similar to: getent passwd and getent group reporting only local users

El 19/05/15 a les 16:22, Mario Pio Russo ha escrit: > > Good day all > > I am working with samba4.2.1 DC, created after upgrading from samba3 > > the DC works fine, however the commands : > > "getent passwd" and "getent group" > > reports only local users. This is by design I think :-/ > > however I am able to see all the id from the

On 6/4/2015 9:57 AM, Mario Pio Russo wrote: > guys sorry to take this thread onboard once more, but I still can't get > this sorted. > > I have compiled the latest tarball from samba, 4.2.2 . compilation works > fine and after that I am able to upgrade from samba 3 with the following > command: > > samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/

On 15/07/15 15:10, Mario Pio Russo wrote: > OR > > is there any way, or magical hidden parmeter in the smb.conf that allows to > enumerate the users in the Domain Users? tbh this has a huge impact on the > file share server as many directorys have "domain users" as group I don't think you understand this at all :-) If a user is a member of an AD domain, then they are

ok, what do you suggest then? maybe changing the authentication to another group like "domainusers" ? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1 815 2236, eMail: mariopiorusso at ie.ibm.com IBM Ireland Product Distribution Limited registered in Ireland with

Hello Mario , what if you try these : dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc auth methods = sam, winbind, ntdomain, ntdomain:winbind !! these are only for helping in debugging and should not be used in production. !! see all the e-mails with subject : Re:

Thanks Luis I've changed the smb.conf as you said, now it looks like this: root at ccdc-samba4:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 auth methods = sam,

Good Day All I have a samba 4 AD DC based on sernet samba 4.2.3 (on Ubuntu 14.0.4) and a samba file share server based on saba 3.5.6 (on Debian 10.01, "squeeze") Now we want to migrate the file share server from Debian+samba3 to Ubuntu 14.04 +samba4. this for various reason, the most important being that samba3 is EOL and "squeeze" will be EOL soon (beginning of 2016).

On Samba AD DC most of these enpoint server are already running -- dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, mapiproxy Use samba-tool testparm -v first before adding them to the smb.conf I say this because I could not "join" Windows clients to Samba with these running

Good day All I am re proposing this topic as it keeps happening in our enviroment and is creating some trouble now. I have 1 samba file share server, and a different samba4 AD server. the file server has been recently updated to Ubuntu 14 and its native samba 4.1.6. The samba4 AD is on Ubuntu 14 and on sernet-samba 4.2.2. what happens is that every 4~5 days the file share server loses randomly

I have some more findings about this it looks like getent does not get the right information from the Domain Controller, in fact the domain user groups shows with NO member users: getent group | grep "domain users" domain users:x:10000: root at seadog:~# Now funny thing is that other folders for wwhich getent retrieves the users correctlly are mounted fine . any idea why I don t see

thank you once again Rowland just a some clarification: 1) I have one Domain Controller based on Samba4 in AD mode, how can I verify that I am using IDMU on it? 2) YES - the samba3 file share is a standalone server, using tdbsam and local users. 3) "the second is from an AD client but you are using a depreciated uid/gid mechanism and have commented this out: #idmap config * :

Thanks Luis I have changed ccdc.lan to CCDC.LAN (NOTE: I cannot change the LAN suffix, this is an old domain that needs to be imported into the samba 4.2.x version, it's a production domain and cannot be changed, furthermore it's on an isolated network. P.S. I have used the same name / procedure with the official samba 4.1.6 ubuntu package and that has give no error whatsoever) I am

On 05/01/2015 12:03 PM, Rowland Penny wrote: > On 01/05/15 15:29, Steve Ankeny wrote: >> On Samba AD DC most of these enpoint server are already running -- >> >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, >> lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, >> backupkey, dnsserver, mapiproxy >> >> Use

Good Day All I have a current working configuration of sernet-samba-4.2.1, created by upgrading from a samba3 PDC using the classic upgrade. Now, I have added a windows 2008 machine to the domain and I'm using the AD snap in tools in order to browse the domain. I can see all the users and groups and they have been imported correctly. However I am able to remote desktop to the domain

Good Day All I have been trying to upgrade from samba 3 to samba 4.2.1 on Ubuntu 14.4 using the sernet-samba package. the upgrade seems to work fine and the samba4 comes up correctlly, I have also run the following script to get rid of bug https://git.samba.org/?p=samba.git;a=blob_plain;f=source4/scripting/devel/chgtdcpass;h=4f5ea15a80c2862daf170a5657658a8163174f8a;hb=HEAD I am able to

well, I have configured the kdc client on the file server, joined the domain using net ads join and it worked fine, again getnet group , getnet passwd , wbinfo -u they all works perfectlly fine I am also able to browse the shares from any windows machine joined to the CCDC domain, but I am still not able to do ANY mount.cifs, not even form linux boxes joined to the domain :-/ I have no idea

Thanks Rowland! few answers to your question: 1) I used the samba-tool domain classicupgrade to "migrate" the domain for the pdc to a new Ubuntu server with sernet-samba-4.2.2 2) on the DC, I have configured the service to use the old winbind, as that's just enaugh for our domain and it looked more stable during the test phasethe smb.conf of the DC is the following: [global]

Great Rowland!!! in fact by using the line server service = +dns I am able to have the internal DNS and the kerberos server working!! now kinit works just fine thanks! (btw, do we have the list of "services" that we can put in the smb.conf?) ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services

Good Day All I have a problem for our main fileserver base don samba 3.5.6 Let's give a bit of pregress first. We had a samba 3.5.6 installation which was acting as a PDC for our internal domian called CCDC. On a sapearate machine, we had another installation of samba 3.5.6 to act just as file share server. All was working ok, till I upgraded the PDC form samba 3.5.6 to samba 4.2.2 , using

Great thanks, I'll test your config files now! some questions before: > I would also recommend Installing the 'acl' & 'attr' packages (if not already installed), those are installed and at the latest version on the file share server, are they needed on the AD too (I would think no)? > read up on using POSIX ACLs and lose the 'force' lines in the member