similar to: missing sam.ldb file

Hi all, We seem to have some issues with our samba4 ad setup. I posted about this last week already but had received no replies at all so far. :-( What is our situation: two domain controllers (dc1 and dc2), one (separate) fileserver, all running sernet-4.1.7. From the workstations perspective, everything is running as it should, there appear to be no issues. However: something in my

Hi Louis, Marc, list, Quick update: On 7-10-2015 12:25, L.P.H. van Belle wrote: > Marc, > > Its for mourik important, because he wants to know why he has this error in his event logs. (i want to know also.) (learning mode) > > Mourik Jan, reboot the computer and login again, do you still see the error message, just to check if this wasnt an old message. > And/or, maybe this pc

On 10/7/2015 7:31 AM, mourik jan c heupink wrote: > On 7-10-2015 13:18, mourik jan c heupink wrote: >> So my dc3 seems unsynced or so. >> >> So I am now checking to make sure that my rsync replication script >> works as it should. (I'm guesssing it does NOT) > > The rsync seems to be working as it should, so now I'm > guessing that idmap.ldb differs

On 7-10-2015 14:52, mourik jan c heupink wrote: > I am not sure what to check or do next..? > I checked filesystems, and there is a difference: dc3 = ext4 dc4/dc2 = xfs But ext4/xfs should both support acl and user_xattr Problem dc3 is mounted like: > /dev/vda3 on /var/lib/samba type ext4 (rw,relatime,user_xattr,barrier=1,data=ordered) I don't see the problem... But I DO get

Hi all, I hope that this request for help will be the last one, for a while to come. Today, sernet support helped my sort out our DC mess, and they did a great job. However, sssd no longer works, and I hope someone here can help out. We used to have DC1, DC2 and DC3. DC1 was the classic-upgraded, first, 'original' DC, and had to be shutdown, unfortunately. So only DC2 and DC3

Hi, I have searched here, and noticed some discussion lately on problems demoting a dc. In my case, all roles are on DC2, and DC1 & DC3 know that: root at DC1:/var/log/samba# samba-tool fsmo show InfrastructureMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com RidAllocationMasterRole owner: CN=NTDS

Hi, Our DC1 had to be taken offline due to corruption. Roles were seized, and I managed to get rid of the directory metadata by using this script from microsoft: http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 After that I had to remove the remaining DNS stuff, and now everything seems to be in perfect shape, with dc2/dc3/dc4, replicating perfectly, no

Hi all, There has been some discussion on GPO's lately, and I find myself having a problem too. This error in logged on one of our win7 workstations: EventData SupportInfo1 2 SupportInfo2 1232 ProcessingMode 1 ProcessingTimeInMilliseconds 1638 ErrorCode 5 ErrorDescription Access is denied. DCName \\dc4.samba.company.com GPOCNName

Hi all, We're seeing the following: root at dc3:~# samba-tool ntacl sysvolcheck rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" ERROR(<type 'exceptions.TypeError'>): uncaught exception - (61, 'No data available') File

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

Hi, I can be wrong but for me UID and GID are UNIX concepts. If your workstations are Windows systems, those UID/GID are not necessary. This does not address your issue but it could help to understand things and to avoid searching in the wrong direction... Cheers, mathias 2015-10-12 20:41 GMT+02:00 mourik jan c heupink <heupink at merit.unu.edu>: > Some extra info from the samba

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

Hi all, Seems we're in much more trouble now... Yesterday I lowered the dn stombstone lifetime from 180 to 60, to reduce the size of DC=DomainDnsZones, and ever since, things have become terrible... The situation now: I have separate fileserver, and three DC3's, all on the same subnet, kvm virtual machines, all running sernet-samba. (4.1.7 and 4.1.9) == on DC3 == DNS queries for my

Hi, We have outdated SOA information in our samba DNS. We used to have a DC1, and it is no more, however it's listed in our SOA records on both remaining DC's. I think this is not correct. I am under the impression that in order to get full failover support, all DC's need to have listed themselves as SOA. This is also what google tells me:

On 10/01/2015 03:57 PM, David Whitney wrote: > Hi mourik...are you saying these messages in the logs are new, as in > suddenly these messages are appearing? > > What version of Samba are you running? > We're on samba 4.2.4, sernet, on wheezy, AD. Running without any issues for more than a year. I have never noticed them before, and a quick search in the logs doesn't

Hi, To make our AD more robust, I'd like to provide more than one dns forwarder, like for example: dns forwarder = 8.8.8.8 8.8.4.4 However, this seems to break dns resolution completely (and without logging errors in the logs!): # Host test.com not found: 3(NXDOMAIN) With only one forwarder things work: $ test.com has address 208.64.121.161 Am I really allowed to specify only one

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed

Hi All I am tying to create a user in SAMBA 4 AD with ldapadd, but its not allow me to add multiple mail attributes, here is my ldif of user. dn: CN=ayesha,CN=Users,DC=samba4pdc,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: ayesha name: ayesha sAMAccountName: ayesha userPrincipalName: Ayesha Umar objectCategory:

dear list, I'm trying to migrate nt4 to samba3, and have two issues at the moment. First is: I'm getting two (small?) errors using smbldap-populate on my ldap database. At first I tried ignoring this, but now also rpc net vampire complains. (maybe because of this..?) This is the output of smbldap-populate: <quote> server:/usr/local/sbin # smbldap-populate Using builtin directory

Hi all, I need to add a windows nt4 (sp6a) server to our samba-4.1.6 active directory. I installed nt4 as a 'stand alone server'. So far it doesn't work, I get: When selecting to 'create a computer account in the domain': - the machine account for this computer either does not exist or is inaccessible If I create a computer account manually, and do not check 'create a