similar to: U/L case mismatch in SPN bug solved in 4.2?

Hello Luc, thanks for your answer. If I understand you correctly than you are using samba4 as windows domaincontroller and you do not have another Windows DC? So after all you have exactly one Kerberos Server that is part of the samba4 server? Thanks Rainer Am 24.03.2015 um 12:41 schrieb Luc Lalonde: > Guten tag Rainer, > > We use our Samba4/Win2k8 AD domain to authenticate all our

The first sentence says that default schema has changed from 2008R2 (schema 47) to 2012R2 (schema 69). This does not mean that we're now at Windows 2012R2 functional level by default??? I must be missing something... On 2019-07-29 11:29 a.m., Rowland penny via samba wrote: > On 29/07/2019 15:59, Luc Lalonde via samba wrote: >> Hello Folks, >> >> There seems to be

Guten tag Rainer, We use our Samba4/Win2k8 AD domain to authenticate all our Linux/Windows/OSX workstations. The home directories are mounted using CIFS in the Windows and OSX clients and NFS4 (krb5) in our Linux labs. Here?s our documentation (french): https://techwiki.gi.polymtl.ca/NFSv4_Kerberos <https://techwiki.gi.polymtl.ca/NFSv4_Kerberos> If Google translate gives you something

Hello, I'm getting replication errors of this type on the Samba (version 4.1.4) server (name=Roquefort): ##### ############################# ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (8418, 'WERR_DS_DRA_SCHEMA_MISMATCH') File

Ahh ok, thanks for the clarification!?? I'll go to bed less ignorant tonight ;-) On 2019-07-29 12:07 p.m., Rowland penny via samba wrote: > On 29/07/2019 16:41, Luc Lalonde wrote: >> The first sentence says that default schema has changed from 2008R2 >> (schema 47) to 2012R2 (schema 69). >> >> This does not mean that we're now at Windows 2012R2 functional level

Hello Folks, There seems to be contradicting sentences in the release notes for 4.11.0RC1: Default schema updated to 2012_R2 --------------------------------- Default AD schema changed from 2008_R2 to 2012_R2. 2012_R2 functional level is not yet available. Older schemas can be used by provisioning with the '--base-schema' argument. Existing installations can be updated with the

Hello, I'm wondering if there's a plan for including the possibility of modifying user attributes (must-change-at_next-login, profile-path, home-drive, home-directory, etc)? For the moment, it seems the only way to do this is when the user is created (samba-tool newuser) or by doing so via 'administrative tools' via a Windows machine. Thank You! -- Luc Lalonde, analyste

Hello Folks, I'm trying to get a logon script to execute via a GPO with Samba 4.0.5. I used the Group Policy Editor that came with the Administration tools and linked a simple 'logon.bat' batch file to automatically mount a network share for a given 'OU=students'. When I log in with a user that's in this container, it does not seem to execute the login script. Anyone

Hello Folks, I've successfully created a GPO for user logon scripts with Samba4... However, the 'SYSVOL\domain\Policies' folder and contents is not replicated to the other DC's. Is this normal? It is working, but it seems that this is a 'single point of failure' for 'logon' scripts. Thank You! -- Luc Lalonde, analyste

Hello Folks, I'm trying to configure AD (mixed Samba4 and Windows2008R2 DC's) for kerberized NFS (NFSv4). Our server is CentOS 6.4 (with Samba 4.1.0)f and our clients are Fedora 19. Console sessions work fine and the user's home directory mounts fine with AutoFS. But sessions initiated with GDM, KDM, or even SSHD fail to mount the user's home directory. We can get an SSH

Hello Andrew, I'm finally diving into this project... First off, my sysadmin stuff is mostly in Perl. So my Python is rudimentary at best. Here we go anyway... I've looked at the 'upgrade.py' but I can't seem to figure out how to connect to the Samba4 passwd database. In the script I see these lines: ####################################################### # Connect to

Hello Johan, I'm having the same problems with DFS and WinXP clients since I upgraded to 2.2.8. I tried to clear the cache on the client side with dfsutil.exe that comes with the Win2000 SP2 but to no avail. Can anyone else confirm this problem? It's also strange that on the WinXP clients the version of the samba server is still registered as a previous version (2.2.6 or 2.2.7).

Hello Folks, We're using Samba as AD servers along with Windows AD Servers (2008R2 FL). We also use SCCM (Current Branch) that is dependent on AD for lab deployments (Windows 10). Currently, SCCM (current branch) supports 2008R2 FL, but for how long??? Samba does not support 2012R2, 2016, 2019 FL. We'd like to remove the Windows Servers from our AD infrastructure, but would also like

Hello, I would like to add an article to your documentation wiki: - CentOS 6 as a Time Machine server for Mountain Lion (Howtos, Misc, Time Machine Server) Here's my wiki informations: Username: LucLalonde -- Luc Lalonde, analyste --------------------------------------------------------------------- D?partement de g?nie informatique: ?cole polytechnique de Montr?al (514) 340-4711 x5049

Hello Folks, This directive works with Samba3 but does not seem to work with Samba-4.0.5: winbind use default domain = Yes I want to get a username that does not contain the domain (GIGL). Instead here's what I get: [root at roquefort ~]# getent passwd | grep GIGL GIGL\Administrator:*:0:100::/usagers/%U:/bin/bash GIGL\Guest:*:3000002:3000003::/usagers/%U:/bin/bash

Hello Folks, I see from the documentation that it is possible to use BIND9 as a drop-in replacement for the internal SAMBA4 DNS service... However, I would like to know if I can keep the BIND9 DNS server on a seperate server from de one that SAMBA4 is running on (AD DC). If this is possible, how would one go about achieving this? I've got an existing DNS infrastructure that I do not

Hello, I've just upgraded to 4.9.6  and can't seem to be able to use the 'offline' backup?   It seems that the only options are:  online, rename, and backup. Can someone confirm this?   I plan to get to migrating to 4.10.2, but I'm doing it incrementally:   v4.7.6  -> v4.8.11 -> v4.9.6 -> v4.10.2 Before going to the v4.10.2, I want to backup my AD database using

Hello Rowland, Is this what you mean? [root at roquefort ~]# echo $LANG fr_CA.utf8 Cheers, Luc. Le 2017-04-28 à 10:04, Rowland Penny a écrit : > On Fri, 28 Apr 2017 09:41:31 -0400 > Luc Lalonde <Luc.Lalonde at polymtl.ca> wrote: > >> Hello Rowland, >> >> Have you tried deleting a user, re-creating the same user and then >> try to add him to a group?

Haha! They're called accents ;-) And no, the username has none. We stick to strict ASCII usernames. And I don't agree, the english accent is implicit. Just ask an american or someone in the UK to pronounce the same word ;-) Le 2017-04-28 à 11:31, Rowland Penny via samba a écrit : > On Fri, 28 Apr 2017 11:01:14 -0400 > Luc Lalonde <Luc.Lalonde at polymtl.ca> wrote:

Hello, Strangely, the profile sync error is gone now on that machine. But just to be safe, we're rejecting the 1607 updates with our WSUS. It will give me more time to investigate the problem. We'll probably sticking with 1511 in our teaching labs until summer 2017. Sorry I can't help more... Cheers, Luc. Le 2016-09-19 16:30, Bob of Donelson Trophy via samba a écrit : > On