similar to: samba4 | access ldap, what password

Hi all, I need to add a windows nt4 (sp6a) server to our samba-4.1.6 active directory. I installed nt4 as a 'stand alone server'. So far it doesn't work, I get: When selecting to 'create a computer account in the domain': - the machine account for this computer either does not exist or is inaccessible If I create a computer account manually, and do not check 'create a

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

Hai Mourik Jan/Victor. > MJ definitely understands the problem I'm facing.... Yes, and i do to but you wont listen... ALL My client pc's, windows and linux computers, dont have any uid/gid assigned. My client pc's do access the DCs and multiple member servers with shares. I do distribute settings and files with GPO and these files are on a member server. Yes also as

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi all, Further to my AD clients through NAT question: has anyone ever tried this diagnostics tool from microsoft in their samba4 AD installation: http://www.microsoft.com/en-us/download/confirmation.aspx?id=24009 It's supposed to verify connectivity requirements for AD functionality. (replication, port status, etc, etc) At our site, it crashes on verification of udp on port 137. I

Hi, Small question: I have removed 177000 deleted objects from our DC=DOMAINDNSZONES,DC=...ldb, effectively reducing it's filesize from 1.1GB to 6.3MB. Now I would like to replace the big .ldb with the small .ldb.backup Is it safe to do: - service sernet-samba-ad stop - tdbbackup DC=DOMAINDNSZONES,DC=...ldb -s .backup - mv DC=DOMAINDNSZONES,DC=...ldb DC=DOMAINDNSZONES,DC=...deleted - cp

Hi Reindl, On 7/15/2015 13:25, Reindl Harald wrote: > i doubt that will work because there is no broadcasting possible over NAT And I was under the impression that broadcasts were more or less from the NT4-domain days, and that now with AD things were (perhaps primarily) done using DNS..? MJ

Hi, I found some discussion here in 2010 about allowing/disallowing anonymous ldap access in samba4, however, nothing much recent comes up. I see that my samba4 does not allow anonymous access. Is there a way to enable it in samba4, like the way we had it with samba3/openldap? (we restricted access to sensitive info, but allowed anon search access to many user details like mail addresses,

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

Hi, In our samba3 days, we provided a homedirectory like \\filehost\username. Now, with samba4 / ADUC using "\\filehost\username" gives the error: "the home folder could not be created because: the network name cannot be found". We have a little root preexec scripts creates the directory and sets permissions, so ADUC only needs to accept the

Hi, On 10/21/2015 01:21 PM, Rowland Penny wrote: > I am now beginning to think it doesn't work at all, if samba4 is > involved in any way. I knew that it wouldn't work on a DC (probably > because the user is DOMAIN\username and not just username), but from my > experiment (see my earlier post) it doesn't seem to work at all, try > your setup with '[home]' and a

On 18/11/15 09:37, mourik jan c heupink wrote: > > > On 18-11-2015 10:13, L.P.H. van Belle wrote: >> Hai Mourik Jan/Victor. >> >>> MJ definitely understands the problem I'm facing.... >> Yes, and i do to but you wont listen... > > Could it perhaps be that the vital detail is that Viktor (and me too) > are not using windows (security tab) to manage

Hi I have a data set that needs to be plotted (see below) When I plot it using the simple plot(read_count ~ Cn), I get box plots for the read_count numbers plotted according to Cn. The Cn's on the x-axis are ordered: 10000, 100, 1000, 40, 400, 4000... How do I plot so that Cn is plotted on the x-axis in an ascending order: 40, 60, 80, .......10000? Thanks for your help. Anjan ID

Hi All I am tying to create a user in SAMBA 4 AD with ldapadd, but its not allow me to add multiple mail attributes, here is my ldif of user. dn: CN=ayesha,CN=Users,DC=samba4pdc,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: ayesha name: ayesha sAMAccountName: ayesha userPrincipalName: Ayesha Umar objectCategory:

On 10/01/2015 03:57 PM, David Whitney wrote: > Hi mourik...are you saying these messages in the logs are new, as in > suddenly these messages are appearing? > > What version of Samba are you running? > We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues for more than a year. I have never noticed them before, and a quick search in the logs doesn't

Hi, I've been experimenting with samba4 for a little while now, and some things go very smoothly, others not quite so. :-) However I have some questions that hopefully some of you can help with. 1. In samba3/openldap we have seperate ou for groups and users. The samba-tool classicupgrade migrates these both into one single CN=Users. Is there a way to seperate them, like we had in samba3?

Hi, We currently run all public ip's inside our network, DC's and workstations too. We are thinking perhaps to divide our network into a NATed workstations segment, but keep our DC's and fileservers IPs public as they are now. We are running sernet-samba, mainly win7 clients, using GPO's, shared drives. I did a quick test on a win7 workstation, put it in the NAT segment,

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

On 18/11/15 10:24, mourik jan c heupink wrote: > > > On 18-11-2015 10:59, Rowland Penny wrote: >> OK, I am trying to understand this as well, I take it that the uidNumber >> you add is a unique number that is inside the range you have set in >> smb.conf, but what about the gidNumber? do you set it to '515' and is >> this also inside the range? > Yep.