search for: jmhunter1

On 24 October 2015 at 18:57, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 24/10/15 18:18, Jonathan Hunter wrote: >> - 'getent group newgroupname2' *does* now work, whereas it definitely >> did not last night. I don't know if there is normally a time delay >> between creating a new group and it becoming visible to UNIX? The >> [...]

...(id ad.domain\\<user>) does not help. Adding the whole domain (id ad.domain.tld\\<user>) does not help more. I did checked PAM, NSS and Samba configurations, this server is using same configurations as the two working DC. I'm puzzled. 2016-04-21 11:52 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>: > You can try "net cache flush" (if you want to inspect the cache, use "net > cache list") > > On 21 April 2016 at 10:40, mathias dufresne <infractory at gmail.com> wrote: > > > Hi all, > > > > Back on playing winbind I f...

On 13/06/15 00:01, Jonathan Hunter wrote: > On 12 June 2015 at 08:55, Jonathan Hunter <jmhunter1 at gmail.com> wrote: >> Thanks buhorojo. The sssd list came up trumps here. When changing ID >> mappings, the sssd database must be manually removed (rm >> /var/lib/sss/db/*). I now have sssd working again :) >> >> I shall keep an eye on the mappings during the day...

...l pam_winbind.so krb5_auth krb5_ccache_type=KEYRING --------------------------------------------------------------------- This PAM configuration was obtained using RH authconfig tool: authconfig --enablewinbindkrb5 --enablewinbindauth --update 2016-04-21 12:25 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>: > Hi, > > Does "wbinfo -i <user>" work, and return the same results, on all the DCs? > > Are the DCs running the distribution & versions (e.g. CentOS, Debian, > whatever) or are there differences there, also? > > On 21 April 2016 at 11:...

On 10 May 2015 at 16:11, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > OK, I've got a little further and I think I have tracked this down to > a reverse DNS issue - which was non-obvious to me, so here is a > write-up for the benefit of the archives. Just to close this off - I have now got sssd configured and working on my Samba...

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

...ther pointer I was given was to raise the debug level (maybe to level 3) using -d3 and seeing if there are any error messages presented in those logs. I didn't need to use this, but it might help others having similar issues.) Cheers, Jonathan On 9 February 2018 at 10:20, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > > On 7 February 2018 at 23:44, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > >> Hi, >> >> Firstly thank you to all the Samba team for continued help & support.. >> and thank you to those involved in resolving bug 13228, which...

...the expected behaviour of 'samba-tool dbcheck --fix'? Should running this command two times still produce the same output? I think I was bitten by bug 13228, but am not sure if I'm running the right command to resolve. Cheers Jonathan On 7 February 2018 at 23:44, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > Hi, > > Firstly thank you to all the Samba team for continued help & support.. and > thank you to those involved in resolving bug 13228, which might well > explain a number of issues I was having recently (I had thought > coincidentally, after upgrad...

...ear regardless of what my log level was. DEBUG(0,(__location__ ": Failed DNS update - with error code %d\n", sys_ errno)); On 23 September 2016 at 15:22, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 23 Sep 2016 15:11:21 +0100 > Jonathan Hunter <jmhunter1 at gmail.com> wrote: > > > Thank you Rowland. > > > > I have a couple of reverse zones (different subnets across sites), > > yes, these are in Samba AD/DNS as well. > > > > Where are you looking in the logs - I'm missing seeing the bit that > > sh...

Hi, After a couple of unfortunate hardware failures and some not insignificant amount of work to rebuild two of my DCs, I am trying to check that things are now working correctly. Looking at the wiki page on FSMO ownership, one suggestion is to run the following ldbsearch command.. but this doesn't work for me. root at dc2:~# ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b

..._ccache_type=KEYRING > --------------------------------------------------------------------- > > This PAM configuration was obtained using RH authconfig tool: > authconfig --enablewinbindkrb5 --enablewinbindauth --update > > > > 2016-04-21 12:25 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>: > >> Hi, >> >> Does "wbinfo -i <user>" work, and return the same results, on all the DCs? >> >> Are the DCs running the distribution & versions (e.g. CentOS, Debian, >> whatever) or are there differences there, also? >&...

Thanks buhorojo. The sssd list came up trumps here. When changing ID mappings, the sssd database must be manually removed (rm /var/lib/sss/db/*). I now have sssd working again :) I shall keep an eye on the mappings during the day today.. On 12 June 2015 at 07:36, buhorojo <buhorojo.lcb at gmail.com> wrote: > On 12/06/15 01:34, Jonathan Hunter wrote: >> >> On 11 June 2015 at

On Tue, 13 Nov 2018 at 21:26, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Tue, 13 Nov 2018 20:55:08 +0000 > Jonathan Hunter via samba <samba at lists.samba.org> wrote: > > > After running the following: > > $ sudo samba-tool domain join mydomain.org DC -U myadmin --site=mysite > > --server=dc3 > > all seems well, until: > >

On 5 January 2016 at 15:02, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > I'll try to use ldbedit to grant myself permissions on the OU again .. Is > ldbedit safe to use: > > - on a running Samba server (or do I need to stop samba) > - in a multi-DC environment (or do I need to run it and make the same > changes on each DC...

Thank you Rowland. I have a couple of reverse zones (different subnets across sites), yes, these are in Samba AD/DNS as well. Where are you looking in the logs - I'm missing seeing the bit that shows an update happening then failing? I tried tcpdump to find out what the query was that was failing, but I couldn't see any updates, just queries :( On 23 September 2016 at 14:56, Rowland

Hi, Does anyone have experience of using ldbedit or similar, to remove the duplicates below? (Is that even the right way for me to go?) Can I perhaps query something using ldbsearch, to find the duplicates, before using ldbedit? On Sun, 18 Nov 2018 at 21:37, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > [...] > In my database, as reported by the domain join command above, I have > five duplicates 'for index on servicePrincipalName', plus 107 > duplicates for index on a custom LDAP attribute I am using. If there's > a correct way I can step throu...

On Thu, 2016-04-14 at 18:07 +0100, Jonathan Hunter wrote: > On 14 April 2016 at 13:37, Jonathan Hunter <jmhunter1 at gmail.com> > wrote: > > > # samba-tool dbcheck --cross-ncs > > Checking 4079 objects > > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x00290001 > > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x0029000a > > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk:...

We have two Samba 4.2.3 servers with FreeRadius to authenticate wireless users against active directory. Using DNS, sometimes both servers end up using the same domain controller to authenticate users. I would like to distribute the load to different DCs. Is there a way to manually point Samba to certain DCs? I tried the following configuration: security = ads password server =

On 05/01/16 21:24, Jonathan Hunter wrote: > On 5 January 2016 at 15:02, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > >> I'll try to use ldbedit to grant myself permissions on the OU again .. Is >> ldbedit safe to use: >> >> - on a running Samba server (or do I need to stop samba) >> - in a multi-DC environment (or do I need to run it and make the same...

...does not help. > Adding the whole domain (id ad.domain.tld\\<user>) does not help more. > > I did checked PAM, NSS and Samba configurations, this server is using same > configurations as the two working DC. I'm puzzled. > > 2016-04-21 11:52 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>: > >> You can try "net cache flush" (if you want to inspect the cache, use "net >> cache list") >> >> On 21 April 2016 at 10:40, mathias dufresne <infractory at gmail.com> wrote: >> >> > Hi all, >> > >&...