similar to: BDC returning wrong Domain Group membership ?

Hi, I use rsync 3.0.4 on two opensuse 11 machines. Every night, a big tree of machine A is synced to machine B. These machines are samba PDC and BDC, users and groups are ldap-based, and ACLs are heavily used. There are about 2.8 million files and dirs, 2.2 terabytes of data, and a complete ACL list produced with getfacl has some 600 megabytes. I've just noticed that ACLs get partially

Hello Lads, Problem could be smbldap-tools, im using 0.97. I have manually set the sid on the bdc which seems to work. I am confused because I thought net rpc getsid stored the sid from the pdc on the bdc in secrets. I wasn't aware that net getlocalsid should return identical results on both pdc & bdc. Please explain this - why isnt the BDC obtaining the sid automatic as it should

I would like to know how to achieve a "hot-failover" setup between a Samba 3.x.x primary domain controller and backup domain controller with a LDAP backend. I was under the impression that all I need to specify is something like the following in my smb.conf: passdb backend = ldapsam:"ldap://pdc-srv.domain.org ldap://bdc-srv.domain.org" I have set this passdb backend

I have a basic samba server up and running. My XP clients I can only connect to the samba share if have identical account names / passwds on both the XP client and the linux server. How can I eliminate this requirement so that an XP user can log into any valid account on the linux server and connect to the samba share ? Thanks Henry

Hello, thanks for looking over my ramblings... We have an NT4 PDC with and NT4 BDC on 192.168.132.X, these boxes are very very old and overloaded. I am trying to replace them with a nice shinny new Samba box. My problem is that while I am trying to test it out to make sure it plays nice it keeps winning the elections. I find this weird as I have set the box to domain master = no and turned the

Hi, Since 3.2.4 (maybe earlier, but I doubt it), one important feature does not work anymore for me: I cannot break ACL inheritance anymore in the Windows ACL editor. With previous Samba versions, I entered the "Advanced" dialog of the Windows ACL editor and unchecked the flag "Inherit from parent the permission entries that apply to child objects. Include these with entries

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am trying to get a samba setup with with a pdc/bdc configuration. The backend information stores are openldap ( for passdb and idmap ) I have followed the instructions in the Samba Guide and the documentation provided with the smbldap-tools package. Samba version: 3.0.24 smbldap-tools: Using the version included in samba (

Hi I have a PDC/BDC samba/ldap environment. PDC: samba 3.0.24 slapd 2.3.30 BDC: samba 3.2.5 slapd 2.4.11 Ldap replication is working fine, but I have noticed two issues 1- when a windows user change password on BDC, sambaPwdMustChange and sambaPwdCanChange is not synced on PDC (using ldap passwd sync = yes and unix password sync = no) 2- when using 'net sam set pwdmustchange' on

Today we had a problem with our Win NT4 PDC and discovered numerous failover issues with our Samba file server. For starters, this is a Debian Etch machine running Samba-3.0.24-2. At this point, this is a critical production machine. Upgrading is on our to-do path, but is not an option for an immediate fix to this problem. With the exception of this problem, this Samba installation has been

hi , i have a few problems with usmgr on Version 3.2.4 ( Version 3.2.4-8.1-1931-SUSE-SL11.0 ) samba pdc ldap the download version from ms http://www.microsoft.com/Downloads/details.aspx?FamilyID=c0011ab8-3178-4701-a791-eafba0f42de2&displaylang=en doesnt work giving "device attached to the system is not functioning" whatever i do a old version from usermgr works partially but magic

Hello Lads, I have a PDC & BDC / Master & Slave; I regularly make backups of the LDAP database: Slapcat ¡Vv ¡Vl backupallusers.txt. Both my PDC & BDC have been rebuilt from scratch, I slapadd ¡Vv ¡Vl backupallusers.txt and I net set localsid domainsidhere for the PDC << I get that from the backupallusers.txt. Smbpasswd ¡Vw secret < on both PDC & BDC Net rpc getsid

I'm running Samba on Solaris 10 Sparc for about one year now (version 3.0.22 and then updated to 3.0.24). It acts as a BDC. Now, after updating to 3.0.25c some users cannot log in. I'm getting this error: domain_client_validate: unable to validate password for user myuser in domain MYDOMAIN to Domain controller MYPDC. Error was NT_STATUS_NO_SUCH_USER. The difference between the users

We have a PDC running Samba Version 3.0.24 while the BDC is running Samba Version 3.0.28a. Both domain controllers are running Gentoo. The problem seems to be a compatibility issue between two versions of Samba. Please see below the error when I tried joining the BDC. [2008/05/12 15:15:25, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(310) error setting trust account password: NT code

Hello I makeing a Domain Controller with Samba (v3.0.33) and LDAP (v2.4). I will install a PDC in the headquarter and a BDC in the subsidiary of the company that I work. The PDC and the BDC will have his own LDAP data base. I just install the PDC without problems and my next step is to install the BDC. I configured the LDAP that work in multi master mode. I made some test and the LDAP works

Hey all, might be a tad bit off topic to samba, but not entirely unlrelated. Anyhow, as I understand it, the task of a BDC is to process most if not all of the domain logons before a PDC does so is it not? It has been my understanding that the BDC generally accepts and processes domain logons before the PDC does on a network to keep the load down on the PDC until such time as the BDC cannot

Hi Praveen, > We're trying to add a BDC in Samb4 classic domain setup. The Samba > 3 How -To and Samb3 by Example covers this but uses the old > slapd.conf option, we are using the slapd.d config. I couldn't find > a similar document for Samba4 > > Can you please advise that the following steps will work? LDAP in > the existing PDC is working using the smbldap

Hello, I have a little problem with samaba... well... with windows nt, samba works fine. I'll try to explain it: My net has 2 servers with NT4, a pdc and a bdc. Well, my intentions is to eliminate de NT4 PDC and put a Samba PDC. So I made the next steps: 1-. In BDC, Administrative Tools - Server Administrators (i think) and there i select the BDC and click in the menu to "Eliminate

All, I'm using an LDAP backend for a test PDC/BDC setup. Both the PDC and BDC are using the same LDAP server. Both the PDC and BDC are running 3.0.23c on Sarge, and I've verified that both the PDC and BDC will authenticate users via smbclient. XP clients are able to login to the domain fine, and all is generally swell. My PDC is also my WINS server, and I've verified that XP clients

Hi, After lots of struggle and rtfm I finally got most things running, except for 'nmblookup' and 'net getlocalsid' on the BDC. I'm not new to Samba, but plenty more to learn. Here's the setup in summary: system pdc is the PDC on subnet 192.168.0.0, running SuSE10.1, LDAP master, wins server, domain master browser, no iptables; system bdc is the BDC on subnet 192.168.2.0,

hi list&john, i read in the documention about BDCs: The domain SID has to be the same on the PDC and the BDC. In Samba versions pre-2.2.5, the domain SID was stored in the file |private/MACHINE.SID|. For all versions of Samba released since 2.2.5 the domain SID is stored in the file |private/secrets.tdb|. This file is unique to each server and cannot be copied from a PDC to a BDC; the BDC