similar to: script sleeps

Moved the hdd of my DC over to nicer P4 machine. It started as expected. (I have resolved the eth0 driver issue that happens with Debian/Ubuntu servers when you move a functional hdd to a different machine.) Then I decided to change the static ip address of the DC from 192.168.**.54 to 192.168.**.51. That went as expected, except it seems my W7 client cannot connect to my domain, now. It says

That was a cut/paste error. I've been thinking (danger, danger) when I test kerberos it returns the two DC's are available. Should it be including the member server also? Didn't I see the script setup kerberos on the member server? (Remember this was installed with the gen one scripts, not the newest scripts.) --- ------------------------- Bob Wooden of Donelson Trophy

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >

Hi Bob, Set the rights like this. > /home 775 > > /home/samba 775 > > /home/samba/DT***RM 775 > > /home/samba/DT***RM/profiles 777 for the profiles, after you set the rights in windows, user profiles folders wil be created with the correct rights. and only accessable by the user.. and from here you shoule be able to set the correct rights. Can you give it a try?

On 28/01/15 16:50, Bob of Donelson Trophy wrote: > > > W7 client domain member? yes. > > Logged in as domainAdministrator? yes. > > "SeDiskOperatorPrivilege" set? yes > > Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846

After restoring the member server and re-running the improved "4-setup-samba4-MEMBER-wheezy.sh" script I am still having the same issue. W7 client still not allowed to access the member server. Administrator still has a uidNumber: getent passwd Administrator administrator:*:50001:50006::/home/samba/DTS***M/users/administrator:/bin/bash I have added a couple is test admin users

Yes, "INTERNAL" was the actual. Generated by script, I presume. Now changed to my workgroup name. Restarted member server. Now 'getent passwd Administrator' returns nothing but, W7 client still cannot connect. (As I have restored and re-run script this morning doesn't that mean it has to be coming over from DC's somehow?) --- ------------------------- Bob Wooden

Hai Bob, A few questions. - is the client computer member of the domain? - Are you logged in as "DOMAIN\Administrator" ? - it the time on pc and server the same. and for example. change this one to >[profiles$] > path = /home/samba/DT***RM/profiles > acl_xattr:ignore system acl = yes > read only = no > csc policy = disable now check if :

First, I will try forwarding the original sent this morning. If it still appear poorly formated I'll try something different. PLEASE WAIT FOR A CLEAN COPY IF THIS ONE IS STILL BAD. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" -------- Original Message -------- SUBJECT: Re:

Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins

Both DC1 and member server return nothing on 'getent passwd Administrator' I have no other users other than 'root' and 'Administrator' on all three (DC1, DC2 & member.) My plan was to get file permissions (aka profiles) working and add some test users. How do I add test users via linux side? (I'm with you, get linux side working first.) ---

I'm replying to myself. I have been carefully experimenting with the various samba-tool gpo choices and through some Windows GPO testing (command line) things I found (online searches) all my GPO policies are completing. And my initial "remove un-used local profiles" is working and has removed some of my excess un-used test users profiles from the W7 clients. The damn thing (W7)

On 30/01/15 21:19, Bob of Donelson Trophy wrote: > > > Both DC1 and member server return nothing on 'getent passwd > Administrator' > > I have no other users other than 'root' and 'Administrator' on all three > (DC1, DC2 & member.) > > My plan was to get file permissions (aka profiles) working and add some > test users. > > How do

Leaving and re-joining the domain is easy. Tried that, no difference. Checking the gidNumber for the Domain Admin group . . not sure how to do that? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-30 13:54, Rowland Penny wrote: > On 30/01/15 19:42, Bob of Donelson Trophy

First, I am sorry. I should know this by now. Last week had an issue with W7 client could not update. I made some adjustments to get W7 updated. Now I am having an issue with update resolution. (Run apt-get update and repositories cannot be find, etc.) So, this tells me that I have messed up my dns resolution. All clients (W7 & linux) point to my DC for DNS nameserver. All clients (W7

On 05/01/15 14:04, Bob of Donelson Trophy wrote: > > > My shop is 10 minutes from my house. House and shop are connected by vpn > (between two IpFire firewalls.) I do a lot of configuring and testing > from home. Due to a Windows wake-on-lan issue (right now) I cannot wake > the lone DC W7 client from home. When I get to work this morning, W7 > client (thru ADUC) shows

Hi, What is the output of the "id <domain user>" ? please share that. On 5 Mar 2015 18:56, "Bob of Donelson Trophy" <bob at donelsontrophy.net> wrote: > > > I am setting up W7 profiles following the "Samba & Windows Profiles" on > the Sambawiki. > > If it matters, I have two functional DC's and one member server. > > When

On 09/01/15 14:34, Bob of Donelson Trophy wrote: > > > Now, more appropriately answering after the message. SEE BELOW, please. > > On 2015-01-09 07:24, L.P.H. van Belle wrote: > >> Hai, >> >> Not entiraly correct.. >> >> change : >> >>> dns-nameservers 208.67.222.222 <<<<<< have always struggled >> to

Now, more appropriately answering after the message. SEE BELOW, please. On 2015-01-09 07:24, L.P.H. van Belle wrote: > Hai, > > Not entiraly correct.. > > change : > >> dns-nameservers 208.67.222.222 <<<<<< have always struggled > > to > dns-search dtshrm.lan > dns-nameservers IP_OF_AD_DC > > and use : > net rpc rights

Part of the smb.conf [home] path = /home/samba/DTDC01/users comment = user folder 4 redirection read only = no Hum-m-m? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-08 12:56, Rowland Penny wrote: > On 08/01/15 18:37, Bob of Donelson Trophy wrote: > First, I keep