similar to: After the classicupgrade from samba3 to sernet-samba-4.2.1 , users are not able to remote desktop anymore

Hello Mario , what if you try these : dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc auth methods = sam, winbind, ntdomain, ntdomain:winbind !! these are only for helping in debugging and should not be used in production. !! see all the e-mails with subject : Re:

Thanks Luis I've changed the smb.conf as you said, now it looks like this: root at ccdc-samba4:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 auth methods = sam,

On Samba AD DC most of these enpoint server are already running -- dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, mapiproxy Use samba-tool testparm -v first before adding them to the smb.conf I say this because I could not "join" Windows clients to Samba with these running

On 6/4/2015 9:57 AM, Mario Pio Russo wrote: > guys sorry to take this thread onboard once more, but I still can't get > this sorted. > > I have compiled the latest tarball from samba, 4.2.2 . compilation works > fine and after that I am able to upgrade from samba 3 with the following > command: > > samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/

On 05/01/2015 12:03 PM, Rowland Penny wrote: > On 01/05/15 15:29, Steve Ankeny wrote: >> On Samba AD DC most of these enpoint server are already running -- >> >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, >> lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, >> backupkey, dnsserver, mapiproxy >> >> Use

ok, what do you suggest then? maybe changing the authentication to another group like "domainusers" ? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1 815 2236, eMail: mariopiorusso at ie.ibm.com IBM Ireland Product Distribution Limited registered in Ireland with

On 15/07/15 15:10, Mario Pio Russo wrote: > OR > > is there any way, or magical hidden parmeter in the smb.conf that allows to > enumerate the users in the Domain Users? tbh this has a huge impact on the > file share server as many directorys have "domain users" as group I don't think you understand this at all :-) If a user is a member of an AD domain, then they are

I have some more findings about this it looks like getent does not get the right information from the Domain Controller, in fact the domain user groups shows with NO member users: getent group | grep "domain users" domain users:x:10000: root at seadog:~# Now funny thing is that other folders for wwhich getent retrieves the users correctlly are mounted fine . any idea why I don t see

Good Day All I have been trying to upgrade from samba 3 to samba 4.2.1 on Ubuntu 14.4 using the sernet-samba package. the upgrade seems to work fine and the samba4 comes up correctlly, I have also run the following script to get rid of bug https://git.samba.org/?p=samba.git;a=blob_plain;f=source4/scripting/devel/chgtdcpass;h=4f5ea15a80c2862daf170a5657658a8163174f8a;hb=HEAD I am able to

well, I have configured the kdc client on the file server, joined the domain using net ads join and it worked fine, again getnet group , getnet passwd , wbinfo -u they all works perfectlly fine I am also able to browse the shares from any windows machine joined to the CCDC domain, but I am still not able to do ANY mount.cifs, not even form linux boxes joined to the domain :-/ I have no idea

guys sorry to take this thread onboard once more, but I still can't get this sorted. I have compiled the latest tarball from samba, 4.2.2 . compilation works fine and after that I am able to upgrade from samba 3 with the following command: samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/ --use-xattrs=yes --realm=ccdc.lan /etc/samba/smb-ccdc1.conf 2>&1 | tee

ok this is my smb.conf file now # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 ##For debugging dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss,

Hello Mario.. first.. sernet has samba 4.2.2 release. i suspect these settings are for the RDP.. > server services = -winbindd +winbind > auth methods = winbind, sam but if u use it like about, remove the auth mehods line. samba 4.2 with 4.1 winbind beheavor, and a working rdp. : + server services = -winbindd +winbind ( and the defaults, see below ) samba 4.2

Thanks Rowland! few answers to your question: 1) I used the samba-tool domain classicupgrade to "migrate" the domain for the pdc to a new Ubuntu server with sernet-samba-4.2.2 2) on the DC, I have configured the service to use the old winbind, as that's just enaugh for our domain and it looked more stable during the test phasethe smb.conf of the DC is the following: [global]

Your mixing 2 things here. >the upgrade works fine as far as I can see, samba starts and I >am able to >RDP using my domain admin rights. however I am not able to RDP >using any >other user. > >the error i get is: > >"The connection is denied because the user account is not >authorized for >remote login" > >however the user I am testing is member

while im reading.. im seeing : getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol # owner: root # group: 544 your using : idmap_ldb:use rfc2307 = yes but i dont see a complete smb.conf for a rfc2307 setup. please also read : https://wiki.samba.org/index.php/RFC2307_backend so im puzzel what your backend is set to (AD or RID) and what the ranges

2015-05-01 15:08 GMT+02:00 Mario Pio Russo <mariopiorusso at ie.ibm.com>: > Thanks Luis > > I've changed the smb.conf as you said, now it looks like this: > > > root at ccdc-samba4:~# cat /etc/samba/smb.conf > # Global parameters > [global] > workgroup = CCDC > realm = CCDC.LAN > netbios name = CCDC-SAMBA4 > server role

Good day all I am working with samba4.2.1 DC, created after upgrading from samba3 the DC works fine, however the commands : "getent passwd" and "getent group" reports only local users. however I am able to see all the id from the ccdc domain with the command "id" root at ccdc-samba4:~# id rocheian uid=3439(rocheian) gid=513(domain users) groups=513(domain

On 01/05/15 15:29, Steve Ankeny wrote: > On Samba AD DC most of these enpoint server are already running -- > > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, > lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, > backupkey, dnsserver, mapiproxy > > Use samba-tool testparm -v first before adding them to the smb.conf > > I say this

Great Rowland!!! in fact by using the line server service = +dns I am able to have the internal DNS and the kerberos server working!! now kinit works just fine thanks! (btw, do we have the list of "services" that we can put in the smb.conf?) ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services