Displaying 12 results from an estimated 12 matches for "f30e3bbf".
2018 Aug 22
1
samba-tool dsacl set fails with "Unknown flag"
...acl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)'
new descriptor for cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de:
O:DAG:DAD:AI(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA)S:AI(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
Unknown flag - S:AI(A;CI;GA;;;DD) in AIS:AI(A;CI;GA;;;DD)
ERROR(<type 'exceptions.TypeError'>): uncaught exception - Unable to parse SDDL
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py&q...
2019 Mar 27
3
samba 4.9.5 - joining Samba DC to existing Samba AD failed
...-00aa003049e2;RU)(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff
> 4f3ccd8;;PS)(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)(A;CIID;LC;;;RU)(A;CIID;R
> PWPCRCCLCLORCWOWDSDSW;;;BA)S:AI(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f8
> 0367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-
> 11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
I'm stil confused, there is something I still miss, some joining piece -
'ldbsearch', as You recommended use it, fail with error '-U: unknown option':
[root at dc1 samba]# ldbsearch -H ldap://dc1 -U Ad...
2018 Nov 29
2
Different LDAP query in different DC...
...de6-11d0-a285-00aa003049e2;RU
)(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)(A;CIID;RPWPCRCCDCL
CLORCWOWDSDDTSW;;;EA)(A;CIID;LC;;;RU)(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA)S:AI
(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-
00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5
-0de6-11d0-a285-00aa003049e2;WD)
# Referral
ref: ldap://ad.fvg.lnf.it/CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it
# Referral
ref: ldap://ad.fvg.lnf.it/DC=DomainDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it
# Referral
ref: ldap://ad.fvg.lnf.it/DC=ForestDnsZones,DC=ad,DC=...
2018 Nov 29
2
Different LDAP query in different DC...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> Whilst there are attributes that do not get replicated between DC's,
> the majority are, so each DC should allow the same access.
> Do you have access to the DC ?
> Can you run the search locally ?
Sure! As just stated, local access (via ldbsearch against the local
SAM) works as expected:
root at vdcpp1:~# ldbsearch
2018 Aug 22
0
samba-tool dsacl set fails with "Unknown flag"
...new descriptor for cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de:
O:DAG:DAD:AI(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA)S:AI(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
Unknown flag - S:AI(A;CI;GA;;;DD) in AIS:AI(A;CI;GA;;;DD)...
2016 Jan 04
0
LDAP permissions - ldbedit/ldapmodify?
...de6-11d0-a285-00aa003
049e2;RU)(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff4f3ccd8;;PS)(A;CIID;RPW
PCRCCDCLCLORCWOWDSDDTSW;;;EA)(A;CIID;LC;;;RU)(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;
;BA)S:AI(OU;CIIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0
-a285-00aa003049e2;WD)(OU;CIIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf96
7aa5-0de6-11d0-a285-00aa003049e2;WD)
For a start on what the above means, see here:
http://www.netid.washington.edu/documentation/domains/sddl.aspx
Rowland
2019 Mar 26
0
samba 4.9.5 - joining Samba DC to existing Samba AD failed
...-0de6-11d0-a285-00aa003049e2;RU)(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d63ff
4f3ccd8;;PS)(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)(A;CIID;LC;;;RU)(A;CIID;R
PWPCRCCLCLORCWOWDSDSW;;;BA)S:AI(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f8
0367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-
11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
> unicodePwd::
I would change Administrators password, you have given it to the
world ;-)
Rowland
2018 Nov 29
2
Different LDAP query in different DC...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> S-1-5-21-160080369-3601385002-3131615632-1314
Bingo! Exactly the 'Restricted' group that own the users i use for
generico LDAP access!
I really think that we have found the trouble!
Now... how can i fix it? ;-)
And... why that vaule get not propagated?!
Thanks.
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
2019 Mar 26
2
samba 4.9.5 - joining Samba DC to existing Samba AD failed
Hi Tim and Rowland, thanks for Your support!
I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba
versions require Python3), but You are right, here in DB can be problem
- first Samba AD DC was created by migrating Samba3 NT4 domain to Samba4
AD cca week ago (using 'samba-tool domain classicupgrade ...', according
to Samba Wiki):
On Tue, 26 Mar 2019 10:14:02 +1300
Tim
2016 Jan 04
2
LDAP permissions - ldbedit/ldapmodify?
Hi,
A while ago I successfully set permissions on a section of my LDAP / AD
tree, using either ADUC or ADSIEDIT (I forget which). These permissions
allowed my own user to access this section of the tree; I removed
permissions for 'Domain Admins' etc. to ensure that others would not be
able to view or change the data - this has worked great for many months.
I have just tried to add a new
2018 Nov 01
1
Internal DNS migrate to Bind9_DLZ
...0003 (3)
1: SEC_ACE_OBJECT_TYPE_PRESENT
1: SEC_ACE_INHERITED_OBJECT_TYPE_PRESENT
type : union security_ace_object_type(case 1)
type : f30e3bbf-9ff0-11d1-b603-0000f80367c1
inherited_type : union security_ace_object_inherited_type(case 2)
inherited_type : bf967aa5-0de6-11d0-a285-00aa003049e2
trustee : S-1-1-0
dacl...
2018 Nov 01
2
Internal DNS migrate to Bind9_DLZ
I've been been trying to investigate this for sometime now, hence I came to
the experts :)
I have rejoined all my DC's with new names, see below.
;; ANSWER SECTION:
<domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New
rebuild, new hostname, RHEL6 to RHEL7 upgrade
<domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New