similar to: Samba internal DNS and Sysvol share

> > > > My concern is that if I ping domain.mydomain.com from any of the > > sites, domain.mydomain.com resolves to a single domain controller (the > > first domain controller that was configured). So the clients at the > > remote sites will be accessing the sysvol share over the VPN, instead > > of the local copy on their local domain controller. > >

I have Samba 4.5.3 working fine as an AD DC and DNS provider. I now need to set up a group policy on the DC but I am having problems with the internal sysvol and netlogon shares. Via the Windows Group Policy Manager snap-in I successfully created a GPO specifying the DC as the primary time source for all clients, using the Administrator user ...but my windows domain test client

Hi Rowland, I've done the below and retried to log on as a normal user, but sadly: C:\> gpupdate /force still returns The processing of Group Policy failed. Windows attempted to read the file \\ct.mydomain.com\sysvol\ct.mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until

Hi here are the commands in the order I ran them: root at dc1:~ # systemctl stop samba root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolreset root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolcheck root at dc1:~ # systemctl start samba root at dc1:~ # smbclient //localhost/sysvol -UAdministrator -c 'ls' Enter Administrator's password:

Hi Andrew, thanks so much for the feedback. Yes, you're 100% right. I'm new at this and originally changed the default GPO, however subsequently reset the default and created a new GPO. (so this getfacl output is post creation of a new GPO) The getfacl output is shown here: # getfacl /usr/local/samba/var/locks/sysvol/mydomain.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

Hi root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes ...some error information... Checked 3647 objects (2 errors) root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix Checking 3647 objects Checked 3647 objects (0 errors) root at dc1:~ # getfacl /usr/local/samba/var/locks/sysvol/ getfacl: Removing leading '/' from absolute path

Hi James The output is as follows... wbinfo --gid-info=10013 => CT\domain admins:x:10013: wbinfo --gid-info=10014 => CT\domain users:x:10014: wbinfo --uid-info=3000000 => BUILTIN\administrators:*:3000000:3000000::/home/BUILTIN/administrators:/bin/false wbinfo --uid-info=3000008 => CT\domain admins:*:3000008:3000008::/home/CT/domain admins:/bin/false Yes I have set

On Sun, 2015-03-08 at 10:35 +0000, William Ross wrote: > I have four domain controllers on my Samba 4.1.17 domain. Each is on a > separate site in AD, in the real world each is at a separate physical > location connected by VPN links. > > They are each configured as DNS servers for the domain using the > internal Samba DNS implementation. On each site the local clients are >

cool! root at dc1:~ # wbinfo -r richard.h 10001 3000008 10000 10014 10004 10005 3000005 3000009 3000000 -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of lingpanda101 via samba Sent: 12 January 2017 22:57 To: samba at lists.samba.org Subject: Re: [Samba] Samba 4.5.3 AD DC - issues with sysvol when setting up Group Policies On 1/12/2017 3:47 PM,

Since past the beta-times of samba 4 (and it worked in former times!!) it never worked like this: \\yourdomain\share or \\yourdomain \dfs-share. The only thing working along witch your domain is: \\yourdomain\netlogon. I had another thread open on this case some times ago. Greetings Daniel EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen

Hi, I am trying to configure domain DFS (I think that's the correct term) as below, using the guide on the wiki: https://wiki.samba.org/index.php/Distributed_File_System_(DFS)#Configure_domain-based_DFS_in_Samba I am aware that the wiki says that this doesn't quite work... however it feels to me that it's very close, nearly working, and I might be able to get it going (hopefully?!)

Also, I'm not sure whether this has any relevance to the problem but I did at one point try to set up a secondary AD server but was struggling to get it going so demoted it using "Demote an Offline Domain Controller" from this page https://wiki.samba.org/index.php/Demote_a_Samba_AD_DC I also went through the "Verifying the Demotion" checks on this page and all looked

I have setup a Samba PDC using the following guide: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller I have opted to use the internal Samba DNS server and have specified a DNS forwarder of 8.8.8.8 When I test the DNS functionality according to the guide everything appears fine: user at myhost:~$ host -t SRV _ldap._tcp.ad.mydomain.com.au.

Any plane in future to build-in Samba SysVol replication (DFS-R) ? For now we have this workaround at link: https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround

Hi all, Has anyone actually got sysvol replication working between 2 (or more) Samba4 DCs? I've tried gluster, inosync, csync and rsync and keep getting stuck on issues with the extended attributes. Is there a roadmap or any clues of a date when MSFRS or DFS replication will be part of Samb4? thanks again, Jim

Of course, the sysvol is located on a windows controller from the forest. mount -t cifs -o username=domain_admin_user //windowsDC.myDomain.local/SYSVOL /mnt/smb/sysvol and copied the files with -R --preserve to /usr/local/samba/var/locks/sysvol/ Below logs are provided from /usr/local/samba/var/log.smbd file. regards, On Wed, Mar 18, 2015 at 3:36 PM, Rowland Penny <rowlandpenny at

Hi all... I'm running Dovecot 0.99.14 on Debian Sarge and I'm now trying to configure a mysql-based authentication. I made all the nessary setup accordinf to dovecot.conf and dovecot-mysql-conf but when i try to login I get the follwing error: pop3-login: Internal login failure: username at mydomain.tld [xxx.xxx.xxx.xxx] Any ideias on what may be happening? Thanks in advance,

Am 31.07.19 um 10:47 schrieb L.P.H. van Belle via samba: > I pointed to that link becuase of the last message. >>> The OU the users were in required read permissions on the Authenticated Users security group! > Im guyessing this is what your problem is, i just dont know where in your AD. OK, that might be the case. So the step is "add/check ACLs on the SYSVOL-share for

When does File Replication using NTFRS or DFS-R will be availabe? Does anybody already work on this item? Here would be some first documentation for this team in case it hasn't started yet: - NTFRS: http://technet.microsoft.com/en-us/library/cc759297(v=ws.10).aspx - SYSVOL replication: http://technet.microsoft.com/de-de/library/dd640019(v=ws.10).aspx - NTFRS migration to DFS-R:

Basicly read: http://blogs.msmvps.com/acefekay/2010/01/03/the-dc-locator-process-the-logon-process-controlling-which-dc-responds-in-an-ad-site-and-srv-records/ https://technet.microsoft.com/en-us/library/cc787370(WS.10).aspx ( you can set the registry changes in the GPO ) now check this very handy site. https://www.windows-security.org/75572f3b66d75af8132ec77996f09a0c/net-logon yeah, i