similar to: SAMBA4: Changing DC's IP address (Bind 9.8.x) for testing

Since I don't seem to be having any luck with the classicupgrade, I decided to try starting from scratch and then adding users. I ran the command: /usr/local/samba/bin/samba-tool domain provision --realm=<my realm> \ --domain=<mydomain> --adminpass 'mypass' --server-role=dc \ --dns-backend=BIND9_DLZ Then I tried both adding and changing users. In neither case can I

Hi How do I set the default group for a user? e.g. samba-tool group add opensuse samba-tool group addusers opensuse steve But steve's default group is still Users. I'm looking for soething like this: 'samba-tool group setdefaultgroup steve opensuse' But here isn't that command. I have to do it in Windows. Is there a command I'm missing? Cheers, Steve

Can someone point me to some documentation on scripting samba user and group management from python? I'd much rather not do this via calls out to samba-tool, and if I could do this remotely (via LDAP like calls) I'd be even happier. Cheers, Geoff

I have Microsoft Key Management server on a Windows 2003 server - joined to my new Samba4 AD domain. But the KMS is not available. In the event log it says: Event Type: Error Event Source: Software Licensing Service Event Category: None Event ID: 12293 Date: 1/4/2013 Time: 3:05:38 PM User: N/A Computer: IPECACA Description: Publishing the Key Management Service (KMS) to DNS in the

I have defunct user's in groups in my domain groups - but it appears that I cannot remove them. This membership is reported by "samba-tool dbcheck" but are not fixed even if "-fix" is specified. === ldbmodify === [root at larkin27 ~]# ldbmodify -H /var/lib/samba/private/sam.ldb fix.ldif ERR: (Unwilling to perform) "Unable to find GUID for DN

I've been using one Samba4 server based on a Fedora14 distro, but because of my continuing issues with Bind 9.7 and dynamic DNS updates, I'm trying to move to a Fedora 16 base, which includes Bind 9.8 by default (not to mention a bucketload of other updates). My question: What is the best way to pull the current domain data from the first server to the second one? In particular, I'm

To those who will eb able to assist, Platform: On Ubuntu 12.04 I have used the latest Git version. I have installed isc-dhcp-server and bind9 from the plain apt repositories and have configured DHCP and BIND9 so that DHCP can update DNS entries via the hmac-md5 as so: key rndc-key { algorithm hmac-md5; secret "XXXXXXXXXXXXXXXXXXXX==";} allow unknown-clients; use-host-decl-names on;

Question: Right now samba4 is great as in all-in-one solution (samba, kerberos, ldap, dns) into one service. Is it possible to split it up so that for example, I run openldap on one server, kerberos on another server, and then dns/samba on a third server? br, Quinn

Hi All Experts, I am about to extend our production Samba4 schema to add a few intra-organizational attributes (Employee ID,Passport No., Date of Joining, Date of Leaving) . How can I make change in my samba4 schema. I have already make a post in the forum, but got no reply. Sorry for posting again. But precaution should be taken in to prevent the server from any damage. Kindly help. With

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Hi We are thinking of Developing a corporate Directory application the would pull user information from Samba4 Ad. However for our needs we need some additional User attributes that don't seem to be available as part of the AD-schema, such as "Hire Date" or "Emergancy contact information", so it seems to me that I would need to Extend the Schema to make this user

Hi guys and congrats for bringing a fantastic project to the open source world. I' ve setup a samba4 pdc succefully and i am able to do domain logins. I was also able to add the automount schema into the ldb. But when it comes to sudoers schema i cant import it in. Further system details: Debian wheezy 7, samba 4.0.6 compiled from source, sudo-ldap standard binary package from repos. I have

Hi I've created a Samba 4 group called suseusers and mixed in posixGroup and gidNumber using samba-tool group add as a basis. It works, e.g. when I added an existing user to the group: getent group suseusers suseusers:*:2000: and getent passwd steve4 steve4:x:3000019:2000:steve4:/home/CACTUS/steve4:/bin/bash and id uid=3000019(steve4) gid=2000(suseusers) groups=2000(suseusers) but there

What's the syntax? I've tried: samba-tool spn add nfs/HH3.SITE Administrator which seems to work, but where do I go from here? THanks, Steve

Hi. We used info from a SID created using samba-tool group add to posix-ify it and then add a posix-ifed domain user to it. The AD doco defines two sorts of SID. Ones that change, and ones that don't. Here is a search on our posix-ified group: ldbsearch --url=/usr/local/samba/private/idmap.ldb 'xidnumber=3000012' objectSid: S-1-5-21-980186919-4150830324-975011627-1121 We set the

Hi everyone The s4 Domain Users group has xidNumber: 100 and the Linux users group has gidNumber=100. I've been mapping xidNumber <--> gidNumber for s4 posix groups I've added myself, but this causes a name collision for Domain Users. This also has implications on Linux as local users have access to the group owned stuff of Domain users. I've changed the xidNumber in

Hi everyone I'm trying to join an Ubuntu 12.04 client to a 12.04 Samba4 DC. xp and win7 clients can join fine. Here is my minmal smb.conf realm = POLOP.SITE workgroup = POLOP security = ADS Kerberos is working: kinit Administrator Password for Administrator at POLOP.SITE: But then it tell me that the DC is _not_ a DC: net ads join -UAdministrator Host is not configured as a member server.

Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes and idmap config * : backend = ad 2. Do the terms in (1) above apply equally to Samba4 beta6 and Samba 3.6.3? 3. If I specify either in (1) then idmap config : range = abc-xyz becomes meaningless. Cheers, Steve

Hi I have a Samba4 DC (hh30.hh3.site, 192.168.1.30) and a Samba3 VM on the same box (hh33.hh3.site, 192.168.1.33). How do I tell XP and 7 clients to look at the S4 DC for authentication and the S3 fileserver for files? It already does the authentication bit OK. It's mainly the second part of the question as to how to instruct the m$ boxes to look at the file-server rather than the DC

Reading Whatsnew.txt in samba I understand that If I use s3fs, as it is set by default in the provision step, I won't be able to modify GPOs later, right? So I have a couple of questions: - What's the advantage of using s3fs over ntvfs in new installations? - If I'm planning to deploy a new Domain, probably needing to change GPOs later, should I select ntvfs??? Best regards, Felix