similar to: Cannot add user to group in Samba AD DC

Hi samba team ! I have found a very strange bug when changing my user's primaryGroupID with ldif files. The bug is very easy to reproduce : 1) Create a user, create a group, add the user to the group ------------------------------- ~# samba-tool user add stduser User 'stduser' created successfully ~# samba-tool group add stdgroup Added group stdgroup ~# samba-tool group addmembers

On Fri, 2020-08-21 at 17:51 -0400, Vincent S. Cojot via samba wrote: > Hi Rowland, > > First of all, thank you for taking the time to help me. > I tried your suggestion and all results came up empty. > > Then I did a few lapdsearch(es) and found this: > > 1) This query returns two users: > ldapsearch -H ldaps://dc00.ad.lasthome.solace.krynn:636 -x -W -D >

On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > That's correct, I don't have "Unix Attributes" but through the advanced > view I have access to all attributes. > > The ldbsearch command is not returning anything in my case, it gives me 0 > records - no matter which user I try, even the Administrator. I checked the > command several times to make sure

On 21/08/2020 21:40, vincent at cojot.name wrote: > On Fri, 21 Aug 2020, Rowland penny via samba wrote: > >> This works for me: >> >> rowland at devstation:~$ sudo ldapsearch -H >> ldaps://dc01.samdom.example.com -D 'SAMDOM\Administrator' -w >> 'xxxxxxxxxx' -b 'dc=samdom,dc=example,dc=com' >>

On Mon, 19 Jun 2017 12:38:09 +0200 Viktor Trojanovic <viktor at troja.ch> wrote: > Here is the DC's smb.conf: > > > [global] > workgroup = SAMDOM > realm = SAMDOM.EXAMPLE.COM > netbios name = DC > interfaces = lo br-lxc > bind interfaces only = Yes > server role = active directory domain controller >

On Mon, 19 Jun 2017 14:46:34 +0200 Viktor Trojanovic <viktor at troja.ch> wrote: > On 19 June 2017 at 14:20, lingpanda101 via samba > <samba at lists.samba.org> wrote: > > > On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > > > >> That's correct, I don't have "Unix Attributes" but through the > >> advanced view I have

On 6/19/2017 9:12 AM, Viktor Trojanovic via samba wrote: > On 19 June 2017 at 14:56, Rowland Penny via samba <samba at lists.samba.org> > wrote: > >> On Mon, 19 Jun 2017 14:46:34 +0200 >> Viktor Trojanovic <viktor at troja.ch> wrote: >> >>> On 19 June 2017 at 14:20, lingpanda101 via samba >>> <samba at lists.samba.org> wrote:

I missed to mention it. But I actually did try changing the CN=users to OU=ouname, and even leaving it out. I don't know why it didn't return any results before, it does now - see my reply to James. On 19 June 2017 at 14:30, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 19 Jun 2017 08:20:35 -0400 > lingpanda101 via samba <samba at lists.samba.org>

On Tue, 28 May 2019 11:04:01 +0200 Denis Cardon <dcardon at tranquil.it> wrote: > Hi Mark, > > > Because of other issues using ADUC, I tried to remove a domain member using: > > > >> samba-tool group removemembers "Domain Computers" MARKA\$ > > Removed members from group Domain Computers > > > > As shown, it say it "Removed

Hi I have setup a Samba AD and connected a Windows 7 machine to the AD... I'm having problems getting the Remote Desktop Users group to work... [root at bart private]# samba-tool group addmembers "Remote Desktop Users" mj ldb_wrap open of secrets.ldb Added members to group Remote Desktop Users [root at bart private]# samba-tool group listmembers "Remote Desktop

Hi, I've a strange problem. I migrated my NT4 PDC to a ad on my debian stretch (samba version is 4.5.12). The Domain Controller has some shares for my users. One user just told me he can't access the share...before the migration he was able to access the share btw! So I checked the ACL's of this share. Its: root at server:~# getfacl /media/exampleshare # file: media/exampleshare

Howdy! I'm setting up a domain controller, and things are going wonderfully, but I'm running into a strange problem, only some groups will display using the `samba-tool group show` command. <snip> root at vorador:~# samba-tool group addmembers videos dkowis Added members to group videos root at vorador:~# samba-tool group list | grep videos videos root at vorador:~# samba-tool

> Hi Mark, can I ask just what you are trying to achieve ? Well, it's rather simple. I want to remove a domain member from the domain. Normally, I do that with ADUC, no problem. But for some reason I was having trouble with ADUC (since resovled, magically), so I thought I'd try the same thing using samba-tool. That's it really. You wrote further: > I hope you can see that

Hi My next try is to create the group myself, but the point here was that the Builtin group created by the provisioning of Samba, doesn't work... /Martin ----- Original meddelelse ----- Fra: "L.P.H. van Belle" <belle at bazuin.nl> Til: "samba" <samba at lists.samba.org> Sendt: onsdag, 2. marts 2016 16:55:41 Emne: Re: [Samba] Remote Desktop Users Group not

On 01/04/2020 08:23, Rowland penny via samba wrote: > On 31/03/2020 22:48, David Kowis via samba wrote: >> Howdy! >> >> I'm setting up a domain controller, and things are going wonderfully, >> but I'm running into a strange problem, only some groups will display >> using the `samba-tool group show` command. >> >> <snip> >> root at

I have setup a new Samba Active Directory DC on Fedora 25 and samba- 4.5.8-1.fc25.x86_64, rebuild from src.rpm with dc option enable. This system (fedora-addc) is only an AD-DC. In the next days I will deploy another Centos 7 samba member server with standard samba-4.4.4 rpm (without dc enabled) and join it to Fedora AD-DC for manage data users. After install bind dns and samba new rebuild

Hi Tim and Rowland, thanks for Your support! I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba versions require Python3), but You are right, here in DB can be problem - first Samba AD DC was created by migrating Samba3 NT4 domain to Samba4 AD cca week ago (using 'samba-tool domain classicupgrade ...', according to Samba Wiki): On Tue, 26 Mar 2019 10:14:02 +1300 Tim

Hello, ldbsearch -H .... fails with a message that samba_dsdb is not found and LDB_MODULES_PATH needs to be set. Fixing it temporarily with: export LDB_MODULES_PATH=/usr/lib64/samba/ldb allows ldbseach command to work. Is it critical for ADDC operation though? [root at feddc ~]# rpm -q samba libldb ldb-tools samba-dc samba-4.7.0-12.fc27.x86_64 libldb-1.2.2-1.fc27.x86_64

Hi Andrew, Hi Rowland, I just spent close to one hour debugging this with one OpenShift specialist from RedHat. What we figured was: 1) both of my configs work (auth and group-sync) and are in fact correct. 2) OCP group sync does not sync the groups that have no explicit 'member' Attribute or groups that are 'default' groups (E.g: 'Domain Users') where membership is

On 2020-04-01 05:51, Rowland penny via samba wrote: > On 01/04/2020 09:23, Rowland penny via samba wrote: >> On 01/04/2020 08:23, Rowland penny via samba wrote: >> On 31/03/2020 >> 22:48, David Kowis via samba wrote: >>> Howdy! >>> >>>> I'm setting up a domain controller, and things are going >>> >>>> wonderfully, but