similar to: After the classicupgrade from samba3 to sernet-samba-4.2.1 , users are not able to remote desktop anymore ( bug11061 )

Hello Mario.. first.. sernet has samba 4.2.2 release. i suspect these settings are for the RDP.. > server services = -winbindd +winbind > auth methods = winbind, sam but if u use it like about, remove the auth mehods line. samba 4.2 with 4.1 winbind beheavor, and a working rdp. : + server services = -winbindd +winbind ( and the defaults, see below ) samba 4.2

guys sorry to take this thread onboard once more, but I still can't get this sorted. I have compiled the latest tarball from samba, 4.2.2 . compilation works fine and after that I am able to upgrade from samba 3 with the following command: samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/ --use-xattrs=yes --realm=ccdc.lan /etc/samba/smb-ccdc1.conf 2>&1 | tee

On 6/4/2015 9:57 AM, Mario Pio Russo wrote: > guys sorry to take this thread onboard once more, but I still can't get > this sorted. > > I have compiled the latest tarball from samba, 4.2.2 . compilation works > fine and after that I am able to upgrade from samba 3 with the following > command: > > samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/

while im reading.. im seeing : getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol # owner: root # group: 544 your using : idmap_ldb:use rfc2307 = yes but i dont see a complete smb.conf for a rfc2307 setup. please also read : https://wiki.samba.org/index.php/RFC2307_backend so im puzzel what your backend is set to (AD or RID) and what the ranges

ok this is my smb.conf file now # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 ##For debugging dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss,

On 01/05/15 15:29, Steve Ankeny wrote: > On Samba AD DC most of these enpoint server are already running -- > > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, > lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, > backupkey, dnsserver, mapiproxy > > Use samba-tool testparm -v first before adding them to the smb.conf > > I say this

On 05/01/2015 12:03 PM, Rowland Penny wrote: > On 01/05/15 15:29, Steve Ankeny wrote: >> On Samba AD DC most of these enpoint server are already running -- >> >> dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, >> lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, >> backupkey, dnsserver, mapiproxy >> >> Use

On Samba AD DC most of these enpoint server are already running -- dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, mapiproxy Use samba-tool testparm -v first before adding them to the smb.conf I say this because I could not "join" Windows clients to Samba with these running

2015-05-01 15:08 GMT+02:00 Mario Pio Russo <mariopiorusso at ie.ibm.com>: > Thanks Luis > > I've changed the smb.conf as you said, now it looks like this: > > > root at ccdc-samba4:~# cat /etc/samba/smb.conf > # Global parameters > [global] > workgroup = CCDC > realm = CCDC.LAN > netbios name = CCDC-SAMBA4 > server role

correct. bug still exists, just tested also on latest git master. see : https://bugzilla.samba.org/show_bug.cgi?id=11061 temp solution. try adding : auth methods = sam, winbind to smb.conf on the dc and restart the DC. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: mariopiorusso at ie.ibm.com >[mailto:samba-bounces at lists.samba.org] Namens Mario Pio Russo

Hello Mario , what if you try these : dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc auth methods = sam, winbind, ntdomain, ntdomain:winbind !! these are only for helping in debugging and should not be used in production. !! see all the e-mails with subject : Re:

Thanks Luis I've changed the smb.conf as you said, now it looks like this: root at ccdc-samba4:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 auth methods = sam,

OR is there any way, or magical hidden parmeter in the smb.conf that allows to enumerate the users in the Domain Users? tbh this has a huge impact on the file share server as many directorys have "domain users" as group ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353

well that's peculiar, as I am experiencing something different. in fact from ADUC I can see all the users belonging to the "domain users" groups. the authentication, however, does not work on that group, and the share "scrap" cannot be accessed with this config: valid users = @"Domain Users" however, I have created an auxiliarry group called domainusers

Hai,. We do advice you to change this. .local .lan are reserved names by apple mDNS/zeroconf" and the same for : .test .example(.com/.net/.org) .invalid .localdomain .localhost, dont use these. More info see : rfc2606, rfc6762 and change the following. server services = dns winbind #server services = winbind If you use BIND9_DLZ server services = -dns if you

On 15/07/15 11:06, Mario Pio Russo wrote: > I have some more findings about this > > it looks like getent does not get the right information from the Domain > Controller, in fact the domain user groups shows with NO member users: > > getent group | grep "domain users" > domain users:x:10000: > root at seadog:~# > > > Now funny thing is that other folders

Thanks Luis I have changed ccdc.lan to CCDC.LAN (NOTE: I cannot change the LAN suffix, this is an old domain that needs to be imported into the samba 4.2.x version, it's a production domain and cannot be changed, furthermore it's on an isolated network. P.S. I have used the same name / procedure with the official samba 4.1.6 ubuntu package and that has give no error whatsoever) I am

On 14/07/15 19:27, Mario Pio Russo wrote: > well, I have configured the kdc client on the file server, joined the > domain using net ads join and it worked fine, again getnet group , getnet > passwd , wbinfo -u they all works perfectlly fine Well, this sounds like samba is working correctly. > > I am also able to browse the shares from any windows machine joined to the > CCDC

Great Rowland!!! in fact by using the line server service = +dns I am able to have the internal DNS and the kerberos server working!! now kinit works just fine thanks! (btw, do we have the list of "services" that we can put in the smb.conf?) ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services

Good day all I am developing a tool in perl to run on my sabma4-DC. This tool must check the password exp date and send a reminder when quite close. Now in order to do that, I need a command to extract the expiration date from samba 4. I have used pdbedit but it looks like the files "password must change" is not reporting correctlly the exp date, in fact I see: Unix username: