search for: rpcservic

.... Questions: - Is this normal for an out-of-the-box Samba install? - Should I install the other 52 LDAP entries, if I want to do centralised user/group mapping for Unix servers? Thanks, Brian. [1] root at dc1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -s sub -b CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net # record 1 dn: CN=bydefaults,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=adtest,DC=int,DC=example,DC=net objectClass: top objectClass: msSFU30NISMapConfig cn: bydefaults instanceType: 4 whenCreated: 20140618075513.0Z whenChanged: 201406180755...

...am getting the following error: [2015/02/02 11:49:42.359246, 0] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3664(replmd_op_possible_c onflict_callback) ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3664: Unable to find replPropertyMetaData for conflicting record 'CN=ypServ30,CN=RpcServices,CN=System,DC=corp,DC=mydomain,DC=com' [2015/02/02 11:49:42.359542, 0] ../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit ) Failed to apply records: Entry CN=ypServ30,CN=RpcServices,CN=System,DC=corp,DC=mydomain,DC=com already exists: Entry already exists [2015/02/...

Mon, 20 Jul 2020 11:56:57 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 20/07/2020 11:11, RhineDevil via samba wrote: > > How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? > > > > dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local > > cn: abuse > > objectClass: nisMailAlias > > objectClass: top > > rfc822MailMember: root > > > > dn: cn=noc,ou=Aliases,DC=mydomail,DC=local > > cn: noc > > objec...

How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local cn: abuse objectClass: nisMailAlias objectClass: top rfc822MailMember: root dn: cn=noc,ou=Aliases,DC=mydomail,DC=local cn: noc objectClass: nisMailAlias objectClass: top rfc822MailMember: root dn: cn=security,ou=Aliases,DC=mydoma...

...y to add your OU ldif again. > >> > >> Rowland > >> > > Got nice results, later I moved to other migrations and that's the only error I don't know how to solve: > > Error: Unable to parse dn 'CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom' > > > > dn: CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom > > cn: echo > > objectClass: ipService > > objectClass: top > > ipServicePort: 4 > > ipServiceProtocol: ddp...

...works, is by using a couple of attributes, that, by default > Samba AD doesn't have. These are 'msSFU30MaxUidNumber' & > 'msSFU30MaxGidNumber' and they hold the next uidNumber & gidNumber. > They should be in: > dn: > CN=samdom,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=samdom,DC=example,DC=com > > Where 'samdom' is your lowercase workgroup and > 'DC=samdom,DC=example,DC=com' is your realm/dns domain. > > If you can write scripts, I am sure you can figure out how to use > them ;-) > If not, contact me off list an...

...t;> >> Rowland >> > I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said > > `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` > > Shouldn't give me access by default if I'm using the private system socket? No, you still need to authenticate as a user with the required...

...service samba-ad-dc start > > Then try to add your OU ldif again. > > Rowland > Got nice results, later I moved to other migrations and that's the only error I don't know how to solve: Error: Unable to parse dn 'CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom' dn: CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom cn: echo objectClass: ipService objectClass: top ipServicePort: 4 ipServiceProtocol: ddp -------------- next part -------------- A non-text attachment was sc...

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

...quired objects in AD created on >the Samba DC either. Really, IDMU was not installed. There is the file ypServ30.ldif ls /usr/share/samba/setup/ ... ypServ30.ldif But, I believe the extension is not enabled: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=empresa,DC=com,DC=br cn search error - No such Base DN: CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=empresa,DC=com,DC=br This way, Do I need to install NIS (apt-get install nis) or only Replace the variables in LDIF file with the domain distinguished name (DN), NetBIOS nam...

...ry thread, that it makes sense to have RFC2307 enabled, I wanted to switch an AD DC to it and follwed this wiki page https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD When I try to import the modified ldif file, I get an error message: ERR: (Entry already exists) "Entry CN=ypServ30,CN=RpcServices,CN=System,DC=ad,DC=url,DC=de already exists" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=ad,DC=url,DC=de at block before line 5 Modify failed after processing 0 records" Fortunately nothing seems to be broken, as it's still possible to start the Samba service again. Yes, I wonde...

