similar to: SysVol questions

Hi, I test (replacement of nslcd ) winbind in member server. I used Samba4/Winbind howto and howto for member server. wbinfo -u and wbinfo -g work fine but getent passwd not work (getent not list user from AD) Why ? Anyone have a idea ? thx St?phane ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique

Hi, I test samba4 on test server. I have an error when samb-too; try to create sysvol directory. samba-tool display a error message "FS don't support ACL" it seems that sysvol directory is created under "locks directory". What are locks directory ? How can I specify a other path for sysvol (path with ACL support) My structure is : Samba installation :

Hai,   I was just reading : https://www.howtoforge.com/tutorial/ata-over-ethernet-aoe-on-debian-8-jessie/   I was wondering, anyone tried AoE for sysvol, so i dont needs replication anymore. Anyone Pro’s and Con’s ?    Or can anyone tell of sysvol is going to be replicated by samba so we dont need scripts anymore.     Greetz,   Louis

Dear all, I have build a Domain with to samba4 DC's. Everything works fine DNS Replication, User Replication, etc. Now I started to create a Logonscript. I doesn't reach to get the Logonscript automatcally loaded. The client doesn't load the DDP, doesn't load the GPO and doesn't load the logonscript individually in the user-setup by Remote Server Tools. When I start

I hate to use that "noob" word, but in this case I think it might be proper. Our company is getting ready to get rid of Netware and start using Samba. It will require that users log in and by doing so, have a login script map drives to particular drive letters base on either their user or group. I've been administering Centos servers for quite a while. I have no problem with

Ok, rechecked this, your correct. This did work fine. In now at samba 4.6.7, you? This worked untill ( last i checked ) 4.6.5 :-(( now sysvolreset is totaly broken. :-(( New thing for my ToDo list.. Try this script, the rights are my defaults "after a sysvol reset" Place the script somewhere within /var/lib/samba Preffered that location . Run it with : bash script.sh sysvol/ !

> root at graz-dc-1b:~# samba --version > Version 4.5.8-Debian > root at graz-dc-1b:~# samba-tool ntacl sysvolreset && echo "no error" > no error > root at graz-dc-1b:~# samba-tool ntacl sysvolcheck > ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory

On 2017-08-24 13:00, Rowland Penny via samba wrote: > On Thu, 24 Aug 2017 12:41:36 +0200 > Sven Schwedas via samba <samba at lists.samba.org> wrote: > >> On 2017-08-24 12:27, Rowland Penny via samba wrote: >>> On Thu, 24 Aug 2017 12:03:42 +0200 >>> Sven Schwedas via samba <samba at lists.samba.org> wrote: >>> >>>> >>>>

>> Yes, but that still uses rsync ;-) >Is this problematic? I have been using this solution for years, with >very good results. Rsync without ssh is insecure. I?d definitely urge to discourage rsync without ssh on wiki.samba.org. And with ssh, rsync is imho a lot more cumbersome to configure across a dynamic landscape. I appreciate the interest. I definitely would like

On 2017-08-24 12:27, Rowland Penny via samba wrote: > On Thu, 24 Aug 2017 12:03:42 +0200 > Sven Schwedas via samba <samba at lists.samba.org> wrote: > >>> root at graz-dc-1b:~# samba --version >>> Version 4.5.8-Debian >>> root at graz-dc-1b:~# samba-tool ntacl sysvolreset && echo "no error" >>> no error >>> root at

When I started considering Samba, the main objective was to have a way for our users to log into something and map the shares they required based on their group (departmental) needs. As I asked more questions, most recommended AD as this would allow the administrator to manage these users. Now that I find I'll probably need VMs to handle the AD/DC and the shares because I only have two

As sysvol replication seems to be safest when using rsync, how can I determine the PDC (to avoid accidentally starting the replication on a slave)? Windows' ADUC has the "Operations Masters" window which shows them, how do I query this from within Samba? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 |

Hi, Seems log level can not be defined in smb.conf any longer. No matter what i define in [global], testparm -v always reports it at 2. This is on debian wheezy with sernet 4.1.9-8. achim~

Hello, I am trying to figure out, whether there are any best practices how to run a Samba AD DC in a container. First of all: why a container? Because obviously containers require less resources and are easier to update than multiple linux systems ? and I want to spend some of the savings into redundancy (multiple DCs, also distributed to serve different locations). Googling around I found

> Keytabs look reasonable, as far as I can see, but why does > graz-dc-sem have the same SPN output as graz-dc-1b in > addition to its own? A snapshotted server/cloned server? I dont know but thats not correct. I suggest, cleanup the DS with FSMO roles. Then remove a failty server and re-add it as a new installed DC. ( the good DS with FSMO) First backup:

Hi list, Since it is considered ?harmful? to run a domain controller that acts a fileserver I was considering the option of putting the AD DC into a chroot. Is there any special configuration to perform (except bind interfaces) to avoid conflicts ? (is there any broadcasting issues or so?) Regards -- S?bastien Le Ray

So I need to create a XP vm. I am using lvm logical volumes for its disk, so I am using virtio. I got the iso in http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/images/, but how do I feed it to the XP install? I did try to mount it as a floppy and it hung there on "please wait"; I guess that means it did not like a 70MB iso as its floppy. But it also does not seem to

I would like to help with this VFS, but my skill as programmer is near 0!... but I am openning to test if some one write it... But I get the idea! It's seems very simple, for those has the right skill to do that 2016-09-29 14:34 GMT-03:00 Jeremy Allison <jra at samba.org>: > On Thu, Sep 29, 2016 at 02:25:18PM -0300, Gilberto Nunes via samba wrote: > > WOW! That's could be

Today's episode of "why is AD break", brought to you by: > [2017/09/05 10:17:06.015617, 3] ../source4/auth/gensec/gensec_gssapi.c:613(gensec_gssapi_update) > Server GC/graz-dc-1b.ad.tao.at/ad.tao.at is not registered with our KDC: Miscellaneous failure (see text): Server (GC/graz-dc-1b.ad.tao.at/ad.tao.at at AD.TAO.AT) unknown > [2017/09/05 10:17:06.015717, 0]

On somewhat long-running samba AD DC instances (4.5.8-Debian, Stretch), we're seeming massive RAM utilization even with little/no clients connected: > USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND > root 9937 0.0 0.7 532004 7364 ? Ss Apr26 0:00 /usr/sbin/samba > root 9980 0.0 0.4 532004 4304 ? S Apr26 0:00