similar to: (Samba4) Normal users unable to login

Hi, We installed a samba4 AD controller using Gpo for a small group of users (5 users), everything is OK. (Samba4 beta 7 on Ubuntu 12.04) We installed another Samba4 AD controller as a BDC of the first one with the command "samba-tool domain join" with succes. After checking this new installation, we saw that the sysvol share was not replicated from the PDC and all the Policies are

Hi, I've updated my Sernet Samba AD from 4.2.1 to 4.2.2 an now i've problems with GPO on Windows 8.1. I've some GPO with group permissions to mount some network drives but after upgrade to latest version of Samba 4 are not working. When I check the GPO status it shows as "correct" but the drives are not in the machine. Even the "net" command don't show any

Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki. DNS and ldap are internal. Everything looks like working, I can create and edit GPOs with WinXP Pro but with Win2K3 server I can create GPOs but I can't edit them. I cannot see any error at the log.samba file. Win2k3 gives an error that I will try to translate to

Hi! I have recently upgraded samba4 to the latest GIT build. I have run upgradeprovision according to upgrading-samba4.txt instructions. All seems to be well, but when i try to access Group Policy Objects from gpmc utility on windows i get the following error message: --------------------------- Group Policy Management --------------------------- The permissions for this GPO in the SYSVOL folder

Hey list, arriving home from SambaXP, it was really nice. That darth vader cake was super sweet :-) Hearing some people talking about how much they'd like bash completion for `samba-tool`, I've put together an ugly script that does that. It's a very dumb script (I'm boldly calling it script), but it might make someones day a little bit easier.

Hello all, I am attempting to join samba4 to my current domain which is controlled by a Windows 2012 Active Directory Server. When following the instructions on the official WIKI: http://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC I am able to do a kinit administrator, which then gives me a ticket which I can see via klist. The problem is that once I run the command: #

Hello all, I installed Samba4 from GIT (alpha 16, it says) and while most functionality is operational, GPMC continues to report an error in permissions, claiming the permissions for the GPO are inconistant with that of Active Directory. I can't correctly implement GPOs due to this, since only parts of the GPO (if at all) are actually updated on machines (WInXP SP3). Thanks for any input on

I try to get Samba 4 with ssh running. I found in the Script from Matthieu Patou tot he sysvol sync the follwing intresting line. --- kinit -k -t /etc/krb5.keytab `hostname -s | tr "[:lower:]" "[:upper:]"`\$ rsync -X -u -a $dc_account_name\$@${dc}.${domain}:$SYSVOL $STAGING --- when i understand correct he uses the domain controller service principle to connect to the

I am writing this letter and I hope that I'll have answers about the generation of smb.conf by the way of smb.conf.master with testparm command. Like is described on page 5 of Samba3-HOWTO.pdf. The situation is: - The manual of smb.conf says that the default value of the parameter ?name resolve order? is ?lmhosts host wins bcast?, but when I type the command like: # testparm -s

Hello all, some time ago I've posted on samba.internals but did get no answer to my question. I hope that someone on this list can give me some help. I have migrated a Win2k AD to samba4 and copied SYSVOL as decribed in this post: https://lists.samba.org/archive/samba-technical/2011-October/080026.html Now I have the problem that only the builtin Administrator can sucessfull modify/add

Hello! AppLocker is a newer technique which allows users to control access to certain programs and it was introduced in Windows 2008 Server and Windows 7 (clients). I wonder does SAMBA 4 support it? Thank you! -- View this message in context: http://samba.2283325.n4.nabble.com/Does-SAMBA4-Support-AppLocker-in-Group-Policies-tp4206013p4206013.html Sent from the Samba - General mailing list

Hello, I am working on migrating from OpenLDAP using the inetOrgPerson schema to Samba4. I would like to continue to provide backwards compatibility with our existing authentication service. In OpenLDAP, users are all contained inside the People organizational unit and referenced by uid, for example: dn: uid=myuser,ou=People,dc=example,dc=com When using samba-tool to add a user, it places the

Hi, I'm using GIT pull from a few days ago. I am trying to get ssh working with kerberos when samba is the KDC. I am having trouble getting my machine keytabs to work. Here's some of the problems I have: 1) root at morannon:~# samba-tool export keytab /tmp/test.keytab added interface ip=192.168.1.11 nmask=255.255.255.0 added interface ip=127.0.0.1 nmask=255.0.0.0 added interface

Dear all, After using samba 3 for two years, I have just spent totally one week finishing setting up a samba 4 file system in my working school. There are about 200 computers, 80+ staff, 1000 students and 10 printers. The AD was properly setup, mandatory profile and one GPO policy (which is printer download trust) is effective for all users. Logon script is for mapping four shares and 10

Hi all, When created through RSAT OUs receive, by default, ACLs to refuse removal. When created through LDIF and ldbadd OUs do not receive these ACLs. Is there a way to create these ACLs using command line tools? Cheers, mathias

Hi, I'm working in an educational environment so I've some obligations that complicate my work. For example in all rooms of practical class all the workstations are in dual boot (Win7 + XUbuntu 14.04). I've tried 2 solutions : 1- Setting the same hostname to both OS, joigning Win7 to AD and using the created (by joining) keytab on linux side for sssd. 2-

-------- Original-Nachricht -------- > Datum: Fri, 23 Nov 2012 14:32:31 -0800 > Von: Matthieu Patou <mat at samba.org> > An: samba at lists.samba.org > Betreff: Re: [Samba] samba4 binddlz performance > On 11/19/2012 07:11 AM, Thomas Manninger wrote: > > Hello, > > > > i am using samba4rc2. > > > > I have problems with the bind9 dlz module, i get

Hi Joining a lubuntu 11.10 client to the domain I get this: net ads join -UAdministrator Enter Administrator's password: Using short domain name -- POLOP Joined 'LUBUNTU7' to realm 'hh3.site' No DNS domain configured for lubuntu7. Unable to perform DNS Update. DNS update failed! during the join this all seems OK: Kerberos: Looking for PKINIT pa-data --

Hello, i am using samba4rc2. I have problems with the bind9 dlz module, i get very long response times from interal queries. root at s-srv01:~# dig s-srv04.test.local @192.168.0.4 ; <<>> DiG 9.8.0-P4 <<>> s-srv04.test.local @192.168.0.4 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64478 ;; flags: qr aa rd ra;

Release Announcements --------------------- This is the fourth release candidate of Samba 4.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.0 will be the next version of the Samba suite and incorporates all the technology found in both the Samba4