similar to: PDC and BDC - do they need the same SIDs or different?

Hello, I'm trying to set up Samba + OpenLDAP as a PDC. I followed the instructions from chapter 6 in Samba-3 by Example, my system is SuSE 9.1. ldap, winbind, nmb and smb are running. testparm says my smb.conf file is OK. I set LDAP password using smbpasswd -w. There was a similar post a few days ago (smbldap-tools don't create machine account properly), but it didn't help me.

Hello, I'm trying to get Samba to work as a PDC for a group of Windows clients. I followed two tutorials form IBM developers works: 1) using Samba as a PDC (which is missing domain controller = yes), 2) Using an LDAP Directory for Samba authentication. So I was able tu run Samba 3 as a PDC (without LDAP) - I could join a domain, add a user, machines were added automatically, roaming

I keep getting the following errors when I try to log on to my domain or access a share (some how I have no clue I was able to get one computer to access the samba domain). It is a standalone PDC, ldap on the same computer. This problem has been killing me for about a week, any help would be greatly appreciated I'm running samba 3.0.9 on redhat 9 stock ldap server that comes with redhat

Hello, I have a following test environment: 1) Samba PDC + OpenLDAP Slave (192.168.1.2) 2) OpenLDAP Master (192.168.1.1). Whatever is changed/added on the Master, it gets replicated to Slave. Now, when a user is logged in, and tries to change the password - he/she must supply the old password, and twice new one (normal behaviour). After pressing OK the user is said that the password

Hey list, I've got a problem with my PDC/BDC setup. They're both running 3.0.23c on Sarge, and I've verified that both the PDC and BDC will authenticate users. test-pdc:/etc/samba# testparm Load smb config files from /etc/samba/smb.conf Processing section "[netlogon]" Loaded services file OK. Server role: ROLE_DOMAIN_PDC test-bdc:/var/log/samba# testparm Load smb config

hi list&john, i read in the documention about BDCs: The domain SID has to be the same on the PDC and the BDC. In Samba versions pre-2.2.5, the domain SID was stored in the file |private/MACHINE.SID|. For all versions of Samba released since 2.2.5 the domain SID is stored in the file |private/secrets.tdb|. This file is unique to each server and cannot be copied from a PDC to a BDC; the BDC

Hi, After lots of struggle and rtfm I finally got most things running, except for 'nmblookup' and 'net getlocalsid' on the BDC. I'm not new to Samba, but plenty more to learn. Here's the setup in summary: system pdc is the PDC on subnet 192.168.0.0, running SuSE10.1, LDAP master, wins server, domain master browser, no iptables; system bdc is the BDC on subnet 192.168.2.0,

I have a server acting as a PDC, and another server acting as a BDC. When I run 'net getlocalsid' on each, they return different numbers. If I run 'net getlocalsid domain_name' on the BDC, it returns the PDC's sid. Is it import for each machine to have the same SID? Thanks, Chris

Hi, I have the following situation concerning group mapping: when I enter > net getlocalsid I get > SID for domain PDC is: S-1-5-21-4166838278-3756557259-2095403906 when I enter > net getlocalsid DOMAIN I get >SID for domain DOMAIN is: S-1-5-21-2018781741-1218799122-1862565094 The group mapping shows > net groupmap list > Domain Users

Hi all, I need help to clear a bit of confusion regarding SIDs on Samba servers. I had my PDC collapse on Thursday which wasn't too much of a problem as I had everything backed up but I'm now in the position that I have a mismatched Domain SID. If I run net getlocalsid I get the sid for the server (called smb0) and net get local sid <domain> returns the sid for the Domain. I

I have two serves set up. One will be my PDC (master) and the other will be my BDC (slave). I have openldap setup and replicating the data between the two servers. Everything seems to work fine from the Master, but I have one problem with the slave. From the slave, I can do an ldapsearch and everthing is fine. But when I do a 'pdbedit -L', I get the following: Unknown parameter

Hi, I had a working enviroment of one PDC and several BDCs. The PDC is Samba version 3.6.6. After replacing of one BDC, I've started to get the following error in LDAP master server: Aug 22 13:44:59 gw slapd[28598]: conn=46129 op=51 do_search: invalid dn (sambaDomainName=Administrator,(null)) and on the PDC: root@:~# net getlocalsid smbldap_search_domain_info: Adding domain info for XXX

I have the following setup: PDC: Samba 3.0.37 on Solaris 10 BDC1: Samba 3.0.37 on Solaris 10 BDC2: Samba 3.4.3 on Solaris 10 Samba 3.0.37 is the bundled version of Samba. Samba 3.4.3 is compiled from source. BDC2 is a recent addition to the network. All machine use LDAP as the backend for everything. They use winbind to handle a domain trust with another domain, but otherwise

Hello, I'm having a few problems, but I'm thinking this should be fixed first. It may solve my other issues. It appears that the built in domain groups' SIDs do not match the domain's SID. I used the IDEALX scripts to create these accounts and I obviously thought everything was fine before proceeding to add users and groups. Any suggestions on how I can correct this without

Hello I have a client who historical had a machinename with an underscore in it : samba_machine I had to get rid of the underscore names and changed the name to samba-machine. At the same time I upgraded to samba-3.0.11 to get a printer queue problem resolved. Now it seems the Domain SID has changed, so I changed the new SID back to the old one with net setlocalsid, because on all machines I had

os: debian etch 4.0 samba: 3.025c i am reading through the how-to (using samba 3rd ed), freely available btw at http://book.opensourceproject.org.cn/sysadmin/samba/sambao3rd/ i am interested in setting up a samba pdc for a good dozen windows xp pro clients. (i somehow could not wake up from the windows 2003 sbs nightmare). i have been able to join my debian box to the local windows domain and

`net getlocalsid` prints "Can't fetch domain SID for name: MYMACHINE" How could I solve? Is there a more parsable way for getting current machine domain SID and current machine NETBIOS name? -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 833 bytes Desc: Firma digitale OpenPGP URL:

>>>>> Rowland Penny via samba <samba at lists.samba.org> writes: > On Wed, 22 Aug 2018 13:53:23 +0200 > Ludovit Koren via samba <samba at lists.samba.org> wrote: >> >> Hi, >> >> I had a working enviroment of one PDC and several BDCs. The PDC is >> Samba version 3.6.6. After replacing of one BDC, I've

I have a domain with Samba 3 acting as PDC, and using LDAP (passdb backend = ldapsam). I now wanted to add a second Samba 3 machine as a simple file server. I get errors with getdomainsid and getlocalsid, so there is obviously still something wrong with my config. The PDC runs Samba 3.5.6 on Debian Squeeze. Sid queries return: # net getdomainsid SID for local machine MY_PDC_HOST is:

Hi all, I just replaced a client's SUSE 8.0/Samba 2.2 DC with a SUSE 9.2/Samba 3.0.9 DC. Drives were giving trouble, and since that box was a first attempt at a linux DC there was a lot of room for improvement. I copied the profiles and home directories over to the new machine, chowned them to the new users. I also did extracted the securid from the old DC and set it to the new one