similar to: Problems with Member Server Samba 4

I have installed a secondary DC in my network, following the tutorial: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC#Kerberos I have ran the following command: samba-tool domain join mydomain.com.br DC -Uadministrator --realm = mydomain.com --dns-backend = BIND_INTERNAL It seems that everything is OK. I have ran the following commands in both DC and the result was the same: ldbsearch

I can configure UidNumer and gidNumber attributes by Microsoft RSAT tool and the value is stored. When I click again on the tab "Unix Attributes" appears a message saying "Not is possible the execution". I click OK button and the attribute is correct. Why appear this message? How can I verify if the NIS service is working correctly? Regards, Márcio

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

I want to create another DC in my network. Today, my DC is Debian 7 with Samba 4.2.1 compiled (source package). Are ther problem if I install another DC with Debian 8 and Samba 4.1.17 (apt-get -t backports)? I will follow the tutorial below: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC Regards, Márcio

I want it when a user if to authenticate to the system a network mapping to be automatically mounted by the /etc/fstab Sample: //192.168.200.3/Commercial /media/Commercial cifs auto,users,username=<domain-user>,passwor=<password> How do I get the domain username of the user logged and the password to set up the mapping? If isn't possible, what is the best way ? I'm using

My user is member of the 'Group Policy Creator Owners' group, but when I try to create a GPO, the following message appear: Denied Access. I am using* Group Policy Management Console* What is the problem? Regards, Márcio Bacci

Hi, I am running a Samba 2.2.7a on Redhat 7.3 in a NT domain. For authentication I am using the domainusers.This is done by Winbind 2.2.7a which verifies the existens of the users on the PDC. So I dont't have to create local users (/etc/passwd) for users who want to connect to the shares in the smb.conf. I authorise them by adding valid users = domain+domainuser to the smb.conf. This works

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

I have two DC (DC1 and DC2) Samba 4.2.1. In DC1 has 2 pastes in sysvol\ empresa.com.br: Policies and Scripts. But in DC2, the Policies paste there isn't. Is this normal? When I have executed gpresult /r command in Windows client, I verified that DC2 is used to apply GPO for the workstations too. Regards, Márcio

See inline comments: On Thu, 3 Nov 2016 19:17:58 -0200 Marcio Demetrio Bacci <marciobacci at gmail.com> wrote: > Hi Rowland > > Following the results to: > > *USER:* > wbinfo --uid-info=10060: > bacci:*:10060:30049:bacci:/home/EMPRESA/bacci:/bin/false > It looks like 'bacci' is a normal user and the owner of the Policies GUID dir should be 'Domain

Hi, I have a problem. My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR. Is it possible in Samba 4? How can I migrate users account? I'm using Samba 4.6.3. Regards, Márcio Bacci

Hi, Sorry, but I have the following doubt: Is need apply the CVE-2017-7494 (Remote code execution from a writable share) patch or this patch already was included in Debian repository, this way I need only to execute apt-get upgrade? In the case that I need to apply manually, how do I do it ? I'm using Samba 4.6.3 on Debian 8. Regards, Márcio Bacci

Hi, I have saw many tutorials to ingress Ubuntu 14 in the Samba4 domain, but none worked properly. I put the Ubuntu workstation in the Domain, but when I try to login, appear the following messenge: "your password will be expire in 42 days " and does not permit the authentication. How can I configure correctly Ubuntu 14 workstation to authenticate in the Samba 4 domain? Thanks

I implemented a domain Samba 4, but I have the following questions: 1) Primary DC (DC 1) Do I need to Install winbind? 2) Secondary DC (DC 2) Do I need to install the NTP server? 3) Ubuntu 14 Workstations What are the packages needed to join the station in the domain? Regards, Márcio

Hi, The Windows and Linux workstations are not synchronizing the time with the Samba 4 DC. I have verified that the problem is permission. I'm using Samba 4.6.3 on Debian 8. In this way the stations are with different schedules from the DC. Do I need to configure any GPOs? What is the maximum time the computer clock can differ from DC ? Regards, Márcio

Hi, My Domain Controllers are using Samba 4.2.1 on Debian 7 I have upgraded my Secondary DC of the 4.2.1 to 4.5.5 version, as the follow: 1) cd /root 2) wget -c https://download.samba.org/pub/samba/samba-4.5.5.tar.gz 3) tar -xzvf samba-4.5.5.tar.gz 4) cd samba-4.5.5 5) ./configure --prefix=/opt/samba --enable-debug --enable-selftest 6) make 7) /etc/init.d/samba stop 8) /etc/init.d/ntp stop 9)

I upgraded my Secondary DC (version 4.2.2) to version 4.5.5. The *samba-tool drs showrepl command* is OK. Now the authentication of the users is not working, as message below: root at dc2:~# wbinfo -a mane Enter mane's password: plaintext password authentication succeeded Enter mane's password: challenge/response password authentication failed wbcAuthenticateUserEx(EMPRESA\mane): error

Hi, I have a File Server as Domain Member and it was working properly. Recently I changed my DCs and after I am not getting authenticate users with winbind. I'm using Samba 4.6.3 as DC and Samba 4.1.17 as File Server. When I restart Samba Service, this message appears: root at dc1:/root# /etc/init.d/samba4 status ● samba4.service - LSB: start Samba4 daemons Loaded: loaded

Hi Rowland I'm using Samba 4.2.1 on Debian 7 Regards, Márcio 2016-11-15 20:30 GMT-02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 15 Nov 2016 20:19:23 -0200 > Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > > > Hi > > > > When I work with RSAT on Samba4 appear the following message: "A > > global

I was wondering if any one else is having issues with supplementary groups not being recognized. It seems as if Samba is ignoring the sup.groups. I'm using RH9.0 on Intel with samba-3.0.0-2_rh9 and OpenLDAP 2.0.27. When I do a "id -a username" the user is in all the necessary groups but when accessing shares the users' primary GID is used only. For example, uid=1001(jgray)