search for: distinguishednames

I have a brand-new install of Debian 8 without systemd and a freshly-built Samba 4 install with issues. I created this as a standalone AD DC, setup group policies, etc and then took it to the client location. Now nothing works. I keep getting "RPC server unavailable" on Windows machines and trying to list shares on the DC itself results in NT_STATUS_INVALID_SID. I am lost as there are

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hey, I stumbled across strange behaviour with LDAP searches against a Samba 4 AD today, where queries for (&(objectClass=x)(|(...)(...)))" won't deliver any result, whereas queries (|(...)(...)) will function correctly. To illustrate: - --- modelnine at xdom00 ~ $ ldapsearch -H ldap://id.modelnine.org -b

ah, ok, yes, i didnt look to good at the filters. I was thinking the "Machine Account" was an OU but whats strange also, why is that machine account in the "user", and not in "Computers" i dont have any "computer" in the users OU. Gr. Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens

I guess I should note that it seems like the high SIDs will resolve, except for 300000. Below is an example. root at dc01:~# l /var/lib/samba/sysvol/medarts.lan/ total 16 drwxrws---+ 4 MEDARTS\reachfp 3000000 4096 Oct 17 17:45 Policies drwxrws---+ 2 MEDARTS\reachfp 3000000 4096 Oct 17 17:45 scripts root at dc01:~# l /var/lib/samba/sysvol/medarts.lan/Policies total 16 drwxrws---+ 5 MEDARTS\reachfp

On Wed, 26 Oct 2016 17:27:37 -0400 Ryan Ashley via samba <samba at lists.samba.org> wrote: > I guess I should note that it seems like the high SIDs will resolve, > except for 300000. Below is an example. > > root at dc01:~# l /var/lib/samba/sysvol/medarts.lan/ > total 16 > drwxrws---+ 4 MEDARTS\reachfp 3000000 4096 Oct 17 17:45 Policies > drwxrws---+ 2 MEDARTS\reachfp

Wait, now I'm confused. Idmap lines do not need to be set up on the DCs? Then how does windows figure's out the ids in the Unix Attributes tab? I thought you needed both rfc2307 and idmap on the DC and the members. Em 27/10/2016 05:39, Rowland Penny via samba escreveu: > On Wed, 26 Oct 2016 17:27:37 -0400 > Ryan Ashley via samba <samba at lists.samba.org> wrote: >

I dont see the bug... and i upgrade multiple debian wheezy to jessie, and upgraded multiple samba 4.1.17 to sernet 4.2.3. but i see. -D "cn=Machine Account,cn=Users,dc=id,dc=modelnine,dc=org" shouldnt this be -D "OU=Machine Account,cn=Users,dc=id,dc=modelnine,dc=org" ? If your using windows RATS. enable the advanced view. ( view - 3e from below. ) Now go to the

Hey, Am 26.08.2015 11:09, schrieb L.P.H. van Belle: > ah, ok, yes, i didnt look to good at the filters. > > I was thinking the "Machine Account" was an OU > but whats strange also, why is that machine account in the "user", and > not in "Computers" > i dont have any "computer" in the users OU. the "machine account" is a regular

When I run a ldbsearch command looking for an object, I get to attributes with the same values: 'dn' and 'distinguishedName'. Then, Is there any difference between them? If not, Why 'ldbsearch' returns this two attributes? _________________________________________ Ing. Felipe_ González_Santiago Universidad de las Ciencias Informáticas Centro de Software Libre The

On 5/16/2020 9:55 AM, Rowland penny via samba wrote: > On 16/05/2020 14:40, James Atwell wrote: >> >> On 5/16/2020 5:00 AM, Rowland penny via samba wrote: >>> On 15/05/2020 19:52, James Atwell via samba wrote: >>>> Hello, >>>> >>>> ??????? I upgraded two DC's to 4.12.2 from 4.11.6 before I noticed >>>> authentication

Hai Rowland, Thanks for this verification, bug closed. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: woensdag 6 november 2019 10:26 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] List Index Out of Range > > On 06/11/2019 08:01, L.P.H. van Belle via

Hello, I have three Samba Active Directory Domain Controllers that, from all metrics seem to be working just fine, but for one thing: When I run the following command: # samba-tool visualize uptodateness -r I always get the following response: ERROR(<class 'IndexError'>): uncaught exception - list index out of range File

Dne 2024.08.15 17:01, Rowland Penny via samba napsal: > On Thu, 15 Aug 2024 16:33:57 +0200 > Franta Hanzlik via samba <samba at lists.samba.org> wrote: > >> Dne 2024.08.14 12:06, Rowland Penny via samba napsal: >> > On Wed, 14 Aug 2024 11:05:23 +0200 >> > Franta Hanzlik via samba <samba at lists.samba.org> wrote: >> > >> >>

Dne 2024.08.14 12:06, Rowland Penny via samba napsal: > On Wed, 14 Aug 2024 11:05:23 +0200 > Franta Hanzlik via samba <samba at lists.samba.org> wrote: > >> Rowland, thank you for response. >> But I still think there's nothing stopping Samba from being better >> than Windows at this, and introducing some switches like >> --displayname >>

On Thu, 15 Aug 2024 16:33:57 +0200 Franta Hanzlik via samba <samba at lists.samba.org> wrote: > Dne 2024.08.14 12:06, Rowland Penny via samba napsal: > > On Wed, 14 Aug 2024 11:05:23 +0200 > > Franta Hanzlik via samba <samba at lists.samba.org> wrote: > > > >> Rowland, thank you for response. > >> But I still think there's nothing stopping

Hi all! I'm attempting to configure sudo rights from Samba ldap. Alas, libsssd_samba receives 0 rules and config doesn't work. I think I have the problem identified here but I don't understand why. The way sssd_sudo searches for sudoers leave all important attributes out and of course filtering then fails. Can you help me to understand why following search results are so different (and

Hi, I'm having hard time getting sssd_sudo to work: when sssd_sudo accesses Samba ldap with host principal 'dc1$@teemu.local' it can't read necessary attributes like objectclass: sudoRole. When accessing as Administrator all attributes are shown. How can I enable other users then Administrator to access sudoers' attributes? Below is an example. [root at dc1 var]# kinit

Changing the default ou for the user creation? The samba-tool create user are placed in the default ou of "Users", for example this output from samba-tool show user: distinguishedName: CN=User 73. Test,*CN=Users*,DC=subdom,DC=example,DC=com This user72 I moved (drag and drop) within ADUC, so, here is where I am trying to associate our users. Again, output from samba-tool-show user:

Roland, Thank you very much for your attention to this. You should get a medal for all the help you give everyone on this list. On Sun, 10 May 2015, Rowland Penny wrote: > Why ? And why don't they show up when you ask for the zones with samba-tool ? I have that many subnets. As for why they don't show up: they are defined in BIND's configuration and not samba's; they never

On 18/07/2019 17:36, Kris Lou via samba wrote: > Might have something to do with this bug: > https://bugzilla.samba.org/show_bug.cgi?id=11482 > > You can find and make the relevant changes with ADSI Edit. > > The problem is that renaming a user on Linux works the opposite way to Windows and neither renames everything. If you rename on Linux with ldbrename, it renames dn, cn,