similar to: classicupgrade

Hi, I have Samba3 domain, and I test the upgrade process to Samba4 AD (Samba 3.6.6->4.1.17). After classicupgrade I found a problem. I created a test file, and wanted to change its group with chown "xy:Domain Users" testfile. I got an error message: invalid group: "xy:Domain Users" (I think, because the message was localised). chown xy testfile works. I had old files with

Hi, I have Samba 4.2.10 server with NT4 configuration, with ldap backend on Debian Jessie, and I want to upgrade it to AD. I test it now in virtul environment. The classicupgrade was succesful. getent passwd username and chown "username:Domain Users" test.txt didn't work with this nsswitch.conf: passwd: files ldap group: files ldap shadow: files ldap , so I changed ldap to winbind.

Hi, I have a working Samba3 domain with 3.6 servers. Samba runs on Debian Wheezy and has openldap backend. I'm going to upgrade to Sernet Samba 4.1. I copied the pdc to a virtual machine to test the upgrade process. According to the wiki I cannot have duplicate sids, but I have about fourty. It seems they are the same that the net groupmap list command gives. Some smb.conf parameters: ldap

Hi Rowland, > Gesendet: Freitag, 19. Juni 2015 um 12:22 Uhr > Von: "Rowland Penny" <rowlandpenny at googlemail.com> > An: samba at lists.samba.org > Betreff: Re: [Samba] (Samba 4.2.2) wbinfo -i does not get the (correct) unix primary group gid > > > > > OK, I now have a VM running Centos 7 with Sernet-Samba 4.2.2, this is > setup just like I

Hi Rowland, > Gesendet: Freitag, 19. Juni 2015 um 13:52 Uhr > Von: "Rowland Penny" <rowlandpenny at googlemail.com> > An: samba at lists.samba.org > Betreff: Re: [Samba] (Samba 4.2.2) wbinfo -i does not get the (correct) unix primary group gid > > On 19/06/15 12:26, Frank Grantz wrote: > > Hi Rowland, > > > >> Gesendet: Freitag, 19. Juni 2015

Hi, how can i get work Samba 4 Sernet 4.1.7 correctly with NIS. Ist provisioned with rfc2307. When i query a User withi get the following. getent passwd testswi SWI\testswi:*:10000:100:testswi:/home/SWI/testswi:/bin/false I want to change /bin/false to a other value /bin/bash I tried many things to change the value. 1. ldbedit -e vim -H /var/lib/samba/private/sam.ldb samaccountname=testswi

Hi all On latest samba 4.2.1 I have provisioned a new domain on DC1 that successfully reads RFC2307 attributes set on a user account through ADUC. wbinfo (correct uid gets resolved from sid) wbinfo -n fsmith S-1-5-21-1273750850-484487853-1026460749-1120 SID_USER (1) wbinfo -S S-1-5-21-1273750850-484487853-1026460749-1120 1000006 ldbsearch sudo ldbsearch -H

On Mon, 20 Feb 2017 12:40:00 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > Well it would, Domain Users seems to have the gidNuber '513' and this > is lower than your lower domain setting '4000' > I am beginning to wonder if upgrading an NT4-style PDC to a DC is a good idea. Linux starts its normal user base at '1000' (and yes, red-hat

Am 08.12.2016 um 13:55 schrieb Rowland Penny via samba: > On Thu, 8 Dec 2016 12:52:53 +0100 > Oliver Heinz via samba <samba at lists.samba.org> wrote: > >> I'm trying to get Samba 4 AD to work with rfc2307 extensions. >> >> wbinfo -i fails >> >> root at m1:~# wbinfo -i SAMDOM\\demo01 >> >> failed to call wbcGetpwnam:

On Thu, 8 Dec 2016 14:44:16 +0100 Oliver Heinz via samba <samba at lists.samba.org> wrote: > > > Am 08.12.2016 um 14:31 schrieb Oliver Heinz: > > > > > > Am 08.12.2016 um 13:55 schrieb Rowland Penny via samba: > >> On Thu, 8 Dec 2016 12:52:53 +0100 > >> Oliver Heinz via samba <samba at lists.samba.org> wrote: > >> >

On Mon, 23 Jul 2018 18:22:55 +0800 d tbsky <tbskyd at gmail.com> wrote: > 2018-07-23 18:01 GMT+08:00 Rowland Penny via samba > <samba at lists.samba.org>: > > On Mon, 23 Jul 2018 17:19:07 +0800 > > When I said 'ignored', I should have said 'ignored by Unix', if your > > users are logging into Windows, then they are not using the > >

On 6/19/2017 9:12 AM, Viktor Trojanovic via samba wrote: > On 19 June 2017 at 14:56, Rowland Penny via samba <samba at lists.samba.org> > wrote: > >> On Mon, 19 Jun 2017 14:46:34 +0200 >> Viktor Trojanovic <viktor at troja.ch> wrote: >> >>> On 19 June 2017 at 14:20, lingpanda101 via samba >>> <samba at lists.samba.org> wrote:

Hi all, Is there a way to extract the whole attributes of objects, even hidden attributes, using ldbsearch or any samba tool? Hidden attributes have to be hidden from ldapsearch which can be used through network and so, remotely. ldbsearch can be used only locally by root, which [should] limit who is using it, so perhaps I thought it was possible : )

On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > That's correct, I don't have "Unix Attributes" but through the advanced > view I have access to all attributes. > > The ldbsearch command is not returning anything in my case, it gives me 0 > records - no matter which user I try, even the Administrator. I checked the > command several times to make sure

On Mon, 19 Jun 2017 14:46:34 +0200 Viktor Trojanovic <viktor at troja.ch> wrote: > On 19 June 2017 at 14:20, lingpanda101 via samba > <samba at lists.samba.org> wrote: > > > On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > > > >> That's correct, I don't have "Unix Attributes" but through the > >> advanced view I have

On 09/08/2019 10:33, Pisch Tam?s via samba wrote: >> You have to give any users you require visible on Unix a uidNumber attribute > Ok, I can do it with samba-tool user edit... >> You have to give 'Domain Users' a gidNumber attribute. >> You have to give any group you require to be visible a gidNumber > I know that I can set gidNumber when I create a group, but how

I'm trying to get Samba 4 AD to work with rfc2307 extensions. wbinfo -i fails root at m1:~# wbinfo -i SAMDOM\\demo01 failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND winbindd.log it here: http://pastebin.com/X0rEaLt2 Pretty much everything else seems to work: root at m1:~# wbinfo --ping-dc checking the NETLOGON for domain[SAMDOM] dc connection to "dc1.samdom.example.com"

Hi, I would like to connect our AD to the Azure AD. As I see, it needs 2012_R2 functional level. I don't have any Windows AD DC. Is it safe to raise the functional level to 2012_R2 in production environment? I read that 4.19 has initial support for 2019 schema, and for the 2016 functional level, but the 2012 support is still not complete. Thanks, Tamas Pisch

> >> Current plan : add a third DC, make dc2 a dm file server. Best solution > > imo. > > Yes, I know that it would be better to use a separate dc, but I didn't > > want it on that site. > Hi Pisch, that wasn't aimed at you, but it does show why you should > never hijack an existing thread, my fault for not forking it off into a > new thread, sorry ;-)

I have a script which carefully manages uidNumber and gidNumber attributes for users and groups. We just recently put it into production. I plan to release it as open source software soon -- and get Rowland's blessing :-) On Fri, Jun 21, 2019 at 3:42 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 21/06/2019 07:49, Pisch Tam?s via samba wrote: > > Hi, >