search for: detert

...line 647, in run sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part), drsuapi.DRSUAPI_DRS_WRIT_REP) File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 83, in sendDsReplicaSync raise drsException("DsReplicaSync failed %s" % estr) # -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin 414-290-6759

...rn an name into a sid, and the sid back into a name (via wbinfo -n and -s, respectively), but I can't turn a sid into a unix uid or gid (via the -S argument). Also, 'getent passwd' doesn't return any users from Active Directory. Any idea what's wrong? Is it my config? -- Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A. -- Linus Torvalds can divide by zero.

...hat 'SATURN' is the netbios name of the win2k client machine? I'm not real clear on how this works with win2k clients... You SHOULD be able to have these clients connect by specifying in the username and password window that comes up when you fail to attach initally the username: MSOE\detertj (in your example) with the appropriate password for the detertj user account in the MSOE domain. But if you want to avoid this entirely, then you probably SHOULD add your win2k clients to the MSOE domain (if they are regular users of resources in this domain...) Hope this helps, Don -----Origina...

...idmap gid = 500-45000 idmap uid = 500-45000 idmap backend = ad Any idea what is wrong? I restarted winbind, but that didn't help. I stopped winbind, removed the winbindd_idmap.tdb, and then restarted winbind, but the groupname is still not found. -- Happy Landings, Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.

...op; /etc/init.d/samba stop cat /dev/null > /var/cache/samba/winbindd_cache.tdb mv /var/lib/samba/winbindd_idmap.tdb /var/lib/samba/winbindd_idmap.tdb.orig /etc/init.d/samba start; /etc/init.d/winbind start Is there something else to consider re. caching? Thanks -- Happy Landings, Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.

...orever, but if I trim/purge/delete them, how will the rpm database be updated to know that it can no longer rollback to the date that they were installed? AtDhVaAnNkCsE [1] http://www.freedomit.co.nz/kb-centos/enabling-yum/rpm-rollback [2] http://www.linuxjournal.com/article/7034?page=0,1 -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin 414-290-6759

I'm trying to demote dc3 from msad dc service. As the root user, I type this command: samba-tool domain demote -Uadministrator which fails with this error: "Using dc2.infinity.local as partner server for the demotion" The problem is that dc2 was demoted some weeks ago, and is no longer running samba4. Is there a way I can force dc3 to use a different dc as the

...ce I only have one MsAD domain, this is really equivalent for me to 'template homedir = /home/%U'. Can anyone suggest a use of macros to spread the homedirs out thru multiple hierarchies? Does the %g macro (primary group) have meaning without NIS or mssfu? thanks -- Happy Landings, Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.

...ions delivered in v5.6. Suppose also, that I have a package xyz installed, and that an update to it was made available in v5.8. Can I upgrade xyz to the updated version from 5.8 without updating other packages (except for any dependencies xyz has) to the versions available in v5.8? Thanks, -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin 414-290-6759

I installed CentOS 6.0 on 2 different x86_64 boxen. Both originally had selinux installed and enabled. I never touched selinux other than to remove as much of it as I could via rpm -e. As far as I can tell, here are the remaining packages that have something to do with it: # rpm -qa | grep -iE 'sel|pol' checkpolicy-2.0.22-1.el6.x86_64 libselinux-2.0.94-2.el6.x86_64

...p to one with no spaces in the name: [demoshare] comment = Test share path = /usr/local/samba/demoshare read only = no valid users = @INFINITY+jontest When the group is specified as 'Domain Users', this is what smclient says when trying to connect: $ smbclient -U INFINITY\\jdetert //mkejdev1/demoshare Password for [INFINITY\jdetert]: Connection to \\mkejdev1\demoshare failed - NT_STATUS_ACCESS_DENIED $ and this is what the samba log file (at log level 3) says for the IP that smbclient was run from: [2014/06/03 15:02:21.810055, 3] ../source3/smbd/process.c:1795(process_smb...

...;. I like 'ad' better because it is not redundant. Regardless, the man page should be updated to state the legal possible values. If both 'idmap_ad' and 'ad' are legal, then mention them both. If only 'ad' is legal, then fix the man page. -- Happy Landings, Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.

...am restrictions = true" will be ignored when "encrypt password" is set to true. Am I understanding this correctly? Is there a work-around? I don't want to add the samba schema to my existing ldap server, but I do want to use my existing ldap server for authN. Thanks, -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin 414-290-6759

...ot say you need to install winbind, but over 1/2 way through, says you should start the winbind daemon. Do I need it? If so, why?, and how do I configure it? Simply by the 5 lines shown in the example basic smb.conf? Does that mean I must add rfc2307 schema and data to my AD DC? Thanks, -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin

...that it doesn't find is in ou=unixgroups,dc=msoe,dc=edu This makes me think there's an ldap basedn problem, but then, there's no ldap config needed or used by winbind, as far as i can tell. Anyone know what's wrong or have an idea of how to debug? Thanks -- Happy Landings, Jon Detert IT Systems Administrator, Milwaukee School of Engineering 1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.

...ant to maintain the passwords in 2 places (389-ds and Samba4). Hence the question: Is it possible to make Samba4 use an external LDAP server for authentication, and its own LDAP server for all other LDAP purposes (e.g. authorization; user-object data; computer-object data; etc.)? Thanks, -- Jon Detert Sr. Systems Administrator Infinity Healthcare Milwaukee, Wisconsin 414-290-6759

Hello, I want to use samba v3.3.x to implement an NT4/Win2k style domain: a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'. I plan to use RedHat Directory Server v8.2 as the ldap server. I'm trying to sort out how user/group management and nss will work. I'm confused about how/when the samba-supplied ldap schema is used (I mean the schema that's in the

i'm a newbie at building rpms. I made a few rpms years ago, but can't now make one on Centos 5. In /usr/local/rpmbuild, there are 5 subdirs: BUILD RPMS SOURCES SPECS SRPMS tmp When I type: rpmbuild -ba /usr/local/rpmbuild/SPECS/centos-release-cr-ihc.spec I get 'file not found' errors, for paths in /usr/local/rpmbuild/tmp: error: File not found:

Hello, I'm trying to use samba v3.3.8 on Centos 5.5 to act as a PDC, using ldap as the backend for users, groups, and computers. The ldap I'm using is Centos Directory Server v8.1. The setting is a new, never used before, installation of samba and ldap. There are no users other than what exists by default after a Centos install. The smb.conf contains what is my best guess for the

...bleshoot and/or remedy? Thanks, Jon Context: ------------ samba v3.3.8 on CentOS v5.5, using ldapsam backend. Domainname ='CHI'. smbldap-tools v0.9.6. I 'populated' the ldap with 'smbldap-populate'. I try to join the winxp box, authenticating to the domain as user 'jdetert', which is a member of the 'Administrators' group: # smbldap-groupshow Administrators dn: cn=Administrators,ou=Groups,dc=infinityhealthcare,dc=com objectClass: top,posixGroup,sambaGroupMapping gidNumber: 544 cn: Administrators description: Netbios Domain Members can fully administer the...