed it to use the built-in winbind by adding
'server services = +winbind -winbindd' to the DCs smb.conf

Rowland

On Sun, 2 Oct 2016 11:45:15 +0200
Achim Gottinger via samba <samba at lists.samba.org> wrote:
> 
> 
> Am 02.10.2016 um 08:20 schrieb Trenta sis via samba:
> > Hi,
> >
> > I have a samba 4.4.5 AD domain and is working perfect, but now I
> > need to add a second samba 4 AD, I have found that in
> >
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory
> > is detailed the correct steps, my question is about step related
> > with winbind (tdbbackup) builtin groups, appears a message
"*NOTE:
> > Only do this if you are running a version of Samba before 4.2.0 or
> > are using the built-in winbind.*" but I'm not sure if in my
> > environment I have to make this step.
> >
> > I have installed and configured samba 4.4.5 from sources and only
> > added
> >
https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind
> > https://wiki.samba.org/index.php/Libnss_winbind_links
> >
> > In my environment is needed tdbbackup when you adds second dc?
> >
> > Thanks
> The step "GID mapping of build-in groups" is still required with
> 4.4.5, no matter if you use winbind or winbindd.
> 
This is no longer required on any supported version of Samba, you just
need to run 'samba-tool ntacl sysvolreset'

Rowland