search for: tsnr

Hi everyone, I think, I've done something stupid here. At first I've created 2 lxc containers and provisioned one as dc.office.mtt and joined second one to the first ad bdc.tsnr.mtt. Then I've cloned those containers several times and changed ip adresses and dns names of new containers to different subnets. The name of domain stayed the same. At first everything seemed fine, but when I tried to create a new user/machine on dc.tsnr.mtt on cloned container I got Failed...

Hi, I have a very strange issue with samba as an ad member server. log.smbd goes: check_ntlm_password: Checking password for unmapped user [TSNR]\[Administrator]@[ADMIN] with the new password interface [2015/11/27 19:09:26.196960, 3] ../source3/auth/auth.c:180(auth_check_ntlm_password) check_ntlm_password: mapped user is: [TSNR]\[Administrator]@[ADMIN] [2015/11/27 19:09:26.196993, 4] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_s...

...v:x:11114:100::/home/asurkov:/bin/bash administrator:*:4294967295:4294967295:Administrator:/home/Administrator:/bin/bash xviewsion:*:4294967295:4294967295:xviewsion:/home/xviewsion:/bin/sh videoadm:*:4294967295:4294967295:videoadm:/home/videoadm:/bin/sh viewer1:*:4294967295:4294967295:Viewer1:/home/TSNR/viewer1:/bin/bash krbtgt:*:4294967295:4294967295:krbtgt:/home/TSNR/krbtgt:/bin/bash newadm:*:4294967295:4294967295:newadm:/home/TSNR/newadm:/bin/bash guest:*:4294967295:4294967295:Guest:/home/TSNR/guest:/bin/bash test:*:4294967295:4294967295:test:/home/test:/bin/sh new:*:4294967295:4294967295:new:/...

...t; >> administrator:*:4294967295:4294967295:Administrator:/home/Administrator:/bin/bash >> xviewsion:*:4294967295:4294967295:xviewsion:/home/xviewsion:/bin/sh >> videoadm:*:4294967295:4294967295:videoadm:/home/videoadm:/bin/sh >> viewer1:*:4294967295:4294967295:Viewer1:/home/TSNR/viewer1:/bin/bash >> krbtgt:*:4294967295:4294967295:krbtgt:/home/TSNR/krbtgt:/bin/bash >> newadm:*:4294967295:4294967295:newadm:/home/TSNR/newadm:/bin/bash >> guest:*:4294967295:4294967295:Guest:/home/TSNR/guest:/bin/bash >> test:*:4294967295:4294967295:test:/home/test:/bin/...

.../asurkov:/bin/bash > administrator:*:4294967295:4294967295:Administrator:/home/Administrator:/bin/bash > xviewsion:*:4294967295:4294967295:xviewsion:/home/xviewsion:/bin/sh > videoadm:*:4294967295:4294967295:videoadm:/home/videoadm:/bin/sh > viewer1:*:4294967295:4294967295:Viewer1:/home/TSNR/viewer1:/bin/bash > krbtgt:*:4294967295:4294967295:krbtgt:/home/TSNR/krbtgt:/bin/bash > newadm:*:4294967295:4294967295:newadm:/home/TSNR/newadm:/bin/bash > guest:*:4294967295:4294967295:Guest:/home/TSNR/guest:/bin/bash > test:*:4294967295:4294967295:test:/home/test:/bin/sh > new:*:42...

...uehlfeld at samba.org>: > Hello Ivan, > > Am 19.10.2015 um 12:42 schrieb Krutskikh Ivan: > > I think, I've done something stupid here. At first I've created 2 lxc > > containers and provisioned one as dc.office.mtt and joined second one to > > the first ad bdc.tsnr.mtt. > > You should not name your DC something like "backup" (bdc). If the first > one (dc) gets lost, you only have one. There's no primary, secondary, > etc. in an AD. > > But this isn't your problem :-) > > > > > Then I've cloned those conta...

...I ran into notorios gpo error on windows clients. When I go to my dc controller and run samba-tool ntacl sysvolcheck I get an error: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/tsnr.mtt/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} O:LAG:DAD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) does not match expected value O:DAG:DAD:P(A;OICI;0x001f01ff;;;DA)...

...administrator:*:4294967295:4294967295:Administrator:/home/Administrator:/bin/bash > xviewsion:*:4294967295:4294967295:xviewsion:/home/xviewsion:/bin/sh > videoadm:*:4294967295:4294967295:videoadm:/home/videoadm:/bin/sh > viewer1:*:4294967295:4294967295:Viewer1:/home/TSNR/viewer1:/bin/bash > krbtgt:*:4294967295:4294967295:krbtgt:/home/TSNR/krbtgt:/bin/bash > newadm:*:4294967295:4294967295:newadm:/home/TSNR/newadm:/bin/bash > guest:*:4294967295:4294967295:Guest:/home/TSNR/guest:/bin/bash > test:*:4294967295:4294967295:test:...

...e in the same realm, you can use 'sites', if they aren't, then they need to be totally different DNS domains and realms. Speaking of which, all machines in a realm need to be using the same DNS domain, you seem to using different domains on your original DCs (dc.office.mtt & bdc.tsnr.mtt) > Will this work? The dc's would work in different lan's. Don't recommend it. Rowland > > 2015-10-19 15:39 GMT+03:00 Marc Muehlfeld <mmuehlfeld at samba.org>: > >> Hello Ivan, >> >> Am 19.10.2015 um 12:42 schrieb Krutskikh Ivan: >>>...

...t; realm, you can use 'sites', if they aren't, then they need to be totally > different DNS domains and realms. Speaking of which, all machines in a > realm need to be using the same DNS domain, you seem to using different > domains on your original DCs (dc.office.mtt & bdc.tsnr.mtt) > > Will this work? The dc's would work in different lan's. >> > > Don't recommend it. > > Rowland > > > >> 2015-10-19 15:39 GMT+03:00 Marc Muehlfeld <mmuehlfeld at samba.org>: >> >> Hello Ivan, >>> >>> Am 1...

Hello Ivan, Am 19.10.2015 um 12:42 schrieb Krutskikh Ivan: > I think, I've done something stupid here. At first I've created 2 lxc > containers and provisioned one as dc.office.mtt and joined second one to > the first ad bdc.tsnr.mtt. You should not name your DC something like "backup" (bdc). If the first one (dc) gets lost, you only have one. There's no primary, secondary, etc. in an AD. But this isn't your problem :-) > Then I've cloned those containers several times > and changed ip adres...

...controller and run >> samba-tool ntacl sysvolcheck >> >> I get an error: >> >> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - >> ProvisioningError: DB ACL on GPO directory >> >> /usr/local/samba/var/locks/sysvol/tsnr.mtt/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} >> O:LAG:DAD:P >> does not match expected value >> O:DAG:DAD:P >> >> > I am not sure this is your problem, if you look very carefully, there is > only one letter different between what is found and what is expec...

...*:4294967295:4294967295:Administrator:/home/Administrator:/bin/bash >> >> xviewsion:*:4294967295:4294967295:xviewsion:/home/xviewsion:/bin/sh >> videoadm:*:4294967295:4294967295:videoadm:/home/videoadm:/bin/sh >> >> viewer1:*:4294967295:4294967295:Viewer1:/home/TSNR/viewer1:/bin/bash >> krbtgt:*:4294967295:4294967295:krbtgt:/home/TSNR/krbtgt:/bin/bash >> newadm:*:4294967295:4294967295:newadm:/home/TSNR/newadm:/bin/bash >> guest:*:4294967295:4294967295:Guest:/home/TSNR/guest:/bin/bash >> test:*:4294967295:...