similar to: Samba internal DNS and Sysvol share

> > > > My concern is that if I ping domain.mydomain.com from any of the > > sites, domain.mydomain.com resolves to a single domain controller (the > > first domain controller that was configured). So the clients at the > > remote sites will be accessing the sysvol share over the VPN, instead > > of the local copy on their local domain controller. > >

On Sun, 2015-03-08 at 10:35 +0000, William Ross wrote: > I have four domain controllers on my Samba 4.1.17 domain. Each is on a > separate site in AD, in the real world each is at a separate physical > location connected by VPN links. > > They are each configured as DNS servers for the domain using the > internal Samba DNS implementation. On each site the local clients are >

I have Samba 4.5.3 working fine as an AD DC and DNS provider. I now need to set up a group policy on the DC but I am having problems with the internal sysvol and netlogon shares. Via the Windows Group Policy Manager snap-in I successfully created a GPO specifying the DC as the primary time source for all clients, using the Administrator user ...but my windows domain test client

Hi Rowland, I've done the below and retried to log on as a normal user, but sadly: C:\> gpupdate /force still returns The processing of Group Policy failed. Windows attempted to read the file \\ct.mydomain.com\sysvol\ct.mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until

Since past the beta-times of samba 4 (and it worked in former times!!) it never worked like this: \\yourdomain\share or \\yourdomain \dfs-share. The only thing working along witch your domain is: \\yourdomain\netlogon. I had another thread open on this case some times ago. Greetings Daniel EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen

Hi, I am trying to configure domain DFS (I think that's the correct term) as below, using the guide on the wiki: https://wiki.samba.org/index.php/Distributed_File_System_(DFS)#Configure_domain-based_DFS_in_Samba I am aware that the wiki says that this doesn't quite work... however it feels to me that it's very close, nearly working, and I might be able to get it going (hopefully?!)

Hi here are the commands in the order I ran them: root at dc1:~ # systemctl stop samba root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolreset root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolcheck root at dc1:~ # systemctl start samba root at dc1:~ # smbclient //localhost/sysvol -UAdministrator -c 'ls' Enter Administrator's password:

Hi Andrew, thanks so much for the feedback. Yes, you're 100% right. I'm new at this and originally changed the default GPO, however subsequently reset the default and created a new GPO. (so this getfacl output is post creation of a new GPO) The getfacl output is shown here: # getfacl /usr/local/samba/var/locks/sysvol/mydomain.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

Hi root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes ...some error information... Checked 3647 objects (2 errors) root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix Checking 3647 objects Checked 3647 objects (0 errors) root at dc1:~ # getfacl /usr/local/samba/var/locks/sysvol/ getfacl: Removing leading '/' from absolute path

Hi James The output is as follows... wbinfo --gid-info=10013 => CT\domain admins:x:10013: wbinfo --gid-info=10014 => CT\domain users:x:10014: wbinfo --uid-info=3000000 => BUILTIN\administrators:*:3000000:3000000::/home/BUILTIN/administrators:/bin/false wbinfo --uid-info=3000008 => CT\domain admins:*:3000008:3000008::/home/CT/domain admins:/bin/false Yes I have set

cool! root at dc1:~ # wbinfo -r richard.h 10001 3000008 10000 10014 10004 10005 3000005 3000009 3000000 -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of lingpanda101 via samba Sent: 12 January 2017 22:57 To: samba at lists.samba.org Subject: Re: [Samba] Samba 4.5.3 AD DC - issues with sysvol when setting up Group Policies On 1/12/2017 3:47 PM,

Hi all... I'm running Dovecot 0.99.14 on Debian Sarge and I'm now trying to configure a mysql-based authentication. I made all the nessary setup accordinf to dovecot.conf and dovecot-mysql-conf but when i try to login I get the follwing error: pop3-login: Internal login failure: username at mydomain.tld [xxx.xxx.xxx.xxx] Any ideias on what may be happening? Thanks in advance,

I have setup a Samba PDC using the following guide: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller I have opted to use the internal Samba DNS server and have specified a DNS forwarder of 8.8.8.8 When I test the DNS functionality according to the guide everything appears fine: user at myhost:~$ host -t SRV _ldap._tcp.ad.mydomain.com.au.

Also, I'm not sure whether this has any relevance to the problem but I did at one point try to set up a secondary AD server but was struggling to get it going so demoted it using "Demote an Offline Domain Controller" from this page https://wiki.samba.org/index.php/Demote_a_Samba_AD_DC I also went through the "Verifying the Demotion" checks on this page and all looked

Of course, the sysvol is located on a windows controller from the forest. mount -t cifs -o username=domain_admin_user //windowsDC.myDomain.local/SYSVOL /mnt/smb/sysvol and copied the files with -R --preserve to /usr/local/samba/var/locks/sysvol/ Below logs are provided from /usr/local/samba/var/log.smbd file. regards, On Wed, Mar 18, 2015 at 3:36 PM, Rowland Penny <rowlandpenny at

Hello, I have manually mounted the SYSVOL share, sync it with samba and run samba-tool ntacl sysvolreset. But I'm not sure if all windows policies are acceptable by samba because of errors logs: 2015/03/18 09:30:52.197934, 0] ../source3/smbd/oplock.c:338(oplock_timeout_handler) Oplock break failed for file myDomain.local/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/USER/Registry.pol --

Hi team! Samba 4.1.11 on Debian Wheezy here, configured as a DC. I recently started noticing long startup times for the Windows clients, whenever multiple clients are started at the same time. For example, at 8:00 AM (when around 30 PCs get started simoultaneously, I get this in smbd.log: ### [2014/09/16 08:01:21.320944, 0] ../source3/smbd/oplock.c:335(oplock_timeout_handler) Oplock break

Sorry, I have omitted to post the config file. # cat /usr/local/samba/etc/smb.conf [global] workgroup = myDomain realm = myDomain.local netbios name = DCLINUX server role = active directory domain controller dsdb:schema update allowed = yes [netlogon] path = /usr/local/samba/var/locks/sysvol/rcs-rds.local/scripts read only = No [sysvol]

Any plane in future to build-in Samba SysVol replication (DFS-R) ? For now we have this workaround at link: https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround

When does File Replication using NTFRS or DFS-R will be availabe? Does anybody already work on this item? Here would be some first documentation for this team in case it hasn't started yet: - NTFRS: http://technet.microsoft.com/en-us/library/cc759297(v=ws.10).aspx - SYSVOL replication: http://technet.microsoft.com/de-de/library/dd640019(v=ws.10).aspx - NTFRS migration to DFS-R: