similar to: Winbind strip domain from username?

Hello, I'm getting replication errors of this type on the Samba (version 4.1.4) server (name=Roquefort): ##### ############################# ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (8418, 'WERR_DS_DRA_SCHEMA_MISMATCH') File

On Tue, 9 Jul 2024 14:21:58 -0400 Luc Lalonde <luc.lalonde at polymtl.ca> wrote: > I get the same error using 'net ads join' > > Here are my sanitized config files: > > ############## begin /etc/krb5.conf #################### > > includedir /etc/krb5.conf.d/ Samba does not like the 'includedir' line and doesn't require most of the other lines,

I get the same error using 'net ads join' Here are my sanitized config files: ############## begin /etc/krb5.conf #################### includedir /etc/krb5.conf.d/ [logging] ?default = SYSLOG:INFO:DAEMON ?kdc = SYSLOG:INFO:DAEMON ?admin_server = SYSLOG:INFO:DAEMON [libdefaults] default_realm =EXAMPLE.ORG ?dns_lookup_realm = false ?dns_lookup_kdc = false ?ticket_lifetime = 10h

Still doesn't work for that user... for works for another user: [root at roquefort samba]# cp -av ./lib64/python2.6/site-packages/samba/samdb.py ./lib64/python2.6/site-packages/samba/samdb.py.bak « ./lib64/python2.6/site-packages/samba/samdb.py » -> « ./lib64/python2.6/site-packages/samba/samdb.py.bak » [root at roquefort samba]# vi ./lib64/python2.6/site-packages/samba/samdb.py [root

Hello Folks, I'm getting this strange error when I try to add a particular member to a group: [root at roquefort admin]# /usr/local/samba/bin/samba-tool group addmembers foogroup foouser ERROR(exception): Failed to add members "foouser" to group "foogroup" - Unable to find "foouser". Operation cancelled. File

This is the case for this user too... Could it be that Samba is trying to work with the old SID??? Le 2017-04-26 à 10:47, Dale Renton via samba a écrit : > On Tue, Apr 25, 2017 at 3:31 PM, Luc Lalonde via samba < > samba at lists.samba.org> wrote: > >> The user exists in AD: >> >> - I can see the user using 'wbinfo', 'samba-tool user list'

On Tue, 9 Jul 2024 11:31:04 -0400 Luc Lalonde via samba <samba at lists.samba.org> wrote: > Hello, > > This problem has come back for me and I can't seem to get around it. > > When I try to access a share, I get this error: > > session setup failed: NT_STATUS_NO_IMPERSONATION_TOKEN > > Here's what I have in the logs (samba-4.20.1-1.el9.x86_64): >

Hello Kevin, We have a  Samba/Windows20008R2 domain that's been running a few years now. Here are the details: * clients auth with SSSD (ldap, kerberos, ldap_schema=rfc2307bis) * idmap * samba on clients/server for joining domain We have scripts that automatically create users with UnixHomeDir, UID and GUID numbers within AD. I don't know about using WInbind...  I dropped that

On Fri, 28 Apr 2017 09:41:31 -0400 Luc Lalonde <Luc.Lalonde at polymtl.ca> wrote: > Hello Rowland, > > Have you tried deleting a user, re-creating the same user and then > try to add him to a group? > > I'm convinced that this will point us in the right direction to > correct the bug. > Yes and to confirm it, I just did it again: samba-tool user create User2

On Fri, 28 Apr 2017 11:01:14 -0400 Luc Lalonde <Luc.Lalonde at polymtl.ca> wrote: > Hello Rowland, > > Is this what you mean? > > [root at roquefort ~]# echo $LANG > fr_CA.utf8 > What I was trying to get at is, does your username have any of those funny marks above some of the letters (you can tell I am English, I don't know the correct name for them because we

Hai, ? Im try to get my id for administrator groups on both server the same. ? with?4.1.17 the solution was simple.. we stop samba on both servers. scp /var/lib/samba/private/idmap.ldb root at 192.168.0.2:/var/lib/samba/private/ ? started samba, and the id's where the same. ? Im using winbindd now with samba 4.2.1 but... ? DC1:? id administrator uid=0(root) gid=100(users)

Please read the reported bug and bjorn answer.. which does not help any to a solution of fix, or explenation. But the big question now is, does someone somewhere know what bjorn is talking about. i did search for "gencache" but no go here.. just from old documentation. https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/tdb.html gencache.tdb Generic caching database.

I forgot about ldbsearch. Here is a dump of xid numbers. root at dc01:~# ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber xidNumber: 3000028 xidNumber: 3000013 xidNumber: 3000033 xidNumber: 3000003 xidNumber: 3000032 xidNumber: 3000023 xidNumber: 3000019 xidNumber: 3000010 xidNumber: 65534 xidNumber: 3000031 xidNumber: 3000022 xidNumber: 3000026 xidNumber: 3000017 xidNumber: 3000027

The user exists in AD: - I can see the user using 'wbinfo', 'samba-tool user list' - I can add the user to a group with 'Active Directory Users and Computers' in Windows 2008R2 - It's seems impossible to use 'samba-tool group addmembers foogroup foouser' I looked at the user's attributes but can't find anything different from any other user that

Hello Tim, Wow, great documentation! ? That really clears a lot of the terminology? for me. We have to remove our Win2008R2 Servers before Jan2020.?? Hopefully Samba 4.11.x will permit us to join a Win2012R2 Server at a 2008R2 functional level...? Your documentation gives steps on how to do this.? But I need some clarifications... Here's my understanding of the workflow: 1. Upgrade

Hi, I'm trying to find out consequences of overlapped idmap settings that used with 4.3.11 DC's. I'm about to upgrade these DC's to 4.8 version. Before deploying new DCs, I want to make sure that any side effects regarding id map settings will be left behind. # ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber \ | cut -d' ' -f2 | sort 0 100 3000000

Thanks Luc, First, can I just use the small /etc/krb5.conf suggested in Samba AD docs or do I need something more substantial on the server & client for Kerberos NFS to work? [libdefaults]         default_realm = SUBDOMAIN.DOMAIN.COM         dns_lookup_realm = false         dns_lookup_kdc = true I understand a /etc/krb5.keytab file has to be created on both server & client. Most

On 30/04/15 09:09, L.P.H. van Belle wrote: > ( sorry for mailing directly bjorn, but please have a look ) > > I still think this is a bug.. > > why not a bug: > If i do assign a UID/GID to a user, then yes, this wil work fine. > new users and groups sure.. but now im talking about the default domain groups.. > > why a bug: > User administrator and the domain groups

Hello Folks, I'm trying to get a logon script to execute via a GPO with Samba 4.0.5. I used the Group Policy Editor that came with the Administration tools and linked a simple 'logon.bat' batch file to automatically mount a network share for a given 'OU=students'. When I log in with a user that's in this container, it does not seem to execute the login script. Anyone

I have a brand-new install of Debian 8 without systemd and a freshly-built Samba 4 install with issues. I created this as a standalone AD DC, setup group policies, etc and then took it to the client location. Now nothing works. I keep getting "RPC server unavailable" on Windows machines and trying to list shares on the DC itself results in NT_STATUS_INVALID_SID. I am lost as there are