search for: adagen

...ross-ncs--fix can't fix that. And I made a big mistake ! In DC2 I use "tdbbackup -s .bak /var/lib/samba/private/sam.ldb" create a bak file. and using that bak file replace the sam.ldb file in DC1 without any backup. Now , I saw the errors in DC1： Feb 08 22:06:04 dc1.adagene.cn samba[32137]: UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for ed8970e5-84cc-43dd-89f1-4af8d6ab675a._msdcs.adagene.cn DC=adagene,DC=cn Feb 08 22:06:04 dc1.adagene.cn samba[32129]: [2018/02/08 22:06:04.078274, 0] ../source4/dsdb/common/util.c:4825(dsdb_validate_dsa_guid...

...9;t fix that. And I made a big mistake ! > In DC2 I use "tdbbackup -s .bak /var/lib/samba/private/sam.ldb" create a bak file. and using that bak file replace the sam.ldb file in DC1 without any backup. > Now , I saw the errors in DC1： > > Feb 08 22:06:04 dc1.adagene.cn samba[32137]: UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for ed8970e5-84cc-43dd-89f1-4af8d6ab675a._msdcs.adagene.cn DC=adagene,DC=cn > Feb 08 22:06:04 dc1.adagene.cn samba[32129]: [2018/02/08 22:06:04.078274, 0] ../source4/dsdb/common/util.c:4825(dsdb_validate_dsa...

...en demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again. Right? Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1? yours Adam From: Andrew Bartlett Date: 2018-02-09 06:51 To: adam_xu at adagene.com.cn; samba Subject: Re: [Samba] Bad DSA objectGUID ed8970e5-84cc-43dd-89f1-4af8d6ab675a for sid S-1-5-21-570971082-1333357699-3675202899-1375 On Fri, 2018-02-09 at 01:01 +0800, adam_xu--- via samba wrote: > Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with FSMO role...

Hello, I have 2 samba DCs. DC1 with FSMO role and DC2. These days, when I use dbcheck in DC1 ,I got the following error: # samba-tool dbcheck --cross-ncs Checking 4419 objects ERROR: incorrect DN SID component for member in object CN=Domain Users,CN=Users,DC=adagene,DC=cn - <GUID=c5c33d48-226b-4105-9c69-0506a22d3a15>;<RMD_ADDTIME=131526914300000000> ;<RMD_CHANGETIME=131526914750000000>;<RMD_FLAGS=1>;<RMD_INVOCID=4f720a27-5a1 9-4fba-8e89-9f59f7c3533e>;<RMD_LOCAL_USN=102599>;<RMD_ORIGINATING_USN=102599 >;<RMD_VERSION...

...mba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_(classic_upgrade) " but I have error when samba-tool domain classic upgrade using sernet-samba-4.4.logs like this: [root at pdc dbdir]# samba-tool domain classicupgrade --dbdir=/root/dbdir/samba --use-xattrs=yes \ > --realm=adagene.cn --dns-backend=SAMBA_INTERNAL /root/dbdir/smb.conf Reading smb.conf Unknown parameter encountered: "display charset" Ignoring unknown parameter "display charset" Processing section "[homes]" Processing section "[netlogon]" Processing section "[laborat...

...ve 2 samba DCs. DC1 with FSMO role and DC2. These days, when I > use dbcheck in DC1 ,I got the following error: > > > > # samba-tool dbcheck --cross-ncs > > Checking 4419 objects > > ERROR: incorrect DN SID component for member in object CN=Domain > Users,CN=Users,DC=adagene,DC=cn - > <GUID=c5c33d48-226b-4105-9c69-0506a22d3a15>;<RMD_ADDTIME=131526914300000000> > ;<RMD_CHANGETIME=131526914750000000>;<RMD_FLAGS=1>;<RMD_INVOCID=4f720a27-5a1 > 9-4fba-8e89-9f59f7c3533e>;<RMD_LOCAL_USN=102599>;<RMD_ORIGINATING_USN=102599 >&...

Hello, Rowland. what I set in RSAT is: nis domain "ntbaobei" uid "10000" login shell "/sbin/nologin" home dir "/home/Administrator" primary group "domain admins" I never used user map beacuse everything worked ok before. I knew the "root" user can granting the SeDiskOperatorPrivilege Privilege. Is there any changelog in samba 4.7.7 that

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote: > Hi Rowland, > >  I can manage the security permission, but I can't manage the share > permission after I remove the user "everyone"'s share permission and > add "domain admins" and "domain user" share permission. > Do you ha...

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber in ADUC? s...

...ed to import some windows 10 Administrative Templates to samba dc like that: https://support.microsoft.com/en-us/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra Unfortunately, I didn't see any dir named "PolicyDefinitions" under "\\dc1\SYSVOL\adagene.cn\policies" , So does samba AD DC support Group Policy Administrative Templates? or how can I import the admx file to samba AD DC? yours Adam

On 05/06/2019 09:26, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > English?is?not?my?native?language.It?seems?that?the?communication?between?us > was a?misunderstanding. what I want is just > "IGNORE?the?'share'?tab,?do?not?touch?it,?forget?it?is?there." > Thank?you?for?your?patience. > No p...

...Rowland, Yes. all users primary group is "domain users". my "domain admins" has a gidNumber. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 22:44 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of "Domain Admins" in ADUC. > Base Permission of the share folder is 0770 and own is root and the > groups is "domain admins" in linux. > since "smbstatus -b" show that a...

...ator maped to root can not access any share folder. Best, 徐星亚 天演药业（苏州）有限公司 苏州工业园区星湖街218号生物纳米园C14幢4楼 邮编: 215123 电话: 86-512-8777-3585 From: Rowland penny via samba Date: 2019-06-03 23:42 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 16:09, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > Yes. all users primary group is "domain users". > > my "domain admins" has a gidNumber. > Have you followed this: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Is DNS setup correctly ? and is it wor...

.../etc/samba/user.map !root = NTBAOBEI\Administrator Best, 徐星亚 天演药业（苏州）有限公司 苏州工业园区星湖街218号生物纳米园C14幢4楼 邮编: 215123 电话: 86-512-8777-3585 From: Rowland penny via samba Date: 2019-06-03 22:14 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:06, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > here's what in my idmap.ldb > # record 39 > dn: CN=S-1-5-21-214324388-144513417-3129160214-500 > cn: S-1-5-21-214324388-144513417-3129160214-500 > objectClass: sidMap > objectSid: S-1-5-21-214324388-144513417-3129160214-500 > type: ID...

...primary group is root. so it lose the share folder since I have "hide unreadable = yes" in smb.conf. Does any one knows why the administrator's primary group is not "domain admins" ? is this a bug or i missing something import config? Best, yours Adam From: adam_xu at adagene.com.cn Date: 2019-06-04 08:27 To: Rowland penny; sambalist Subject: Re: Re: [Samba] How to fix mapping Administrator to root Hi Rowland , I have followed the wiki's step, the DNS works OK and I have use the fileserver for 2 years. here's a share folder "IT"'s acl getfacl IT...

On 05/06/2019 09:51, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > In?some scenarios,?we?have?hundreds > of?shared?folders.?We?don't?want?users?to?see?too?many?folders,?so?we?configure?share?permissions?and?set > "hide unreadable = yes" in smb.conf. then users can only see the > folder that he or...

Thanks, Rowland , 'net cache flush' solved my problem. but I found that I can't access any share in \\myshare. some related configurations in my smb,conf .... access based share enum = yes hide unreadable = yes username map = /etc/samba/user.map I can't see any share folder of my fileserver in fsmgmt.msc. and I run "smbstatus -b" PID Username Group

...dc like > > that: > > > https://support.microsoft.com/en-us/help/3087759/how-to-create > -and-manage-the-central-store-for-group-policy-administra > > > > Unfortunately, I didn't see any dir named "PolicyDefinitions" under > > "\\dc1\SYSVOL\adagene.cn\policies" , So does samba AD DC support > > Group Policy Administrative Templates? or how can I import the admx > > file to samba AD DC? yours Adam > > I have no idea if this is supported, but I don't think you will find > 'PolicyDefinitions' on a Windows...

On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of "Domain Admins" in ADUC. > Base Permission of the share folder is 0770 and  own is root  and the > groups is "domain admins" in linux. > since "smbstatus -b" show that a...

...e permission and add "domain admins" and "domain user" share permission. Do you have any advice? Best, yours Adam From: Rowland penny via samba Date: 2019-06-05 15:53 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber in ADUC? s...