search for: mytld

...hanks! I get differences, too many to post here, but I assume mostly related to the drift between the 2 dcs now? (lastLogonTimestamp seems obvious to me) What might solve the initial problem *maybe* * Comparing [DNSFOREST] context... * Objects to be compared: 19 Comparing: 'DC=@,DC=_msdcs.mytld.at,CN=MicrosoftDNS,DC=ForestDnsZones,DC=mytld,DC=at' [ldap://dc] 'DC=@,DC=_msdcs.mytld.at,CN=MicrosoftDNS,DC=ForestDnsZones,DC=mytld,DC=at' [ldap://pre01svdeb03] Difference in attribute values: dnsRecord => ['\x14\x00\x02\x00\x05\xf0\x00\x00n\x00\x00\x00\x00\x00\x03\x...

...I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > > Shouldn't give me access by default if I'm using the private system socket? No, you still need to authenticate as a user with the required permissions e.g. Administrator A...

Am 13.03.19 um 12:49 schrieb Rowland Penny via samba: >> Should /etc/hosts contain pointers to own FQDN or not? To DCs? >> > > /etc/hosts should contain a line that points 127.0.0.1 to localhost and > a line that points the DC's ipaddress to its FQDN and shorthostname > > EXAMPLE: > > 127.0.0.1 localhost > 192.168.0.6 dc4.samdom.example.com dc4 >

...u may also see that there is a difference in case e.g. 'cn' & 'CN', you can ignore these. > > What might solve the initial problem *maybe* > > * Comparing [DNSFOREST] context... > > * Objects to be compared: 19 > > Comparing: > 'DC=@,DC=_msdcs.mytld.at,CN=MicrosoftDNS,DC=ForestDnsZones,DC=mytld,DC=at' > [ldap://dc] > 'DC=@,DC=_msdcs.mytld.at,CN=MicrosoftDNS,DC=ForestDnsZones,DC=mytld,DC=at' > [ldap://pre01svdeb03] > Difference in attribute values: > dnsRecord => > ['\x14\x00\x02\x00\x05\xf0\x00\...

Am 13.03.19 um 17:13 schrieb Stefan G. Weichinger via samba: > Am 13.03.19 um 16:53 schrieb L.P.H. van Belle: >> Ok thats small, a dc should be rebooted within 1-2 min and 1-2 min really max for AD sync. one more observation: manually running this works: root at pre01svdeb03:~# samba-tool drs replicate dc PRE01SVDEB03 dc=blabla,dc=at --full-sync but the one user I created (and

...ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>> >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` >>> >>> Shouldn't give me access by default if I'm using the private system socket? >> No, you still need to authenticate as a user with the required >> p...

On 17/07/2020 19:31, RhineDevil via samba wrote: > And by that I mean, where are the dbs, what should I rm -rf? On Debian just remove /var/lib/samba and /var/cache/samba > By the way how do I obtain current machine netbios name? Depends on which netbios name, if you are referring to the one that is in smb.conf 'netbios name = ?????', that is just the short hostname in uppercase.

...dapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>> >>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` >>>>> >>>>> Shouldn't give me access by default if I'm using the private system socket? >>>> No, you still need to authenticate as a user with...

...t;ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>>>> >>>>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` >>>>>>> >>>>>>> Shouldn't give me access by default if I'm using the private system socket? >>>>>> No, you still need to aut...

...ldap debug threshold = 5 panic action = /usr/share/samba/panic-action %d security = ads kerberos method = system keytab encrypt passwords = true passdb backend = ldapsam:ldaps://ldap.ad.mydomain/ ldap ssl = off ldap admin dn = CN=ucenters-ldap,ou=users,OU=UCenters,DC=AD,DC=MYDOMAIN,DC=MYTLD obey pam restrictions = yes unix password sync = yes pam password change = no map to guest = bad user winbind enum groups = yes winbind enum users = yes idmap backend = ldap:ldap_url = ldaps://ldap.ad.mydomain/ idmap uid = 10000-1999999 idmap gid = 10000-1999999 idmap alloc back...

.../13 13:55:19.905976, 0] ../source4/smbd/server.c:674(binary_smbd_main) binary_smbd_main: samba: using 'standard' process model [2019/03/13 13:55:34.957655, 1] ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part) Doing a full scan on DC=ForestDnsZones,DC=mytld,DC=at and looking for deleted objects [2019/03/13 13:55:34.958862, 1] ../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part) Doing a full scan on DC=DomainDnsZones,DC=mytld,DC=at and looking for deleted objects [2019/03/13 13:55:34.960768, 1] ../source4/dsdb/kcc/ga...

...%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>>>>>>>> >>>>>>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` >>>>>>>>> >>>>>>>>> Shouldn't give me access by default if I'm using the private system socket? >>>>>>>> N...

I added misc.schema to samba LDAP implementation, then I tried to insert this: dn: CN=security,CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld cn: security objectClass: nisMailAlias objectClass: top rfc822MailMember: root I got this error: https://0bin.net/paste/Xhhierl5ZAh6QVVJ#ZNXk9+hWY70PLof1eZ1TaqIoO-v3gRGOqNnIpfnX9GI How could I solve? -------------- next part -------------- A non-text attachment was scrubbed... Name: not available...

...and > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` Shouldn't give me access by default if I'm using the private system socket? -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: app...

...o add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > > > > Shouldn't give me access by default if I'm using the private system socket? > > No, you still need to authenticate as a user with the required > permissi...

...sing ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > >>> > >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > >>> > >>> Shouldn't give me access by default if I'm using the private system socket? > >> No, you still need to authenticate as a user with the requ...

...penny via samba <samba at lists.samba.org>: > On 22/07/2020 13:53, RhineDevil via samba wrote: > > I added misc.schema to samba LDAP implementation, then I tried to insert this: > > > > dn: CN=security,CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld > > cn: security > > objectClass: nisMailAlias > > objectClass: top > > rfc822MailMember: root > > > > I got this error: > > https://0bin.net/paste/Xhhierl5ZAh6QVVJ#ZNXk9+hWY70PLof1eZ1TaqIoO-v3gRGOqNnIpfnX9GI > > > > How could I solve? > &gt...

...t "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > >>>>> > >>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > >>>>> > >>>>> Shouldn't give me access by default if I'm using the private system socket? > >>>> No, you still need to authenticate...

...%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > >>>>>>> > >>>>>>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > >>>>>>> > >>>>>>> Shouldn't give me access by default if I'm using the private system socket? > >>>>>> No, you st...

...anyone have any suggestions? outputs from "xl info" and the domain config are below. I have also tried disabling SELinux, but it made no difference. Thanks GC ----------------------------------------------- On the fedora 26 box..... # xl info host : family.mydomain.mytld release : 4.11.8-300.fc26.x86_64 version : #1 SMP Thu Jun 29 20:09:48 UTC 2017 machine : x86_64 nr_cpus : 4 max_cpu_id : 3 nr_nodes : 1 cores_per_socket : 4 threads_per_core : 1 cpu_mhz...