similar to: Restricting DC Roles?

Hi all, There has been some discussion on GPO's lately, and I find myself having a problem too. This error in logged on one of our win7 workstations: EventData SupportInfo1 2 SupportInfo2 1232 ProcessingMode 1 ProcessingTimeInMilliseconds 1638 ErrorCode 5 ErrorDescription Access is denied. DCName \\dc4.samba.company.com GPOCNName

Hi: I've just configured a Samba 4 install as an AD DC, following the Wiki page at https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO I've successfully joined a few machines to the domain, and am now trying to add some simple shares. When I add a share to smb.conf, it appears on client machines via \\domain.example.com\sharename but trying to open any shares gives the error

I'm running a Samba AD 4.7.4 and cannot set a new password for a user with an expired password during login from a Windows PC. Changing a password from inside a login with cntl-alt-del "change password" works ok. I've already decreased the minimum password age to 0 samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history

Am 07.10.2015 um 12:00 schrieb mourik jan c heupink: > I have defined two Default Domain Policies, confirmed by the settings > tab in the Group Policy Management editor: > > 1st - computer config, policies, windows settings, scripts, shutdown > 2nd - user configuration, preferences, windows settings, drive maps > > Unless these two happen to be policies that do NOT need a

Hi All, Is anybody succeed to run a configuration on a two node clusters with Samba installed on each machine? I compiled two versions on different directories (/usr/local/samba1 and samba2). At this point, I can run 2 samba's on one node in case of failure but problems are on Active Directory authentication for the Fallback node. Any suggestion! I'm running AIX 5.2 with HACMP and

Thank you for your answers Rowland. I could go ahead. Am 17.09.19 um 18:52 schrieb Rowland penny: > On 17/09/2019 09:30, Simeon Peter wrote: >> Am 17.09.19 um 17:08 schrieb Rowland penny via samba: >>> Do not give the standard Windows users and groups a uid/gidNumber, >>> most are never used on Unix, the main exception would be Domain Users. >> OK, now I did it

Greetings, I've got a S4 DC joined to a Windows 2008 R2 DC. I'm using the s4bind scripts to add uidNumber/gidNumber/etc entries to LDAP, and I've got nss-pam-ldap installed on the S4 server. I had this working back in December, but since installing the latest stable build, getent passwd is throwing this error, [8b4567] <passwd="myuser"> passwd entry

I have a Samba DC connected to two Windows 2008 R2 DC's. On the Samba machine, if I run `ldbsearch -H ldaps://*SAMBA-DC-IP* -U administrator` It asks for my password and then works great. I can use any domain user and this works. However, if I instead run: `ldbsearch -H ldaps://10.120.160.12 -k1 --krb5-ccache=/tmp/krb5cc_0` I get this: Failed to bind - LDAP client internal error:

List, I am deploying a number of Samba servers across a WAN. To date I have manually uploaded printer drivers from an XP client to the Samba server. But it's slow, and I systematically upload the same drivers over and over again. I'm not quite sure of the recipe, but I'm sure there must be a way of replicating all the drivers, from a central point, out to the remote servers. Copying

On 9/19/2016 3:15 PM, Adam Tauno Williams via samba wrote: >> To see rid pool info run the following from a Windows command prompt. >> dcdiag /s:DCNAME /test:ridmanager /v >> Replace DCNAME with the dns name of your Domain Controller. I wonder >> if OP has exhausted his RID pool. Unlikely but possible. I also see a >> similar post on this same issue. >>

Hi folks, Whilst viewing printers on a samba 2.2.5 (just been upgraded from 2.2.4) server, both an NT and W2K machine had the print spooler service killed off at the same time. I have been reliably informed that this doesn't just happen like that! Any ideas as to why this would happen, as its a bit of a major prob. Thanks a lot, Mark Vodden Unix and Web Systems Engineer IS Operations

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mostly for print server admins: I am considering marking testprns as deprecated (or just remove it). It doesn't seem to be that useful anymore. Does anyone use it on a regular basis and would therefore be distraught if it were gone in a future 3.0.x release ? cheers, jerry -

Hello I had a problem with different group IDs on my two DCs. They have both Version 4.7.6-Ubuntu and use the RFC2307 scheme. The first DC showed the group-IDs 200xx that I gave in the AD. The second DC gave the ID 100 to Domain Users and other 200xx IDs to the groups. To could solve the problem: ?1. I gave Unix UIDs to all users and GIDs to groups in the Active Directory with RSAT ?2. I

Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable, with two domain members - Windows XP Pro and trial Windows 8 Enterprise. User configuration using GPOs is working as expected. However, Computer configuration is never applied properly. Event logs show this entry: ------

Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue.  Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution.  Now that I've found Samba does AD style domain, I'm excited to use it in several customer locations.  Since I

While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if

Hi all, I'm wondering about winbind[d] behaviour. I tried the following with: auth methods = sam winbindd and the same with only one d: auth methods = sam winbind One user: ldbsearch -H $sam '(cn=another.fakeuser)' homeDirectory loginShell gidnumber uidnumber # record 1 dn: CN=another.fakeuser,OU=a,OU=Standards,OU=Utilisateurs,DC=ad,DC=dgfip homeDirectory: */home/another.fakeuser*

Hello, I am using samba to acces a printer on my Linux server from Windows XP Home SP2 clients. It was working very well until yesterday evening. Since yesterday, I can print from the server (with cups) but I can't print from the Windows clients. And all the shared folders are still OK. There is only printing from Windows clients which doesn't work. We changed nothing on the server

On win8.1 & srv2012r2 it is "The password for this account has expired" On 01/17/2018 10:44 PM, Luke Barone wrote: > (Remember to reply all) > > What error message, *specifically*, comes up when the user with the > expired password attempts to change it? > > On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > > To

Hi all, I have been having the weirdest network browsing problems on my network the past week. Come to find out the wins.dat file got corrupted. Removing that file fixed everything. Because our systems typically have uptimes measured in months rather than days, and it is difficult for me to restart Samba except as a scheduled task (which I'm afraid to do because there are users who