search for: domain_dn

Hello, I'm writing in regards to this issue I opened on GitHub: https://github.com/python-ldap/python-ldap/issues/275 I am able to successfully use ldapsearch to query my Samba 4.9.4-Debian DC: ldapsearch -LLL -Y GSSAPI -H ldap://samba-dc.ad.example.com -b "dc=ad,dc=example,dc=com" "(objectClass=user)" "sAMAccountName" However, when I try to use python-ldap I

...;10.0.20.1']     Traceback (most recent call last):       File "/usr/sbin/samba_dnsupdate", line 523, in <module>         sub_vars = get_subst_vars(samdb)       File "/usr/sbin/samba_dnsupdate", line 261, in get_subst_vars         vars['DNSDOMAIN'] = samdb.domain_dns_name()       File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 650, in domain_dns_name         return domain_dn.canonical_str().split('/')[0]     AttributeError: 'NoneType' object has no attribute 'canonical_str' Which in turn references to this pa...

...def run(self, sambaopts=None, credopts=None, versionopts=None, H=None): lp = sambaopts.get_loadparm() creds = credopts.get_credentials(lp, fallback_machine=True) samdb = SamDB(url=H, session_info=system_session(), credentials=creds, lp=lp) domain_dn = samdb.domain_dn() res = samdb.search(domain_dn, scope=ldb.SCOPE_SUBTREE, expression=("(&(objectClass=user)(userAccountControl:%s:=%u))" % (ldb.OID_COMPARATOR_AND, dsdb.UF_NORMAL_ACCOUNT)),...

...dn string ? File "/usr/local/samba/lib/python3.7/site-packages/samba/netcmd/user.py", line 395, in run ??? smartcard_required=smartcard_required) ? File "/usr/local/samba/lib/python3.7/site-packages/samba/samdb.py", line 458, in newuser ??? dnsdomain = ldb.Dn(self, self.domain_dn()).canonical_str().replace("/", "") How do I fix this? Everthing is using the default path (/usr/local/samba). The only paramater I passed to configure was --enable-fhs since I remember that it croaks without that. So I just did: ./configure --enable-fhs make && make...

...on3.7/site-packages/samba/netcmd/user.py", >> line 395, in run >> ??? smartcard_required=smartcard_required) >> ? File "/usr/local/samba/lib/python3.7/site-packages/samba/samdb.py", >> line 458, in newuser >> ??? dnsdomain = ldb.Dn(self, >> self.domain_dn()).canonical_str().replace("/", "") >> >> >> How do I fix this? Everthing is using the default path >> (/usr/local/samba). The only paramater I passed to configure was >> --enable-fhs since I remember that it croaks without that. > It shouldn&...

...quot;/usr/lib/python2.7/dist-packages/samba/netcmd/user.py", line 176, in run uid=uid, uidnumber=uid_number, gidnumber=gid_number, gecos=gecos, loginshell=login_shell) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 343, in newuser dnsdomain = ldb.Dn(self, self.domain_dn()).canonical_str().replace("/", "") ---------------------------------------------- samba-tool user list ltdb: tdb(/var/lib/samba/private/sam.ldb): tdb_open_ex: could not open file /var/lib/samba/private/sam.ldb: Permission denied Unable to open tdb '/var/lib/samba/private...

UNOFFICIAL Hi Today I demoted the temporary DC (Julius) on my network. The demotion failed. Failed to confirm we are not an RODC ... cannot find attribute msDS-isRODC So I shutdown Julius and forced the demotion. The domain seems stable until I tried LDAP authentication which fails. The samba log says: Error 32 determining PSOs in system. I can't seem to find anything on this error.

Disturbing... Every where I read I see only 5 roles to transfer in windows 2003 server : * /transfer PDC/ * /transfer RID master/ * /transfer infrastructure master/ * /transfer naming master/ * /transfer schema master/ How to transfer the 2 other "roles"? Thanks. Le 15/05/2015 18:03, Andrey Repin a ?crit : > Greetings, Sam! > >>>> Hello all,

...S server. > > I checked dnsserver_init_serverinfo in > source4/rpc_server/dnsserver/dnsutils.c and if I read the code well then > this is all good: > serverinfo->pszDsContainer = talloc_asprintf(mem_ctx, > "CN=MicrosoftDNS,DC=DomainDnsZones,%s", ldb_dn_get_linearized(domain_dn)); > > But later in the code it shows: > serverinfo->pszDomainDirectoryPartition = talloc_asprintf(mem_ctx, > "DC=DomainDnsZones,%s", ldb_dn_get_linearized(domain_dn)); > serverinfo->pszForestDirectoryPartition = talloc_asprintf(mem_ctx, > "DC=ForestDnsZones,...

