similar to: User disappears, when enabling RC2307

Well, seems like I hit every mudhole that could be on the way ... root at samba4:/# getent passwd | grep mgr mgr:*:10000:10000:Lars LH. Hanke:/home/AD/mgr:/bin/bash root at samba4:/# ldapsearch -LLL -D "CN=Administrator,CN=Users,DC=ad,DC=microsult,DC=de" -x -W '(uid=mgr)' uid uidNumber gidNumber sAMAccountName name gecos Enter LDAP Password: dn: CN=Lars LH.

If I query the AD DC I see: root at samba4:/# ldapsearch -H ldap://samba.ad.microsult.de -Y GSSAPI '(sAMAccountName=mgr)' SASL/GSSAPI authentication started SASL username: Administrator at AD.MICROSULT.DE SASL SSF: 56 SASL data security layer installed. I would like to see SASL SSF: 112. Does anyone know whether and where this can be configured? Regards, - lars.

It's probably difting slightly off the topic, but I know that there are some people listening here, who have a decent expertise. I'm trying to setup a file server (nfs4 at ad.domain) and mount from a client (hunin at ad.domain) using the user database and especially Kerberos provided by my AD (samba at ad.domain). It already works nicely, if I forget about krb5, i.e. idmapd is

Hi Marc, >> The cause is that the password change didn' reach both AD DCs, but only >> one. The other one still had the old value as could be seen by >> samba-tool ldapcmp. Restarting the DCs and waiting for a couple of >> seconds brings them back to sync and Windows logons work as they used to. >> Any idea, what I should do next time to obtain valuable output

This topic has been on the list two years ago, already, but apparently to no conclusion. I'm trying to join a Debian Wheezy machine (Samba 3.6.6) to my freshly made backports AD (Samba 4.1.7). This is what I see: root at samba4:/# net ads join -U Administrator at AD.MICROSULT.DE Enter Administrator at AD.MICROSULT.DE's password: Using short domain name -- AD Joined 'SAMBA4' to

Don't know whether this is known or has been fixed, already. I see a reproducible crash of samba-tool when querying DNS (DLZ setup). I have two different VMs. One called samba, which is the AD DC and another called samba4, which is my toy for client setup. Host samba4 cannot be resolved by DNS and it failed to add to the zone during the join - but this is a different issue. root at

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]:

Last month I struggled with a severe DLZ issue and today I could solve it. Credits for the important idea go to Peter Serbe, thanks! I checked the DNS contents using RSAT. There was nothing wrong with SOA nor NS entries, but the reverse zones were actually forward zones with proper names in the in-addr.arpa. domain. I built proper reverse zones and deleted the forward-reverse zones and Bind

Dear All, Sorry to post it here as I don't see any better to post this question I've.... I've have a samba 4 files server (Member server of a AD DC) And also a synology diskstation. The AD DC is a Samba 4 AD DC and it have RFC2307 enable and configured. I would like to sync 2 folder so that they can have the same files contents and also controls. But the synology diskstation

Hi Sebastien, Rsync is only one way right, any 2 way sync solution? Thank you. S?bastien Le Ray <sebastien-samba at orniz.org> ? 2015?6?15? ?????? > Hi > > rsync -a should be able to perform chown using usernames rather than uids > so your files would still be owned by the right user. > > Regards > > Le 14/06/2015 16:48, Min Wai Chan a ?crit : > >> Dear

I agree, If the synology uid and gid is working right than nfs would be great. it would be easy... However, it seem that they have something else running under samba/nfs to control the permission on the files/folder... I would like to use bidir sync because I like some of the synology feature on remote sync and etc which is making remote access much easier compare to samba... But these sync

I just upgraded bind9 on my backup DC to 9.9.5-7-Debian and restarting the service failed: Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u bind -4 Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var'

Does Unision support ACL? If it would than this part guide would work. https://wiki.samba.org/index.php/SysVol_Bidirectional_Replication But it didn't.... On Mon, Jun 15, 2015 at 7:14 PM, Bob of Donelson Trophy < bob at donelsontrophy.net> wrote: > > > For bidirectional sync take a look at Unison (file synchronizer.) > > --- > > ------------------------- >

Recently I suddenly lose all permissions both for SMB and NFS4 on my Synology NAS.And similarly after poking some time in muddy waters, it suddenly works again. The NAS runs Samba 3.6.9. What I found, when the permissions were gone: 1. id user still working, didn't work last time so I assume a caching issue here 2. wbinfo -u same as above. This time still worked, last time only reported

Hi everyone, On a server running Debian 9, I have multiple KVM guests automatically started at boot by libvirtd.service and running in the background. When I shutdown this server, libvirtd.service automatically and gracefully shut them all down first. So, every thing is fine so far. Recently, I've added an additional KVM guest and this one does not respond to a shutdown command from virsh

Jeremy Allison schreef op 30-04-2016 1:06: >> Copying a file to my mounted samba share did not work, the files are >> created by they remain at 0 size. Then apparently smbd blocks in IO >> and never continues, never recovers. I cannot kill the process, I >> will have to reboot the NAS but it won't unmount filesystems so I >> need a hard reset. > > That

On Mon, Jul 11, 2016 at 11:41:24PM +0200, Xen wrote: > I wrote here how my filenames are getting mangled when getting sent > or received to the server. > > Server: current Ubuntu lookalike. > > Client: Older Synology diskstation with probably a modified mount.cifs. > > When I send utf-8 it gets received as dos. > > "é" for instance is #c3a9 in utf-8, and

Today I had another automatic restart of my secondary DC because samba-tool drs showrepl showed errors. The restart was completed at 12:35. This is what I found in log.samba at log level 3: [2016/01/04 12:33:47.201892, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2007(dcesrv_drsuapi_DsGetNCChanges) UpdateRefs on getncchanges for b19509be-c3ee-4a58-9fc9-afd61759a23f [2016/01/04

My tool is growing fast and it takes me to the finishing line for setting up my new user database. But nw I came across another strange issue: I'd like to change the primaryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM:

I'm launching the final phase of getting my new Samba4 AD DC productive. I wanted to join the first real workstation, but it failed: # net ads join -U Administrator Enter Administrator's password: Failed to join domain: failed to lookup DC info for domain 'AD.MICROSULT.DE' over rpc: Invalid server state This issue was reported already here: