search for: nicora

On Fri, 2 Mar 2018 15:15:49 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > This could be the right way... > > There is a bit of a problem with that, it should be: > > > > DC=SRVAD-NEW,DC=samdom.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > The SAMDOM.LOCAL zone is set to replicate to the...

....samba   max log size = 10000 [netlogon]   path = /var/lib/samba/sysvol/samdom.local/scripts   read only = No [sysvol]   path = /var/lib/samba/sysvol   read only = No --- Il 23/07/2018 17:27, Rowland Penny via samba ha scritto: > On Mon, 23 Jul 2018 17:17:07 +0200 > "Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote: > >> I've added a "print" in file >> "/usr/lib/python2.7/dist-packages/samba/ntacls.py" just before the >> line raising the error to log the (missing) file causing the error. >> I've found I had...

I suspect there's something wrong in wbinfo on a freshly installed Samba AD Domain Controller on Ubuntu 18.04 server. wbinfo does not resolve Windows SID to usernames: # wbinfo -S S-1-5-21-299502267-616249376-1417001333-14107 3000103 I should see "SAMDOM\username" instead of "3000103", right? getfacls has the same behavior: # getfacl /var/lib/samba/sysvol # file:

On Tue, 2018-07-10 at 09:35 +0200, Ing. Claudio Nicora via samba wrote: > Some other info about this issue. > It's the same as the one described in this bug: > https://bugzilla.samba.org/show_bug.cgi?id=11415 Try with 4.8.3. We have managed to join Windows 2012R2 with that release, after doing a Samba-side schema upgrade to the 2012 sch...

On Fri, 2 Mar 2018 16:48:26 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > No, I was just checking if you where something you shouldn't, like > > creating the zone files in the Bind configs. > Good, it's better to clear out any doubt. > > > There doesn't seem to be anything wrong in...

On Fri, 2 Mar 2018 16:15:43 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > Is bind9 running during the join ? > > How have you set up bind ? > No it's not. > Following the doc here > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End > I see than the needed files (like /var/lib/samba/pr...

On Tue, 2018-07-10 at 10:27 +0200, Ing. Claudio Nicora wrote: > I can hardly follow your suggestion: > - my Windows server is 2008R2 and I can't easily upgrade it to 2012 That is fine, windows 2008R2 should be easier. > - Samba 4.7.6 is the latest available on Ubuntu repos > > Since I'm testing full migration to Samba, I'...

...d my smb.conf in a reply to Louis Van Belle, hope you can see what's causing the lot of "idmap range not specified for domain '*'" lines. Thanks Claudio Il 23/07/2018 16:59, Rowland Penny via samba ha scritto: > On Mon, 23 Jul 2018 16:30:11 +0200 > "Ing. Claudio Nicora via samba" <samba at lists.samba.org> wrote: > >> When I run samba-tool ntacl sysvolreset on my "secondary" Samba AD DC >> I get the error: >> >> --- >> ERROR(runtime): uncaught exception - (-1073741823, '{Operation >> Failed} The requ...

Hi, run please to Windows DC command dcdiag В Вс, 04/03/2018 в 08:54 +0000, Rowland Penny via samba пишет: > On Sun, 4 Mar 2018 00:14:48 +0100 > Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > > > > And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > > > joins to a Samba AD domain as a DC. > > > > I'm sure it does, that's why I suspect something is wrong in my > >...

...om.Local zone where it is located ForestDnsZone or DomainDnsZone. Must be in DomainDnsZone also it is necessary to make sure that in ForestDnsZone there is a zone _msdcs.sambom.local В Вс, 04/03/2018 в 08:54 +0000, Rowland Penny via samba пишет: > On Sun, 4 Mar 2018 00:14:48 +0100 > Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > > > > And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > > > joins to a Samba AD domain as a DC. > > > > I'm sure it does, that's why I suspect something is wrong in my > >...

On Mon, 2 Jul 2018 13:41:16 +0200 "Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote: > > Now winbind can map some of these xidNumbers to names, but not all > > and it will not map any xidNumbers to names if libnss_winbind isn't > > set up correctly. > Now I've changed /etc/nsswitch.conf and added "w...

On Thu, 5 Jul 2018 15:29:01 +0200 "Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote: > > > Your glasses (or lack of) ;-) > I usually agree, but in this case I've seen that warning and > voluntarily ignored it because it worked for 2 days... > I thought I was lucky ;-) > > > Or to put it another way,...

> Undoubtedly '3000000' will be Administrator, who will be mapped to ID > '0' (root) in idmap.ldb and 'users' is mapped from 'Domain Users' in > idmap.ldb. Will live with that; that share is only used while playing with samba config easily from Windows clients. I'll remove it just before going to production. > There is a slight problem with the way

On Mon, 23 Jul 2018 17:17:07 +0200 "Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote: > I've added a "print" in file > "/usr/lib/python2.7/dist-packages/samba/ntacls.py" just before the > line raising the error to log the (missing) file causing the error. > I've found I had an orphaned GPO: it...

On Mon, 23 Jul 2018 17:40:18 +0200 "Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote: > So there's no error on my side: I have no idmap lines in my smb.conf > and since I can't add any I should live with the error/warning, right? > > Is this error related to sysvolreset taking forever to run? > What about Loui...

> you should remove 'winbind' from the shadow line, it isn't required. Done, thanks. > That is all perfectly normal on a Samba AD DC. The only way to get all > users and groups mapped to names, is to use uidNumber & gidNumber > attributes for all users & groups. This is NOT recommended on a DC, > this is because of sysvol, where some groups have also to be

On Sun, 4 Mar 2018 00:14:48 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > > joins to a Samba AD domain as a DC. > I'm sure it does, that's why I suspect something is wrong in my > Win2000-->Win2008R2 upgraded domain AD...

> Your glasses (or lack of) ;-) I usually agree, but in this case I've seen that warning and voluntarily ignored it because it worked for 2 days... I thought I was lucky ;-) > Or to put it another way, you must set the permissions from Windows > > This is one of the problems/features of using a DC as a fileserver. > > Remove everything after the 'read only = No'

...ror 49 LDAP_INVALID_CREDENTIALS - <8009030C: LdapErr: DSID-0C0904D0, comment: AcceptSecurityContext error, data 52e, v1db0> <> --- Don't know how an authentication error could occur after being able to create DNS records, DC computer account... > Em 01/03/2018 10:05, Claudio Nicora via samba escreveu: >> It seems I'm talking to myself... anyway another test here: >> >> Added the existing DC IP config to /etc/hosts and the join now shows >> a more explicit LDAP error: >> >> --- >> Wrong username or password: kinit for SRVAD-NEW$@S...

Dual Samba 4.7.6 AD DC on Ubuntu 18.04 Servers + Windows 2008R2 DC. Looking at Samba logs I've noticed a lot of these lines on first DC: --- Jul 31 11:08:25 srvaddc named[32168]: samba_dlz b9_format: unhandled record type 0 Jul 31 11:08:25 srvaddc named[32168]: message repeated 92 times: [ samba_dlz b9_format: unhandled record type 0] ... Jul 31 11:19:12 srvaddc named[32168]: samba_dlz