...credopts=None, versionopts=None, H=None): > lp = sambaopts.get_loadparm() > creds = credopts.get_credentials(lp, fallback_machine=True) > > samdb = SamDB(url=H, session_info=system_session(), > credentials=creds, lp=lp) > > domain_dn = samdb.domain_dn() > res = samdb.search(domain_dn, scope=ldb.SCOPE_SUBTREE, > > expression=("(&(objectClass=user)(userAccountControl:%s:=%u))" > % (ldb.OID_COMPARATOR_AND, > dsdb.UF_NORMAL_ACCOUNT)), >...

...line >> 176, in run >> uid=uid, uidnumber=uid_number, gidnumber=gid_number, gecos=gecos, >> loginshell=login_shell) >> File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 343, in >> newuser >> dnsdomain = ldb.Dn(self, >> self.domain_dn()).canonical_str().replace("/", "") >> >> ---------------------------------------------- >> >> samba-tool user list >> ltdb: tdb(/var/lib/samba/private/sam.ldb): tdb_open_ex: could not open >> file /var/lib/samba/private/sam.ldb: Permission de...

...ything on this error. >> >> Any idea how I fix this? > sorry about that. The issue is that Samba expects a container for > PSOs, but that is a newer AD feature and your 2003 server never > created it. > > the container is: > CN=Password Settings Container,CN=System,$DOMAIN_DN > > The code should cope with 32 (no such object) as very good proof there > are no PSOs. > > This isn't an issue upgrading pure Samba domains (everything since > before 4.0.0 has this) but windows of course is older. > > Options include fixing the code (please file a...

...samba/netcmd/user.py", line > 176, in run > uid=uid, uidnumber=uid_number, gidnumber=gid_number, gecos=gecos, > loginshell=login_shell) > File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 343, in > newuser > dnsdomain = ldb.Dn(self, > self.domain_dn()).canonical_str().replace("/", "") > > ---------------------------------------------- > > samba-tool user list > ltdb: tdb(/var/lib/samba/private/sam.ldb): tdb_open_ex: could not open > file /var/lib/samba/private/sam.ldb: Permission denied > > Unable to...

...t; > I cloned the disks on both DCs before demotion, so I can just go > back. Should I? sorry about that. The issue is that Samba expects a container for PSOs, but that is a newer AD feature and your 2003 server never created it. the container is: CN=Password Settings Container,CN=System,$DOMAIN_DN The code should cope with 32 (no such object) as very good proof there are no PSOs. This isn't an issue upgrading pure Samba domains (everything since before 4.0.0 has this) but windows of course is older. Options include fixing the code (please file a bug and hopefully Tim can look at it)...

...usr/local/samba/lib/python3.7/site-packages/samba/netcmd/user.py", > line 395, in run > ??? smartcard_required=smartcard_required) > ? File "/usr/local/samba/lib/python3.7/site-packages/samba/samdb.py", > line 458, in newuser > ??? dnsdomain = ldb.Dn(self, > self.domain_dn()).canonical_str().replace("/", "") > > > How do I fix this? Everthing is using the default path > (/usr/local/samba). The only paramater I passed to configure was > --enable-fhs since I remember that it croaks without that. It shouldn't 'croak' wit...

> Do you have users in /etc/passwd ? I only have original debian system users > If so, are you trying to add one of these users to an AD group ? no

Hi All, Does anyone know if there's a Samba 4 to Samba 4 migration process? Sounds weird, but it has a logical reason: I've a several-year-old S4 implementation, from an early Alpha (10 I think?) that hasn't been in the best of shape of late - when S4 4.0.0 arrived, I accidentally upgraded using my normal "git pull; ./configure; make; make install" procedure and instead of

Hi all, As per Jelmer's request - in response to bug #7455 attached diff file. Please let me know what you think and if any modificationes need to be performed Regards Luk -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: newusergroupadv.diff URL:

The user exists in AD: - I can see the user using 'wbinfo', 'samba-tool user list' - I can add the user to a group with 'Active Directory Users and Computers' in Windows 2008R2 - It's seems impossible to use 'samba-tool group addmembers foogroup foouser' I looked at the user's attributes but can't find anything different from any other user that

...t; >>> Any idea how I fix this? >> sorry about that. The issue is that Samba expects a container for >> PSOs, but that is a newer AD feature and your 2003 server never >> created it. >> >> the container is: >> CN=Password Settings Container,CN=System,$DOMAIN_DN >> >> The code should cope with 32 (no such object) as very good proof there >> are no PSOs. >> >> This isn't an issue upgrading pure Samba domains (everything since >> before 4.0.0 has this) but windows of course is older. >> >> Options include...