similar to: Howto for manage unix data with ADUC

Hi, I've been using Samba 3 (standalone server, workgroup setup) for a long looong time and now I want to migrate to Samba 4 AD DC setup with clients joined to the newly created AD domain and all the bells and whistles that come with it. I've setup an AD DC (Debian wheezy with samba from backports) that will only handle authentication and a second AD DC that will also serve shares.

I have a follow up to the question I asked and found a work around for today. Is there any tool in samba used to manipulate RFC2307 aka NIS Extensions that do not involve manipulating the ldap tree with a ldapmodify or directly editing the sam database with ldbedit? I see in the samba wiki that there is https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC that says ADUC can be used from

Hi, Sorry for my urgent request, but we have a problem with user who have strange displayname Yesterday (23/02/2014), we do a classic-upgrade from a ldap tree to a DC server. But user with accent have bad displayName and maybe cause problem when user try to connect to her computer. I'm unable to change displayName by ADUC, ldbmodify or ldbedit. GENSEC backend 'gssapi_spnego'

Hi, I have a problem when I try to setup a user with data in TS profile and environment TAB If I setup home dir in TS profile, he just say that directory already exist but OK If I try to put in environment TAB path of software to load when user will log on server, ADUC display a message "Operation failed: the parameter is incorrect" samba 4.1.2 both DC and member (file-server)

Hello, I'm using rfc2307 to enable Unix attributes on my DC's. Recently when adding a user and attempting to add a UID with the RSAT, I receiving the following error. 'Duplicate UID. Assign a uniqueUID.' How do I list all users and their UID? I tried using 'pdbedit' and wbinfo. Pdbedit appears to list the XID's and wbinfo needs me to specify a user name. I

>What is wrong with the Samba wiki, what didn't go exactly like the wiki ? https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC Well take this wiki that I'm trying to follow to add the AD uid/gid to the objects. It's helpful and confusing, but maybe because I'm just not informed enough. I got the property pages to show in AD Users & Computers,

Hi, I am currently testing a self compiled 4.7.0rc3 AD DC and a samba member server acting as a file server. I have them configured to use rfc2307 attributes so that the samba users can access the shares on the member server. Everything seems to be working as expected. The problem I am facing is I need to add about 150 users. Once the initial load of users is added I want to use the rsat tools

Am 10. Dezember 2014 22:26:52 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 10/12/14 21:05, Tim wrote: >> Thanks for your answer and time you offer for me. That makes it a bit > >> clearer. >> >> I searched the web and found that rsat needs to have the nis tools >> installed. > >Good luck with trying to install 'Service for

Greetings, Rowland Penny! >>>>> Ok, good. >>>>> Now, how can I get RFC2307 attributes populated automatically upon >>>>> users or >>>>> groups creation? >>>> You can't :-( >>>> I'm experimenting with >>>> https://github.com/laotse/SambaPosix >>>> but it's quite buggy (at least

Hi all, I have a question about memory usage and IPC$ share. I'am auditing the swap usage of my server because I already have a problem with a full swap. I see that the smbd process take < 200Mo on swap : Example : PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 24429 lge 15 0 197m 39m 14m S 0.3 1.0 0:15.17 smbd but some process use more than 200Mo

Hi, I test (replacement of nslcd ) winbind in member server. I used Samba4/Winbind howto and howto for member server. wbinfo -u and wbinfo -g work fine but getent passwd not work (getent not list user from AD) Why ? Anyone have a idea ? thx St?phane ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique

Hi all, I have a problem during classic-upgrade : Importing groups Group already exists sid=S-1-5-21-4023731279-819928261-1073345436-512, groupname=Domain Admins existing_groupname=Domain Admins, Ignoring. Group already exists sid=S-1-5-21-4023731279-819928261-1073345436-514, groupname=Domain Guest existing_groupname=Domain Guests, Ignoring. Group already exists

Thanks for your advice regarding modifying the ldb. Before I do that I have to tell that uids and gids are automatically assigned in ADUC Unix tab. All have to do is to choose the NIS domain. After changing this field all other Unix attributes are automatially filled in. So this works. I tried something different for testing: I added a user with samba-tool using a script and assigned a random

El 09/04/15 a les 16:20, Rowland Penny ha escrit: > On 09/04/15 14:58, Luca Olivetti wrote: >> El 09/04/15 a les 14:57, Andrey Repin ha escrit: >>>> Using the RFC2307 attributes, you will get the same ID number on every >>>> Unix machine, whereas if you use the 'rid' backend, whilst you should >>>> get the same ID on each Unix machine, you will

Hi, I test samba4 on test server. I have an error when samb-too; try to create sysvol directory. samba-tool display a error message "FS don't support ACL" it seems that sysvol directory is created under "locks directory". What are locks directory ? How can I specify a other path for sysvol (path with ACL support) My structure is : Samba installation :

Yes, A DC can have 2 IP... bu when doing classic-upgrade or provision... only one IP must be active. Otherwise DNs config part can choice bad IP, I don't know why but.... regards St?phane Purnelle ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique Corman S.A. Tel : 00 32 (0)87/342467

Hi all, I have a problem when I try to compil samba 4.0.6 on my test machine (suse linux enterprise server 11 SP2 32-bits). output of compilation : [3353/3781] Linking default/lib/param/libsamba-hostconfig.so [3354/3781] Linking default/lib/tdb_wrap/libtdb-wrap.so [3355/3781] Linking default/libcli/security/libsamba-security.so [3356/3781] Linking default/lib/util/libutil_tdb.so

Am 2017-10-10 um 09:57 schrieb Rowland Penny via samba: > On Tue, 10 Oct 2017 09:19:11 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> >> The admin there created a group via RSAT. >> And that group was not visible/usable on the DM server. > > It wouldn't be if the group was created as just a windows group. How to

Hi, I have a big problem. I see that samba 4 don't have bad lockout attempts and if samba don't have this, I cannot deploy samba 4. This setting is a security setting, it's very important. A virus attack can be modered by this setting (password crack) and the security bookfor IS from my compagny says : 11.1.3 User password management 11.1.3.1 Recommendations for access

hi all, migration from samba 3 (without winbind) to samba4. New user use idmap range. But I don't know what is the range. By uidNumber, I just see 3000000 is the first uidNumber but what is the max (default max) ? After migration can I change range in smb.conf by idmap config *:range = 2500-1000000 ty St?phane Purnelle ----------------------------------- St?phane PURNELLE