samba - Oct 2018 - Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

Yes, i didn't mention but i'm using Debian, thanks.

I've read the link you've sent but i think i didn't understand.
Sorry if
i'm looking dumb about Samba stuff, but i really am :')  It's my
first time
dealing with Samba.

Just to clarify more, the first thing i should do is configure Samba 4 as
an AD DC, then after this step set up Samba as a Domain Member?

And sorry, but my doubt remains, where is the moment of these settings
where i set the OpenLDAP users data to be used by Samba to log in?

Thanks in advance.

Em dom, 30 de set de 2018 às 19:28, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 19:03:08 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > The ldap server is used for some other web services of the
> > institution like to log in GItlab, Redmine etc. Also, used to log in
> > Linux machines of the labs.
> > What would be the solution for that case?
> >
>
> Lets deal with the easiest first, the Linux machines, or as we call
> them, Unix domain members (aka what I am typing this on), see here:
>
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
>
> You will probably find that you can use kerberos authentication for
> everything else.
>
> I don't think you mentioned what OS you are using, but you can get up
> to date Debian Samba packages here:
>
> http://apt.van-belle.nl/
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Mon, 1 Oct 2018 00:56:12 +0000
Junior Oliveira <emersonjr.eng at gmail.com> wrote:
> Yes, i didn't mention but i'm using Debian, thanks.
> 
> I've read the link you've sent but i think i didn't understand.
Sorry
> if i'm looking dumb about Samba stuff, but i really am :') 
It's my
> first time dealing with Samba.
We all have to start somewhere ;-)
> 
> Just to clarify more, the first thing i should do is configure Samba
> 4 as an AD DC, then after this step set up Samba as a Domain Member?
Yes
> 
> And sorry, but my doubt remains, where is the moment of these settings
> where i set the OpenLDAP users data to be used by Samba to log in?
After the classicupgrade you will not have ldap users, you will have
AD users, so they would authenticate via AD.

Can I suggest you set up a test domain and test the upgrade there,
this will allow you to find any problems and fix them before you do
it for real.

Rowland

Thank you Rowland, now i can see a way to make it work finally.

The OpenLDAP server users will still grow as time goes by. What should i do
to keep the synchonization of the new LDAP users with the created AD users?
Is it like i'll have the same base twice?

Em seg, 1 de out de 2018 às 05:08, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Mon, 1 Oct 2018 00:56:12 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > Yes, i didn't mention but i'm using Debian, thanks.
> >
> > I've read the link you've sent but i think i didn't
understand. Sorry
> > if i'm looking dumb about Samba stuff, but i really am :') 
It's my
> > first time dealing with Samba.
>
> We all have to start somewhere ;-)
>
> >
> > Just to clarify more, the first thing i should do is configure Samba
> > 4 as an AD DC, then after this step set up Samba as a Domain Member?
>
> Yes
>
> >
> > And sorry, but my doubt remains, where is the moment of these settings
> > where i set the OpenLDAP users data to be used by Samba to log in?
>
> After the classicupgrade you will not have ldap users, you will have
> AD users, so they would authenticate via AD.
>
> Can I suggest you set up a test domain and test the upgrade there,
> this will allow you to find any problems and fix them before you do
> it for real.
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>