similar to: R­e: R­­­e: R­e: D­­C2 d­en­ie­s ­a­c­­cess­­ whe­­­

> OK, make sure that the two idmap.ldb files match and then run > 'samba-tool ntacl sysvolreset' on both machines and see if this cured > this problem. I did: root at dc1:~$ service sernet-samba-ad stop root at dc2:~$ service sernet-samba-ad stop root at dc2:~$ mv /var/lib/samba/private/idmap.ldb /root/idmap.ldb.bak root at dc1:~$ scp /var/lib/samba/private/idmap.ldb

> OK, make sure that the two idmap.ldb files match and then run > 'samba-tool ntacl sysvolreset' on both machines and see if this cured > this problem. I did: root at dc1:~$ service sernet-samba-ad stop root at dc2:~$ service sernet-samba-ad stop root at dc2:~$ mv /var/lib/samba/private/idmap.ldb /root/idmap.ldb.bak root at dc1:~$ scp /var/lib/samba/private/idmap.ldb

Hello list, I am not sure if this is a bug or known already but I will describe it. I have two domain controllers running on 4.1.12/sernet which are linked together. I am using unison for bidirectional sync for the sysvol directory as described on samba's wiki, although in my opinion the problem I will describe in the following has nothing to do with the sync process. The sync occurs every

Hello list, using AD with rfc2307 provisioned and NIS extensions are available. In ADUC tool I choose the group "Domain Admins" and click on the [UNIX Attributes] tab. I activate it for my domain and choose the GID=500. When I execute on my member server "net cache flush && getent group 500" I get the result domain admins:x:500:johndoe,name1,name2 So far so good,

Hi I use /usr/bin/rsync -XAavz --log-file /var/log/sysvol-sync.log --delete-after -f"+ */" -f"- *" /var/lib/samba/sysvol root at DC2:/var/lib/samba && /usr/bin/unison &> /dev/null and works ok but not working with crontab */5 * * * * root /usr/bin/rsync -XAavz --log-file /var/log/sysvol-sync.log --delete-after -f"+ */" -f"- *"

Hi all, I wonder if there are any pro/cons between using Samba4 of Debian's official Wheezy-backports repository which actually is version 4.1.11 -or- using Samba4 of Sernet's official repository which actually is on version 4.1.12 I understand that Sernet's package at that moment is more recent, but recently I had an issue which was Debian/Samba4 related and unfortunately I made

Greetings everybody! I'm trying to figure out how to get compiz install error-free in a prefix other than /usr. Because I currently don't "trust" compiz-packages on Ubuntu EdgyEft I have it install upstream to /home/mirco/compiz. I call configure like this: ./configure --prefix=/home/mirco/compiz --enable-librsvg --enable-gtk --enable-metacity --enable-dbus

I am facing an issue which I cannot explain myself. The roaming profiles don't work for users that are members of the group "Domain Admins". The [profiles] share on the member server was configured exactly as explained on the wiki for roaming profiles. It works like a charm for all domain users, *BUT*: if a user is member of the group "Domain Admins" it *doesn't* :-(

Hey all, according to the whitepaper http://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx I would like to a windows shortcut on the desktop that allows me to open and run the "Group Policy Editor" *for my samba4/AD domain*. The shortcut command should be: "gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=mydom,

Dear Belle, That produce the similar situation. Thus I'm trying osync And the result are much present according to my test case And configuration are much streamline. However, I'm not sure how it can work with 2 DC or more... Thank You On Mon, Jun 22, 2015 at 9:05 PM, L.P.H. van Belle <belle at bazuin.nl> wrote: > Hai Min Wai Chan, > > I have tested it as shown in

Hello list, I am using the Microsoft ADUC (Active Directory Users & Computers) tool from the RSAT suite for creating and modifying my domain users. I am aware of the "copy" functionality which really is very nice to use. Unfortunately I am missing two important actions during the user-creation process which I try to describe: 1.) When I use the template feauture (by using the

Hi, I was thinking about bidirectional sync of sysvol and i've a question: ?What about DRBD?. You can create a disk partition in every node, create a DRBD cluster and then mount that partition on sysvol folder. The sincronization is bidirectional and in real time. For now i've not tested this option, but i've plans to start some tests. What is your opinion about this? Greetings!!

Hello list, I am facing an issue which I cannot explain myself. The roaming profiles don't work for users that are members of the group "Domain Admins". The [profiles] share on the member server was configured exactly as explained on the wiki for roaming profiles. It works like a charm for all domain users, *BUT*: if a user is member of the group "Domain Admins" it

Hello Min Wai Chan, ? Can you explain more about,, the DC1 will remove any emptey directory on DC1. tested it here, but that does not occure here. i can create empty directories on DC1, and these are synced to DC2. empty or not. ? ?DC1 will overwrite any users/group change on DC2? if setup correctly, your sysvol rights on DC1 and DC2 are the same.. ? i suggest you to the following. get the

Dear Davor, would you please stop abusing this thread? The topic and initially posting is talking of something quite different than Rowland used in his first answer and to what you have replied. Thanks for your understanding. And no, uid and gid is not the same (uid!=gid) Regards, Mirco

> Why do admins think they can enter people's private areas? It's nothing > to do with you. You are merely there to make sure the computers work. So > do just that. You do not dictate what others put in their profile. Just > leave your users alone. When they have a problem they will tell you. > Otherwise stay out. > Jo I know that my english is not very well as

Hello, I am running Samba 4.1.12/Sernet on Debian Wheezy 64bit and I am about to setup my member server. The DC was provisioned with rfc2307 and extended attributes. I have assigned to the domain group called "Domain Users" the GID=10000. My member server was prepared with ACL+user_xattr and winbind support. My /etc/nsswitch.conf is using "winbind" for passwd+group, and

Dear Louis, Just to check... Would it be possible to have more than 2 DC using Unison to sync? I was trying to make this to the samba wiki. But when reading the list I see Rowland talking about the SID and RID issue Because of built-in group SID is not sync across domain. Which I think samba should have their own way of dealing this or it will just be a mess in a long run. Did we have any

Dear Daniel, Klaus I've try that before But because of how samba work on the files. The Advise is No Without CTDB, you will just shoot yourself on the foot... On Thu, Jun 25, 2015 at 7:39 PM, Zerwes, Klaus <zerwes at rosalux.de> wrote: > Just some notes: > For master <-> master setup (bi-directional sync) you need AFAIK a cluster > filesystem. > I have no idea

On 2016-08-26 10:59, Rowland Penny via samba wrote: > On Thu, 25 Aug 2016 06:08:16 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > >> On the "Bidirectional Rsync/Unison based SysVol replication >> workaround" page. The title (as you can see) includes the word UNISON >> when in fact the "Unison" program is NOT being