search for: pghimir

...l-names in the Samba 4 AD DC box and got the following ; TSIG error with server: tsig verify failure Failed nsupdate: 2 Failed update of 27 entries - Using a Windows 7 machine , we tried to access the shares in member server and it fails with the following in the logs user 'TESTDOM\pghimire' (from session setup) not permitted to access this share (downloads) The user is a member of a group who has permissions for the folder (in smb.conf). This was one of the groups that didn't migrate to AD, so we setup the group in AD and added the user as a member. Using smblient the use...

On Sun, 8 Apr 2018 08:35:24 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Let me start my apologizing about the missed email, must have not > seen it. > > We are migrating to an AD domain , the first step was to migrate PDC > to LDAP. > > So to get around the bug, do we need to create the user...

...ed the server post the changes and tried to join a windows 7 > machine again, same message in the logs. I used my account this time > > I suspect an issue here, especially the last line. This is from the > log.192.168.14.153 (samba log) > > Adding homes service for user 'LIN\pghimire' using home directory: > '/home/LIN/pghimire' get_auth_event_server: Failed to find > 'auth_event' registered on the message bus to send JSON > authentication events to: NT_STATUS_OBJECT_NAME_NOT_FOUND [2019/05/06 > 09:39:15.172941, > 2] ../source3/modules/vfs_ac...

...Regards, Praveen Ghimire -------- Original message -------- From: Rowland Penny via samba <samba at lists.samba.org> Date: 12/04/2018 9:21 PM (GMT+10:00) To: samba at lists.samba.org Subject: Re: [Samba] Issues post AD migration On Thu, 12 Apr 2018 10:48:04 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > I added the following, reloaded the samba configs, joined the member > server to the AD domain again > > [global] > netbios name = FS01 > security = ADS > workgroup = TESTDOM > realm = TESTDO...

On Sun, 8 Apr 2018 09:05:46 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > I have gone through that link a few times and have done both the TDB > to AD and also LDAP to AD migration a few times. > > The AD migration is the second stage. > > Let me explain the situation. The Production server is...

...n Ghimire -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny via samba Sent: Friday, 13 April 2018 9:24 PM To: samba at lists.samba.org Subject: Re: [Samba] Issues post AD migration On Fri, 13 Apr 2018 09:56:34 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > The issue seems to be due to the groups who decided not to show up in > AD. Strangely, even when we added the group with the same name in the > AD, it didn't resolv the issue. Even though smb.conf dictates that > the user have...

Hai, 1) apparmor, disable it, and try again, so we can confirm if its an apparmor settings. 2) winbind is starting from systemd while as AD-DC you should disable that. - stop the member parts of samba and systemd. systemctl stop winbind smbd nmbd samba systemctl disable winbind smbd nmbd samba systemctl mask winbind smbd nmbd samba - enable the samba-ad-dc part in systemd.

Hi Rowland, The test environment is totally isolated and we testing with images of the client machines. We're just trying to iron out any issues post the PDC role move. We have a small list we are going through. The SSL bit is one of them. Once the new environment is stable, we'll be migratingto AD. Regards, Praveen Ghimire -------- Original message -------- From: Rowland Penny

...ks. Authentication of the users who were in TDB works too. The issue is any newly created users in LDAP. Hence the question. Regards, Praveen Ghimire -------- Original message -------- From: Rowland Penny <rpenny at samba.org> Date: 8/04/2018 6:50 PM (GMT+10:00) To: Praveen Ghimire <PGhimire at sundata.com.au> Cc: samba at lists.samba.org Subject: Re: [Samba] FW: LDAP getent issues On Sun, 8 Apr 2018 08:35:24 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Let me start my apologizing about the missed email, must have not > seen it. &g...

On Thu, 12 Apr 2018 10:48:04 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > I added the following, reloaded the samba configs, joined the member > server to the AD domain again > > [global] > netbios name = FS01 > security = ADS > workgroup = TESTDOM > realm = TEST...

