search for: brockley

On our existing samba43 installation I see this: ll -d /var/samba4/BROCKLEY-2016/USERS/ drwxrwx---+ 21 root BROCKLEY-2016\domain admins 512 Feb 14 08:43 /var/samba4/BROCKLEY-2016/USERS/ ll -d /var/samba4/BROCKLEY/USERS/ drwxr-xr-x 3 root wheel 3 Jun 11 14:32 /var/samba4/BROCKLEY/USERS/ I have read https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACL...

...*** Do NOT transmit sensitive data via e-Mail Unencrypted messages have no legal claim to privacy Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

I am testing DC administration using samba-4.10.15 on FreeBSD-12.1p6 and have run across this: [root at smb4-2 ~ (master)]# samba-tool domain join BROCKLEY.HARTE-LYNE.CA DC -U"BROCKLEY\administrator" INFO 2020-06-25 14:26:10,692 pid:47306 /usr/local/lib/python3.7/site-packages/samba/join.py #104: Finding a writeable DC for domain 'BROCKLEY.HARTE-LYNE.CA' INFO 2020-06-25 14:26:10,748 pid:47306 /usr/local/lib/python3.7/site-packages/sa...

...: off , , , GSSAPI_BUILTIN : on GSSAPI_MIT : off LDAP : on . . . NSUPDATE : off My smb4.conf file contains this: [global] bind interfaces only = Yes dns forwarder = 192.168.18.161 216.185.71.33 interfaces = lo0 localhost smb4-1 netbios name = SMB4-1 realm = BROCKLEY.HARTE-LYNE.CA server role = active directory domain controller workgroup = BROCKLEY idmap_ldb:use rfc2307 = yes vfs objects = dfs_samba4 zfsacl server services = -nbt rndc command = /usr/bin/true log level = 1 log file = /var/log/samba4/smbd.log max log size = 10000 debug timest...

...nd penny wrote: > On 02/06/2020 16:03, James B. Byrne via samba wrote: >> Samba-4.11.8 on FreeBSd-12.1p5 >> >> How does one list all of the actual DNS records for Samba administered zones, >> forward and reverse? >> > Try: > > samba-tool dns query localhost brockley.harte-lyne.ca > brockley.harte-lyne.ca ALL -U administrator > I get the same result: samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=3, Children=0 SOA: serial=1, refresh=900, retry=...

...this: [global] . . . dns update command = /usr/local/sbin/samba_dnsupdate nsupdate command = /usr/local/bin/samba-nsupdate -d -g And this is what results when I run: samba_dnsupdate --verbose -d8 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 (add) Starting GENSEC mechanism gssapi_krb5_sasl GSSAPI credentials for SMB4-1$@BROCKLEY.HARTE-LYNE.CA will expi...

FreeBSD-12.1p7 Samba-4.10.15 The user profiles were transferred from the existing Samba AD-DC to a new domain running on Samba-4.10. An ls on the original Samba (4.3.13) domain DC shows this: [root at SAMBA-01 ~]# ls -ld /var/samba4/BROCKLEY-2016/PROFILES/lyneak_hll.V2 drwxrwx---+ 16 BROCKLEY-2016\lyneak_hll BROCKLEY-2016\domain admins 512 Aug 12 17:07 /var/samba4/BROCKLEY-2016/PROFILES/lyneak_hll.V2 [root at SAMBA-01 ~]# ls -ldn /var/samba4/BROCKLEY-2016/PROFILES/lyneak_hll.V2 drwxrwx---+ 16 3000025 3000008 512 Aug 12 17:07 /var/...

[root at smb4-1 ~ (master)]# samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=4, Children=0 SOA: serial=3, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=1...

I have this on the DC smb4-1.brockley.harte-lyne.ca: samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=6, Children=0 SOA: serial=7, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=supp...

This is all the diagnostic information I can think of at the moment: [root at smb4-1 ~ (master)]# klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: administrator at BROCKLEY.HARTE-LYNE.CA Issued Expires Principal Jul 2 10:35:11 2020 Jul 2 20:35:11 2020 krbtgt/BROCKLEY.HARTE-LYNE.CA at BROCKLEY.HARTE-LYNE.CA [root at smb4-1 ~ (master)]# grep nsup /usr/local/etc/smb4.conf dns update command = /usr/local/bin/nsupdate nsupdate comm...

On Wed, June 3, 2020 10:52, Rowland penny wrote: > On 03/06/2020 15:31, James B. Byrne wrote: >> >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator >> Password for [BROCKLEY\administrator]: >> Name=, Records=3, Children=0 >> SOA: serial=1, refresh=900, retry=600, expire=86400, minttl=3600, >> ns=smb4-1.brockley.brockley.harte-lyne.ca., >> e...

