similar to: Migration to Samba.

We are in an environment where several AD domains are being consolidated into one larger domain using sidhistory. The samba winbind configuration is using 'allow trusted domains = no' as we do not care about what is in the other domains (as well as the problem that many of them are unreachable from other locations meaning winbind will choke completely if we don't disallow them). The

Hi, I would have to join 7 computers (a mix of win 8, 8.1, 10 WKSs) to samba 4.7 AD DC. After I will have joined those workstations to samba AD DC I would like the users to experience a minimal disruption of their Desktops and profiles. The computers have never been registered to any domain before. Can their existing local user names be mirrored on the ADDC (samba)? Can their user profiles be

Hello Samba List, I am trying to figure the best way to move forward with bringing a Samba setup up to date. We currently have a Samba DC running version 3.5.21. This is running on an old Red Hat Enterprise Linux 4 box. There are about 20 users in the domain, a couple of groups, and about 10 shares. About 20 Windows 7 PCs are joined to the domain. We?d like to end up with a Samba

On Thu Dec 14 19:27:29 2023 Matt Savin <matt at tegers.com> wrote: > > Hello Mark, > > When joining the domain, did you specify domain name as hprs.locl, or hprs > only? Please try to specify hprs.locl. > > BR, > Matt Matt - yes I did specify hprs.locl. I just tried it again and it failed again. This time I opened the "Detail" box which says:

Since upgrading from Ubuntu 12.04 (Samba 3.6.3) to Ubuntu 14.04 (Samba 4.1.6), I've noticed some strange problems with our group mappings: First, each of our Active Directory users now has a corresponding group in Linux. I don't remember ever noticing this in Ubuntu 12.04 / Samba 3.6.3. Is this feature new? Is it documented anywhere? (I tried searching online and couldn't find

I'm currently working on a streaming radio server that will be streaming randomized archive shows 90% of the time and then live shows 10% of the time. The solution I came up with was to have /main the archive mountpoint and have a /live for the live shows. What we want to do is use the functionality of icecast's moveusers.xsl to move them to the live at the specified time and have

Ok, I got the W2K3 resource kit tool to move my local profile to my domain profile (moveuser.exe). Didn't really work that cleanly. Even though I used the /k (keep the local account), it didn't really. It seemed to change the permissions on MOST of the files. It didn't really move the files either. It's just pointed my profile (or parts of it) to the existing folder. Can't

Samba version: 4.1.9 Using the idmap_rid backend Case: A Windows AD security group has a historical SID (sidHistory) whose RID matches the RID of a user in the "current domain" For example: (Note the different domain portions of the SID) Current SID of group G: S-1-5-21-1405700021-3363460546-1698178416-30661 Historical SID of group G:

On 11.01.2016 20:37, Rowland penny wrote: > On 11/01/16 19:26, Jean-Philippe Steinmetz wrote: >> Yes I have provisioned the samba server as an Active Directory domain >> controller (I mentioned that in the first e-mail). >> >> The reason for linking the two is to provide easy access to >> additional MS >> services that won't be hosted internally (e.g.

Hi, I am trying to plan a migration of approximately 160 PC's from a workgroup environment to using Samba (3.0.14a) as a PDC (on AIX 4.3, to be 5.3 in near future). They will NOT be using roaming profiles, as this is not appropriate for the client. Joining the machine to the domain, logging in works, everything's cool. These computers were all in a workgroup previously and had a

While I have all the uid's and gid's entered on every user and group, the server can't find or recognize them. Not in getent, not in commands referencing AD users or groups. I'm going to go ahead and install another Ubuntu server with Samba and create a Samba DC. I'll keep this stand alone server and see if it starts working after I get the Samba DC properly joined to the

Greetings, I've been having some issues establishing a two way interdomain trust between a samba server and an win2k8 active directory server. I've established a trust password and object and was able to create a trust relationship from the AD server to the samba server but I'm unable to from the Samba server to the AD server. The purpose of this is to enable ADMT to migrate the user

On 21/02/15 19:26, Andrew Bartlett wrote: > On Thu, 2015-02-19 at 17:15 +0000, Rowland Penny wrote: >> This all leads me to my questions, why, when it comes to idmap.ldb, >> can >> a user also be a group and a group can also be a user and why was it >> setup like this in the first place ? , there must be a reason for it. > It goes like this: > > - Groups can

Ye ol' sidHistory edit attack in new disguise using samba4. I don't think you can consider it to be a hack but I had a lot of fun playing about with ldbedit. Samba4 is wikked, it really opens up AD, I had a lot of fun setting it up. Check my blogg for my little sidHistory priv escalation tutorial (domain admin to enterprise admin).

>> >What is the AD DC ? >> >> Windows 2012 Server DC's > > >>If it is a Windows DC, is 'IDMU' installed (also known as 'services > >>for Unix) ? > > > >No, Services for Unix are not installed, but I did install the NIS for > <Unix for the AD Users & Computers app and that all works fine. > >You can stop

In a related problem. I've tried linking my Office365 account. I get through the sign-in process but when it is attempting to link the device I can an error message stating: *We weren't able to register your device and add your account to Windows. Your access to org resources may be limited.* The domain account I am logged in with is part of the Domain Admins group so I don't think

> You missed that using a DC as a fileserver isn't recommended. It was between the lines of "I followed all the guidelines for doing things correctly in this specific situation" :) > From reading the samba log, it looks like Samba logons are not working, > but ldap connections are. This means Win clients are logging in via LDAP? Can this be related to the inaccessible

====================================================== "Stay positive and happy. Work hard and don't give up hope. Be open to criticism and keep learning. Surround yourself with happy, warm and genuine people." Tena Desae ====================================================== Release Announcements --------------------- This is the latest stable release

====================================================== "Stay positive and happy. Work hard and don't give up hope. Be open to criticism and keep learning. Surround yourself with happy, warm and genuine people." Tena Desae ====================================================== Release Announcements --------------------- This is the latest stable release

Hello, I'm Nicol?s from Uruguay, I work in ASSE (public health services), the enterprise has lots of buildings all over my country, more than 100, with thousands of employees and PCs. Until now there is no "network configuration" in PCs (no network users, etc) and I'm trying to solve that out. I started working with samba about one year ago (I've been learning a lot), I