search for: araucaria

...unning on a Ubuntu 18.04 server with distro packages. I update a user with a new group and this new membership is not reflected on that user. On example below, I can successfully add the user "test.account" to group "test", but not my user "marcio.merlone": root at araucaria:~# id test.account uid=30214(A1\test.account) gid=100(users) groups=100(users),3000008(BUILTIN\users) root at araucaria:~# samba-tool group addmembers test test.account Added members to group test root at araucaria:~# id test.account uid=30214(A1\test.account) gid=100(users) groups=100(users),300...

..., imported users and groups ok. I am able to join windows workstations, can login with a domain user, etc. Problem is my user A1\mmerlone, member of 'domain admins' group, cannot open ADUC with the error RPC server is unavailable. If I login with A1\Administrator it works fine. root at araucaria:/etc/samba# cat smb.conf [global]     netbios name = ARAUCARIA     realm = AD.A1.IND.BR     server role = active directory domain controller     workgroup = A1     server services = -dns     dns forwarder = 192.168.0.254     log file = /var/log/samba/%m.log     log level = 1 auth_audit:3 a...

Hi Rowland, Those tests were made on DC (araucaria), not a domain member. root at araucaria:~# testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Loaded services file O...

Hi, Trying to add an OU via ldbadd but I get the following error: root at araucaria:~# ldbadd --url=/var/lib/samba/private/sam.ldb /root/ou.ldif ERR: No such attribute : "objectclass top  is not a valid objectClass in schema" on DN OU=A1,DC=ad,DC=a1,DC=ind,DC=br at block before line 4 Add failed after processing 0 records root at araucaria:~# root at araucaria:~# cat /...

...Windows 2008R2 server as DC, but failing miserably to stabilize it for the past 2 weeks. First, kcc did not created NTDS connections automatically, had to create them by hand. Some days have passed and now when I try to replicate from samba to windows, *both on same site*, I get this: root at araucaria:~# samba-tool drs replicate urucum araucaria DC=ad,DC=a1,DC=ind,DC=br ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (8418, 'WERR_DS_DRA_SCHEMA_MISMATCH') ? File "/usr/lib/python3/dist-packages/samba/netcmd/drs....

Hi Rowland, thank you for your prompt reply, I sent you the testparam output hence lots of defaults (i presumed would be better), here is crude smb.conf: root at araucaria:~# cat /etc/samba/smb.conf [global]     netbios name = ARAUCARIA     realm = AD.TLD     server role = active directory domain controller     workgroup = A1     server services = -dns     ldap server require strong auth = no     wins support = yes     ntlm auth = yes     log file = /var/log...

...er with distro > packages. I update a user with a new group and this new membership is > not reflected on that user. On example below, I can successfully add > the user "test.account" to group "test", but not my user > "marcio.merlone": > > root at araucaria:~# id test.account > uid=30214(A1\test.account) gid=100(users) > groups=100(users),3000008(BUILTIN\users) > root at araucaria:~# samba-tool group addmembers test test.account > Added members to group test > root at araucaria:~# id test.account > uid=30214(A1\test.account) gid=100...

On Wed, 28 Nov 2018 08:48:07 -0200 Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > Those tests were made on DC (araucaria), not a domain member. > > root at araucaria:~# testparm /etc/samba/smb.conf > Load smb config files from /etc/samba/smb.conf > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit > (16384) Processing section "[netlogon]" > Processing section "[sysvol...

...ov 2018 10:12:39 -0200 Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote: > Hi Rowland, thank you for your prompt reply, > > I sent you the testparam output hence lots of defaults (i presumed > would be better), here is crude smb.conf: > > root at araucaria:~# cat /etc/samba/smb.conf > [global] >     netbios name = ARAUCARIA >     realm = AD.TLD >     server role = active directory domain controller >     workgroup = A1 >     server services = -dns >     ldap server require strong auth = no >     wins support = yes >...

...s|ad|(RFC2307) > or|rid|, in the|smb.conf|file is not supported an can cause > the|samba|service to fail Indeed, I have set a smb.conf with idmap settings below and it stops working after some time, with user/password errors: [global]     dns forwarder = 192.168.0.254     netbios name = ARAUCARIA     realm = AD.A1.IND.BR     server role = active directory domain controller     workgroup = A1     server services = -dns     log file = /var/log/samba/%m.log     log level = 1     winbind use default domain = yes     winbind enum users  = yes     winbind enum groups = yes     idmap...

...he|smb.conf|file is not supported an > > can cause the|samba|service to fail > Indeed, I have set a smb.conf with idmap settings below and it stops > working after some time, with user/password errors: > > [global] >     dns forwarder = 192.168.0.254 >     netbios name = ARAUCARIA >     realm = AD.A1.IND.BR >     server role = active directory domain controller >     workgroup = A1 >     server services = -dns > >     log file = /var/log/samba/%m.log >     log level = 1 > >     winbind use default domain = yes >     winbind enum users ...

...ported an >>> can cause the|samba|service to fail >> Indeed, I have set a smb.conf with idmap settings below and it stops >> working after some time, with user/password errors: >> >> [global] >>     dns forwarder = 192.168.0.254 >>     netbios name = ARAUCARIA >>     realm = AD.A1.IND.BR >>     server role = active directory domain controller >>     workgroup = A1 >>     server services = -dns >> >>     log file = /var/log/samba/%m.log >>     log level = 1 >> >>     winbind use default d...