similar to: How to tell a machine is properly joined to a domain?

Hi everyone, I would like to have some input on ressources access from a workstation logged on a RODC server that has to connect on hub site servers. After login in the remote windows workstation, I have LOGONSERVER environment variable set to the local RODC server (workstation and user credentials have been preloaded). Everything works fine on local server. However if I want to connect to

Can anyone provide me with a list of the DNS entries that are created when you run the command 'net ads dns update' ? Regards Kevin Pascoe Western Power Distribution (South West) plc / Western Power Distribution (South Wales) plc / Western Power Distribution (East Midlands) plc / Western Power Distribution (West Midlands) plc Registered in England and Wales Registered number:

Hi Garming, > As far I know, all this should work as you would expect. Quite recently, > Andrew Bartlett and I went about testing some of the behaviour of the > KDC and confirming behaviour such as RODC ticket forwarding. thanks for the input. It gives me hope to dig deeper! I have some more time to spend on this issue today, I gonna try some more scenario. > The one thing to check

Hello ! I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. I have tried so many things but at this point, i really don't know what to do. I can see the new dc111 computer object on smb4dc serveur but the object is disable. If someone have an idea... Best regards root at dc111:~# samba-tool domain join

On 26/02/15 16:54, Marc Muehlfeld wrote: > Hello John, > > Am 26.02.2015 um 12:17 schrieb John: >> Is it possible to make GPO changes from the server (i.e. without using >> Windows) ? > No. There's no tool for *nix, to edit GPOs. At least I've never seen > one. :-) > > > Regards, > Marc > Shame, that. But I kind of expected that to be the answer.

Hi, I installed a RODC on my mailserver to have a local authentication for mailusers on the machine which doesn't rely on a always-on-connetion to the office. The problem is now that the user-preload doesn't work so that the RODC is not able to authenticate the users itself: samba-tool rodc preload <user> --server <DC1> -U Administrator Password for [AD\Administrator]:

Hi, I would like to join a samba 4.2.0 file server sitting in a branch office, with connection only to a RODC (and only the RODC can talk to the RWDC). Was wondering what's the workflow for doing this in samba. For Windows machines, Microsoft seems to have planned two workflows for this: 1. Use new flag to NetJoinDomain() API to join using the RODC

Hai, In a bit testing with software deployment through GPO. ? Now i noticed te following. If i setup my software source somewhere on the sysvol share ( and probely any other share on the DC) then i can deploy the software with computer and user GPO setting. Aka works ok good all settings with software deployment. ? Now i noticed the following. I did setup a share on a member server the AD

Hi Denis, Thanks for your advices. I have in mind about your kerberos problem in a large environment but i was thinking about problem occuring at 20 and more DCC's So last night, i modified all my krb5.conf (DC and file server) as you suggest but problem persist. root at dc111:~# samba-tool domain join pr.educationetformation.fr DC -U administrator --realm=PR.EDUCATIONETFORMATION.FR -W PR

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

yes i realized that there is something wrong with BIND9_FLATFILE while encountering with samba_upgradedns -h which doesn't show BIND9_FLATFILE Any help on*drs repl* not working i think it is pointing to wrong FQDN how do i correct that ? > >/ Not able to to view replication.(samba-tool drs showrepl) > />/ > />/ > />/ [root at dc2

Hi, is it possible to create a Samba share with full Windows ACL support based on a mounted NFS share? What is needed e.g. as NFS mount options? Regards Tim

Hi everyone, after a classicupgrade from a samba3 domain to a samba4, I have a weird issue related to DCOM and named pipes. The switch to samba4 went fine and everything works perfectly except one old software that uses Windows named pipes and DCOM for client-server communication. When trying to access the DCOM server the software fails. The failure can be easily reproduced with a simple

Hi everyone, last week I took a look at a samba3 PDC server with some performance issues. The samba3 PDC has an ldap backend and has nss_ldap configured properly. It has also interdomain trust so it has nss_winbind configured too, so in /etc/nsswitch.conf there is : passwd: compat ldap winbind group: compat ldap winbind This setup has some performance issues on the nss_ldap part of the

Hi Marc, > Am 08.04.2015 um 17:25 schrieb BRIEC, Pierre: >> On Site1, the machines accounts are specifics, same for the Users and >> Groups except 1 group that is common with Site2 (The Teachers). >> Today, each site is independant, >> >> Now, i would like a create a new domain Samba4 AD whith all machines and >> users from site1 and site2 together. >>

Hello I am still struggling with the NTP server configuration. Is there no method by which I can sync all my domain users with the same time as on server because I have to face alot of issue due to the same. I have searched alot but the only thing which I found was to add these two lines in my ntp.conf ntpsigndsocket /opt/ad/samba4/var/run/ntp_signd/ restrict default mssntp I am using CentOS 6

Hi all Recently i noticed that upon starting the samba4 'samba' daemon, that it changes the group ownership of the socket for ntpd to *staff* $ls -l /usr/local/samba/var/lib/ntp_signd/ total 0 srwxrwxrwx 1 root *staff* 0 May 6 16:35 socket The documentation says it needs to be *ntp*.... (FYI: i'm running this on debian wheezy) I have just added ntp to group staff, but that seems

hi all, migration from samba 3 (without winbind) to samba4. New user use idmap range. But I don't know what is the range. By uidNumber, I just see 3000000 is the first uidNumber but what is the max (default max) ? After migration can I change range in smb.conf by idmap config *:range = 2500-1000000 ty St?phane Purnelle ----------------------------------- St?phane PURNELLE

How do I configure my GNU/Linux system to allow users to change their own password? When I type in the passwd command as a domain user it prompts to change the kerberos password but doesn't allow them to change it. I get an error that say password changes may not permitted on this account.

Hi, I use Samba + Ldapas a domain controller but after the update the version of Debian6 to Debain 7I can't authenticate my users in the Samba server. logs: [2013/05/23 08:29:55.811240, 1] auth/server_info.c:386(samu_to_SamInfo3) The primary group domain sid(S-1-5-21-3651478259-4121578499-3132057975-513) does not match the domain sid(S-1-5-21-3182595135-1874831366-4239877494) for