similar to: sssd / classicupgrade / computer accounts

Hi all, I hope that this request for help will be the last one, for a while to come. Today, sernet support helped my sort out our DC mess, and they did a great job. However, sssd no longer works, and I hope someone here can help out. We used to have DC1, DC2 and DC3. DC1 was the classic-upgraded, first, 'original' DC, and had to be shutdown, unfortunately. So only DC2 and DC3

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Hai Mourik Jan/Victor. > MJ definitely understands the problem I'm facing.... Yes, and i do to but you wont listen... ALL My client pc's, windows and linux computers, dont have any uid/gid assigned. My client pc's do access the DCs and multiple member servers with shares. I do distribute settings and files with GPO and these files are on a member server. Yes also as

dear list, in the output of pdbedit -L -v heupink I'm getting these errors: convert_string_allocate: Conversion error: Illegal multibyte sequence(???p? ????????) Any ideas where to look..? Are these serieus errors..? (it looks as if the errors occur BEFORE the actual ldap connection is opened, so I guess they're not ldap related...) My samba is 3.0.14a, and system is sles9 Below find

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba

Hi all, We're still experimenting with the samba3 -> samba4 upgrade. Lot's of nice progression. :-) ANyway: my question is how to deal with the userPrincipalName AD field. The classicupgrade does not fill this field. Reading up on it, tells me that it appears to be required, and should be something like username at samba4.domain Is this correct? How do you generally deal with

Maurik, You are right. I am currently using 4.1.17 and have the same failed login messages as you describe. There is, however, a bit more information further down in the logfile: [2015/10/07 16:51:24.076283, 2] authentication for user [HPRS/Administrator] FAILED with error NT_STATUS_WRONG_PASSWORD auth_check_password_send: Checking password for unmapped user [HPRS]\[Administrator]@[ROVER]

So the GPO Management Tool works under Windows 8.1 for you? On Tue, Nov 24, 2015 at 3:11 AM, mourik jan c heupink <heupink at merit.unu.edu > wrote: > > > On 24-11-2015 0:29, Jeff Dickens wrote: > >> On the Samba side the only thing I see in the logs are some complaints >> about not being able to load the printer list. >> > That probably not related. >

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

Thank you! Does it possible to convert this git diffs - https://attachments.samba.org/attachment.cgi?id=11162 to common patch? I would like to apply it to Sernet packages sources and rebuild it for test. On Wed, Jun 17, 2015 at 6:05 PM, mourik jan heupink <heupink at merit.unu.edu> wrote: > Perhaps this: > > https://bugzilla.samba.org/show_bug.cgi?id=11061 > > > On

On 10/7/2015 7:31 AM, mourik jan c heupink wrote: > On 7-10-2015 13:18, mourik jan c heupink wrote: >> So my dc3 seems unsynced or so. >> >> So I am now checking to make sure that my rsync replication script >> works as it should. (I'm guesssing it does NOT) > > The rsync seems to be working as it should, so now I'm > guessing that idmap.ldb differs

Am 06.10.2015 um 21:26 schrieb mourik jan c heupink: > I have checked all our policy directories on sysvol, and I have a > "Registery.pol" only in some "/Machine" directories, and none in "/User" > or "/Group Policy". Do you have any policy in the User tree in the GPME in that GPO? If you never defined one, then the file is missing. Try e. g.

In responce of Mourik Jan in this thing.. - The pc's boot that fast these days that the network stack is not loaded yet, which explains the "currently no logon servers available to service the logon request" which can be solved by setting the "Always wait for network " Setting in GPO. For Mathias, If your using sites and different dns domains. Like Office1.domain.tld

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

On 7-10-2015 14:52, mourik jan c heupink wrote: > I am not sure what to check or do next..? > I checked filesystems, and there is a difference: dc3 = ext4 dc4/dc2 = xfs But ext4/xfs should both support acl and user_xattr Problem dc3 is mounted like: > /dev/vda3 on /var/lib/samba type ext4 (rw,relatime,user_xattr,barrier=1,data=ordered) I don't see the problem... But I DO get

On 23/01/15 09:44, Umar Draz wrote: > Ho Mourik > > Thanks for your reply, any other attribute which we can duplicate? > > Br. > > Umar > > On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < > heupink at merit.unu.edu> wrote: > >> Hi, >> >> In AD, the attribute mail can only exist once. >> >> MJ >> >> On

Hi all, Further to my AD clients through NAT question: has anyone ever tried this diagnostics tool from microsoft in their samba4 AD installation: http://www.microsoft.com/en-us/download/confirmation.aspx?id=24009 It's supposed to verify connectivity requirements for AD functionality. (replication, port status, etc, etc) At our site, it crashes on verification of udp on port 137. I

But the issue is: we have many users that do not login locally using windows-workstations, but instead use variour kinds of remote access, like web interfaces, email, vpn, etc, etc. I am not sure what would happen with those services, if I would set accounts to 'change password on next logon'... I know this would work in the case of 'regular' 'interactive logons' as I

On 21/10/15 13:30, Rowland Penny wrote: > On 21/10/15 12:41, mourik jan heupink wrote: >> Hi, >> >> On 10/21/2015 01:21 PM, Rowland Penny wrote: >>> I am now beginning to think it doesn't work at all, if samba4 is >>> involved in any way. I knew that it wouldn't work on a DC (probably >>> because the user is DOMAIN\username and not just