search for: administratorpassword

...the only problem is, the user must exist in AD or it will error out and root should never exist in AD. > > See above. That is what I got prompted with when I left off the -U; I > suspect as I am logged in as root. > > > worked: > > # samba-tool dns zonelist localhost -U AdministratorPassword for > [HOME\Administrator]: > 2 zone(s) found > > pszZoneName : home.htt > Flags : DNS_RPC_ZONE_DSINTEGRATED > DNS_RPC_ZONE_UPDATE_SECURE > ZoneType : DNS_ZONE_TYPE_PRIMARY > Version : 5...

On 28/08/15 16:45, Robert Moskowitz wrote: > > > On 08/28/2015 11:04 AM, Rowland Penny wrote: >> On 28/08/15 15:56, Robert Moskowitz wrote: >>> >>> >>> On 08/28/2015 10:42 AM, L.P.H. van Belle wrote: >>>> Are you setting up a AD DC or old style NT PDC ? >>>> >>>> see : >>>> /etc/default/sernet-samba to

...ssword of the old admin user or not, but it > doesn't matter, you can reset it: > > samba-tool user setpassword Administrator --newpassword=P4ssW0rd* > > Note that the password must be complex (and no, don't use the one above) worked: # samba-tool dns zonelist localhost -U AdministratorPassword for [HOME\Administrator]: 2 zone(s) found pszZoneName : home.htt Flags : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE ZoneType : DNS_ZONE_TYPE_PRIMARY Version : 50 dwDpFlags :...

...to samba's "rpcclient" and "samedit" tools also allow the same to be done -- from a unix command-prompt. once the workstation has been joined to the domain and rebooted, follow these instructions _prior_ to logging in at the console: unix$ samedit \\ntpdc -U administrator%administratorpassword [administrator@ntpdc$ ] use \\ntworkstation -U localadminuser%localpwd [wait for the following message:] Net Use \\ntworksation User: localadmin: Domain: - OK [administrator@ntpdc$ ] createuser ntworkstation$ -j [you should see the followoing messages:] Create Workstatino Trust Account ntworksta...

...rch --cross-ncs -H /var/lib/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' This should show all the DNs that have a 'fSMORoleOwner' attribute. Have you tried running 'samba-tool fsmo seize --force --role=all -UAdministrator --password=ADMINISTRATORPASSWORD' on the DC Rowland

...) klist Ticket cache: FILE:/tmp/krb5cc_0Default principal: Administrator@ OBSCURED.DOMAIN.COM Valid starting       Expires              Service principal 08/01/2018 08:49:53  08/01/2018 18:49:53  krbtgt/ OBSCURED.DOMAIN.COM@ OBSCURED.DOMAIN.COM     renew until 08/02/2018 08:49:51   kinit AdministratorPassword for Administrator at OBSCURED.DOMAIN.COM: Warning: Your password will expire in 89 days on Tue 30 Oct 2018 08:49:44 AM PDT 3 DC's is linux samba 4.5.5 compiled from tarball1 DC samba 4.5.12-Debian distro-versions Collected config  --- 2018-08-01-08:27 ----------- Hostname: herman DNS Doma...

Alright... appreciate the info. Gave it a shot. Domain is still up but shares are down because they were hosted on FILER which has now been demoted and is no longer running any samba services. What I did while following the wiki "Transfer/Seize FSMO Roles": 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles were owned by FILER. 2) logged on to CBADC01, executed

...ba/private/sam.ldb > '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' > > This should show all the DNs that have a 'fSMORoleOwner' attribute. > > Have you tried running > 'samba-tool fsmo seize --force --role=all -UAdministrator > --password=ADMINISTRATORPASSWORD' > on the DC > > Rowland >

Hai, In addition to Rowlands question. Can you run this script and post it to the list also. It gives a complete overview of what your running. Its basicly what Rowland asked, but with a few extra things. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh And the output of: kinit Administrator klist klist -ket /var/lib/samba/private/secrets.keytab