search for: gsurfnet

On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > I executed the command in two scenarios. > > Account 'user1' unlocked: > > root at gteste2:~# > root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b > "dc=testead,dc=gsurfnet,dc=com" -s sub > '(&(objectclass=user)(samaccountname=user1))' lockoutTime > # record 1 > dn: CN=user1,OU=TESTE,DC=testead,DC=gsurfnet,DC=com > lockoutTime: 0 > > # Referral > ref: ldap:// > testead.gsurfnet.com/CN=Configuration,DC=testead,DC=gsurfnet,DC=com...

On 01/08/16 18:27, Rowland penny wrote: > On 01/08/16 18:04, Anderson Hoffmann do Carmo wrote: >> Hi Rowland. >> >> The command (samba-tool user enable 'user') is used to enable a user >> account that has been disabled in AD, but it is not functional to >> unlock a >> user account that has been locked by wrong password. >> >> >>

...n 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > >> I executed the command in two scenarios. >> >> Account 'user1' unlocked: >> >> root at gteste2:~# >> root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b >> "dc=testead,dc=gsurfnet,dc=com" -s sub >> '(&(objectclass=user)(samaccountname=user1))' lockoutTime >> # record 1 >> dn: CN=user1,OU=TESTE,DC=testead,DC=gsurfnet,DC=com >> lockoutTime: 0 >> >> # Referral >> ref: ldap:// >> testead.gsurfnet.com/CN=Configurati...

I executed the command in two scenarios. Account 'user1' unlocked: root at gteste2:~# root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b "dc=testead,dc=gsurfnet,dc=com" -s sub '(&(objectclass=user)(samaccountname=user1))' lockoutTime # record 1 dn: CN=user1,OU=TESTE,DC=testead,DC=gsurfnet,DC=com lockoutTime: 0 # Referral ref: ldap:// testead.gsurfnet.com/CN=Configuration,DC=testead,DC=gsurfnet,DC=com # Referral ref: ldap:// testead.gsurf...

...ing DCPROMO.EXE on Windows Server The output of command, no errors. (CN=GTESTE2 = Samba DC) root at gteste2:/anderson# root at gteste2:/anderson# *samba-tool fsmo show* SchemaMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com InfrastructureMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com RidAllocationMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=g...

...mann 2016-07-11 16:13 GMT-03:00 Jason Waters <jason at geeknocity.com>: > So you transfer all the fsmo roles and then when you are running dcpromo > on the 2008 DC it fails, correct? > > On Mon, Jul 11, 2016 at 3:04 PM, Anderson Hoffmann do Carmo < > anderson.hoffmann at gsurfnet.com> wrote: > >> I am transfer using 'samba-tool fsmo transfer --role=all >> I am try demote Windows using DCPROMO.EXE on Windows Server >> The output of command, no errors. (CN=GTESTE2 = Samba DC) >> >> root at gteste2:/anderson# >> root at gteste2:/an...

...> > The output of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo show* > SchemaMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > InfrastructureMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura...

So you transfer all the fsmo roles and then when you are running dcpromo on the 2008 DC it fails, correct? On Mon, Jul 11, 2016 at 3:04 PM, Anderson Hoffmann do Carmo < anderson.hoffmann at gsurfnet.com> wrote: > I am transfer using 'samba-tool fsmo transfer --role=all > I am try demote Windows using DCPROMO.EXE on Windows Server > The output of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo sho...

...s, ​Anderson Hoffmann​ 2016-07-07 16:43 GMT-03:00 Jason Waters <jason at geeknocity.com>: > try > samba-tool fsmo transfer --role=all -UAdministrator > > And see if that works. > > On Thu, Jul 7, 2016 at 2:57 PM, Anderson Hoffmann do Carmo < > anderson.hoffmann at gsurfnet.com> wrote: > >> Hi for All! >> >> I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 >> as secundary DC with Samba 4.3.9 (from repository/apt-get). >> During a migration test of FSMO roles I received an error from Samba: >> >>...

...ss-ncs ./fsmofixforestdns.ldif* Modified 1 records successfully root at gteste2:/anderson# root at gteste2:/anderson# *root at gteste2:/anderson# samba-tool fsmo show* SchemaMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com InfrastructureMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com RidAllocationMasterRole owner: CN=NTDS Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=g...

