similar to: "Could not convert SID" error - different results for the same AD query

I am testing a Samba v4.1.3 instance on Ubuntu 14.04 prerelease. I set it up as a standalone server on a test network, and it was easy to set up and worked fine. Now I am trying to migrate it to a different network and join it to a Windows 2008 AD server. When I try to join it to the domain, I get this error: root at samba-4:/etc/samba# net ads join -U administrator Host is not configured as a

dear experts, I would like to setup idmap config ad. I have already the uidNumber attribute populated on AD. But there is something very basic wrong with my config: [global] netbios name = ADDC realm = EXAMPLE.ORG workgroup = EXAMPLEAD dns forwarder = #trimmed server role = active directory domain controller log level = 3 log file = /var/log/samba/log.%m interfaces = eth0,

Hai, Thank you for having trust in my packages.. :-) Now if you use my package, i suggest, do read the howto's also... All you need for a good setup on debian stretch is there. if anyone find/see's improvements, please tell me... Or change it on github, thats why its there. First is this an upgraded domain? Or a new domain? What does `getent passwd username` tell you. Same for `id

hi all, I can't figure out why winbind can't find ad users with wbinfo calls. It happens on a member server, Debian GNU/Linux stretch, samba is 4.7.5 from Louis repository: [global] security = ADS workgroup = EXAMPLEAD realm = EXAMPLE.ORG idmap config * : backend = tdb idmap config * : range = 1000000-3000000 idmap config EXAMPLEAD:backend = ad idmap config

> On Fri, 16 Feb 2018 12:12:32 +0100 > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > >> dear experts, >> >> I would like to setup idmap config ad. I have already the uidNumber >> attribute populated on AD. >> >> But there is something very basic wrong with my config: > > Yes, there is something wrong ;-) > See below

On 18/06/2023 16:29, Dale Renton via samba wrote: > On Sat, Jun 10, 2023 at 1:49?PM Rowland Penny via samba < > samba at lists.samba.org> wrote: >> Dale, just checking back on what you posted earlier and you had: >> >> create krb5 conf = no >> >> in your smb.conf >> >> Is that line still there ? >> If so, try removing it. >>

On Fri, 16 Feb 2018 12:39:37 +0100 Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > > On Fri, 16 Feb 2018 12:12:32 +0100 > > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > > > >> dear experts, > >> > >> I would like to setup idmap config ad. I have already the uidNumber > >> attribute populated

Hi, I'm am trying to configure our samba server to use dfs. It authenticates against active directory but it gets the uid mappings from nis via the local nsswitch. I think I have configured dfs ok as smbclient[1] seems to work ok with my minimal config[2]. However I can't access it from Windows XP[3], I get "network path was not found" when using "net use" from a

On Tue, Aug 30, 2016 at 11:57 AM, Jeff Hodge <jeff.hodge55 at gmail.com> wrote: > On Mon, Aug 29, 2016 at 6:13 PM, Jeremy Allison <jra at samba.org> wrote: > >> On Mon, Aug 29, 2016 at 11:41:53AM -0400, Jeff Hodge via samba wrote: >> > During an ubuntu 14.04 update samba was updated from 4.1.6 to 4.3.9. We >> > had no problems with any windows system

We've got nicely ADS integrated Samba-3.0.27a servers that are working fine with Win2000 through to standard Vista. However, we are starting to test RC1 of Vista SP1 and discovered that once applied, that workstation cannot connect to Samba server shares - unless the share is open - i.e. no "valid user" style settings. The moment one is defined, Vista fails to connect and pops up an

Hi all, I'm getting WERR_ACCESS_DENIED error for some of the printers when running setdriver printer_name printer_driver as part of the cupsaddsmb step. Weirdly, it works for some printers, and never works for others, while all the printers have the same settings. Samba 3.5.20 with CUPS 1.5.4. Does this part of log give any clue of why could this happen? function print_access_check() --

I have a file server with two shares accessible to 2 different groups. After the last update ( from debian 2:3.2.5-4 to 2:3.3.2-1 ) i cannot any more access ONLY ONE of the two shares and I can't understand the reason! Can anyone hel me? I'm getting mad! Thanks Giorgio from smb.conf: [documenti_movi] path = /home/documenti_movi valid users = @staffmovi read

Hi, On 10/16/20 5:48 AM, Andrew Bartlett wrote: > What I asked them for, and (because we have worked together before) I'm > confident you can get is, correlated by a high-resolution timestamp: I hope someone here can help me a little bit, doing the above. I have a level 10 log from the samba DC, however, it shows nothing like "GetNCChanges" anywhere. It does however show

Hello, I had been running Samba 4.8 for a few years without any problems, and then upgraded to 4.10. Since then I?ve been having problems with some accounts connecting, while some connect fine still. I haven?t been able to figure out why. My server is a relatively simple standalone server, using the LDAP password backend. A failing user authenticates OK and ends up like this in the logs:

I have been trying to setup a new print server on Fedora 12 based around samba-3.4.7-58.fc12.x86_64 and cups-1.4.2-28.fc12.x86_64. All looks good except for the ability for printer administrators to manage printers. Whether I specify users in a system group using the deprecated printer admin option, or specifically using net rpc rights and the SePrinterOperatorPrivilege, it does not matter.

No one care then i closed it. Thanks. On Fri, Jun 5, 2020 at 5:18 PM Jeremy <jeremy55662004 at gmail.com> wrote: > Hi all, > > I am using samba 4.10.7 and it seems to have bug for using @group in valid > or invalid conf (?). And i can't find fixed patch in later release. I > describe this issue detail below: > > 1. Firstly, there is my samba conf below (Add

> Hai, > > > It might be handing to tell your OS and samba version. > A copy of smb.conf is also very handy.. oops, sorry. samba-4.8.5 compiled from source on Debian GNU/Linux 9 (stretch). smb.conf is: [global] netbios name = ADDC realm = EXAMPLE.ORG workgroup = EXAMPLEAD dns forwarder = [redacted] server role = active directory domain controller log level = 1

The config looks ok, thats great. :-) Its not needed to stop samba running : net cache flush If you run: net cache list and have a look, then flush it and look again. You see its empty. If you need to copy the idmap than it is needed to stop samba. Can you show me an output of. dpkg -l | egrep "tevent|tdb|ldb|talloc|cmocka" Im running latest versions of these. Own compile or

Hi, I'm running Samba Version 3.0.25c on Solaris 10 8/07 on X86 hardware. It's successfully joined to AD. But, and there always is a but, if : * A user is a member of SomeGroup * and the share alllows SomeGroup to access it * and SomeGroup is NOT what the user has set as their Primary Group in Active Directory then * Samba will recognize that the user can access the share * but,

Hi all, I am using samba 4.10.7 and it seems to have bug for using @group in valid or invalid conf (?). And i can't find fixed patch in later release. I describe this issue detail below: 1. Firstly, there is my samba conf below (Add @d_group in "invalid users"): (smb_share.conf) [f1] path = /home/f1 write list = "admin" "@Administrator_Group"