search for: objectmasteri

We're upgrading (Sernet) Samba 4.2 to 4.4. As recommended on this page: https://wiki.samba.org/index.php/Updating_Samba, I have upgraded one of out 2 DCs, the one that does not have any FSMO roles. We will spend the next week making sure everything works as expected. So far, so good. One thing I'm not clear on is whether I should move the FSMO roles to the upgraded DC before upgrading

Hi I was happy enough running SuSE 9.3 and samba 3.0.20 with openldap but hardware problems forced me to move. I tried openSuSe 10.2 with samba 3.0.23 and 3.0.24 but kept getting strange interactions with openldap and Internal Errors from samba, I realise now possibly due to copying .dat files from the old setup. I've now moved to something I know a bit better, which is a more redhat like

Hi Andrew, I don't understand why 2 systems running the exact same version of Samba have different behaviour. Is this an option I can disable? regards, John On 19/04/16 11:29, Andrew Bartlett wrote: > On Tue, 2016-04-19 at 10:29 +1000, John Gardeniers wrote: >> I'm setting up a test domain in order to try out Sudoers LDAP and >> have >> run into a problem that has

Hi, testparm -v | grep 'ldap serve' Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Loaded services file OK. Server role: ROLE_ACTIVE_DIRECTORY_DC Press enter to see a dump of your service definitions ldap server require

IMHO: no real need to move FSMO before upgrading FSMO owner if no real load. FSMO are roles which make one DC different of others DC on one specific point (for each role). As long as you don't do something which requires FSMO role you won't use FSMO roles, so no matter. Things which triggers FSMO usage are modifying the schema (don't do that during upgrade), reaching RID pool limit on

Hi Mike, I originally installed using the built-in DNS. Then, after finding it missing most features, I installed Bind and, lacking the named.con, tried it including likely sounding files from the Samba setup directory (OK, I was getting desperate). I then ran "samba_upgradedns --dns-backend=BIND9_DLZ" and discovered that named wouldn't start. After removing the include line it

I've been running through a bunch of tests after migrating from Samba 3 to Samba 4 and only just noticed that the user email addresses didn't come across from openldap. Is this a know issue or is this an isolated case? regards, John

Well that is not just an useless and unhelpful answer, it's also completely wrong and demonstrates a lack of knowledge and experience with DNS servers. On 05/11/15 08:21, Reindl Harald wrote: > no DNS server on that planet logs normal queries just because there si > not enough disk space in most setups, there is not benefit log > anything except erros and warnings for normal

Hi Jeremy, Using Samba without Windows seems rather pointless, as no other OS needs it, nor can test it to any truly useful extent. Thanks for point out the man page, which I've always taken as be referring to Samba 3, not Samba 4. I can only wonder why there's a site dedicated to Samba 4 documentation and this information isn't there. If the default deadtime = 0 and we

Running "samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator" on our production system results in mismatches for items in the domain section: * Comparing [DOMAIN] context... * Objects to be compared: 625 Comparing: 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC1] 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC2] Difference in

Good news, I now have this working. Once I finish writing my notes I'll make them available to whoever might want them. Just to clarify things a bit, here is what we have and what we wanted: * Linux users are authenticated by the Samba 4 domain controllers via SSSD, which itself uses LDAP. * As we are a development house, we have a rather complex set of users/groups/permissions on the

Hi Andrew, Please elaborate, as we're about to put it on Samba 4.2. Thanks. regards, John On 30/04/16 18:12, Andrew Bartlett wrote: > On Thu, 2016-04-21 at 15:40 +1000, John Gardeniers wrote: >> Good news, I now have this working. Once I finish writing my notes >> I'll >> make them available to whoever might want them. Just to clarify >> things a >>

Hi Andrew, Thanks for the info. A backup before hand was always on the to do list. ;) Any idea when we can expect 4.5? It's looking like this "urgent" project can be delayed a bit if necessary. regards, John On 05/09/16 17:55, Andrew Bartlett via samba wrote: > On Mon, 2016-09-05 at 10:23 +1000, John Gardeniers via samba wrote: >> We're looking at implementing

We are preparing for an email domain name change. Is there a way I can script this in AD? I can of course manually edit each user's email address but I'd rather use a script that can be tied in with other scripted processes that will be performed during the switch-over, which would save me considerable time. I can't use ADUC for this because the username part of the email address

This is really weird. The error below occurred for about 10 minutes after the post-update reboot and then went away. As far as I've been able to test, the DC in question is functioning normally now. regards, John On 07/02/17 16:07, John Gardeniers via samba wrote: > I've just done a yum update and a reboot on one of our CentOS 7 DCs, > which has taken Samba from

Hi Vinicius, I've run the command and it did not report any missing dependencies. I've been checking the logs, both on that DC and on clients that authenticated against it and can see no problems. I'm happy to leave it that. Thanks. regards, John On 09/02/17 03:16, Vinicius Bones Silva via samba wrote: > Probably a ld issue. It might have not run in the rpm's post script.

There are smb.conf items which can have multiple entries. e.g. "admin users". I see examples showing both comma separated and whitespace separated lists. Even our old Samba 3 conf file shows both being used. The man page doesn't show an example of a multiple list at all, so that doesn't help to clear this up. So, for the sake of clarity, what is the proper/recommended

This may be off-topic, as it's only indirectly related to Samba 4 but perhaps others here have already solved this. While testing Samba 4 I've come across a rather annoying little issue when preforming an LDAP address book lookup from Thunderbird. The display name in the address book does not match the display name in ADUC. It appears that the Thunderbird address book is using the uid

Thanks Jeremy but I don't understand why the lock is being applied at all when it's not being asked for. Your advice to not disable locking if applications legitimately share file access to me seems to be the inverse of what is needed. After all, the fact that our application shares file access is the very reason we don't want file locking. regards, John On 28/01/16 10:37,

Hi, I'm wondering what issues / problems I might run into if I'm using samba 3 on linux with the IBM JFS filesystem installed to be case-insensitive. I've had no luck finding anyone who says they've tried it. I'm having trouble with a group of Windows based developers programming in Delphi (Pascal) and Foxpro who seem to have real problems keeping the case of filenames