On 07.07.2020 21:14, Rowland penny via samba wrote: > On 07/07/2020 20:00, James B. Byrne via samba wrote: >> I have this on the DC smb4-1.brockley.harte-lyne.ca: >> >> samba-tool dns query localhost brockley.harte-lyne.ca >> brockley.harte-lyne.ca >> ALL -U administrator >> Password for [BROCKLEY\administrator]: >> ?? Name=, Records=6, Children=0 >> ???? SOA: serial=7, refresh=900, retry=600, expire=...

Samba-4.11.8 on FreeBSd-12.1p5 How does one list all of the actual DNS records for Samba administered zones, forward and reverse? When I use the dns query option of samba-tool I get a summary but no detail: samba-tool dns query localhost brockley.harte-lyne.ca @ ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=3, Children=0 SOA: serial=1, refresh=900, retry=600, expire=86400, minttl=3600, ns=smb4-1.brockley.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=1, ttl=3600)...

On Thu Aug 6 17:14:11 UTC 2020 Rowland penny rpenny at samba.org wrote: > > No, either case will work on Linux. > > How did you log into the laptop ? > > did you just log in as 'Administrator' or as 'BROCKLEY\Administrator' ? Originally I logged in as BROCKLEY\administrator. I also logged on as BROCKLEY\Administrator and that was converted to BROCKLEY\administrator by Win 10 during the logon process. I also added BROCKLEY\administrator to the local Admins group without solving the problem. --...

Previously, when I did this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator Then I saw this: >> Password for [BROCKLEY\administrator]: Now I see this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator >> Cannot do GSSAPI to an...

Wed Jul 8 16:09:19 UTC 2020, Rowland penny wrote: > No, it is '@' for the name, not 'brockley.harte-lyne.ca' Previously I had tried that as well with similar results as shown below: [root at smb4-1 ~ (master)]# samba-tool dns help delete Usage: samba-tool dns delete <server> <zone> <name> <A|AAAA|PTR|CNAME|NS|MX|SRV|TXT> <data> [root at smb4-1 ~ (master)...

...~ (master)]# which nsupdate /usr/local/bin/nsupdate [root at smb4-1 ~ (master)]# grep nsupdate /usr/local/etc/smb4.conf dns update command = /usr/local/bin/nsupdate -g samba_dnsupdate --verbose -d4 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 (add) Successfully obtained Kerberos ticket to DNS/SMB4-1.brockley.harte-lyne.ca as SMB4-1$ Failed nsupdate: SRV...

...-GSS. > > Default: dns update command = ${prefix}/sbin/samba_dnsupdate > > Example: dns update command = /usr/local/sbin/dnsupdate > > You probably need both. > > Rowland If I use the -g option to nsupdate then I see this: update(nsupdate): A ForestDnsZones.brockley.harte-lyne.ca 192.168.18.161 Calling nsupdate for A ForestDnsZones.brockley.harte-lyne.ca 192.168.18.161 (add) Successfully obtained Kerberos ticket to DNS/SMB4-1.brockley.harte-lyne.ca as SMB4-1$ /usr/local/bin/nsupdate: cannot specify -g or -o, program not linked with GSS API Library Failed nsupd...

...ble checked the ACLs that the ones we have assigned match exactly those given in the examples. However, when we create a new test account no roaming profile directory is created. The contents of our smb4.conf file are: cat /usr/local/etc/smb4.conf # Global parameters [global] workgroup = BROCKLEY-2016 realm = BROCKLEY-2016.HARTE-LYNE.CA netbios name = SAMBA-01 server role = active directory domain controller dns forwarder = 216.185.71.33 idmap_ldb:use rfc2307 = yes [netlogon] path = /var/db/samba4/sysvol/brockley-2016.harte-lyne.ca/scripts...

...mple.com 737506d0-bfe6-40c8-815d-08c3dff7a67f CNAME DC2.samdom.example.com -Uadministrator <--- When I attempt to add the GUID of the new Samba AD DC to the DNS server running on the existing Win2000 AD DC I get this: # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at BROCKLEY.HARTE-LYNE.CA Valid starting Expires Service principal 02/03/14 11:40:04 02/03/14 21:43:05 krbtgt/BROCKLEY.HARTE-LYNE.CA at BROCKLEY.HARTE-LYNE.CA renew until 02/10/14 11:40:04 #find / -name sam.ldb /var/lib/samba/private/sam.ldb # ldbsearch -H /var/lib/samba/private/sam.ldb...