...tput of command, no errors. (CN=GTESTE2 = Samba DC) > > root at gteste2:/anderson# > root at gteste2:/anderson# *samba-tool fsmo show* > SchemaMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > InfrastructureMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Si...

Hi. I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 as secundary DC with Samba 4.3.9 (from repository/apt-get) I am transfered FSMO rules to Samba and I am try to demote Windows, but fail! The error is: The operation failed: The active directory domain services could not find another domain controller to transfer the remaining data on the partition

...n2.7/dist-packages/samba/netcmd/fsmo.py", line 43, in get_fsmo_roleowner master_owner = res[0]["fSMORoleOwner"][0] root at gteste2:~# My samba config is: root at gteste2:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = TESTEAD realm = testead.gsurfnet.com netbios name = GTESTE2 interfaces = lo ens33 bind interfaces only = Yes server role = active directory domain controller dns forwarder = 8.8.8.8 [netlogon] path = /var/lib/samba/sysvol/testead.gsurfnet.com/scripts read only = No [sysvol]...

...s. (CN=GTESTE2 = Samba DC) >> >> root at gteste2:/anderson# >> root at gteste2:/anderson# *samba-tool fsmo show* >> SchemaMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> InfrastructureMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testead,DC=gsurfnet,DC=com >> RidAllocationMasterRole owner: CN=NTDS >> >> Settings,CN=GTESTE2,CN=Servers,CN=Def...

what do you get when you do samba-tool fsmo show, also try samba-tool fsmo transfer --role=all -UAdministrator --password=yourpassword On Thu, Jul 7, 2016 at 3:49 PM, Anderson Hoffmann do Carmo < anderson.hoffmann at gsurfnet.com> wrote: > Fail! :-( > > root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador > FSMO transfer of 'rid' role successful > FSMO transfer of 'pdc' role successful > FSMO transfer of 'naming' role successful > FSMO transfer of 'i...

try samba-tool fsmo transfer --role=all -UAdministrator And see if that works. On Thu, Jul 7, 2016 at 2:57 PM, Anderson Hoffmann do Carmo < anderson.hoffmann at gsurfnet.com> wrote: > Hi for All! > > I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 > as secundary DC with Samba 4.3.9 (from repository/apt-get). > During a migration test of FSMO roles I received an error from Samba: > > root at gteste2:~# samba-tool f...

...<jason at geeknocity.com>: > what do you get when you do samba-tool fsmo show, > > also try samba-tool fsmo transfer --role=all -UAdministrator > --password=yourpassword > > > > On Thu, Jul 7, 2016 at 3:49 PM, Anderson Hoffmann do Carmo < > anderson.hoffmann at gsurfnet.com> wrote: > >> Fail! :-( >> >> root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador >> FSMO transfer of 'rid' role successful >> FSMO transfer of 'pdc' role successful >> FSMO transfer of 'naming' role successful...

...hnet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 " *Very thanks for all!* Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-07-12 9:55 GMT-03:00 Anderson Hoffmann do Carmo < anderson.hoffmann at gsurfnet.com>: > I will test this > Thanks ;-) > > Anderson Hoffmann do Carmo > MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | > ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | > > > > 2016-07-12 9:45 GMT-03:00 Rowland penny <rpenny at samba.org>: > >> On 12/07/16...

Hi Rowland. The command (samba-tool user enable 'user') is used to enable a user account that has been disabled in AD, but it is not functional to unlock a user account that has been locked by wrong password. Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-08-01 13:51 GMT-03:00 Rowland penny <rpenny at

Type the command pdbedit -Lvu username , what does it show on the Account Flags field? ----- Original Message ----- From: "Anderson Hoffmann do Carmo" <anderson.hoffmann at gsurfnet.com> To: "samba" <samba at lists.samba.org> Sent: Monday, August 1, 2016 2:04:48 PM Subject: Re: [Samba] Unlock domain user Hi Rowland. The command (samba-tool user enable 'user') is used to enable a user account that has been disabled in AD, but it is not functional to...