similar to: Classicupgrade succeded with Sernet-samba-4.2.1 AD, but Kinit not wokring

Great Rowland!!! in fact by using the line server service = +dns I am able to have the internal DNS and the kerberos server working!! now kinit works just fine thanks! (btw, do we have the list of "services" that we can put in the smb.conf?) ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services

Thanks Luis I have changed ccdc.lan to CCDC.LAN (NOTE: I cannot change the LAN suffix, this is an old domain that needs to be imported into the samba 4.2.x version, it's a production domain and cannot be changed, furthermore it's on an isolated network. P.S. I have used the same name / procedure with the official samba 4.1.6 ubuntu package and that has give no error whatsoever) I am

Hai,. We do advice you to change this. .local .lan are reserved names by apple mDNS/zeroconf" and the same for : .test .example(.com/.net/.org) .invalid .localdomain .localhost, dont use these. More info see : rfc2606, rfc6762 and change the following. server services = dns winbind #server services = winbind If you use BIND9_DLZ server services = -dns if you

On 6/4/2015 9:57 AM, Mario Pio Russo wrote: > guys sorry to take this thread onboard once more, but I still can't get > this sorted. > > I have compiled the latest tarball from samba, 4.2.2 . compilation works > fine and after that I am able to upgrade from samba 3 with the following > command: > > samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/

Hello Mario , what if you try these : dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc auth methods = sam, winbind, ntdomain, ntdomain:winbind !! these are only for helping in debugging and should not be used in production. !! see all the e-mails with subject : Re:

On 29/04/15 13:10, Mario Pio Russo wrote: > Good Day All > > I have been trying to upgrade from samba 3 to samba 4.2.1 on Ubuntu 14.4 > using the sernet-samba package. > > the upgrade seems to work fine and the samba4 comes up correctlly, > > I have also run the following script to get rid of bug > > >

ok, what do you suggest then? maybe changing the authentication to another group like "domainusers" ? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1 815 2236, eMail: mariopiorusso at ie.ibm.com IBM Ireland Product Distribution Limited registered in Ireland with

I have some more findings about this it looks like getent does not get the right information from the Domain Controller, in fact the domain user groups shows with NO member users: getent group | grep "domain users" domain users:x:10000: root at seadog:~# Now funny thing is that other folders for wwhich getent retrieves the users correctlly are mounted fine . any idea why I don t see

well, I have configured the kdc client on the file server, joined the domain using net ads join and it worked fine, again getnet group , getnet passwd , wbinfo -u they all works perfectlly fine I am also able to browse the shares from any windows machine joined to the CCDC domain, but I am still not able to do ANY mount.cifs, not even form linux boxes joined to the domain :-/ I have no idea

Thanks Rowland! few answers to your question: 1) I used the samba-tool domain classicupgrade to "migrate" the domain for the pdc to a new Ubuntu server with sernet-samba-4.2.2 2) on the DC, I have configured the service to use the old winbind, as that's just enaugh for our domain and it looked more stable during the test phasethe smb.conf of the DC is the following: [global]

On 15/07/15 15:10, Mario Pio Russo wrote: > OR > > is there any way, or magical hidden parmeter in the smb.conf that allows to > enumerate the users in the Domain Users? tbh this has a huge impact on the > file share server as many directorys have "domain users" as group I don't think you understand this at all :-) If a user is a member of an AD domain, then they are

Good Day All I have a problem for our main fileserver base don samba 3.5.6 Let's give a bit of pregress first. We had a samba 3.5.6 installation which was acting as a PDC for our internal domian called CCDC. On a sapearate machine, we had another installation of samba 3.5.6 to act just as file share server. All was working ok, till I upgraded the PDC form samba 3.5.6 to samba 4.2.2 , using

Thanks Luis I've changed the smb.conf as you said, now it looks like this: root at ccdc-samba4:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 auth methods = sam,

Good Day All I have a current working configuration of sernet-samba-4.2.1, created by upgrading from a samba3 PDC using the classic upgrade. Now, I have added a windows 2008 machine to the domain and I'm using the AD snap in tools in order to browse the domain. I can see all the users and groups and they have been imported correctly. However I am able to remote desktop to the domain

On Samba AD DC most of these enpoint server are already running -- dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, mapiproxy Use samba-tool testparm -v first before adding them to the smb.conf I say this because I could not "join" Windows clients to Samba with these running

On 05/01/2015 12:03 PM, Rowland Penny wrote: > On 01/05/15 15:29, Steve Ankeny wrote: >> On Samba AD DC most of these enpoint server are already running -- >> >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, >> lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, >> backupkey, dnsserver, mapiproxy >> >> Use

Good day all I am working with samba4.2.1 DC, created after upgrading from samba3 the DC works fine, however the commands : "getent passwd" and "getent group" reports only local users. however I am able to see all the id from the ccdc domain with the command "id" root at ccdc-samba4:~# id rocheian uid=3439(rocheian) gid=513(domain users) groups=513(domain

Hi allVersion 3.5.6 I have a samba file share server , running on ubuntu 10. Samba version is 3.5.6. Originally this server was using a PDC server based on samba 3, and all was ok. now the PDC server has been upgraded via samba-tool to version 4.2.2 . The system itself works generally fine (afer a good amount of tuning and configuration), however I am now incurring in a peculiar issue: every

Good Day All I have a samba 4 AD DC based on sernet samba 4.2.3 (on Ubuntu 14.0.4) and a samba file share server based on saba 3.5.6 (on Debian 10.01, "squeeze") Now we want to migrate the file share server from Debian+samba3 to Ubuntu 14.04 +samba4. this for various reason, the most important being that samba3 is EOL and "squeeze" will be EOL soon (beginning of 2016).

Good day All I am re proposing this topic as it keeps happening in our enviroment and is creating some trouble now. I have 1 samba file share server, and a different samba4 AD server. the file server has been recently updated to Ubuntu 14 and its native samba 4.1.6. The samba4 AD is on Ubuntu 14 and on sernet-samba 4.2.2. what happens is that every 4~5 days the file share server loses randomly