similar to: AD controller problems.

Hi @all, I have some question I can't find a explanation. I have a standalone Samba3 as PDC. It works perfect with LDAP. Now I want to implement Policies. 1) Is it possible to use GPO from ads ? And if so, where to store this policies. 2) Or can I only use policies created with poledit from NT4 which should be stored in NETLOGON. Any help or links about this would be apreciated.

I've got a Samba PDC and a Samba domain member server. I successfully joined the domain, started winbind and run the wbinfo -p; wbinfo -t tests, both succeeded. But if I do a winbind -g I only get BUILDIN/group and if I do a wbinfo -u I get "Error looking up domain users". But ntlm_auth succeeds. So I'm a little confused. At this point this is a minor issue since

I'm attempting to join a Samba 3.0.4 domain on a Debian linux box, with a Windows XP client. Problems 1) Can only get the join to work if I use the root account. On Win2k I can use any account in the Domain Admins group. 2) The join succeeds, the unix account and the smb account are created but the smb account is disabled, and the password contains all XXXXs. Joining the domain works

When setting up an LDAP PDC do I have to have both user and machines in the ou=People container? Here's what I've got. LDAP Tree ou=People,o=umd.umich.edu ou=NIS,ou=Groups,o=umd.umich.eud ou=machines,ou=Samba,ou=Services,o=umd.umich.edu ou=Idmap,ou=Samba,ou=Services,o=umd.umich.edu smb.conf (ldap stuff) ldap delete dn = no ldap suffix = o=umd.umich.edu ldap

I've got a very odd situation occurring. I recently upgraded to Samba 2.0.26a and now secondary group membership doesn't work. On the filesystem I have this layout /derek /derek/Folder 1 /derek/Folder 2 derek has these ACLs # file: derek # owner: root # group: root user::rwx group::r-x other:r-x Folder 1 has these ACLs # file: Folder 1 # owner: root # group: g1 user::rwx group:rwx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Actually determined this was a CUPS issue. I split the CUPS and Samba servers, system load on the Samba box now averages about 0.3 while load average on the CUPS system is about 0.8 or 1. Thanks, Derek On Aug 28, 2005, at 9:47 AM, Jim Ross wrote: > Derek Harkness wrote: > >> Is it better to setup lots of small print servers or one

So we run puppetd as a long running ruby process on the hosts. When we update a fact that gets auto sync''d to the host it seems when puppetd wakes up and starts its catalog run it doesn''t re-sync the facts. It you run it standalone it will or if you restart the service then it will do the right thing. Do other people see this? Or have you all gone to running out of cron?

I've been googling for a while now and haven't found a decent answer to this question. How do I allow users to join the domain without handing out a domain admin level account? Is there someway to limit what other domain features this account has access to? Thanks, Derek -------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type:

Preface, running redhat 8.0 (pretty standard and up2date) [atlantis 158] uname -a Linux atlantis.cs.umd.edu 2.4.18-27.8.0 #1 Fri Mar 14 06:45:49 EST 2003 i686 i686 i386 GNU/Linux [atlantis 159] gcc --version gcc (GCC) 3.2 20020903 (Red Hat Linux 8.0 3.2-7) Copyright (C) 2002 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty;

Hello, I have a samba server set up as a member server in a native 2003 domain. Its ubuntu server 8.4.02 LTS. Any idea what causes this when I try to leave the domain? > user@dordal:/home/backups$ sudo net ads leave -U administrator@DOMAIN.COM > administrator@DOMAIN.COM's password: > [2009/03/17 17:41:02, 0] libads/sasl.c:ads_sasl_spnego_bind(330) > kinit succeeded but

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm trying to access a Samba 3.0 server (running on Debian unstable) in an Active Directory environment. I successfully joined the domain, klist shows my Kerberos ticket(s) and I can use smbclient -k to access a Windows 2000 server. However, when I try to access a share on the Samba machine from a Windows 2000 client, I'm being asked

Recently tried transferring roles from Samba 4.3.11 to Samba 4.7.0. Ultimately, both dcs agreed that the 4.7.0 dc (dc3) had all the roles and replication and the databases were in good shape. However, during the process, I got a lot of errors that seemed to magically disappear. Should I be worried? root at dc3:~# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS

I'm trying to build samba 3 for Solaris 9 and I'm having trouble with the libraries. Everything seems to build fine but when I try to run one of the binaries I get: ld.so.1: /appl/samba/bin/net: fatal: liblber.so.2: open failed: No such file or directory If I add the path for my ldap and gcc libs to my LD_LIBRARY_PATH environment then I can run the commands and they seem fine but

Hello Samba List, I have 2 problems with dns - seeing the child entries and a zone with an extra octet. First... I have created a /16 reverse zone as per the wiki page (https://wiki.samba.org/index.php/DNS_Administration#To_create_a_.2F24_reverse_zone)... $ samba-tool dns zonecreate dc3 130.130.in-addr.arpa $ samba-tool dns zonelist --reverse dc3 pszZoneName :

Hi! Thanks for answer. But, i allowed all ports in my firewall... I tested, shutdown  my DC1 DC2 dont comunication with DC3 I create user in DC2, dont replication with DC3... I waited more in 20 minutes Why ?? Regards; On 17-05-2018 12:01, lingpanda101 wrote: > On 5/17/2018 10:30 AM, Carlos via samba wrote: >> Hi! >> >> I have 2 DC, now add one more DC, but all dcs

Hi list, I'm running into issues with Samba 4.5.16-Debian. I am trying to get 3 DCs to talk to each other and replicate. DC1 and DC3 are on the same subnet; DC2 is on another subnet, accessible by IP. Currently, no firewalls on any of the DCs. Issue 1 - When I run "samba-tool drs showrepl", I get various results: DC1 - Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

Hi! In Option "Inter-Site Transports", i have only  one the name "DEFAULTIPSITELINK" , in properties Sites in this link: Matriz Filial Matriz -> site with DC1 and DC2 Filail ->  site With DC3 Regards; On 17-05-2018 13:12, lingpanda101 wrote: > On 5/17/2018 12:07 PM, Carlos wrote: >> Hi! >> >> Thanks for answer. >> >> But, i allowed

On 13/02/2020 13:11, Paul Littlefield wrote: > On 12/02/2020 13:08, Rowland penny via samba wrote: >> The first is that a DC must use itself as its nameserver and if >> something goes wrong e.g. Samba has fallen over, then there isn't >> much point having another nameserver, Samba isn't going to use it >> >> The second is, it will not hurt having a second

Hi! I have 2 DC, now add one more DC, but all dcs dont view between they. New DC is "DC2" DC1 - vlan10 -> OK to DC3(Connectad by openvpn) DC1 -> vlan10 -> OK to DC2(vlan50) DC2-> vlan50 -> OK to DC1(vlan10) DC2-> Openvpn -> Dont "see" DC3 DC3 -> Openvpn -> OK to DC1(vlan10) DC3 -> Openvpn -> Dont "view" DC2(vlan50) All version