search for: gortinsc17

On Tue, 28 May 2024 12:22:23 +0300 Omnis ludis - games <sergey.gortinsc17 at gmail.com> wrote: > the CENTOS 7 operating system is used OK, but where did you get the Samba packages from, by default, Centos, like RHEL cannot be provisioned or joined as a DC. > the command to enter is as follows: samba-tool domain join > admugra.local DC -U Administrator --dn...

I expanded my schema and am trying to add these entries to ldap dn: cn=test,ou=soft_users,dc=soft,dc=biz cn: test objectClass: nisMailAlias objectClass: top rfc822MailMember: test at ml.soft.com but I get the following error ldbadd -H /opt/samba/private/sam.ldb mail3.ldif ERR: Naming violation : "structural objectClass nisMailAlias is not a valid child class for

hello everyone, please tell me whether it is possible to enable KFSO in samba or is this only possible with forests and since samba is, in theory, a flat domain, then such functionality is not available?

Thanks for the help, it turned out to fix the script for changing the password a little and the password was successfully changed, I recreated the keytab and the error went away, it's very fine thanks again to everyone for the help ??, 6 ???. 2024??. ? 11:29, Omnis ludis - games <sergey.gortinsc17 at gmail.com >: > > here's the nuance, I just had to put this script in the samba folder, > because after assembly I do not find it in the samba folders, although this > script is in the source code, maybe I forgot to specify some keys before > assembly, but I would like to u...

...for testing myself, making some changes to it, maybe this is related to this, tell me about local, why it?s not advisable to use .local ??, 28 ??? 2024??. ? 14:26, Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 28 May 2024 12:22:23 +0300 > Omnis ludis - games <sergey.gortinsc17 at gmail.com> wrote: > > > the CENTOS 7 operating system is used > > OK, but where did you get the Samba packages from, by default, Centos, > like RHEL cannot be provisioned or joined as a DC. > > > the command to enter is as follows: samba-tool domain join > > a...

the CENTOS 7 operating system is used the command to enter is as follows: samba-tool domain join admugra.local DC -U Administrator --dns-backend=BIND9_DLZ --realm=ADMUGRA.LOCAL --backend-store=mdb --option="ad dc functional level = 2016" --server=dc1.admugra.local -d 10 version exactly 4.19 join to DC not RODC ??, 25 ??? 2024??. ? 14:11, Rowland Penny via samba <samba at

here's the nuance, I just had to put this script in the samba folder, because after assembly I do not find it in the samba folders, although this script is in the source code, maybe I forgot to specify some keys before assembly, but I would like to understand how in this in the script, just hardcode the paths to the directories my path

Good afternoon everyone, is Samba using a password with salt by default or how can this parameter be enabled in Samba?

I am asking this question for general samba development, I just know that windows ad does not use salt, but I thought that samba ad has it, but thank you for the answer, but tell me is there an opportunity to enable salt on samba ad? or will it lead to problems with windows ad ??, 14 ???. 2024??. ? 11:40, Rowland Penny via samba <samba at lists.samba.org >: > On Fri, 14 Jun 2024

in samba, do I understand correctly that the rid pool is limited to this value of 1,073,741,823 as in windows, but windows has support for pool expansion, can this pool also be expanded in samba to 2,147,483,648, tell me if this is possible?

while transferring fsmo roles I encountered a problem transferring the DomainDnsZones and ForestDnzZones roles in samba 4.20.2, I went to the samba source code in the fsmo.py file and started studying the code snippet in the Transfer_dns_role() function if master_dns_name != new_dns_name: lp = sambaopts.get_loadparm() creds = credopts.get_credentials(lp, Fallback_machine=True)

Hello, if you enter samba into the windows domain in a separate site where there is no one, then outgoing neighbors do not appear, maybe someone has encountered this problem? if anything, the sites are interconnected via site link and replication between them is set in the range of 15 minutes, there was also an attempt to make repadmin /kcc from windows and samba_kcc --attempt-live-connections,

Hello, if you enter samba into the windows domain in a separate site where there is no one, then outgoing neighbors do not appear, maybe someone has encountered this problem? if anything, the sites are interconnected via site link and replication between them is set in the range of 15 minutes, there was also an attempt to make repadmin /kcc from windows and samba_kcc --attempt-live-connections,

Hello, if you enter samba into the windows domain in a separate site where there is no one, then outgoing neighbors do not appear, maybe someone has encountered this problem? if anything, the sites are interconnected via site link and replication between them is set in the range of 15 minutes, there was also an attempt to make repadmin /kcc from windows and samba_kcc --attempt-live-connections,

good afternoon, when entering into the domain an error occurs, the administrator has all the rights, but for some reason it is not possible to enter this server into the domain, samba 4.19.0, the log is attached GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego'

I added a private directory, but this did not fix the problem, and for some reason the other path still appears testparm -v | grep private Load smb config files from /opt/samba/etc/smb.conf Loaded services file OK. Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback) Server role: ROLE_ACTIVE_DIRECTORY_DC Press enter to see a dump of your service definitions private

Good afternoon, tell me, this error occurs on the domain controller samba v 4.19.0, I paired the domain controller with sssd so that authentication occurs under domain accounts on the domain controller, but as you know, sssd changes the machine password every 30 days if this option is not disabled ad_maximum_machine_account_password_age = 0 I haven?t disabled it for 30 days and as I understand it,