similar to: subdomains !

Hi pals, I have two questions: 1. Can I to install a DC Samba4 without ntp. (I know Kerberos requires the time synchronization between clients and users, BUT what if I synchronize them manually?!! Is it possible log on in the clients if them have the same time that server?) 2. I installed a DC Samba4 in a server without replication, that server is the only DC on the network. So, when I tried to

Hello, I have joined samba 4.2 as a DC in a windows domain. The replication is working between domain controllers and samba 4.2. Only that I'm concerned about "samba-tool drs kcc" fails with an RPC protocol error: ERROR(runtime): DsExecuteKCC failed - (-1073610723, 'An RPC protocol error occurred.') I'm using the default config in smb.conf file: # Global parameters

Hello, We have followed the migration from samba4.2 to samba4.6 from "http://samba.2283325.n4.nabble.com/Debian-Jessie-samba-4-5-8-2-4-5-10-4-6-5-available-td4719912.html" (van-belle) But we must put in smb.conf this instruction : "server role check:inhibit = yes". if not, nmbd fails to start. Why ? Regard

On 09/04/2015 03:59 AM, mathias dufresne wrote: > Hi, > > I don't think there is sernet kerberos package. You would have to install > kerberos client using your package manager: krb5-workstation on Centos or > krb5-user on Debian I think... As I understand things: Samba4.2 and lower is designed for the Heimal (sp!) kerberos. Redhat/Fedora/Centos provides the MIT kerberos.

Hi all, I have samba4.2 (Version 4.2.0pre1-GIT-6d2f56d) as AD domain controller. Some users can only logon to specific window workstation. Now, we want to configure the samba AD as the user authentication of squid. I use the following configuration in squid. The users without workstation limitation can successfully authenticate to squid, but the user with workstation limitation cannot.

Hi, I installed a RODC on my mailserver to have a local authentication for mailusers on the machine which doesn't rely on a always-on-connetion to the office. The problem is now that the user-preload doesn't work so that the RODC is not able to authenticate the users itself: samba-tool rodc preload <user> --server <DC1> -U Administrator Password for [AD\Administrator]:

Hi, I would like to join a samba 4.2.0 file server sitting in a branch office, with connection only to a RODC (and only the RODC can talk to the RWDC). Was wondering what's the workflow for doing this in samba. For Windows machines, Microsoft seems to have planned two workflows for this: 1. Use new flag to NetJoinDomain() API to join using the RODC

Hello everybody, I need to setup a Domain/subdomain environment with Windows AD. All the DCs run Windows Server 2012 R2. All domains (root and subdomains) The forest and domain functional level are set to Windows 2008 R2. I want to use Samba 4 server as fileservers in these domains, but up to now I have trouble adding Samba 4 member servers to Windows AD. My test environment is made of 2

Hai, In a bit testing with software deployment through GPO. ? Now i noticed te following. If i setup my software source somewhere on the sysvol share ( and probely any other share on the DC) then i can deploy the software with computer and user GPO setting. Aka works ok good all settings with software deployment. ? Now i noticed the following. I did setup a share on a member server the AD

hi all, i've added a samba4 additional dc to my domain. all provision was ok with samba-tool domain join xx.mydomain.com DC -Uadministrator --realm=xx.mydomain.com command and i can replicate correctly from winpdc to sambadc. i have a couple of questions: 1) with adsedit i see objectversion 47 for my winpdc.mydom.com (is w2k3) which means 2008R2 (correct?) 2) on the samba4 side if i test

Hello thank you for you response: I would not like to give up.I'll try to see if I can change my domain to the correct dns structure , maybe then I could be migrated to samba4 2015-04-07 13:48 GMT-04:00 Marcel de Reuver <marcel at de.reuver.org>: > Looks like Windows also does not support single label dc's anymore, see > http://support.microsoft.com/en-us/kb/300684 for the

yes i realized that there is something wrong with BIND9_FLATFILE while encountering with samba_upgradedns -h which doesn't show BIND9_FLATFILE Any help on*drs repl* not working i think it is pointing to wrong FQDN how do i correct that ? > >/ Not able to to view replication.(samba-tool drs showrepl) > />/ > />/ > />/ [root at dc2

Hi, is it possible to create a Samba share with full Windows ACL support based on a mounted NFS share? What is needed e.g. as NFS mount options? Regards Tim

Hello. which are the main differences between Samba_Internal and BIND9_DLZ ? I refer to the differences about functionality such as zone transfers and automatic updates. Which others functionalities offers BIND9, that Samba_Internal doesn't support ? Is it possible to use a DNS Server (Bind9) separate of the DC Samba4? I mean, in other server. Thanks for reply, FelipeGS6 .

Hello I am still struggling with the NTP server configuration. Is there no method by which I can sync all my domain users with the same time as on server because I have to face alot of issue due to the same. I have searched alot but the only thing which I found was to add these two lines in my ntp.conf ntpsigndsocket /opt/ad/samba4/var/run/ntp_signd/ restrict default mssntp I am using CentOS 6

Hi all Recently i noticed that upon starting the samba4 'samba' daemon, that it changes the group ownership of the socket for ntpd to *staff* $ls -l /usr/local/samba/var/lib/ntp_signd/ total 0 srwxrwxrwx 1 root *staff* 0 May 6 16:35 socket The documentation says it needs to be *ntp*.... (FYI: i'm running this on debian wheezy) I have just added ntp to group staff, but that seems

hi all, migration from samba 3 (without winbind) to samba4. New user use idmap range. But I don't know what is the range. By uidNumber, I just see 3000000 is the first uidNumber but what is the max (default max) ? After migration can I change range in smb.conf by idmap config *:range = 2500-1000000 ty St?phane Purnelle ----------------------------------- St?phane PURNELLE

I have been using 'net ads testjoin' but the issue is it seems to ask for a password when the box is not joined to a domain (even if I specify '-U username%pass'). This *seems* like a bug - I would expect it to pass or fail using the creds passed in. Is this by design and if so, why? Is there a better alternative? ('net ads info'?) -aps

How do I configure my GNU/Linux system to allow users to change their own password? When I type in the passwd command as a domain user it prompts to change the kerberos password but doesn't allow them to change it. I get an error that say password changes may not permitted on this account.

Hi, I use Samba + Ldapas a domain controller but after the update the version of Debian6 to Debain 7I can't authenticate my users in the Samba server. logs: [2013/05/23 08:29:55.811240, 1] auth/server_info.c:386(samu_to_SamInfo3) The primary group domain sid(S-1-5-21-3651478259-4121578499-3132057975-513) does not match the domain sid(S-1-5-21-3182595135-1874831366-4239877494) for