search for: wellknownobject

Hello, Changing "CN=Computers" to another OU doesn't seem to work correctly in Samba 4.8.5. Running redircmp or changing the wellKnownObject AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 but now the Windows clients don't seem to respect that entry. They instead try to create their computer object under "CN=Computers" which they no longer have access to resulting in an Access Denied message during domai...

On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > Hello, > > Changing "CN=Computers" to another OU doesn't seem to work correctly > in Samba 4.8.5. Running redircmp or changing the wellKnownObject > AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 > but > now the Windows clients don't seem to respect that entry. They > instead > try to create their computer object under "CN=Computers" which they > no > longer have access to resulting in an...

...9 Andrew Bartlett, <abartlet at samba.org> wrote: > On Sat, 2018-09-22 at 13:09 +0200, Kacper via samba wrote: > > Hello, > > > > Changing "CN=Computers" to another OU doesn't seem to work correctly > > in Samba 4.8.5. Running redircmp or changing the wellKnownObject > > AA312825768811D1ADED00C04FD8D5CD to another OU worked in Samba 4.4 > > but > > now the Windows clients don't seem to respect that entry. They > > instead > > try to create their computer object under "CN=Computers" which they > > no > > lo...

I’m unable to successfully join a Windows 2008 R2 server DC to my Samba4 domain. I’ve followed the steps on the wiki of joining a Server 2008 R2 DC to a Samba domain. After I reboot the domain controller, I receive a blue screen in regards to a corrupt AD database. I’ve tried Samba v4.6.7 and Samba 4.9.0pre1. Prior to the reboot, I see the following three events on the Windows DC: ----- Attempt

I have identified and fixed the problem! The wellKnownObject for the default computer container was missing! I’m wondering if this was a bug from an old version of Samba, as we provisioned the domain with Samba 4.0.3. I used ldbedit to manually modify the directory and add CN=Computers as the wellKnownObject default computer container. Windows 2008 R2 now j...

...211518.0Z uSNCreated: 3620 nTSecurityDescriptor: REDACTED name: DomainDnsZones objectGUID: 60e25dda-6d35-4aab-bfa5-6137cb271e27 objectCategory: <GUID=b7263211-731a-43fe-a2f4-b522bf2d1a9d>;CN=Domain-DNS,CN=Schema,CN=Configuration,DC=redacted,DC=domain,DC=local msDS-NcType: 0 dc: DomainDnsZones wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:<GUID=ff815094-bd8e-49 08-ac71-c62beeb47896>;CN=NTDS Quotas,DC=DomainDnsZones,DC=redacted,DC=domain,DC=local wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:<GUID=d3806832-94c6-41 3b-9406-0f512a8a6cd5>;CN=Deleted Objects,DC=DomainDnsZone...

...iled while searching for: <WKGUID=AA312825768811D1ADED00C04FD8D5CD,dc=PROD USA,dc=mycompany,dc=COM> libnet_DomainJoin: Failed to pre-create account in OU cn=Computers,dc=PROD-USA,dc=mycompany,dc=COM: Operations error signed SMB2 message """ It showed failed while searching a wellknownobject, and Samba source code shows: if (asprintf(&base, "<WKGUID=%s,%s>", wknguid, ads->config.bind_path ) == -1) { DEBUG(1, ("asprintf failed!\n")); return NULL; } status = ads_search_dn(ads, &res, base, attrs); if (!ADS_ERR_OK(status)) { DEBUG(1,("Failed whil...

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

...825768811D1ADED00C04FD8D5CD,dc=PROD > USA,dc=mycompany,dc=COM> > > libnet_DomainJoin: Failed to pre-create account in OU > cn=Computers,dc=PROD-USA,dc=mycompany,dc=COM: Operations error > > signed SMB2 message > """ > > It showed failed while searching a wellknownobject, and Samba source code shows: > > if (asprintf(&base, "<WKGUID=%s,%s>", wknguid, ads->config.bind_path ) == -1) { > DEBUG(1, ("asprintf failed!\n")); > return NULL; > } > > status = ads_search_dn(ads, &res, base, attrs); > if (!ADS_ERR_OK...