similar to: Samba internal DNS and Sysvol share

> > > > My concern is that if I ping domain.mydomain.com from any of the > > sites, domain.mydomain.com resolves to a single domain controller (the > > first domain controller that was configured). So the clients at the > > remote sites will be accessing the sysvol share over the VPN, instead > > of the local copy on their local domain controller. > >

I have Samba 4.5.3 working fine as an AD DC and DNS provider. I now need to set up a group policy on the DC but I am having problems with the internal sysvol and netlogon shares. Via the Windows Group Policy Manager snap-in I successfully created a GPO specifying the DC as the primary time source for all clients, using the Administrator user ...but my windows domain test client

Hi Rowland, I've done the below and retried to log on as a normal user, but sadly: C:\> gpupdate /force still returns The processing of Group Policy failed. Windows attempted to read the file \\ct.mydomain.com\sysvol\ct.mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until

Hi here are the commands in the order I ran them: root at dc1:~ # systemctl stop samba root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolreset root at dc1:~ # net cache flush root at dc1:~ # samba-tool ntacl sysvolcheck root at dc1:~ # systemctl start samba root at dc1:~ # smbclient //localhost/sysvol -UAdministrator -c 'ls' Enter Administrator's password:

Hi Andrew, thanks so much for the feedback. Yes, you're 100% right. I'm new at this and originally changed the default GPO, however subsequently reset the default and created a new GPO. (so this getfacl output is post creation of a new GPO) The getfacl output is shown here: # getfacl /usr/local/samba/var/locks/sysvol/mydomain.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

Hi root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes ...some error information... Checked 3647 objects (2 errors) root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix Checking 3647 objects Checked 3647 objects (0 errors) root at dc1:~ # getfacl /usr/local/samba/var/locks/sysvol/ getfacl: Removing leading '/' from absolute path

Since past the beta-times of samba 4 (and it worked in former times!!) it never worked like this: \\yourdomain\share or \\yourdomain \dfs-share. The only thing working along witch your domain is: \\yourdomain\netlogon. I had another thread open on this case some times ago. Greetings Daniel EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen

Hi James The output is as follows... wbinfo --gid-info=10013 => CT\domain admins:x:10013: wbinfo --gid-info=10014 => CT\domain users:x:10014: wbinfo --uid-info=3000000 => BUILTIN\administrators:*:3000000:3000000::/home/BUILTIN/administrators:/bin/false wbinfo --uid-info=3000008 => CT\domain admins:*:3000008:3000008::/home/CT/domain admins:/bin/false Yes I have set

On Sun, 2015-03-08 at 10:35 +0000, William Ross wrote: > I have four domain controllers on my Samba 4.1.17 domain. Each is on a > separate site in AD, in the real world each is at a separate physical > location connected by VPN links. > > They are each configured as DNS servers for the domain using the > internal Samba DNS implementation. On each site the local clients are >

cool! root at dc1:~ # wbinfo -r richard.h 10001 3000008 10000 10014 10004 10005 3000005 3000009 3000000 -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of lingpanda101 via samba Sent: 12 January 2017 22:57 To: samba at lists.samba.org Subject: Re: [Samba] Samba 4.5.3 AD DC - issues with sysvol when setting up Group Policies On 1/12/2017 3:47 PM,

Also, I'm not sure whether this has any relevance to the problem but I did at one point try to set up a secondary AD server but was struggling to get it going so demoted it using "Demote an Offline Domain Controller" from this page https://wiki.samba.org/index.php/Demote_a_Samba_AD_DC I also went through the "Verifying the Demotion" checks on this page and all looked

Hi, I am trying to configure domain DFS (I think that's the correct term) as below, using the guide on the wiki: https://wiki.samba.org/index.php/Distributed_File_System_(DFS)#Configure_domain-based_DFS_in_Samba I am aware that the wiki says that this doesn't quite work... however it feels to me that it's very close, nearly working, and I might be able to get it going (hopefully?!)

Any plane in future to build-in Samba SysVol replication (DFS-R) ? For now we have this workaround at link: https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround

I have setup a Samba PDC using the following guide: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller I have opted to use the internal Samba DNS server and have specified a DNS forwarder of 8.8.8.8 When I test the DNS functionality according to the guide everything appears fine: user at myhost:~$ host -t SRV _ldap._tcp.ad.mydomain.com.au.

Hi all, Has anyone actually got sysvol replication working between 2 (or more) Samba4 DCs? I've tried gluster, inosync, csync and rsync and keep getting stuck on issues with the extended attributes. Is there a roadmap or any clues of a date when MSFRS or DFS replication will be part of Samb4? thanks again, Jim

Hi, I have been having problems with GPOs, sysvol, etc. for some time now, and have found a workaround but I wondered if any of the samba devs were interested in investigating this. Basically, the problems manifest themselves as access errors, along the lines of unable to read files, error messages such as 'The data area passed to a system call is too small' and so on - which means that

Am 31.07.19 um 10:47 schrieb L.P.H. van Belle via samba: > I pointed to that link becuase of the last message. >>> The OU the users were in required read permissions on the Authenticated Users security group! > Im guyessing this is what your problem is, i just dont know where in your AD. OK, that might be the case. So the step is "add/check ACLs on the SYSVOL-share for

On 6/17/2016 11:10 AM, Carlos A. P. Cunha wrote: > Hello! > > > something else I can try? > > > Thanks > > > Em 15-06-2016 12:41, Carlos A. P. Cunha escreveu: >> >> Hello! >> It may be, what I did yesterday was to adjust the /etc/nsswitch.conf >> of my DCs, and again ran the sysvolreset takes more than 10 minutes >> it changed several

On 6/17/2016 12:32 PM, Carlos A. P. Cunha wrote: > Hello! > Yes path is correct, so that when you run the reset Sysol he saw > changing permissions of various files (as mentioned) after a time > (over 10 minutes) the error occurred. > > dc 1 and dc 2: > > /usr/local/samba/etc/smb.conf > > [sysvol] > path = /opt/samba/var/locks/sysvol > > >

Hi all... I'm running Dovecot 0.99.14 on Debian Sarge and I'm now trying to configure a mysql-based authentication. I made all the nessary setup accordinf to dovecot.conf and dovecot-mysql-conf but when i try to login I get the follwing error: pop3-login: Internal login failure: username at mydomain.tld [xxx.xxx.xxx.xxx] Any ideias on what may be happening? Thanks in advance,