similar to: Duplicate (not so) single-valued attributes on some DCs?

On Wed, 2015-01-07 at 15:01 +0100, Sven Schwedas wrote: > We've run into a small issue over the holidays (I can't pinpoint it due > to nobody being in the office for the past three weeks and thus not > noticing anything): At least one LDAP entry has an (single-valued!) > attribute duplicated on *some* DCs, but not all of them ? and said > attribute hasn't been modified

Thanks Sven, good Idea let's see if i am getting this right: 1) use MS ADSI editor to add few more attributes to the "users" class 2) use ldapmodify from my ubuntu server to populate those attributes would that work? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX:

On 03.07.19 18:04, Rowland penny via samba wrote: >>>> How do I get rid of these bogus Schema entries, and how do I fix the >>>> user account? >>> I do not think you can remove anything from the schema, but I believe >>> you can deactivate schema objects, try reading this: >>> >>>

On 04.07.19 15:54, Rowland penny via samba wrote:>> Still left are the three governsId collisions, which are now identical >> across all DCs: >> >>> Checking 3861 objects >>> Error: governsID >>> CN=ucsUser,CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at on >>> 1.3.6.1.4.1.19414.3.2.2 already exists as an attributeId or governsId >>>

I've wasted the last two days trying to get various versions of samba 4 packages getting to run under Wheezy. ? Wheezy's own packages are incomplete betas. ? Inverse provides their own packages (for SOGo), but they only care about getting their one use case to work; smbd doesn't work all, winbind has problems, and the postinst script resets my smb.conf with nonsense. Before I try

----- Original Message ----- > From: "Sven Schwedas" <sven.schwedas@tao.at> > To: libvirt-users@redhat.com > Sent: Friday, August 1, 2014 2:29:22 AM > Subject: Re: [libvirt-users] XP and virtio > > On 2014-07-31 20:05, Mauricio Tavares wrote: > > So I need to create a XP vm. I am using lvm logical volumes for > > its disk, so I am using virtio.

As sysvol replication seems to be safest when using rsync, how can I determine the PDC (to avoid accidentally starting the replication on a slave)? Windows' ADUC has the "Operations Masters" window which shows them, how do I query this from within Samba? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 |

Could *somebody* shed some light on how the firewall is supposed to work? I haven't even managed to get trivial firewall rules to work. As mentioned, the examples in the documentation generate completely nonsensical rulesets, and if I try writing my own, they make even less sense. For example: > <filter name='test-eth0' chain='root'> > <rule

On Thu, Dec 4, 2014 at 5:19 AM, Sven Schwedas <sven.schwedas at tao.at> wrote: > Tbh, you might get away with using PCEngines' APU boards (the successor > to their Alix boards with a massively upgraded CPU) if individual > machines don't need RAID (because everything is replicated anyway). > I considered that, but what would you use for storage?? They have an mSATA

I successfully joined a device to our Samba domain some weeks ago. Auth, both online and offline, worked fine. Now suddenly it stopped working. The device is online, the DC is reachable, and I can log into samba member servers on the network just fine, but not into AD accounts on that device. I could remove the device from the domain using my domain credentials, but now I can't re-join, it

Every once in a while, the DNS fails to resolve external domains ? but the DNS forwarder is still reachable (8.8.8.8, I assume it would be noticeable if it had any issues). What debug class is used by the DNS code? I don't really want to put several DCs on log level 10 for possibly days? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und

> -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: vrijdag 8 september 2017 14:40 > Aan: L.P.H. van Belle; samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): > Server (GC/name/dom at DOM) unknown > > On 2017-09-08 10:37, L.P.H.

We're using a bunch of AD groups ? all users/groups are created and managed with ADUC. Domain Users is the primary group for all users, plus a few for our departments (and Domain Admins). All groups have their posixGroup attributes filled out. wbinfo --group-info and getent group show the correct membership for all groups except Domain Users. smb.conf: http://pastebin.com/ymrXZJ5u Already

> Keytabs look reasonable, as far as I can see, but why does > graz-dc-sem have the same SPN output as graz-dc-1b in > addition to its own? A snapshotted server/cloned server? I dont know but thats not correct. I suggest, cleanup the DS with FSMO roles. Then remove a failty server and re-add it as a new installed DC. ( the good DS with FSMO) First backup:

On Tue, Aug 25, 2015 at 08:36:14AM +0200, Sven Schwedas wrote: > On 2015-08-24 20:55, Jeremy Allison wrote: > > On Thu, Aug 13, 2015 at 09:21:23AM +0200, Sven Schwedas wrote: > > winbindd is extremely reliable and fully supported by the Samba > > Team, please don't post FUD about Samba components. If you have > > winbindd problems, post bug reports > > I did,

On 2017-04-07 13:44, Sven Schwedas via samba wrote: > In the end I just upgraded all DCs to 4.5 and remote-deleted the broken > ones. Seemed to work without a hitch, manual removal was only necessary > to remove the IPs from DNS\_msdcs.ourdomain\gc\. Apparently not, adding new DCs failed with "WERR_DS_DATABASE_ERROR". `samba-tool dbcheck --fix` solved that. With that out of

Dear All, I've some question. When I create new users/groups in AD DC. It seem that I still need to add UID and GID in unix attribute. Possible my setup on rfc2370. So I would like to check if there is any other way to do this without configuring UID and GID? Thank you. Regards, Chan Min Wai

Le 17/03/2015 11:25, Sven Schwedas a ?crit : > On 2015-03-17 11:13, S?bastien Le Ray wrote: > >> I'm sucessfully running a fileserver on it, just wanting to avoid issues >> in case of network link outage. > So your users, which cannot connect due to network link outage, won't be > prevented from logging in? Sounds like a splendid idea. My users will be able to open

I'm trying to add schema extensions to my Samba (4.1.5) server, as per > https://wiki.samba.org/index.php/Samba4/Schema_extenstions However, importing the example file (after replacing the DOMAIN_TOP_DN) fails: > $ ldbmodify -H sam.ldb /tmp/automount.ldif --option="dsdb:schema update allowed"=true > Unable to find attribute automountMapName in the schema > ERR:

Sven Schwedas <sven.schwedas at tao.at> writes: > [1:multipart/signed Hide] > > > [1/1:text/plain Hide] > > On 2016-04-26 09:02, Olivier Nicole wrote: >> Hi, >> >> With Samba 3 and Windows XP, it used to be possible to install he >> printer drivers on the Samba server, so when an XP workstation joined >> the domain, it would find the printer