search for: jforeman

I’m unable to successfully join a Windows 2008 R2 server DC to my Samba4 domain. I’ve followed the steps on the wiki of joining a Server 2008 R2 DC to a Samba domain. After I reboot the domain controller, I receive a blue screen in regards to a corrupt AD database. I’ve tried Samba v4.6.7 and Samba 4.9.0pre1. Prior to the reboot, I see the following three events on the Windows DC: ----- Attempt

...security point of view. Also, I would like to integrate the solution in a "packaged" distribution like for example Zentyal or UCS. But I'm happy to learn that this solution is viable, I wouldn't lose my time digging in that direction 2018-03-22 21:05 GMT+01:00 Justin Foreman <jforeman at dignitastechnologies.com >: > Fabien, > > The way that we’ve accomplished this was to ensure that all users have the > “Store passwords using reversible encryption” (which is not optimal) and > use a utility called “samba4-gaps.” > > Also: > samba-tool domain password...

...pply records: Failed to locally apply remote add of CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to re-index servicePrincipalName in CN=foo,OU=bar,DC=baz - (null): Operations error Failed to commit objects: WERR_GEN_FAILURE On Wed, Mar 14, 2018 at 4:46 PM, Justin Foreman < jforeman at dignitastechnologies.com> wrote: > This showed up at -d3: > > DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is > CN=foo,OU=bar,DC=baz > Failed to apply records: Failed to locally apply remote add of > CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:201...

...old version of Samba, as we provisioned the domain with Samba 4.0.3. I used ldbedit to manually modify the directory and add CN=Computers as the wellKnownObject default computer container. Windows 2008 R2 now joins successfully. Thanks, Justin > On Apr 3, 2018, at 11:05 PM, Justin Foreman <jforeman at dignitastechnologies.com> wrote: > > I’m unable to successfully join a Windows 2008 R2 server DC to my Samba4 domain. > > I’ve followed the steps on the wiki of joining a Server 2008 R2 DC to a Samba domain. After I reboot the domain controller, I receive a blue screen in regard...

...Samba now stores a crypt() password hash for exactly this purpose. Look into the password sync stuff metze did and use Samba 4.7 or above and the virtualCryptSHA256 attribute. Then please patch samba4-gaps to use that please :-) Andrew Bartlett > 2018-03-22 21:05 GMT+01:00 Justin Foreman <jforeman at dignitastechnologies.com > > : > > Fabien, > > > > The way that we’ve accomplished this was to ensure that all users have the > > “Store passwords using reversible encryption” (which is not optimal) and > > use a utility called “samba4-gaps.” > > >...

This showed up at -d3: DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is CN=foo,OU=bar,DC=baz Failed to apply records: Failed to locally apply remote add of CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to re-index servicePrincipalName in CN=blah,OU=blah,DC=blah - (null): Operations error Failed to commit objects: WERR_GEN_FAILURE I've deleted the object

...for exactly this purpose. > > Look into the password sync stuff metze did and use Samba 4.7 or above > and the virtualCryptSHA256 attribute. > > Then please patch samba4-gaps to use that please :-) > > Andrew Bartlett > > > 2018-03-22 21:05 GMT+01:00 Justin Foreman <jforeman@ > dignitastechnologies.com > > > : > > > Fabien, > > > > > > The way that we’ve accomplished this was to ensure that all users have > the > > > “Store passwords using reversible encryption” (which is not optimal) > and > > > use a util...

I'm trying to have my Samba 4 AD DC users mapped and synchronized with google apps for education accounts. I would like to start from the native windows password update procedure to eventually update the google apps password (actually, I think only some types of hashes are stored). Google actually provides a tool to synchronize user accounts and profiles which works juste fine. This tools

Doesn’t 2012R2 use WMI for the domain join? This may need some updating: https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD <https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD> > On Mar 13, 2018, at 5:18 PM, Andrew Bartlett via samba <samba at lists.samba.org> wrote: > > On Tue, 2018-03-13 at

No. If I delete that record, the process breaks in the same way on another record in the same OU. I could try deleting all records in that OU to see if it’s something wrong there. > On Mar 15, 2018, at 2:14 AM, Andrew Bartlett <abartlet at samba.org> wrote: > > On Wed, 2018-03-14 at 16:55 -0400, Justin Foreman wrote: >> Note that I turned up to -d5 but the relevant output

After deleting the entire OU the failure happens on a different computer account in a different OU and so on. I don't think that there's anything unusual about my computer accounts. On Thu, Mar 15, 2018 at 2:14 AM, Andrew Bartlett <abartlet at samba.org> wrote: > On Wed, 2018-03-14 at 16:55 -0400, Justin Foreman wrote: > > Note that I turned up to -d5 but the relevant

The problem does not happen if I recreate the domain from scratch. I’m able to successfully join 4.8.0 to a 4.6.7 domain built from scratch (just tried it). One thing that I will note is that I also saw SPN creation failures when attempting to join Windows 2008 R2. So it’s not a Samba 4.8.0 problem. It’s a problem with my database (help!). As for an in-place upgrade, I’m struggling a bit with

Fabien, The way that we’ve accomplished this was to ensure that all users have the “Store passwords using reversible encryption” (which is not optimal) and use a utility called “samba4-gaps.” Also: samba-tool domain passwordsettings set --store-plaintext=on Works perfectly. https://github.com/baboons/samba4-gaps Justin > On Mar 22, 2018, at 3:58 PM, Lapin Blanc via samba <samba at

Okay. The master build worked on the join. Excellent. So it was 4.8.0 having a problem. I’ve attempted to join 2008 R2 now to 4.8.0 but it still blue screens. Should I start a new thread for clarity’s sake? Justin > On Mar 15, 2018, at 3:03 PM, Andrew Bartlett <abartlet at samba.org> wrote: > > On Thu, 2018-03-15 at 14:34 -0400, Justin Foreman wrote: >> The problem does

When I attempt to join samba 4.8.0 (stable) to my samba 4.6.7 DC (Ubuntu), I receive the following error: Partition[DC=us,DC=dignitastech,DC=com] objects[500/1605] linked_values[0/118] Failed to commit objects: WERR_GEN_FAILURE Join failed - cleaning up Deleted CN=DC3-CLONE,OU=Domain Controllers,DC=us,DC=dignitastech,DC=com Deleted CN=NTDS

Is there a sensible way for me to manually remove the duplicate SPNs in the mean time? Justin > On Mar 17, 2018, at 3:09 PM, Andrew Bartlett <abartlet at samba.org> wrote: > > On Sat, 2018-03-17 at 07:34 +1300, Andrew Bartlett via samba-technical > wrote: >> On Thu, 2018-03-15 at 16:10 -0400, Justin Foreman wrote: >>> Okay. The master build worked on the join.