similar to: Samba4: Upload an Administrative Policy Template?

nobody any suggestions for me ? :-(( im running kernel 3.2. from backports. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] >Namens L.P.H. van Belle >Verzonden: 2012-06-18 15:02 >Aan: samba at lists.samba.org >Onderwerp: [Samba] samba4 on debian squeeze > >hai, >? >Im trying to install

On 08/03/2023 14:38, Fabrizio Rompani via samba wrote: > hi , > thank's for your reply . > no , current DC doesn't have that GUID: > > samba-tool spn list zimbra$ > zimbra$ > ... > ldap/3ecb2a51-b21d-4bef-84ed-700db7963ff4._msdcs.domain.lan > > > samba-tool spn list landc$ > landc$ > ... >

On Mon, 19 Sep 2016 11:57:38 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > > On Mon, 19 Sep 2016 10:42:34 -0400 > > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > >

On Mon, 19 Sep 2016 10:42:34 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > > No it shouldn't be replicated, the big hint is > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the DC that holds > > the > > RID master FSMO role, so I supposed the question is,

Attempting to debug issues with replication I ldapcmd finds differences with the case of the "DC" attribute? Is this normal? LARKIN28 is Samba4 4.5.4, while WINDC1 is Windows 2008R2. [root at larkin28 samba]# samba-tool ldapcmp ldap://larkin28.micore.us ldap://windc1.micore.us -Uadministrator dnsdomain Password for [BACKBONE\administrator]: * Comparing [DNSDOMAIN] context... *

Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >> On Mon, 19 Sep 2016 11:57:38 -0400 >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >> >>> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>>> On Mon, 19 Sep 2016 10:42:34 -0400

> > Initially, it appears to have worked. ... > > It shows the same on one of the S4 DCs, but the > > DomainDnsZonesMasterRole still shows as "no current owner" on the > > third S4 DC [all Sernet 4.5.2].  Argh. > You could try checking the database on the third DC, 'samba-tool > dbcheck --help' for more info. > You could also try forcing

Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) domain hangs at replication CN=Configuration received 1630 out of approximately 1663 objects.   Only message I can find in the event log on the 2008R2 server is -  Internal event: The local directory service received an exception from a remote procedure call (RPC) connection. Extended error information is not available.  directory

On 9/19/2016 1:37 PM, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 19:19:08 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: >>> >>> Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >>>> On Mon, 19 Sep 2016 11:57:38 -0400 >>>> Adam

Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to another, all roles transfered except the DNS related ones - those fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS [root at larkin28 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=LARKIN28,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us InfrastructureMasterRole owner: CN=NTDS

On Sun, 15 Jan 2017 20:14:12 -0500 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Sun, 2017-01-15 at 14:39 -0500, Adam Tauno Williams via samba > wrote: > > Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) > > domain hangs at replication CN=Configuration received 1630 out of > > approximately 1663 objects. > > Only

Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > Quoting Rowland Penny via samba <samba at lists.samba.org>: >>> samba-tool's dbcheck finds only two errors in cn=Configuration, but it >>> does not repair them.  These appear to be references to an original, >>> long since demoted, DC.  But these values appear in neither the

I believe a schema change on a Windows DC (2008rc) has broken replication with our S4 DCs. Anyone have any tips or pointers to resolve this? I have three S4 DCs [CentOS6] and one Windows 2008R2 DC. The Windows 2008R2 DC has the schema master FSMO, and I believe the Exchange schema was added. I am willing to pay US dollars to get this issue resolved. I need the replication restored, the

I removed a DC using the DC removal tool mentioned in http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 as https://bugzilla.samba.org/show_bug.cgi?id=10734 prevents normal DC demotion. The DC was still all over in DNS, so I had to pick it out. Now replication between the remaining three DCs is broken [root at larkin26 ~]# samba-tool drs showrepl

On 14/04/15 20:59, Adam Tauno Williams wrote: > On Tue, 2015-04-14 at 15:20 +0100, Rowland Penny wrote: >> On 14/04/15 14:59, Adam Tauno Williams wrote: >>> On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote: >>>> Hi! I'm trying to add a member to be used as fileserver, following the >>>> guides at: >>>> -

Quoting Adam Tauno Williams <awilliam at whitemice.org>: >>>> It should work, it sounds like a mis-configuration somewhere, can you >>>> post the smb.conf, /etc/nsswitch.conf, /etc/resolv.conf and >>>> /etc/krb5.conf from the member server. >>> "wbinfo -u" lists 415 lines >>> "getent passwd" returns 93 lines

hi , thank's for your reply . no , current DC doesn't have that GUID: samba-tool spn list zimbra$ zimbra$ ... ldap/3ecb2a51-b21d-4bef-84ed-700db7963ff4._msdcs.domain.lan samba-tool spn list landc$ landc$ ... ldap/5bf8cf1f-1e35-40c6-a20d-0abc88238d92._msdcs.domain.lan that GUID is of the machine we are trying to join to: samba-tool spn list nextcloud$ nextcloud$ ...

I have shutdown the last Samba4 DC in the domain, so only Windows 2008 DCs remain. I can access one Samba file server, with either username+password or kerberos (-k) To access another file server only kerberos -k works.  Attempting to access with username+password fails with NT_STATUS_ACCESS_DENIED $ smbclient -d10 -U adam -W BACKBONE \\\\arabis- red.micore.us\\cis_packs ... NTLMSSP Sign/Seal -

I have updated one of my S4 DCs to 4.5.5, somewhat excited about the line in the ChangeLog * Bug #12600 - dbcheck does not find or fix dangling links on live objects Do I misunderstand the scope of this bug? # samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls ... ERROR: no target object found for GUID component for member in object CN=Domain Users,CN=Users,XXXXX -

Hi all, I am going to be in the process of updating my custom system policy templates (probably within a month or two) and I am asking for what policies anyone is in need of to help them deploy samba as a domain controller. Currently I basically have a single template.adm file, a few people have asked me to separate them into a few different files that would serve an overall single purpose - I