...TDB? Separate the roles, migrate to AD and shut the PDC down. Then join the member server to AD. Sorry about the confusion. Regards, Praveen Ghimire -------- Original message -------- From: Rowland Penny <rpenny at samba.org> Date: 8/04/2018 8:19 PM (GMT+10:00) To: Praveen Ghimire <PGhimire at sundata.com.au> Cc: samba at lists.samba.org Subject: Re: [Samba] FW: LDAP getent issues On Sun, 8 Apr 2018 09:05:46 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > I have gone through that link a few times and have done both the TDB > to AD a...

On Sun, 8 Apr 2018 05:55:18 +0000 Praveen Ghimire via samba <samba at lists.samba.org> wrote: > Hi, > > I've gone through the following link about member server and also the > samba 3 by example and can confirm that nsdc is not enabled. > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > > > We are having some issues with LDAP

Hai Praveen, > -----Oorspronkelijk bericht----- > Van: Praveen Ghimire [mailto:PGhimire at sundata.com.au] > Verzonden: donderdag 27 juni 2019 13:46 > Aan: samba at lists.samba.org > CC: 'L.P.H. van Belle' > Onderwerp: RE: [Samba] Reverse DNS > > Hi Guys, > > Thank you for your emails. Here is the info > > /etc/apparmor.d/local/usr.sbin.dhcp...

Hi Rowland, The user's ID range would have been below 3600, the current max rid is 3506 The links have been setup following this link, then restarted the samba-ad-dc service https://wiki.samba.org/index.php/Libnss_winbind_Links I followed the following to configure the winbindd stuff, https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC template shell = /bin/bash

On Fri, Apr 13, 2018 at 8:26 AM, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 13 Apr 2018 11:50:55 +0000 > Praveen Ghimire <PGhimire at sundata.com.au> wrote: > >> Hi Rowland, >> >> The group was in /etc/group and LDAP. Post the AD migration, the >> group didn’t show up in AD. We then added the group in AD, will check >> if it has a gid number. If AD doesn’t have gid, can I remove the >&gt...

....options and krb5.conf Rebooted the server post the changes and tried to join a windows 7 machine again, same message in the logs. I used my account this time I suspect an issue here, especially the last line. This is from the log.192.168.14.153 (samba log) Adding homes service for user 'LIN\pghimire' using home directory: '/home/LIN/pghimire' get_auth_event_server: Failed to find 'auth_event' registered on the message bus to send JSON authentication events to: NT_STATUS_OBJECT_NAME_NOT_FOUND [2019/05/06 09:39:15.172941, 2] ../source3/modules/vfs_acl_xattr.c:236(connect_ac...

...d the server post the changes and tried to join a windows 7 > machine again, same message in the logs. I used my account this time > > I suspect an issue here, especially the last line. This is from the > log.192.168.14.153 (samba log) > > Adding homes service for user 'LIN\pghimire' using home directory: > '/home/LIN/pghimire' get_auth_event_server: Failed to find > 'auth_event' registered on the message bus to send JSON authentication > events to: NT_STATUS_OBJECT_NAME_NOT_FOUND [2019/05/06 > 09:39:15.172941, 2] > ../source3/modules/vf...

...Regards, Praveen Ghimire -------- Original message -------- From: Rowland Penny via samba <samba at lists.samba.org> Date: 6/12/2017 8:19 PM (GMT+10:00) To: samba at lists.samba.org Subject: Re: [Samba] Samba 4 AD issues with RPC On Wed, 6 Dec 2017 09:46:56 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Will check the first one, that shouldn’t cause the RPC issues though > right? > > Not planning to run opechange with Samba, added to see if it fixes > the issue with RPC. > > Would the error be generated by something in the...

On Mon, 6 May 2019 11:12:17 +0000 Praveen Ghimire <PGhimire at sundata.com.au> wrote: > Hi Rowland, > > Sorry about the confusion. It is Ubuntu 18.04 with Samba 4.7.6 > > I have a script that installs the following > > apt-get install -y acl attr autoconf bind9utils bison build-essential > \ debhelper dnsutils docbook-xml doc...

Hi Rowland, Sorry, migration using BIND9_DLZ gives the same result Not sure if the following from the migration is of a concern Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3034, ((21, 'Element loginShell has empty attribute in ldb message ()!')) Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3040,