search for: pts9

...windows box as a normal user who is a member of the Domain Users group, I am denied. I have setup a group called "Unix Admins" which is a member of the Domain Admins group. The Unix Admins and Domain users groups have unix gids assigned to them. Getent group shows the following: (vfs1 pts9) # getent group "SAMDOM\Domain Users" domain users:x:10000: (vfs1 pts9) # getent group "SAMDOM\Unix Admins" unix admins:x:10001: (vfs1 pts9) # Getent passwd shows the following: (vfs1 pts9) # getent passwd "SAMDOM\tuser" tuser:*:10001:10000:Test User:/home/samba/tuser...

On 30.07.2019 20:07, Tom Diehl via dovecot wrote: > > Does anyone have an Idea how to fix this? > > Regards, > Perhaps see if there are any denials in SELinux audit log: sudo grep denied /var/log/audit/audit.log | grep dovecot | audit2allow -a Good luck, Reio

...ia dovecot wrote: > >> On 30.07.2019 20:07, Tom Diehl via dovecot wrote: >>> >>> Does anyone have an Idea how to fix this? >> >> Perhaps see if there are any denials in SELinux audit log: > > Selinux is in permissive. > > If I do: > (vmail1 pts9) # ll /proc/self/io -r-------- 1 root root 0 Jul 30 15:27 /proc/self/io > (vmail1 pts9) # > > It is obvious to me why I get permission denied. The problem is you > cannot chmod on /proc. I suspect I have something mis-configured but > the question is what? service lmtp { executabl...

...how to fix this? >> >> Regards, >> > First 'warning' != 'error', the 'completed re-index OK' shows this. Right I get that but I would like to clean it up if I can. > > It is possible that you have a duplicate SPN. I am not sure. If I do: (vdc1 pts9) # samba-tool spn list SHOPOFFICE-20$ shopoffice-20$ User CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com has the following servicePrincipalName: HOST/ShopOffice-20.kmg.mydomain.com RestrictedKrbHost/ShopOffice-20.kmg.mydomain.com HOST/SHOPOFFICE-20 R...

...r/locks/sysvol/mydomain.com/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No In addition, I tried running samba-tool dbcheck --cross-ncs --fix that command generates over 400 errors that it claims it is going to fix but it does not. (pht-vdc1 pts9) # samba-tool dbcheck --cross-ncs --fix --yes Checking 10561 objects ERROR: description not present on Deleted Objects container CN=Deleted Objects,DC=DomainDnsZones,DC=mydomain,DC=com Fix Deleted Objects container CN=Deleted Objects,DC=DomainDnsZones,DC=mydomain,DC=com by restoring default attribu...

On Tue, 30 Jul 2019, Reio Remma via dovecot wrote: > On 30.07.2019 20:07, Tom Diehl via dovecot wrote: >> >> Does anyone have an Idea how to fix this? > > Perhaps see if there are any denials in SELinux audit log: Selinux is in permissive. If I do: (vmail1 pts9) # ll /proc/self/io -r-------- 1 root root 0 Jul 30 15:27 /proc/self/io (vmail1 pts9) # It is obvious to me why I get permission denied. The problem is you cannot chmod on /proc. I suspect I have something mis-configured but the question is what? Regards, -- Tom me at tdiehl.org

...On 30.07.2019 20:07, Tom Diehl via dovecot wrote: >>>> >>>> Does anyone have an Idea how to fix this? >>> >>> Perhaps see if there are any denials in SELinux audit log: >> >> Selinux is in permissive. >> >> If I do: >> (vmail1 pts9) # ll /proc/self/io -r-------- 1 root root 0 Jul 30 15:27 /proc/self/io >> (vmail1 pts9) # >> >> It is obvious to me why I get permission denied. The problem is you >> cannot chmod on /proc. I suspect I have something mis-configured but >> the question is what? > &g...

Hi, I have 2 DC's. One is running 4.10.18 and the other is running 4.11.14. I am planning on upgrading the 4.10.18 DC to 4.11.14 and then both up to 4.12r.latest. In doing this I ran samba-tool dbcheck --reindex and got the following warning: (vdc1 pts8) # samba-tool dbcheck --reindex Re-indexing... ../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value in

...one point.. On Mon, 27 Aug 2018 at 21:35, Tom Diehl via samba <samba at lists.samba.org> wrote: > In addition, I tried running samba-tool dbcheck --cross-ncs --fix > that command generates over 400 errors that it claims it is going to fix > but > it does not. > > (pht-vdc1 pts9) # samba-tool dbcheck --cross-ncs --fix --yes > [...] > ERROR: Failed to fix old DN string on attribute > msSBSComputerUserAccessOverride : (16, "attribute > 'msSBSComputerUserAccessOverride': no matching attribute value while > deleting attribute on 'CN=Chris > X...