similar to: Connecting to guest shares on an ADDC Server

On 01/07/15 13:36, John Cobley wrote: > Ok, I've worked out the caching was due to setting up administratively > assigned offline folders. > > However I think I was getting a little mixed up with my servers. The > error log was from a server that still had the share enabled. I've now > removed the share from the config and restarted the Samba server. > Despite

> OK, could this just be a permissions problem i.e. user 'ash' doesn't > have the required rights to add a dns record, try again, but this time > use the 'Administrator' user. I've repeated the "samba-tool dns add", and the "samba-tool domain join" commands with "-UAdministrator". I get the same errors with either user. (the error

On Mon, 2016-05-16 at 16:41 +0100, ash-samba at comtek.co.uk wrote: > > > Andrew Bartlett > > I haven't actually got ldbdump on the machine, and I can't see it > > in > > the Debian packages. That said, I do appear to be able to add DNS > > records now, so I'm assuming it was the index. If you particularly > > want me to find out then I'll

We have a Samba primary domain controller "empire", which seems to have DNS update issues. We can seem to query all records on empire just fine, and we can modify IPs for existing records, but it will not delete or add new records. Attempting to delete via the AD tools shows "Local security authority database contains an internal inconsistency". Adding a record on the command

On 17/05/16 12:11, ash-samba at comtek.co.uk wrote: > >> G'Day, >> >> This is a serious situation. What it means is that the nextRid value >> for that DC points at a user account that already exists, so when we >> go to create it, the create fails. > I've just looked at the LDAP output, and nextRid is 1000 for both dn: >

The system described by https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS updates correctly, all systems are 4.2.10-Debian, and we've been able to add a user and a new DC. (Thanks for the help!) Synchronisation between v-ward (the new local DC), and empire isn't entirely working, though. >

> This certainly sounds stressful. Yes! > Another way to (on a backup, particularly given your history above) remove the index is with samba-tool dbcheck --reindex. Re-indexing... completed re-index OK 0 root at empire:~[0] samba-tool dns add empire chester-dc.example.com p-cats A 10.4.4.142 -U ash Password for [CHESTER-DC\ash]: Record added successfully Thanks! > The missing

On 01/07/2015 14:59, Rowland Penny wrote: > On 01/07/15 13:36, John Cobley wrote: >> Ok, I've worked out the caching was due to setting up >> administratively assigned offline folders. >> >> However I think I was getting a little mixed up with my servers. The >> error log was from a server that still had the share enabled. I've >> now removed the

> First things first, is there anyway you can update Samba ? > The 4.1.X series is now EOL and wasn't patched for badlock, depending > on what version of debian you are running, you should be able to > upgrade easily. 0 root at empire:/etc/apt[0] samba-tool -V 4.2.10-Debian 0 root at empire:/etc/apt[0] dpkg -s samba |grep ^Ver Version: 2:4.2.10+dfsg-0+deb8u2 0 root at

On 13/05/16 18:42, ash-samba at comtek.co.uk wrote: >> OK, could this just be a permissions problem i.e. user 'ash' doesn't >> have the required rights to add a dns record, try again, but this >> time use the 'Administrator' user. > I've repeated the "samba-tool dns add", and the "samba-tool domain > join" commands with

I did have a "usershares" share when I first set the domain up. This has since been removed. The strange thing is that from my PC (which was the first to be added to the domain) and from this PC (which was the second) I can still see the share (and access it from my PC). Seems like there is some caching going on somewhere. Any idea how it can be cleared? John On 30/06/2015

An awful response: change tombstoneLifetime : ) When deleting objects they go to recycle bin then to deleted objects then are deleted. This if you have some recycle bin working which is not the case by default I reckon. tombstoneLifetime is the number of days AD has to keep deleted objects before the real deletion. If you use the recycle bin this very same tombstoneLifetime is also used to

We will be deploying a replacement Dovecot server soon, and we are planning to use maildir for the primary storage, but with an archive namespace using mdbox (or perhaps sdbox), and SIS. Our backup servers and (luke)warm spare server need to obtain full copies of the mail store. For the maildirs I know I can simply use rsync (we already use it here). I'm a little wary of using rsync with

On Fri, 2016-05-13 at 14:49 +0100, ash-samba at comtek.co.uk wrote: > We have a Samba primary domain controller "empire", which seems to > have > DNS update issues. We can seem to query all records on empire just > fine, > and we can modify IPs for existing records, but it will not delete or > add new records. Attempting to delete via the AD tools shows "Local >

Sorry to everyone on the list, but for some reason this is the only reliable way to get hold of John. John Brown of Chagres Technologies, please contact me! I have been trying for weeks now to get hold of you via email and phone after wire transfering money into your account for the Grandstream phones we ordered, but so far I have not had a single response, nor have the phones arrived! Please

Is there a way to make quota_rule apply to subfolders? I've got some symlinked mailboxes which I want to exclude from quotas. This would work, but is verbose: quota_rule6 = USERS.aaa:ignore quota_rule7 = USERS.bbb:ignore ... quota_rule9999 = USERS.zzz:ignore But simply writing this: quota_rule7 = USERS:ignore doesn't apply to USERS.xxx and so on. The wiki says

> Probably not the answer you want - but I would strongly suggest using > Dovecot replication.? Dovecot replication Just Works - so don't reinvent > the wheel when Timo provided such a polished tool already.? Okay, thanks, I'll look at replication for the warm spare. Although we do use shared folders, which your link below says don't work properly. > And based on > my

Hi All, I have a computer which I recently took off the domain before shipping to HP for repair. I've now had it back and re-added it to the domain and it no-longer appears to be able to access the sysvol share (even using a domain admin login). I've seen this behaviour in one other machine but as it was just a test machine I ignored the problem. When I try to access the share I

On Tue, 13 Sep 2016 15:20:29 +0100 ash-samba--- via samba <samba at lists.samba.org> wrote: > > And to get it editable: > > > > ldbedit -e nano -H /usr/local/samba/private/sam.ldb --cross-ncs > > --show-binary -b > > 'DC=_ldap._tcp.pdc,DC=_msdcs.samdom.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=samdom,DC=example,DC=com' > > -s base > >

We appear to have some phantom DNS records on both our domain controllers. We can see the records using "dig", but not with samba-tool. We can't remove the records either. (v-ward and v-fief are the DCs, Hawaii and Alaska are old DCs which were demoted without errors, I'm trying to clean up some DNS records which don't seem to have been cleaned). All machines are