...not a domain. > > I dont know if that hurts the upgrade. From reading his old smb.conf it appears it was, but I noticed something: Maiquel, can you run this command on a DC and report back with the result. ldbsearch -H /usr/local/samba/private/sam.ldb -b 'CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=samdom,DC=example,DC=com' -s sub '(objectClass=msSFU30DomainInfo)' cn | grep 'cn:' | awk '{print $NF}' Replace 'DC=samdom,DC=example,DC=com' with your domain DN I also it take that ldap was running on the machine when you upgraded it to an AD DC...

...hat, by >> > default Samba AD doesn't have. These are 'msSFU30MaxUidNumber' & >> > 'msSFU30MaxGidNumber' and they hold the next uidNumber & gidNumber. >> > They should be in: >> > dn: >> > CN=samdom,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=samdom,DC=example,DC=com >> > >> > Where 'samdom' is your lowercase workgroup and >> > 'DC=samdom,DC=example,DC=com' is your realm/dns domain. >> > >> > If you can write scripts, I am sure you can figure out how to use >...

...uot;$1" > if [ -z "${ATTR}" ]; then > error "No Attribute supplied" > error "Cannot continue... Exiting." > exit 1 > fi > _NEXTID=$(ldbsearch -H ${LDBDB} -b > "CN=${domainNETBios},CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,${domainDN}" > -s sub '(objectClass=msSFU30DomainInfo)' ${ATTR} | grep "${ATTR}: " | > awk '{print $NF}') > if [ -z "$_NEXTID" ] || [ "$_NEXTID" -lt "10000" ]; then > _NEXTID="10000" > fi...

On 20/07/2020 11:11, RhineDevil via samba wrote: > How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? > > dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local > cn: abuse > objectClass: nisMailAlias > objectClass: top > rfc822MailMember: root > > dn: cn=noc,ou=Aliases,DC=mydomail,DC=local > cn: noc > objectClass: nisMailAlias > objectClass: top > rf...

...om> wrote: > >From reading his old smb.conf it appears it was, but I noticed > >something: > >Maiquel, can you run this command on a DC and report back with the > >result. > >ldbsearch -H /usr/local/samba/private/sam.ldb -b > >'CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=samdom,DC=example,DC=com' > >-s sub '(objectClass=msSFU30DomainInfo)' cn | grep 'cn:' | awk > >'{print $NF}' > >Replace 'DC=samdom,DC=example,DC=com' with your domain DN > >I also it take that ldap was running on the machine...

..., 22 Jul 2020 14:10:15 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 22/07/2020 13:53, RhineDevil via samba wrote: > > I added misc.schema to samba LDAP implementation, then I tried to insert this: > > > > dn: CN=security,CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld > > cn: security > > objectClass: nisMailAlias > > objectClass: top > > rfc822MailMember: root > > > > I got this error: > > https://0bin.net/paste/Xhhierl5ZAh6QVVJ#ZNXk9+hWY70PLof1eZ1TaqIoO-v3gRGOqNnIpfnX9GI > > >...

...>> >>> I tried to add ypServ30 using ldapi socket "ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldap_priv%2Fldapi, it said >>> >>> `ERR: insufficient access rights : "LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS <acl: unable to get access to CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld> <>" on DN CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=mytld at block before line 5` >>> >>> Shouldn't give me access by default if I'm using the private system socket? >> No, you still need to authenticate as a...

On 17/07/2020 19:31, RhineDevil via samba wrote: > And by that I mean, where are the dbs, what should I rm -rf? On Debian just remove /var/lib/samba and /var/cache/samba > By the way how do I obtain current machine netbios name? Depends on which netbios name, if you are referring to the one that is in smb.conf 'netbios name = ?????', that is just the short hostname in uppercase.

On 20/07/2020 17:52, RhineDevil wrote: > Mon, 20 Jul 2020 11:56:57 +0100 Rowland penny via samba <samba at lists.samba.org>: >> On 20/07/2020 11:11, RhineDevil via samba wrote: >>> How could I migrate these fields to CN=aliases,CN=mail,CN=ypServ30,CN=RpcServices,CN=System,DC=local? >>> >>> dn: cn=abuse,ou=Aliases,DC=mydomail,DC=local >>> cn: abuse >>> objectClass: nisMailAlias >>> objectClass: top >>> rfc822MailMember: root >>> >>> dn: cn=noc,ou=Aliases,DC=mydomail,DC=local >>&...