similar to: Remove dead server from domain.

Hi, I am unclear on the relationship between the hostname, DNS domain, server's FQDN, NT4 domain name, etc. Quoting the HOWTO: "For the rest of the HOWTO we will assume that your DNS domain name is samdom.example.com, your short (also known as NT4) domain name is samdom, your Samba server's hostname is samba and the IP Address of your Samba server is 192.168.1.2." What is

Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have

Hello, We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am able to duplicate this issue with both classicupgrade and a new provision (both cases using internal DNS). I am able to join a 2008R2 system to the domain and promote it to a DC, however I am unable to demote it. The problem appears to be that the 2008R2 server fails replicating to the S4 DC. The specific error that I

Hi all, Some (then all) of our workstations were complaining about incorrect ACLs on GPOs and were unable to read the gpt.ini to apply the GPOs. So I did a sysvolcheck and sure enough I'd lost the ACLs when I moved our sysvol share to a new location on the server (whoops, mea culpa). I ran a sysvolreset which took a long time to return (some 5 minutes, please see my post on slow winbind

Hello, In an effort to get MX and CNAME records working, I have migrated from Samba's internal DNS to bind9_dlz. I am now seeing strange behavior where CNAME records resolve correctly on the S4 DC, but not from workstations. Please see the case below where I have foo.internal.testdom.com aliased to google.com using a CNAME record. I do not understand why this is occurring This should work,

Hi guys,   It's finaly done...   The samba 4.8.3 packages for Debian Stretch are available on my apt : http://apt.van-belle.nl The buildlogs are here :  http://downloads.van-belle.nl/samba4/Buildlogs/stretch/    No changes, from my side. check the Samba change log for whats changed. https://www.samba.org/samba/history/samba-4.8.3.html Only ldb is updated to 1.3.4.   If you upgradeing from

Am 25.11.19 um 11:49 schrieb L.P.H. van Belle via samba: > Hai Stefan, > > Yes, i do recommend the setup from 4.9 to 4.10 first. > > If you plan is to upgrade to buster. > 1) on stretch, update samba to 4.10 > 2) Change apt sources do buster, * your now also able to add buster-samba411 of my repo. > 3) apt-get dist upgrade --autoremove --purge > And you able to

Am 2017-12-28 um 15:55 schrieb L.P.H. van Belle via samba: > Hai Stephan, > > You need also this in smb.conf > > # enable offline logins > winbind offline logon = yes On which server(s)? The DCs? the DM? > I did also test my logins with one DC turned off. > And login on the DM is no problem or my pcs, no problem. > > I did not test the AD logins thats

Hi , We ran the classic upgrade and migrated the domain . We were then able to add a Windows Server 2008R2 and dcpromo it. Here are some of the issues we are seeing post migration - Pre the migration, the password backend was LDAP. We had some groups that we had migrated into LDAP from TBD. These groups doesn't seem to have come up in AD. - Any groups that were created in

Hello, It seems Samba4 is having problems with CNAME records. I am seeing the same behavior as mentioned in the thread below. Is there any ETA on a fix for this? This is identical to the problem with MX records. This is currently a much bigger problem than the MX records. I appreciate any assistance. [root at DC1 var]# dig autodiscover.testdom.com CNAME ; <<>> DiG

I added a 2nd DC (ADC2) to a samba-ADS today. debian-9.3, samba-4.6.11 from Louis followed https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory replication works afai see - We wanted to test services after turning off the first DC, and running ADC2 and a DM file-server only. DC1/backup: 10.0.0.224 ADC2: 10.0.0.230 We then get NT_STATUS_NO_LOGON_SERVERS On the

Hi List, I used samba-4.1.18 as domain controller and tried to use romaing profile. I got memory leak when every account with profile path setting logout. Every account with profile path setting eat almost 10mB memory so my samba machine crash if there are many hundred account with profile setting in domain. Any option in smb.conf or operation can help ? This is my reproduce setps: 1. create

Hi, We are running Samba 4.0.9 running on centos 6.5 (64bit) with SecureLinux disabled. Having some share access issues, what are we missing to solve this puzzle? We are attempting to get the MSDFS share working. Until we can fix this we cannot continue. This is the Domain provision and dns, and reverse zone setup. Dhcp server set point all clients at samba as primary dns server. Nslookup

Hi, I am having a problem with Winbind: First, some information .. Domain name :TESTDOM PDC's Netbios name : ubuntu Samba version : 3.0.20 (lateset patches installed) with LDAP backend. Linux : Ubuntu 2.6.10 Samba is running smoothly, with no problems. I want to use Winbin, so I followed Samba HowTo - chapter 23 http://us5.samba.org/samba/docs/man/Samba3-HOWTO/winbind.html#id2634776 I

Hi, When using AD authentication from a rhel8.1 environment with samba-4.10.4 installed, information on the primary group group01 set on the AD side for any user user01 cannot be obtained. [root @ rhel8_1 ~] # id user01 uid=2001107(user01) gid=2000513(domain users) groups=2000513(domain users),2001107(oec0814e),2001103(group01) If you perform the same operation on the same AD from the

It looks like I've gotten the majority of things working in regards to Winbind. Users are being authenticated by the NT4 PDC when connecting to shares, but I can't seem to get things set up correctly to allow logging in via SSH(OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f). It appears as though I'm successfully authenticated by the PDC, but then the connection is

Hello, After noticing some odd behavior on my domain, I realized that many of my DNS records are incorrect and that clients are no longer properly updating DNS. While looking into this, I also discovered that I am unable to delete MX records via AD DNS Manager or samba-tool. Both tools "see" the record but report it does not exist when I attempt to delete it. I can create new MX

more log entries, that vfs module seems to be missing: Jul 20 10:39:34 adc2 smbd[767]: Error loading module '/usr/lib/x86_64-linux-gnu/samba/vfs/acl_xattr.so': /usr/lib/x86_64-linux-gnu/samba/vfs/acl_xattr.so: Kann die Shared-Object-D Jul 20 10:39:34 adc2 smbd[767]: [2018/07/20 10:39:34.601903, 0] ../source3/smbd/vfs.c:184(vfs_init_custom) Jul 20 10:39:34 adc2 smbd[767]: error

... I see this on a 4.8.4 debian DC Aug 31 20:10:19 adc2 samba[657]: task[kccsrv][657]: /usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb Aug 31 20:15:19 adc2 samba[657]: task[kccsrv][657]: [2018/08/31 20:15:19.413299, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 31 20:15:19 adc2 samba[657]: task[kccsrv][657]: /usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb It seems not

My Question: ------------ Is it possible to get 2-way Interdomain Trust relationships working between a Samba domain and an NT4 SP6a domain, while restricting all password hashes to NTLMv2 only? Everything works except the inter-domain trust I'm able to get the NT4 domain to trust the Samba domain, but not the other way around. My System: ---------- I have a perfectly running Samba domain