similar to: Samba4 UNIX password sync

So, a little bit more investigation shows a problem with idmap -> User - BUILTIN\Administrator uid = 30000 Group - BUILTIN\Administrators gid = 3000000 Group - SAMDOM\Domain Admins gid = 60000 POSIX file ownership is becoming 3000000:60000 It seems that the Administrators group group is set as the owner. What's more, 'Administrators' group name is not mapped when I list the

I’m looking to replace a DC within a small network by adding a new DC and transferring FMSO roles, then demoting the old DC (https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC). I am able to successfully deploy the new DC following directions in https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory. However, I am struggling with ID mappings – I’m not really

Hi Rowland - thank you for replying. I have now demoted and removed the temporary DC with the intention of repeating the exercise from scratch later this week. It was a Ubuntu Server 18.04.1 and the smb.conf was very vanilla: [global] workgroup = ACASTA realm = ACASTA.INTRA netbios name = UBUNTU server role = active directory domain controller dns forwarder - 192.168.200.3 idmap_ldb:use rfc2307 =

Hi List I've spun up a fresh Debian 8 VM to test out the upgrade steps for a Debian samba 4.1.17 package deployment to a compiled samba 4.2.5. All seem s to work fine (apt-get remove samba first, followed by configure/make/install), but I get the following errors in my samba.log: samba: setproctitle not initialized, please either call setproctitle_init() or link against libbsd-ctor Is this

Hi Rowland - just wanted to follow up and say thanks. It was a dependency issue with pam. All sorted now. May I quickly double check that the current Samba wiki is correct - there is no automatic sysvol replication? Therefore, I must replicate my old DC sysvol to the new DC before transferring FMSO roles and demoting the old DC?? -----Original Message----- From: Rob Mason Sent: 26 November 2018

I've now spun up a second DC ready for a migration from an old DC. Just checking over a few things and have hit this problem: Objects created by Domain Admins members default to ownership by BUILTIN\Administrators. So, when JohnDoe is logged on as JohnDoe and creates a file, its ownership becomes BUILTIN\Administrators. I've played with perms for over an hour and cannot make any sense

Hi Rowland - It was krb5-user, libpam-winbind and libnss-winbind. But this was partly due to not having the Universe repo installed from the Ubuntu 18 Live image (this has to manually added when using the live image). I've copied across idmap.ldb from the old (only) DC. Assuming no changes, I can just replicate Sysvol prior to migration? thanks -- Rob Mason -----Original Message----- On

Many thanks Rowland. Yes, I don't understand idmaps, but I _think_ I'm getting it. I have added the gid of 60002 for Domain Admins and undertaken some 'chgrp' tasks. I've now got a domain member with shares that presents the correct ownership. All looks good. I'm still slightly confused why I have two ranges within my member smb.conf: idmap config * : backend = tdb

Hi Again - following on from my last request for help, I'm now attempting to setup LDAP auth against my working samba4 AD. Simplistically, I'm trying initially to SSH into my AD server (working) using nslcd. I've tried method #1 from https://wiki.samba.org/index.php/Local_user_management_and_authentication/ns lcd My simple config is: uid nslcd gid nslcd uri

I've spent some time updating, upgrading and generally consolidating an old Samba AD. I've managed to remove a very old unsupported (4.2) Samba AD DC following migration to a couple of new DC's - that seems to have worked out OK. Workstation logons and GPO's working fine. I'm now left with one problem after joining a new Samba (4.5.12) member server to the domain for file

> On Wed, 2 Jan 2019 14:42:39 +0000 > Rob Mason <rob at acasta.co.uk<mailto:rob at acasta.co.uk>>> wrote: > >> Many thanks Rowland. Yes, I don't understand idmaps, but I _think_ >> I'm getting it. I have added the gid of 60002 for Domain Admins and >> undertaken some 'chgrp' tasks. I've now got a domain member with >>

On 12/6/2018 3:40 AM, Rowland Penny via samba wrote: > On Wed, 5 Dec 2018 17:36:43 -0500 > Marco Shmerykowsky PE via samba <samba at lists.samba.org> wrote: > >> >> On 12/5/2018 3:10 PM, Rowland Penny via samba wrote: >>>> >>>> That sucks. I'm assuming Centos has the same problems? >>> >>> No, Centos has an even bigger

Dear all, I look after a number of CentOS 4.x servers running legacy applications that depend on ancient versions of various things (such as MySQL 3.x) and which can't be upgraded without non-trivial development effort. I've been considering virtualising them and as a test have been trialling with a company that uses Parallels Cloud Server 6. However, I've run into a roadblock

Can someone who knows please explain how compatible with AD Winbind is and specifically what advantages the new 3.0 version of Samba provides. I've looked at the release notes but I appear to be able to quite happily access domain accounts/groups etc, browsing and so on with a RH 7.3 machine on my Win2K domain using winbind and am not sure whether it is worth trialling V3. regards, Toby

The BBC are currently trialling multicasting the Olympics. This requires multicast and IGMP to be available. As far as I can make out, in 2.0.8 at least, all multicast addresses are filtered out and, to my naive eyes, can''t be re-enabled. Please prove me wrong :-) Dirk -- Please Note: Some Quantum Physics Theories Suggest That When the Consumer Is Not Directly Observing This Message,

Hello samba list, We're trialling Samba 3.6 and on some of our systems I see the following type of messages in the smbd and winbind logs: [2012/03/16 17:28:59.038177, 0] ../lib/util/tdb_wrap.c:65(tdb_wrap_log) tdb(/var/lib/samba/messages.tdb): tdb_oob len 663932 beyond eof at 12288 [2012/03/16 17:28:59.038331, 0] ../lib/util/tdb_wrap.c:65(tdb_wrap_log)

We've just received a bill from bt where it claims that we are making numerous calls to the same number time after time. e.g. 01226xxxxxx Barnsley 20/06/2007 2115 16:00:00 01226xxxxxx Barnsley 20/06/2007 1219 08:55:32 01226xxxxxx Barnsley 21/06/2007 2115 16:00:00 01226xxxxxx Barnsley 21/06/2007 1315 08:00:00 01226xxxxxx Barnsley 21/06/2007 0515 08:00:00 01226xxxxxx Barnsley 22/06/2007 2115

Hi List, I have an unusual problem concerning the Windows XP "Rotate" image explorer shell extension. I have a share called "Archives" defined with a number of sub-directories. Whilst I have read/write permission to all directories, I am unable to use the Windows XP "Rotate Clockwise" or "Rotate Counter Clockwise" image command on JPG's contained

Hi Marius, If you're really using Ubuntu 10.04 (lucid lynx), the r-base package does not exist anymore on the repository (http://packages.ubuntu.com/search?keywords=r-base). You're version of Ubuntu is obsolete. If you want an Ubuntu LTS, you should upgrade to 14.04. >> Message: 1 >> Date: Sat, 15 Aug 2015 16:19:33 +1000 >> From: Marius Barnsley <mariusbarnsley at

Hello, Did you setup your sources as suggested here? http://cran.us.r-project.org/bin/linux/ Sent from my iPhone > On Aug 15, 2015, at 3:00 AM, r-sig-debian-request at r-project.org wrote: > > Send R-SIG-Debian mailing list submissions to > r-sig-debian at r-project.org > > To subscribe or unsubscribe via the World Wide Web, visit >