similar to: Determining PDC in Samba4?

I've wasted the last two days trying to get various versions of samba 4 packages getting to run under Wheezy. ? Wheezy's own packages are incomplete betas. ? Inverse provides their own packages (for SOGo), but they only care about getting their one use case to work; smbd doesn't work all, winbind has problems, and the postinst script resets my smb.conf with nonsense. Before I try

I successfully joined a device to our Samba domain some weeks ago. Auth, both online and offline, worked fine. Now suddenly it stopped working. The device is online, the DC is reachable, and I can log into samba member servers on the network just fine, but not into AD accounts on that device. I could remove the device from the domain using my domain credentials, but now I can't re-join, it

Every once in a while, the DNS fails to resolve external domains ? but the DNS forwarder is still reachable (8.8.8.8, I assume it would be noticeable if it had any issues). What debug class is used by the DNS code? I don't really want to put several DCs on log level 10 for possibly days? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und

----- Original Message ----- > From: "Sven Schwedas" <sven.schwedas@tao.at> > To: libvirt-users@redhat.com > Sent: Friday, August 1, 2014 2:29:22 AM > Subject: Re: [libvirt-users] XP and virtio > > On 2014-07-31 20:05, Mauricio Tavares wrote: > > So I need to create a XP vm. I am using lvm logical volumes for > > its disk, so I am using virtio.

Could *somebody* shed some light on how the firewall is supposed to work? I haven't even managed to get trivial firewall rules to work. As mentioned, the examples in the documentation generate completely nonsensical rulesets, and if I try writing my own, they make even less sense. For example: > <filter name='test-eth0' chain='root'> > <rule

We're using a bunch of AD groups ? all users/groups are created and managed with ADUC. Domain Users is the primary group for all users, plus a few for our departments (and Domain Admins). All groups have their posixGroup attributes filled out. wbinfo --group-info and getent group show the correct membership for all groups except Domain Users. smb.conf: http://pastebin.com/ymrXZJ5u Already

Thanks Sven, good Idea let's see if i am getting this right: 1) use MS ADSI editor to add few more attributes to the "users" class 2) use ldapmodify from my ubuntu server to populate those attributes would that work? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX:

We've run into a small issue over the holidays (I can't pinpoint it due to nobody being in the office for the past three weeks and thus not noticing anything): At least one LDAP entry has an (single-valued!) attribute duplicated on *some* DCs, but not all of them ? and said attribute hasn't been modified in six months. Microsoft's ADSI just crashes when trying to open the entry on

I'm trying to add schema extensions to my Samba (4.1.5) server, as per > https://wiki.samba.org/index.php/Samba4/Schema_extenstions However, importing the example file (after replacing the DOMAIN_TOP_DN) fails: > $ ldbmodify -H sam.ldb /tmp/automount.ldif --option="dsdb:schema update allowed"=true > Unable to find attribute automountMapName in the schema > ERR:

With some slight delay, we did actually manage to get all our old wonky compatibility solutions nuked (turned out there were a few more lurking in the shadows than expected?). Mail servers are no longer domain joined, and unencrypted LDAP is finally gone, together with the terrible PHP scripts that needed it. Which allowed me to finally cleanup all the samba setups:

cf. https://support.microsoft.com/kb/3000483 Seeing how this seems to affect both client and server side, is it possible (and safe) to enable Mutual Authentication and Integrity as explained in the KB entry? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP: sven.schwedas at tao.at | +43

I tried joining a new DC to my AD domain (Samba 4.1.6). Join claimed to have worked, but samba refuses to start afterwards: > http://pastebin.com/jJiTzxsG Apparently it doesn't recognize its role any more? What went wrong? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP:

On 03.07.19 17:19, Rowland penny via samba wrote: >> All these object classes were tests we did? years ago, and which have >> been "deleted" (I don't even remember by what mechanism) for almost as >> long. No object should still be using any of these, and on graz-dc-sem >> that's true. > I would love to know how you deleted something from the schema, it

On 03.07.19 18:04, Rowland penny via samba wrote: >>>> How do I get rid of these bogus Schema entries, and how do I fix the >>>> user account? >>> I do not think you can remove anything from the schema, but I believe >>> you can deactivate schema objects, try reading this: >>> >>>

Hi, I'm trying to configure nwfilter for KVM, but so far I haven't managed to figure out a working configuration. Network setup: The dom0 (Debian 7.1, kernel 3.2.46-1, libvirt 0.9.12) is connected via eth0, part of the external subnet 192.168.17.0/24, and has an additional subnet 192.168.128.160/28 routed to its main address 192.168.17.125. The host's subnet is configured as bridge

The smb.conf hasn't changed since the last three or four times I've posted here asking for help: https://up.tao.at/u/samba/villach-file.txt Top level error I'm seeing is that since today *some* Windows users are denied SMB access to this one member server ("Network password is invalid"), but not all users. Worked fine before today. wbinfo -p/-P work, wbinfo -a shows the

/etc/sysctl.conf net.ipv4.ip_forward = 1 centos 65 host has static private ip 192.168.1.15 I have added a route ip route add 192.168.1.0/24 via 192.168.1.15 but each time I use 'service network restart' the new route disappears anyway I have made a ping before restarting the network and is still not working Thank you. 2014-05-15 12:23 GMT+02:00 Sven Schwedas

On 2014-12-05 04:37, George wrote: > On Thu, Dec 4, 2014 at 5:19 AM, Sven Schwedas <sven.schwedas at tao.at> wrote: > >> Tbh, you might get away with using PCEngines' APU boards (the successor >> to their Alix boards with a massively upgraded CPU) if individual >> machines don't need RAID (because everything is replicated anyway). >> > > I

On 2015-08-25 09:51, Volker Lendecke wrote: > On Tue, Aug 25, 2015 at 08:36:14AM +0200, Sven Schwedas wrote: >> On 2015-08-24 20:55, Jeremy Allison wrote: >>> On Thu, Aug 13, 2015 at 09:21:23AM +0200, Sven Schwedas wrote: >>> winbindd is extremely reliable and fully supported by the Samba >>> Team, please don't post FUD about Samba components. If you have

It's amazing how long Samba just keeps running even when apparently everything's broken. In preparation of finally upgrading our DCs to 41.0, I ran dbcheck on all of them, resulting in: graz-dc-sem: > Checking 3861 objects > Error: governsID CN=ucsUser,CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at on 1.3.6.1.4.1.19414.3.2.2 already exists as an attributeId or governsId > Error: