similar to: samba4 anonymous ldap search

Hi all, I need to add a windows nt4 (sp6a) server to our samba-4.1.6 active directory. I installed nt4 as a 'stand alone server'. So far it doesn't work, I get: When selecting to 'create a computer account in the domain': - the machine account for this computer either does not exist or is inaccessible If I create a computer account manually, and do not check 'create a

Hi all, Further to my AD clients through NAT question: has anyone ever tried this diagnostics tool from microsoft in their samba4 AD installation: http://www.microsoft.com/en-us/download/confirmation.aspx?id=24009 It's supposed to verify connectivity requirements for AD functionality. (replication, port status, etc, etc) At our site, it crashes on verification of udp on port 137. I

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

Hi, Meanwhile we've come many steps further, and a new issue has risen. In samba4 AD we have a user with: - homeDirectory \\server\username - homeDrive P: - scriptPath logon.bat When this user logs on, logon.bat is executed successfully, but homeDirectory is NOT mounted on P: and in the logs we see: canonicalize_connect_path failed for service username, path /\\server\username It seems

Hi Reindl, On 7/15/2015 13:25, Reindl Harald wrote: > i doubt that will work because there is no broadcasting possible over NAT And I was under the impression that broadcasts were more or less from the NT4-domain days, and that now with AD things were (perhaps primarily) done using DNS..? MJ

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

Hi All I am tying to create a user in SAMBA 4 AD with ldapadd, but its not allow me to add multiple mail attributes, here is my ldif of user. dn: CN=ayesha,CN=Users,DC=samba4pdc,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: ayesha name: ayesha sAMAccountName: ayesha userPrincipalName: Ayesha Umar objectCategory:

Hi, On 10/21/2015 01:21 PM, Rowland Penny wrote: > I am now beginning to think it doesn't work at all, if samba4 is > involved in any way. I knew that it wouldn't work on a DC (probably > because the user is DOMAIN\username and not just username), but from my > experiment (see my earlier post) it doesn't seem to work at all, try > your setup with '[home]' and a

On 10/01/2015 03:57 PM, David Whitney wrote: > Hi mourik...are you saying these messages in the logs are new, as in > suddenly these messages are appearing? > > What version of Samba are you running? > We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues for more than a year. I have never noticed them before, and a quick search in the logs doesn't

Hai Mourik Jan/Victor. > MJ definitely understands the problem I'm facing.... Yes, and i do to but you wont listen... ALL My client pc's, windows and linux computers, dont have any uid/gid assigned. My client pc's do access the DCs and multiple member servers with shares. I do distribute settings and files with GPO and these files are on a member server. Yes also as

On 18/11/15 10:24, mourik jan c heupink wrote: > > > On 18-11-2015 10:59, Rowland Penny wrote: >> OK, I am trying to understand this as well, I take it that the uidNumber >> you add is a unique number that is inside the range you have set in >> smb.conf, but what about the gidNumber? do you set it to '515' and is >> this also inside the range? > Yep.

But the issue is: we have many users that do not login locally using windows-workstations, but instead use variour kinds of remote access, like web interfaces, email, vpn, etc, etc. I am not sure what would happen with those services, if I would set accounts to 'change password on next logon'... I know this would work in the case of 'regular' 'interactive logons' as I

On 13/11/15 10:20, mourik jan heupink wrote: > Hi Rowland, Achim, list, > >> The search would probably be better something like this: >> >> res7 = >> samdb.search(expression="(name={31B2F340-016D-11D2-945F-00C04FB984F9})", >> base="CN=Policies,CN=System," + basedn, >>

Hi, Does anyone have any experience, good or bad, with "Remove Active Directory Domain Controller Metadata" script from technet: http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 Regards, MJ

On 10/7/2015 7:31 AM, mourik jan c heupink wrote: > On 7-10-2015 13:18, mourik jan c heupink wrote: >> So my dc3 seems unsynced or so. >> >> So I am now checking to make sure that my rsync replication script >> works as it should. (I'm guesssing it does NOT) > > The rsync seems to be working as it should, so now I'm > guessing that idmap.ldb differs

Hi list, i have a samba4 AD server working, and squid 2.7 auth internal...so i need change the auth of squid to my samba4 server....i search in google but information is incomplete and diferent...any official site, wiki or user experince to get information about? regards and thanks -- Administrador de Redes Nodo Provincial ESILT OS: Debian 7.5 wheezy

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba