search for: in_groups_gid_mappings

...er to join our 4.5.3 AD domain as a DC Following these instructions: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di rectory everything went fine until I got here: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di rectory#Built-in_Groups_GID_Mappings where running the required: samba-tool ntacl sysvolreset command resulted in the following errors: open: error=2 (No such file or directory) ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error') File "/usr/local/samba/lib64/python2.7/site-packages...

...ds AD > to find where the GPOs are supposed to be, but if it cannot find any, > it errors out. AFAI've understood well, yo have also to copy the idmap to the new DC to have perfectly matching xID: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Built-in_Groups_GID_Mappings -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-84...

...11:56:25 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > Interesting... How do I go about getting them/keeping them in sync? > > > > see here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ > Existing_Active_Directory#Built-in_Groups_GID_Mappings > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- *Taylor Hammerling* | *IT Manager* 2800 Laura Lane | Middleton, WI 53562 *O *(608) 669-9070 *| C *(608) 512-7849 tcsb...

Interesting... How do I go about getting them/keeping them in sync? On Fri, Dec 15, 2017 at 11:47 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:09:38 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > This isn't necessarily an issue (I don't think) but more so a > > curiosity. > >

...much easier IMO), but the permissions are > > still not quite right, bringing me back to my idmap syncing question. > > > > Kind regards > > There are instructions here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ > Existing_Active_Directory#Built-in_Groups_GID_Mappings > > Hi Rowland, I followed that howto > I copied the idmap.tdb.bak from dc1 to dc2 and restarted samba on dc2, but a getfacl on the sysvol directory gives me the wrong mappings. My issue is with AD groups on the permissions of the Policies Should I make a nightly backup of the idmap.tdb...

On 22 November 2017 at 17:45, Rowland Penny <rpenny at samba.org> wrote: > On Wed, 22 Nov 2017 16:01:17 +0200 > Ian Coetzee via samba <samba at lists.samba.org> wrote: > > > Hi Guys, > > > > I have run into a very interesting problem using GPO's on our DC's. > > > > As you may (or may not) know, we have migrated to a pure Samba4 (Git >

...s: > > > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di > rectory > > > > everything went fine until I got here: > > > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di > rectory#Built-in_Groups_GID_Mappings > > > > where running the required: > > > > samba-tool ntacl sysvolreset > > > > command resulted in the following errors: > > > > open: error=2 (No such file or directory) > > ERROR(runtime): uncaught exception - (-1073741823,...

...> > I now have a Osync set up (much easier IMO), but the permissions are > still not quite right, bringing me back to my idmap syncing question. > > Kind regards There are instructions here: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Built-in_Groups_GID_Mappings Rowland

...rling <thammerling at tcsbasys.com> wrote: >> >> > Interesting... How do I go about getting them/keeping them in sync? >> > >> >> see here: >> >> https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Ex >> isting_Active_Directory#Built-in_Groups_GID_Mappings >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > > > -- > *Taylor Hammerling* | *IT Manager* > 2800 Laura Lane | Middleton,...

...s.com> wrote: >>> >>> > Interesting... How do I go about getting them/keeping them in sync? >>> > >>> >>> see here: >>> >>> https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Ex >>> isting_Active_Directory#Built-in_Groups_GID_Mappings >>> >>> Rowland >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >> >> >> >> -- >> *Taylor Hammerling* |...

Hi Rowland I removed the winbind lines, and added the 'idmap_ldb:use rfc2307 = yes' line to the second DC, and rebooted the servers, but the error does not go away. First DC: [global] dns forwarder = 8.8.8.8 netbios name = TESTBOX realm = SAMDOM.TESTING.COM server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use