similar to: Samba3 print server in a Samba4 domain

On Sun, 10 May 2015, Rowland Penny wrote: > Have you really got 19 reverse zones for your samba 4 active directory ? Yep :-) > Can you try running 'samba-tool ldapcmp ldap://<YOUR_FIRST_DC> ldap://<YOUR_SECOND_DC> Interesting. DC1 and DC2 have many differences; DC1 and DC3 are the same. Maybe I will demote DC2 and join it again. > Check if you actually have dns

Samba 4.1.1 using BIND_DLZ (bind-9.9.1-0.1.P2) on CentOS 6.5 x86_64. I have two domain controllers, dc-1 and dc-2, which each have three network interfaces. Selinux is in permissive mode, and iptables is off. One interface on each dc is to be shut down. So, on dc-1, I do: # nsupdate -g update delete europa.icse.cornell.edu A 192.168.3.250 update delete europa.icse.cornell.edu A 192.168.3.251

Roland, Thank you very much for your attention to this. You should get a medal for all the help you give everyone on this list. On Sun, 10 May 2015, Rowland Penny wrote: > Why ? And why don't they show up when you ask for the zones with samba-tool ? I have that many subnets. As for why they don't show up: they are defined in BIND's configuration and not samba's; they never

Hi , I'm trying to migrate an old server with ubuntu 9.10 ,samba3 +ldap to a new server ubunut 14.04. I could follow the steps of https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_%28classic_upgrade%29 but when running samba-domain tool classicupgrade --dbdir = / util / tdb --use-xattrs = yes --realm = gruporesasco.local --dns-backend = BIND9_DLZ

Hi, I test samba 3.0.23a and I used a existant LDAP tree. But, samba 3.0.23a won't start : In smbd.log : ...... [2006/07/28 09:58:14, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2006/07/28 09:58:14, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2006/07/28 09:58:14, 10]

I?m setting up our new server that will handle file storage. The new system is redhat running samba 3.0.23c. We currently have this same service running on DEC server running version 3.0.20 without any issues. Here is the smb.conf for both? [global] passdb backend = ldapsam:ldap://xxxxxxxxx ldap suffix = dc=temple,dc=edu name resolve order = wins bcast hosts ldap machine suffix =

Hello, I've got a problem using ldap support on my Ubuntu jaunty. Here are the versions : samba/jaunty uptodate 2:3.3.2-1ubuntu3.2 smbldap-tools/jaunty uptodate 0.9.4-1 First of all, smbldap-groupadd don't use the sambaNextRid to create a group, it compute it. Is this a normal way ? I've patch smbldap-groupadd to do this : - #$group_rid = 2*$_groupGidNumber+1001; +

Hello All, I am currently having an issue with my samba PDC. I have recently updated to 3.6.5 Samba, and have made what i believe to be the correct changes in my config to account for the changes to the idmap system. My setup is as follows, SAMBA PDC on RHEL 6.2, which authenticates passwords through Kerberos, and Deals with user profiles via LDAP. I had about 25 Windows clients which were able

On 10/05/15 15:34, Steve Thompson wrote: > On Sun, 10 May 2015, Rowland Penny wrote: > >> Have you really got 19 reverse zones for your samba 4 active directory ? > > Yep :-) Why ? And why don't they show up when you ask for the zones with samba-tool ? > >> Can you try running 'samba-tool ldapcmp ldap://<YOUR_FIRST_DC> >>

So, after rebuilding and finding that somehow fixed my intial issue of failing to connect to the ldap server, I am now having an issue with the guest account. Any ideas, I've done some searches but haven't been having any luck. This is on RHEL. Help is greatly appreciated. Thanks in advance. Maximum core file size limits now 16777216(soft) -1(hard) get_current_groups: user is in 7 groups:

Samba 4.0.0, CentOS 6.4, bind 9.9 DLZ. I could use some help debugging a strange DNS issue. I have two Samba4 domain controllers, dc-1.europa.icse.cornell.edu and dc-2.europa.icse.cornell.edu. On either dc-1 or dc-2 or any client host: # host dc-1.europa.icse.cornell.edu dc-2 dc-1.europa.icse.cornell.edu has address 192.168.15.250 dc-1.europa.icse.cornell.edu has address 192.168.3.250

Hi ! I'm running a samba domain controler under rhel 5. It's version 3.0.33-3.7.el5. I've also installed a ldap server to store users and groups and so on. When I try a pdbedit -v david, I get the following : Unix username: david NT username: david Account Flags: [U ] User SID: S-1-5-21-215069222-2822928016-2390355089-1016 Finding user

Ok, this one is driving me nuts. I am using smbk5pwd to sync samba, ldap, and heimdal kerberos passwords. I have the overlay working if called from the ldappasswd command. However, if I set "ldap passwd sync = only", I get no joy from Samba. It does a series of searches, but doesn't send any kind of password update request to the server. If I use ldap passwd sync = yes, then

On Sun, 10 May 2015, Rowland Penny wrote: > can you post your named conf files. Sure. This is samba's: dlz "AD DNS Zone" { database "dlopen /mnt/domain/samba/europa/lib/bind9/dlz_bind9_9.so"; }; and this is BIND's (notice the last line commented out): options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db";

I have a pair of CentOS 6.4 servers running Samba 4.0.3 as DC, and a set of member file servers, also CentOS 6, running Samba 3.6.9, joined to the Samba4 domain and running sssd. Birds sing and violins play. Everyone is happy. Until... A share definition such as: [g_sysmgr] path = /fs/europa/g_sysmgr valid users = +sysgrp works fine from both Linux and Windows clients, eg: %

On 10/05/15 16:08, Steve Thompson wrote: > Roland, > > Thank you very much for your attention to this. You should get a medal > for all the help you give everyone on this list. > > On Sun, 10 May 2015, Rowland Penny wrote: > >> Why ? And why don't they show up when you ask for the zones with >> samba-tool ? > > I have that many subnets. As for why they

Hello, I seem to be having an issue where one of my BDC servers constantly needs to rebind to the "master" ldap server (ldap1.ae-solutions.com). Whenever this happens I see several entries in the log like this: "smbldap_search_ext: waiting 928 milliseconds for LDAP replication." It appears to cause delay when browsing samba shares whenever this happens. The master

Hello all! Is there a reason that the "root" uid is sought after in "ldap suffix" and not in "ldap user suffix","ldap suffix" when smbd is started? This seems incorrect to me. I have three domains in the same tree and it's arranged like so (varying the last dc on each suffix): ldap group suffix = cn=Groups,dc=devex ldap idmap suffix

Hi All, I'm posting this just in case someone can tell what's going on with samba that would prevent this from working. Cisco has the ability to see a smb share from their webvpn product with CIFS. We can browse windows shares but not samba shares. The following log outputs are from my ASA firewall. I know these are cisco logs but I'm hoping a lightbulb will come on for someone. The

Hi everyone, I'm unable to make the account lockout to work properly. & this is driving me mad. I am running samba Version 3.0.23c-1.fc5 as a PDC with openldap 2.3.19 on a fc5 (all packages from yum). I was running a 3.0.21 with the same issue. I'm using as well the Idealx script to manage the LDAP. The fact: I have a very strange behavior. The domain policy have been setup with the