On 26/05/2019 20:18, Epsilon Minus wrote:> The output is different: > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > GENSEC backend 'gssapi_spnego' registered > GENSEC backend 'gssapi_krb5' registered > GENSEC backend 'gssapi_krb5_sasl' registered > GENSEC backend 'spnego' registered > GENSEC backend 'schannel' registered > GENSEC backend 'naclrpc_as_system' registered > GENSEC backend 'sasl-EXTERNAL' registered > GENSEC backend 'ntlmssp' registered > GENSEC backend 'ntlmssp_resume_ccache' registered > GENSEC backend 'http_basic' registered > GENSEC backend 'http_ntlm' registered > GENSEC backend 'krb5' registered > GENSEC backend 'fake_gssapi_krb5' registered > resolve_lmhosts: Attempting lmhosts lookup for name > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > resolve_lmhosts: Attempting lmhosts lookup for name > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > Password for [CLINICAGUEMES\administrator]: > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > Is suspect the message: resolve_lmhosts: Attempting lmhosts lookup for > name dc04.example.com<0x20>No, you have 'log level = 2' set in smb.conf, if you remove all the lines printed because of this, you get this: root at DC04:~# samba-tool gpo aclcheck -Uadministrator Password for [CLINICAGUEMES\administrator]: Now, provided you did enter the password for 'Administrator', then you do not have a problem, because it didn't print an error message. I suspect that you have a similar problem on Windows, you user doesn't have the required permission. Rowland
El dom., 26 may. 2019 a las 16:34, Rowland penny via samba (<samba at lists.samba.org>) escribió:> > On 26/05/2019 20:18, Epsilon Minus wrote: > > The output is different: > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > > GENSEC backend 'gssapi_spnego' registered > > GENSEC backend 'gssapi_krb5' registered > > GENSEC backend 'gssapi_krb5_sasl' registered > > GENSEC backend 'spnego' registered > > GENSEC backend 'schannel' registered > > GENSEC backend 'naclrpc_as_system' registered > > GENSEC backend 'sasl-EXTERNAL' registered > > GENSEC backend 'ntlmssp' registered > > GENSEC backend 'ntlmssp_resume_ccache' registered > > GENSEC backend 'http_basic' registered > > GENSEC backend 'http_ntlm' registered > > GENSEC backend 'krb5' registered > > GENSEC backend 'fake_gssapi_krb5' registered > > resolve_lmhosts: Attempting lmhosts lookup for name > > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > > resolve_lmhosts: Attempting lmhosts lookup for name > > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > Password for [CLINICAGUEMES\administrator]: > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > > Is suspect the message: resolve_lmhosts: Attempting lmhosts lookup for > > name dc04.example.com<0x20> > > No, you have 'log level = 2' set in smb.conf, if you remove all the > lines printed because of this, you get this: > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > Password for [CLINICAGUEMES\administrator]: > > Now, provided you did enter the password for 'Administrator', then you > do not have a problem, because it didn't print an error message. > > I suspect that you have a similar problem on Windows, you user doesn't > have the required permission. > > Rowland > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/sambaOn the Windows, with de user Administrator I have the the same problem. samba-tool gpo aclcheck -UAdministrator don't show error, but i have this error: "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK. For more information, see the Microsoft Knowledge Base article: http://go.microsoft.com/fwlink/?LinkId=20066" Ask me if i want to resolve, if i press "yes" the sistem print "access denied" If i try to edit GPO , in the section "preference" (machine or user). Show de error: Error 0x80070490 when analyzing the file. the item was not found (i traduce, maybe isn't exacly) What can I check in the samba?
El dom., 26 may. 2019 a las 19:16, Epsilon Minus (<theepsilonminus at gmail.com>) escribió:> > El dom., 26 may. 2019 a las 16:34, Rowland penny via samba > (<samba at lists.samba.org>) escribió: > > > > On 26/05/2019 20:18, Epsilon Minus wrote: > > > The output is different: > > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > > > GENSEC backend 'gssapi_spnego' registered > > > GENSEC backend 'gssapi_krb5' registered > > > GENSEC backend 'gssapi_krb5_sasl' registered > > > GENSEC backend 'spnego' registered > > > GENSEC backend 'schannel' registered > > > GENSEC backend 'naclrpc_as_system' registered > > > GENSEC backend 'sasl-EXTERNAL' registered > > > GENSEC backend 'ntlmssp' registered > > > GENSEC backend 'ntlmssp_resume_ccache' registered > > > GENSEC backend 'http_basic' registered > > > GENSEC backend 'http_ntlm' registered > > > GENSEC backend 'krb5' registered > > > GENSEC backend 'fake_gssapi_krb5' registered > > > resolve_lmhosts: Attempting lmhosts lookup for name > > > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > > > resolve_lmhosts: Attempting lmhosts lookup for name > > > _ldap._tcp.CLINICAGUEMES.COM.AR<0x0> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > Password for [CLINICAGUEMES\administrator]: > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > resolve_lmhosts: Attempting lmhosts lookup for name dc04.example.com<0x20> > > > > > > Is suspect the message: resolve_lmhosts: Attempting lmhosts lookup for > > > name dc04.example.com<0x20> > > > > No, you have 'log level = 2' set in smb.conf, if you remove all the > > lines printed because of this, you get this: > > > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > > Password for [CLINICAGUEMES\administrator]: > > > > Now, provided you did enter the password for 'Administrator', then you > > do not have a problem, because it didn't print an error message. > > > > I suspect that you have a similar problem on Windows, you user doesn't > > have the required permission. > > > > Rowland > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > On the Windows, with de user Administrator I have the the same > problem. samba-tool gpo aclcheck -UAdministrator don't show error, but > i have this error: > > "The permissions for this GPO in the SYSVOL folder are inconsistent > with those in Active Directory. It is recommended that these permissions > be consistent. To change the SYSVOL permissions to those in Active > Directory, click OK. > For more information, see the Microsoft Knowledge Base article: > http://go.microsoft.com/fwlink/?LinkId=20066" > > Ask me if i want to resolve, if i press "yes" the sistem print "access denied" > > If i try to edit GPO , in the section "preference" (machine or user). > Show de error: Error 0x80070490 when analyzing the file. the item > was not found (i traduce, maybe isn't exacly) > > What can I check in the samba?Rowland, Thanks for your answers and colaboration. Now is solved, the problem was a update of Windows . your comment helpme to understan to another level to samba.