samba - Oct 2018 - Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

Thank you Rowland, now i can see a way to make it work finally.

The OpenLDAP server users will still grow as time goes by. What should i do
to keep the synchonization of the new LDAP users with the created AD users?
Is it like i'll have the same base twice?

Em seg, 1 de out de 2018 às 05:08, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Mon, 1 Oct 2018 00:56:12 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > Yes, i didn't mention but i'm using Debian, thanks.
> >
> > I've read the link you've sent but i think i didn't
understand. Sorry
> > if i'm looking dumb about Samba stuff, but i really am :') 
It's my
> > first time dealing with Samba.
>
> We all have to start somewhere ;-)
>
> >
> > Just to clarify more, the first thing i should do is configure Samba
> > 4 as an AD DC, then after this step set up Samba as a Domain Member?
>
> Yes
>
> >
> > And sorry, but my doubt remains, where is the moment of these settings
> > where i set the OpenLDAP users data to be used by Samba to log in?
>
> After the classicupgrade you will not have ldap users, you will have
> AD users, so they would authenticate via AD.
>
> Can I suggest you set up a test domain and test the upgrade there,
> this will allow you to find any problems and fix them before you do
> it for real.
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Mon, 1 Oct 2018 10:42:45 -0300
Junior Oliveira <emersonjr.eng at gmail.com> wrote:
> Thank you Rowland, now i can see a way to make it work finally.
> 
> The OpenLDAP server users will still grow as time goes by. What
> should i do to keep the synchonization of the new LDAP users with the
> created AD users? Is it like i'll have the same base twice?
> 
From what you have posted, it sounds like you only use the ldap for
authentication, if this is the case, then, once you have carried out the
classicupgrade, you turn off the ldap machine.
If it isn't correct, then please provide more info on just how you use
the ldap machine.

Rowland

Sorry for my delay in answering Rowland, i had an emergency trip.

The ldap is used only for authentication, that's right, but a lot of
services on institution here use it. So if i turn off ldap machine, all
that services gonna stop working, so i'm not allowed to do this.

Afterall, i managed to use Samba 4 to consult LDAP and log in by using it's
user credentials stored, recovered my morality on the institution :)

Anyways, if i need to implement it again but on the correct way as you've
mentioned, what should i properly do based on the info i've provided above?



Em seg, 1 de out de 2018 às 13:56, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Mon, 1 Oct 2018 10:42:45 -0300
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > Thank you Rowland, now i can see a way to make it work finally.
> >
> > The OpenLDAP server users will still grow as time goes by. What
> > should i do to keep the synchonization of the new LDAP users with the
> > created AD users? Is it like i'll have the same base twice?
> >
>
> From what you have posted, it sounds like you only use the ldap for
> authentication, if this is the case, then, once you have carried out the
> classicupgrade, you turn off the ldap machine.
> If it isn't correct, then please provide more info on just how you use
> the ldap machine.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>