similar to: File server as host for a Windows Server VM?

>> Did you think to run 'samba-tool domain tombstones expunge --help' ? No, I didn't, I just assumed that the message "'samba' will remove them daily, 'samba-tool domain tombstones expunge' would do that immediately" would mean exactly that :-). It worked now. Thank you!

I did that kind of in the past. Now I dont because I have plenty of resoruces available. But. So far you have not provided stats on server usage (cpu,ram) over a 24hour or 7 day 8am-5pm timeframe. So I will asume you have plenty of usage/performance to spare. I suggest you to -if possible- replicate the current server setup somewhere else and then install the KVM and dependencies via yum. That way

Oh! It's works. Thanks a lot. God bless you all. --- Gilberto Nunes Ferreira (47) 99676-7530 - Whatsapp / Telegram Em qui., 30 de mai. de 2024 ?s 10:40, miguel medalha <medalist at sapo.pt> escreveu: > For a GPO to work, both "Authenticated Users" and "Domain Computers" must > have "Read" rights. > > On a Policy Object, go to

> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote: > > >> Can someone therefore please explain to me what exactly these GPO >> restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The

> > Finally 'browseable' is redundant on a Samba AD DC, there is no > browsing on an AD DC. > Well, sometimes you just *have* to do some file serving out of an AD DC. It happened to me. In that case, if you don't have "browsable = yes" on a share, that share will not appear in the Computer Management applet in Windows and you won't be able to set its

On Fri, 10 Aug 2018 14:32:01 +0100 "miguel medalha" <medalist at sapo.pt> wrote: > > >having a particular group > > > set as "Primary group" > > > How are setting the 'primary group' ? > > The 'primary group' had been set a long time ago, when the system was > created. It had been set with ADUC, under the

On Thu, 13 Sep 2018 14:41:54 +0100 miguel medalha via samba <samba at lists.samba.org> wrote: > Hello > > In one of my DCs, when I run ./configure for Samba 4.9.0, it fails > with the following message: > > Checking for lmdb >= 0.9.16 via header check : not > found Samba AD DC and --enable-selftest requires lmdb 0.9.16 or later > > My ./configure command

> (...) By default a samba AD DC sets the login shell for all > Active Directory user accounts to /bin/false. The only way I've found to > change this, is to override that globally with the "template shell = > /bin/bash" option in smb.conf, which enables it globally for all Active > Directory users (probably not desired). Using RFC2307 you can give each user its own

> What I do think is, it isn't a good idea to create Samba shares with > spaces in the name, use an underscore instead. Why? I have been using shares with spaces in their names for years without running into problems even once. Windows fully supports it, so should and does Samba. In a business environment you NEED proper, human readable names, not ugly convoluted substitutes. Just

For a GPO to work, both "Authenticated Users" and "Domain Computers" must have "Read" rights. On a Policy Object, go to "Delegation/Advanced"" and set those rights accordingly.

Hi, Hi, I'm having trouble transferring FSMO roles "DOMAINDNS" and FORESTDNS with below showing: samba-tool fsmo transfer --role=domaindns ERROR: Failed to delete role 'domaindns': LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <00002098: SecErr: DSID-031523E0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 > <> root at samba4-dc:~# samba-tool fsmo transfer

I'm using RHEL 7.4 I have built the samba from source, downloaded the tar file then extract ./configure make make install and I have installed all required packages and dependencies including gpgyme and I don't know why it's not working. ________________________________ From: Rowland Penny <rpenny at samba.org> Sent: Sunday, March 31, 2019 3:57 PM To: samba at

Let me be the first (maybe): CentOS 5.2 is here (at least): http://mirror.chpc.utah.edu/pub/centos/5.2/ Thank you all who worked on it! -------------- next part -------------- No virus found in this outgoing message. Checked by AVG. Version: 8.0.100 / Virus Database: 270.4.1/1513 - Release Date: 22-06-2008 7:52

I'm unable to join my computer to the domain. On the domain controller, initially I only had firewall-cmd --permanent --add-service=samba but that didn't work. The computer couldn't join but when I turned off the firewall all-together I was able to join. I then tried firewall-cmd --permanent --add-service={samba,dns,ldap,ldaps,kerberos,kpasswd} but that didn't work either. Are

Hi list, Today, I spent most of the day figuring out why my password policies set via GPO are not applied on a domain level, just to find out that this is not one of the many occasions where Windows is the problem but it's really Samba, for a change. Apparently, password policies can only be changed using samba-tool and not via GPO. IMO, the FAQ is not very clear here.

I'm struggling with trying to create a unified, ldap-backed for my home network. I have an existing directory that handles my posix logins correctly and I'm able to auth smb users against those accounts, but I'm not able to join any machines to the directory. It would be profoundly helpful to see a ldif dump of a working configuration. Surely others have created similar setups at home

On Fri, 10 Aug 2018 13:20:15 +0100 "miguel medalha" <medalist at sapo.pt> wrote: > > > > By default, every AD user is a member of 'Domain Users' and so, > > > > when you use the 'rid' backend every Unix user gets the group as > > > > their primary group. > > > > > > > The only way to change this is by using

Hi, Anyone know why I don't get the properties window when I try to create a new user or view a user's properties. Was working fine last week when I created 3 or 4 test users. I'm using the same workstation I had installed RSAT on and created the users with before. Any idea's? -- Regards, Phil

On Tue, 07 Aug 2018 22:43:23 +0100 Miguel Medalha via samba <samba at lists.samba.org> wrote: > > By default, every AD user is a member of 'Domain Users' and so, > > when you use the 'rid' backend every Unix user gets the group as > > their primary group. > > > The only way to change this is by using a version of Samba >= 4.6.0 > > and

Hi all, A - I thought badlock mitigation was about encrypting SMB traffic, at least most part of it. And this encryption of most part of data transfer could (or should) lower performances. It seems I was wrong: smallest part (something like commands) are encrypted but not SMB traffic (ie file transfer). This for SMB protocol prior to SMB3 (which comes with windows 8). B - According to what I