search for: domainadministr

Hai, Sorry if you feel like that but i always have to ask this. Your aswer is not help also for me, because without smb.conf OS and samba version we know nothing.. We dont like guessing, because everybody's time is precious. So please tell more about your system, i suggest start with. OS Samba version Smb.conf Upgraded from samba 3.??? To samba 4.?? The more you tell us te better we

...>www.donelsontrophy.com [1] > >"Everyone deserves an award!!" > >On 2015-01-28 03:18, L.P.H. van Belle wrote: > >> Hai Bob, >> >> A few questions. >> >> - is the client computer member of the domain? >> - Are you logged in as "DOMAINAdministrator" ? >> - it the time on pc and server the same. >> >> and for example. change this one to >> >>> [profiles$] path = /home/samba/DT***RM/profiles >acl_xattr:ignore system acl = yes read only = no csc policy = disable >> >> now check if : /...

...d >once again it is time to move forward. > >Rowland, > >Thanks for your help and patience, so far. > >Louis, > >From what I can understand from your email, there was an error within >your "4-setup-sernet-samba4-MEMBER-wheezy.sh" script that caused my >domainAdministrator to create a uidNumber when it should not have had a >uidNumber (should be "0" for root.) And now you have corrected the >script so it will not do that again. > >The simplest solution for me is this. Revert to my initial Debian >installation backup (created just prior t...

I have been improving my DC. I now have a DC01, DC02 and a DCMEMBER01. All running sernet-samba 4.1.16 on Debian 7.8.0 thanks to Louis' (old) scripts. (Any linux client work has gone on hold, for the moment.) Next step was to adjust the file permissions as instructed on "Setup and configure file shares with Windows ACLs". When I access the "Computer Management" (thru ADUC

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28...

...stro specific? Background info: I've recently had problems logging into an Active Directory domain (SBS 2003 with SFU 3.5 schema extensions) on a new Ubuntu 10.04 which uses winbind 3.4.7. I successfully joined the domain, and created a keytab using the following commands: net ads join -U domainadministrator createupn createcomputer="MyBusiness/Computers/UnixComputers" net ads testjoin net ads keytab create -U domainadministrator I added winbind to nssswitch.conf and ran pam-auth-update to use the winbind profile to configure /etc/pam.d/common*. pam_winbind had the krb5_auth and krb5_cca...

...oup policy creator owners > ras and ias servers > domain controllers > enterprise admins > domain computers > cert publishers > dnsupdateproxy > domain admins > domain guests > schema admins > domain users > dnsadmins > > How do I remove the uidNumber from the domainAdministrator and > re-associate domainAdminstrator to root '0'? OK, lets check if Administrator has a 'uidNumber', run this on your first DC: ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b "DC=example,DC=com" -s sub '(&(objectclass=user)(cn=Administrator))'...

...stro specific? Background info: I've recently had problems logging into an Active Directory domain (SBS 2003 with SFU 3.5 schema extensions) on a new Ubuntu 10.04 which uses winbind 3.4.7. I successfully joined the domain, and created a keytab using the following commands: net ads join -U domainadministrator createupn createcomputer="MyBusiness/Computers/UnixComputers" net ads testjoin net ads keytab create -U domainadministrator I added winbind to nssswitch.conf and ran pam-auth-update to use the winbind profile to configure /etc/pam.d/common*. pam_winbind had the krb5_auth and krb5_cca...

...rodc password replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert publishers dnsupdateproxy domain admins domain guests schema admins domain users dnsadmins How do I remove the uidNumber from the domainAdministrator and re-associate domainAdminstrator to root '0'? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-30 02:05, L.P.H. van Belle wrote: > Hi bob, > > Yes, i have...

...ord replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert publishers dnsupdateproxy domain admins domain guests schema admins domain users dnsadmins How do I remove the uidNumber from > the > domainAdministrator and re-associate domainAdminstrator to root '0'? >> OK, lets check if Administrator has a 'uidNumber', run this on your first DC: >> >> ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b "DC=example,DC=com" -s sub '(&(objectclass=user)(cn=Ad...

Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain

...gt; > so i'll give you one more try.. > > if the DC(s) are setup with the scripts, and the member server is installed with the script. > reboot the servers. > > now.. > > Do the following.. > > Join you pc to the domain. > Login in the domain as "DOMAINAdministrator) > > when logged in.. > > start windows explorer, Klik on "Computer" and select Manage. > In computer Management. > right klik on the "Computer" en select, "connect to other computer" > Enter the "member server name in FQDN" &...

On 28/01/15 16:50, Bob of Donelson Trophy wrote: > > > W7 client domain member? yes. > > Logged in as domainAdministrator? yes. > > "SeDiskOperatorPrivilege" set? yes > > Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [2...

...rodc password replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert publishers dnsupdateproxy domain admins domain guests schema admins domain users dnsadmins How do I remove the uidNumber from the domainAdministrator and re-associate domainAdminstrator to root '0'? > > OK, lets check if Administrator has a 'uidNumber', run this on your first DC: > > ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b "DC=example,DC=com" -s sub '(&(objectclass=user)(cn=Adminis...

...rodc password replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert publishers dnsupdateproxy domain admins domain guests schema admins domain users dnsadmins How do I remove the uidNumber from the domainAdministrator and re-associate domainAdminstrator to root '0'? > OK, lets check if Administrator has a 'uidNumber', run this on your first DC: ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b "DC=example,DC=com" -s sub '(&(objectclass=user)(cn=Administrator))' t...

...--- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-28 11:02, Rowland Penny wrote: > On 28/01/15 16:50, Bob of Donelson Trophy wrote: > W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] [2 [1]] "Everyone deserves an award!!" On 2015-01-28...

...only"="no" "path"="/GL-lokal/linux2/" [HKLM\software\samba\Group Policy] ;Local Variables: ;coding: UTF-8 ;End: - ---------------- The Cluster is Domainmember: root at fs1:~# net rpc testjoin Join to 'SAMBA-AD' is OK If I add aditional permissions as Domainadministrator to any file or directory via Windows-explorer it works. BUT when I try to remove permissions or reset the inheritance of filesystempermission on a file or directory I'll get an errormessage. the following picture shows the error: http://www.bilder-upload.eu/show.php?file=1613a0-1420819849....

...: > On 08/02/15 18:20, Bob of Donelson Trophy wrote: > > Seems very strange (to me) that I need to enter the "Password for [DTS***Mroot]:" twice? > > And then the second question, what is the [DTS***Mroot] password, my "root" password for the DC01 or my "domainAdministrator" password? (Tried both.) > > And then I get: > > Failed to bind to uuid 50abc2a4-5**d-40b3-9**6-ee4fd5fba076 for 50abc2a4-5**d-40b3-9**6-ee4fd5fba076 at ncacn_ip_tcp:dtdc01[1024,sign] NT_STATUS_LOGON_FAILURE > ERROR(runtime): uncaught exception - (-1073741715, 'Logon...

...t;>> ;coding: UTF-8 ;End: ---------------- >>>> >>>> The Cluster is Domainmember: >>>> >>>> root at fs1:~# net rpc testjoin Join to 'SAMBA-AD' is OK >>>> >>>> >>>> If I add aditional permissions as Domainadministrator to any >>>> file or directory via Windows-explorer it works. >>>> >>>> BUT when I try to remove permissions or reset the inheritance >>>> of filesystempermission on a file or directory I'll get an >>>> errormessage. the following...

I have created a DC01 & DC02 with Louis's (generation one) scripts. I have noticed, during some testing that 'pam-auth-update' shows PAM profiles Kerberos, Unix & Winbind listed on DC01. The DC02 only lists Kerberos & Unix and Winbind is missing. I thought that the two DC's were suppose to be identical? If DC01 goes "down" DC02 cannot carry a winbind