search for: jgardeni

We're upgrading (Sernet) Samba 4.2 to 4.4. As recommended on this page: https://wiki.samba.org/index.php/Updating_Samba, I have upgraded one of out 2 DCs, the one that does not have any FSMO roles. We will spend the next week making sure everything works as expected. So far, so good. One thing I'm not clear on is whether I should move the FSMO roles to the upgraded DC before upgrading

Hi Andrew, I don't understand why 2 systems running the exact same version of Samba have different behaviour. Is this an option I can disable? regards, John On 19/04/16 11:29, Andrew Bartlett wrote: > On Tue, 2016-04-19 at 10:29 +1000, John Gardeniers wrote: >> I'm setting up a test domain in order to try out Sudoers LDAP and >> have >> run into a problem that has

...; Loaded services file OK. Server role: ROLE_ACTIVE_DIRECTORY_DC Press enter to see a dump of your service definitions ldap server require strong auth = Yes Here I would try to set : ldap server require strong auth = No in smb.conf. 2016-04-19 3:36 GMT+02:00 John Gardeniers <jgardeniers at objectmastery.com>: > Hi Andrew, > > I don't understand why 2 systems running the exact same version of Samba > have different behaviour. Is this an option I can disable? > > regards, > John > > > > On 19/04/16 11:29, Andrew Bartlett wrote: > >&g...

...which triggers FSMO usage are modifying the schema (don't do that during upgrade), reaching RID pool limit on non-FSMO DC (don't add bunch of users during upgrade) and so on. These are examples, roles are 7, each is triggered in different way. 2016-07-25 7:12 GMT+02:00 John Gardeniers <jgardeniers at objectmastery.com>: > We're upgrading (Sernet) Samba 4.2 to 4.4. As recommended on this page: > https://wiki.samba.org/index.php/Updating_Samba, I have upgraded one of > out 2 DCs, the one that does not have any FSMO roles. We will spend the > next week making sure everyth...

Hi Mike, I originally installed using the built-in DNS. Then, after finding it missing most features, I installed Bind and, lacking the named.con, tried it including likely sounding files from the Samba setup directory (OK, I was getting desperate). I then ran "samba_upgradedns --dns-backend=BIND9_DLZ" and discovered that named wouldn't start. After removing the include line it

I've been running through a bunch of tests after migrating from Samba 3 to Samba 4 and only just noticed that the user email addresses didn't come across from openldap. Is this a know issue or is this an isolated case? regards, John

Well that is not just an useless and unhelpful answer, it's also completely wrong and demonstrates a lack of knowledge and experience with DNS servers. On 05/11/15 08:21, Reindl Harald wrote: > no DNS server on that planet logs normal queries just because there si > not enough disk space in most setups, there is not benefit log > anything except erros and warnings for normal

Hi Jeremy, Using Samba without Windows seems rather pointless, as no other OS needs it, nor can test it to any truly useful extent. Thanks for point out the man page, which I've always taken as be referring to Samba 3, not Samba 4. I can only wonder why there's a site dedicated to Samba 4 documentation and this information isn't there. If the default deadtime = 0 and we

Running "samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator" on our production system results in mismatches for items in the domain section: * Comparing [DOMAIN] context... * Objects to be compared: 625 Comparing: 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC1] 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC2] Difference in

Good news, I now have this working. Once I finish writing my notes I'll make them available to whoever might want them. Just to clarify things a bit, here is what we have and what we wanted: * Linux users are authenticated by the Samba 4 domain controllers via SSSD, which itself uses LDAP. * As we are a development house, we have a rather complex set of users/groups/permissions on the

Hi Andrew, Please elaborate, as we're about to put it on Samba 4.2. Thanks. regards, John On 30/04/16 18:12, Andrew Bartlett wrote: > On Thu, 2016-04-21 at 15:40 +1000, John Gardeniers wrote: >> Good news, I now have this working. Once I finish writing my notes >> I'll >> make them available to whoever might want them. Just to clarify >> things a >>

Hi Andrew, Thanks for the info. A backup before hand was always on the to do list. ;) Any idea when we can expect 4.5? It's looking like this "urgent" project can be delayed a bit if necessary. regards, John On 05/09/16 17:55, Andrew Bartlett via samba wrote: > On Mon, 2016-09-05 at 10:23 +1000, John Gardeniers via samba wrote: >> We're looking at implementing

We are preparing for an email domain name change. Is there a way I can script this in AD? I can of course manually edit each user's email address but I'd rather use a script that can be tied in with other scripted processes that will be performed during the switch-over, which would save me considerable time. I can't use ADUC for this because the username part of the email address

This is really weird. The error below occurred for about 10 minutes after the post-update reboot and then went away. As far as I've been able to test, the DC in question is functioning normally now. regards, John On 07/02/17 16:07, John Gardeniers via samba wrote: > I've just done a yum update and a reboot on one of our CentOS 7 DCs, > which has taken Samba from

Hi Vinicius, I've run the command and it did not report any missing dependencies. I've been checking the logs, both on that DC and on clients that authenticated against it and can see no problems. I'm happy to leave it that. Thanks. regards, John On 09/02/17 03:16, Vinicius Bones Silva via samba wrote: > Probably a ld issue. It might have not run in the rpm's post script.

There are smb.conf items which can have multiple entries. e.g. "admin users". I see examples showing both comma separated and whitespace separated lists. Even our old Samba 3 conf file shows both being used. The man page doesn't show an example of a multiple list at all, so that doesn't help to clear this up. So, for the sake of clarity, what is the proper/recommended

This may be off-topic, as it's only indirectly related to Samba 4 but perhaps others here have already solved this. While testing Samba 4 I've come across a rather annoying little issue when preforming an LDAP address book lookup from Thunderbird. The display name in the address book does not match the display name in ADUC. It appears that the Thunderbird address book is using the uid

Thanks Jeremy but I don't understand why the lock is being applied at all when it's not being asked for. Your advice to not disable locking if applications legitimately share file access to me seems to be the inverse of what is needed. After all, the fact that our application shares file access is the very reason we don't want file locking. regards, John On 28/01/16 10:37,

We're using the Sernet Samba v4.2.4 with internal DNS and I can't find the DNS logs. Where does the Samba 4 internal DNS log queries? Thanks. regards, John

Can anyone point me to instruction for setting up Bind to work with Samba 4 on CentOS 7? I know there are some instruction at https://wiki.samba.org/index.php/DNS_Backend_BIND but they're incomplete when using the Sernet repo. In particular, it refers to 'include "/usr/local/samba/private/named.conf";' but that file doesn't exist at any location on my system. Is