similar to: winbindd 4.1.7 resolves group memberships for all but primary group

On Tue, 07 Aug 2018 22:43:23 +0100 Miguel Medalha via samba <samba at lists.samba.org> wrote: > > By default, every AD user is a member of 'Domain Users' and so, > > when you use the 'rid' backend every Unix user gets the group as > > their primary group. > > > The only way to change this is by using a version of Samba >= 4.6.0 > > and

On Fri, May 05, 2017 at 10:21:05AM +0200, Sven Schwedas wrote: > On 2017-05-05 10:09, Volker Lendecke wrote: > > On Fri, May 05, 2017 at 09:42:47AM +0200, Sven Schwedas via samba wrote: > >>> root 9988 0.8 59.4 1571936 606488 ? S Apr26 114:41 /usr/sbin/samba > > > > Can you post /proc/9988/smaps somewhere? > > Sure,

Ok, rechecked this, your correct. This did work fine. In now at samba 4.6.7, you? This worked untill ( last i checked ) 4.6.5 :-(( now sysvolreset is totaly broken. :-(( New thing for my ToDo list.. Try this script, the rights are my defaults "after a sysvol reset" Place the script somewhere within /var/lib/samba Preffered that location . Run it with : bash script.sh sysvol/ !

I've wasted the last two days trying to get various versions of samba 4 packages getting to run under Wheezy. ? Wheezy's own packages are incomplete betas. ? Inverse provides their own packages (for SOGo), but they only care about getting their one use case to work; smbd doesn't work all, winbind has problems, and the postinst script resets my smb.conf with nonsense. Before I try

On Tue, Aug 25, 2015 at 08:36:14AM +0200, Sven Schwedas wrote: > On 2015-08-24 20:55, Jeremy Allison wrote: > > On Thu, Aug 13, 2015 at 09:21:23AM +0200, Sven Schwedas wrote: > > winbindd is extremely reliable and fully supported by the Samba > > Team, please don't post FUD about Samba components. If you have > > winbindd problems, post bug reports > > I did,

On Thu, Aug 13, 2015 at 09:21:23AM +0200, Sven Schwedas wrote: > > Depends on your needs. If you don't need samba file/printer sharing > /from/ the member, I'd recommend using SSSD. It's much more stable and > reliable than winbindd. Can't let comments like this pass. sssd does something slightly different than winbindd, so may or may not be what the person needs.

On Thu, Dec 4, 2014 at 5:19 AM, Sven Schwedas <sven.schwedas at tao.at> wrote: > Tbh, you might get away with using PCEngines' APU boards (the successor > to their Alix boards with a massively upgraded CPU) if individual > machines don't need RAID (because everything is replicated anyway). > I considered that, but what would you use for storage?? They have an mSATA

Am 28.09.2016 um 04:01 schrieb Steve Litt via samba: > Why would ANYBODY type a command when they could perform a bunch of > mouse clicks. Better yet, you can automate Windows tools with a screen > scraper and a keyboard injector, or with a top notch language like > Powershell or Visual Basic *lol* why would ANYBODY click in a GUI when he have a console - and i mean that really

On Mon, 13 Nov 2017 15:20:05 +0100 Sven Schwedas <sven.schwedas at tao.at> wrote: > > > PS, your configs are still wrong. > > It would be *really* helpful if you explained *why*. Sprinkling magic > pixie dust over random config files isn't exactly purposeful > debugging. > Lets start with /etc/krb5.conf Samba doesn't need most of what you will find in it,

On 2017-08-24 13:00, Rowland Penny via samba wrote: > On Thu, 24 Aug 2017 12:41:36 +0200 > Sven Schwedas via samba <samba at lists.samba.org> wrote: > >> On 2017-08-24 12:27, Rowland Penny via samba wrote: >>> On Thu, 24 Aug 2017 12:03:42 +0200 >>> Sven Schwedas via samba <samba at lists.samba.org> wrote: >>> >>>> >>>>

> Keytabs look reasonable, as far as I can see, but why does > graz-dc-sem have the same SPN output as graz-dc-1b in > addition to its own? A snapshotted server/cloned server? I dont know but thats not correct. I suggest, cleanup the DS with FSMO roles. Then remove a failty server and re-add it as a new installed DC. ( the good DS with FSMO) First backup:

Today's episode of "why is AD break", brought to you by: > [2017/09/05 10:17:06.015617, 3] ../source4/auth/gensec/gensec_gssapi.c:613(gensec_gssapi_update) > Server GC/graz-dc-1b.ad.tao.at/ad.tao.at is not registered with our KDC: Miscellaneous failure (see text): Server (GC/graz-dc-1b.ad.tao.at/ad.tao.at at AD.TAO.AT) unknown > [2017/09/05 10:17:06.015717, 0]

/etc/hostname:villach-file /etc/hosts:# The following lines are desirable for IPv6 capable hosts /etc/hosts:::1 localhost ip6-localhost ip6-loopback /etc/hosts:ff02::1 ip6-allnodes /etc/hosts:ff02::2 ip6-allrouters /etc/hosts:127.0.0.1 localhost /etc/hosts:192.168.16.214 villach-file /etc/krb5.conf:[libdefaults] /etc/krb5.conf: default_realm = AD.TAO.AT /etc/krb5.conf: dns_lookup_realm = true

On 2017-04-07 13:44, Sven Schwedas via samba wrote: > In the end I just upgraded all DCs to 4.5 and remote-deleted the broken > ones. Seemed to work without a hitch, manual removal was only necessary > to remove the IPs from DNS\_msdcs.ourdomain\gc\. Apparently not, adding new DCs failed with "WERR_DS_DATABASE_ERROR". `samba-tool dbcheck --fix` solved that. With that out of

Hi, I have installed a centos65_guest_1 system on a centos65 host with virt-manager. By default libvirt has a default network in NAT mode. At centos65_guest_1 when pinging to google it works. But I would like to use a routed mode for production enviroment with some services online, like http, ftp, ssh, etc. I have created the virtual network 192.168.100.0/24 with routed mode, and I have

Hi, I test (replacement of nslcd ) winbind in member server. I used Samba4/Winbind howto and howto for member server. wbinfo -u and wbinfo -g work fine but getent passwd not work (getent not list user from AD) Why ? Anyone have a idea ? thx St?phane ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique

So I need to create a XP vm. I am using lvm logical volumes for its disk, so I am using virtio. I got the iso in http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin/images/, but how do I feed it to the XP install? I did try to mount it as a floppy and it hung there on "please wait"; I guess that means it did not like a 70MB iso as its floppy. But it also does not seem to

On Mon, 13 Nov 2017 14:32:11 +0100 Sven Schwedas via samba <samba at lists.samba.org> wrote: > Making no additional changes to the configuration, using "net ads > join" instead of "samba-tool domain join" immediately worked. I'd be > really curious where's the difference between the two and why > samba-tool pretends to not have run into any errors…

On somewhat long-running samba AD DC instances (4.5.8-Debian, Stretch), we're seeming massive RAM utilization even with little/no clients connected: > USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND > root 9937 0.0 0.7 532004 7364 ? Ss Apr26 0:00 /usr/sbin/samba > root 9980 0.0 0.4 532004 4304 ? S Apr26 0:00

Hi, Seems log level can not be defined in smb.conf any longer. No matter what i define in [global], testparm -v always reports it at 2. This is on debian wheezy with sernet 4.1.9-8. achim~