similar to: Intermittent failures of internal DNS

I've wasted the last two days trying to get various versions of samba 4 packages getting to run under Wheezy. ? Wheezy's own packages are incomplete betas. ? Inverse provides their own packages (for SOGo), but they only care about getting their one use case to work; smbd doesn't work all, winbind has problems, and the postinst script resets my smb.conf with nonsense. Before I try

As sysvol replication seems to be safest when using rsync, how can I determine the PDC (to avoid accidentally starting the replication on a slave)? Windows' ADUC has the "Operations Masters" window which shows them, how do I query this from within Samba? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 |

I successfully joined a device to our Samba domain some weeks ago. Auth, both online and offline, worked fine. Now suddenly it stopped working. The device is online, the DC is reachable, and I can log into samba member servers on the network just fine, but not into AD accounts on that device. I could remove the device from the domain using my domain credentials, but now I can't re-join, it

Could *somebody* shed some light on how the firewall is supposed to work? I haven't even managed to get trivial firewall rules to work. As mentioned, the examples in the documentation generate completely nonsensical rulesets, and if I try writing my own, they make even less sense. For example: > <filter name='test-eth0' chain='root'> > <rule

----- Original Message ----- > From: "Sven Schwedas" <sven.schwedas@tao.at> > To: libvirt-users@redhat.com > Sent: Friday, August 1, 2014 2:29:22 AM > Subject: Re: [libvirt-users] XP and virtio > > On 2014-07-31 20:05, Mauricio Tavares wrote: > > So I need to create a XP vm. I am using lvm logical volumes for > > its disk, so I am using virtio.

We're using a bunch of AD groups ? all users/groups are created and managed with ADUC. Domain Users is the primary group for all users, plus a few for our departments (and Domain Admins). All groups have their posixGroup attributes filled out. wbinfo --group-info and getent group show the correct membership for all groups except Domain Users. smb.conf: http://pastebin.com/ymrXZJ5u Already

Thanks Sven, good Idea let's see if i am getting this right: 1) use MS ADSI editor to add few more attributes to the "users" class 2) use ldapmodify from my ubuntu server to populate those attributes would that work? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX:

We've run into a small issue over the holidays (I can't pinpoint it due to nobody being in the office for the past three weeks and thus not noticing anything): At least one LDAP entry has an (single-valued!) attribute duplicated on *some* DCs, but not all of them ? and said attribute hasn't been modified in six months. Microsoft's ADSI just crashes when trying to open the entry on

On 03.07.19 17:19, Rowland penny via samba wrote: >> All these object classes were tests we did? years ago, and which have >> been "deleted" (I don't even remember by what mechanism) for almost as >> long. No object should still be using any of these, and on graz-dc-sem >> that's true. > I would love to know how you deleted something from the schema, it

I'm trying to add schema extensions to my Samba (4.1.5) server, as per > https://wiki.samba.org/index.php/Samba4/Schema_extenstions However, importing the example file (after replacing the DOMAIN_TOP_DN) fails: > $ ldbmodify -H sam.ldb /tmp/automount.ldif --option="dsdb:schema update allowed"=true > Unable to find attribute automountMapName in the schema > ERR:

On 03.07.19 18:04, Rowland penny via samba wrote: >>>> How do I get rid of these bogus Schema entries, and how do I fix the >>>> user account? >>> I do not think you can remove anything from the schema, but I believe >>> you can deactivate schema objects, try reading this: >>> >>>

Hi, I'm trying to configure nwfilter for KVM, but so far I haven't managed to figure out a working configuration. Network setup: The dom0 (Debian 7.1, kernel 3.2.46-1, libvirt 0.9.12) is connected via eth0, part of the external subnet 192.168.17.0/24, and has an additional subnet 192.168.128.160/28 routed to its main address 192.168.17.125. The host's subnet is configured as bridge

cf. https://support.microsoft.com/kb/3000483 Seeing how this seems to affect both client and server side, is it possible (and safe) to enable Mutual Authentication and Integrity as explained in the KB entry? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP: sven.schwedas at tao.at | +43

I tried joining a new DC to my AD domain (Samba 4.1.6). Join claimed to have worked, but samba refuses to start afterwards: > http://pastebin.com/jJiTzxsG Apparently it doesn't recognize its role any more? What went wrong? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP:

The smb.conf hasn't changed since the last three or four times I've posted here asking for help: https://up.tao.at/u/samba/villach-file.txt Top level error I'm seeing is that since today *some* Windows users are denied SMB access to this one member server ("Network password is invalid"), but not all users. Worked fine before today. wbinfo -p/-P work, wbinfo -a shows the

It's amazing how long Samba just keeps running even when apparently everything's broken. In preparation of finally upgrading our DCs to 41.0, I ran dbcheck on all of them, resulting in: graz-dc-sem: > Checking 3861 objects > Error: governsID CN=ucsUser,CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at on 1.3.6.1.4.1.19414.3.2.2 already exists as an attributeId or governsId > Error:

On 21.05.19 14:16, Rowland penny via samba wrote:> You need to investigate your DB problems Great, but how? > I see no reason to have different smb.conf files for different Unix > domain members, just don't have 'netbios name' in any smb.conf. There's also share definitions in the files which I omitted, which are the actual meat of the config files. > You will also

With some slight delay, we did actually manage to get all our old wonky compatibility solutions nuked (turned out there were a few more lurking in the shadows than expected?). Mail servers are no longer domain joined, and unencrypted LDAP is finally gone, together with the terrible PHP scripts that needed it. Which allowed me to finally cleanup all the samba setups:

Le 17/03/2015 11:25, Sven Schwedas a ?crit : > On 2015-03-17 11:13, S?bastien Le Ray wrote: > >> I'm sucessfully running a fileserver on it, just wanting to avoid issues >> in case of network link outage. > So your users, which cannot connect due to network link outage, won't be > prevented from logging in? Sounds like a splendid idea. My users will be able to open

/etc/sysctl.conf net.ipv4.ip_forward = 1 centos 65 host has static private ip 192.168.1.15 I have added a route ip route add 192.168.1.0/24 via 192.168.1.15 but each time I use 'service network restart' the new route disappears anyway I have made a ping before restarting the network and is still not working Thank you. 2014-05-15 12:23 GMT+02:00 Sven Schwedas