similar to: Thunderbird address book issue

We're upgrading (Sernet) Samba 4.2 to 4.4. As recommended on this page: https://wiki.samba.org/index.php/Updating_Samba, I have upgraded one of out 2 DCs, the one that does not have any FSMO roles. We will spend the next week making sure everything works as expected. So far, so good. One thing I'm not clear on is whether I should move the FSMO roles to the upgraded DC before upgrading

Hi Andrew, I don't understand why 2 systems running the exact same version of Samba have different behaviour. Is this an option I can disable? regards, John On 19/04/16 11:29, Andrew Bartlett wrote: > On Tue, 2016-04-19 at 10:29 +1000, John Gardeniers wrote: >> I'm setting up a test domain in order to try out Sudoers LDAP and >> have >> run into a problem that has

Has anyone here managed to get sudo working with Samba 4 AD users, using either ldap or sssd, with sssd preferred? If so, can you please point me in the direction of whatever instructions you used? It seems like there are a bunch of tutorials on the subject, each with different, and sometimes conflicting, information but none of those I've tried work for me. regards, John

WARNING: Do not use LAM to write to Samba 4 AD if you also want to use the Windows tools. I tried that during my testing phase and found that afterwards I was unable to use the Windows ADUC tool with that domain. Any attempt to edit anything resulted in an error message telling me that it couldn't write the data. I repeated the experiment a few times and always got the same result.

On Thu, 2016-04-21 at 15:40 +1000, John Gardeniers wrote: > Good news, I now have this working. Once I finish writing my notes > I'll > make them available to whoever might want them. Just to clarify > things a > bit, here is what we have and what we wanted: > > * Linux users are authenticated by the Samba 4 domain controllers via > SSSD, which itself uses LDAP. >

I'm happy to leave things as they are. As I can see no advantage in using LAM I won't be following it up. After all, it makes no sense to have an AD environment without at least one Windows client, so to my mind it makes sense to use the native AD tools, which have a far better understanding of AD than a generic LDAP tool. regards, John On 31/08/16 17:54, mj via samba wrote: > Hi

Hi, Sorry for my urgent request, but we have a problem with user who have strange displayname Yesterday (23/02/2014), we do a classic-upgrade from a ldap tree to a DC server. But user with accent have bad displayName and maybe cause problem when user try to connect to her computer. I'm unable to change displayName by ADUC, ldbmodify or ldbedit. GENSEC backend 'gssapi_spnego'

Hi Rowland, Those low numbers you refer to are in fact the standard numbers assigned to those groups, so I fail to see the problem. As for mapping Administrator to root, I believe that's entirely optional, rather than required. Under normal circumstances we don't use the domain Administrator account at all. We have a root account we use instead. In regard to winbind, we have never

I do not see an R-squared value after preforming the glm regression. Is there a separate command for this? Thanks -- View this message in context: http://r.789695.n4.nabble.com/Obtaining-R-squared-value-in-Logistic-Regression-tp4648954.html Sent from the R help mailing list archive at Nabble.com.

Hello, Actually migrating users/groups from samba3 to samba4 (in a separate domaine), i succeeded in importing users/gruops and their attributes. But For a reason i don't know some (a few) groups are not being created, and i get this error: "Failed to create group "MYGROUP" - samldb: Account name (sAMAccountName) 'MYGROUP' already in use! " Searching in ADUC

Hi John, exactly, as MJ already wrote you should file a bug report if you have any issues. This applies to LAM as to any other software. LAM was tested with Samba 4 and different Windows versions. If there is any issue just provide me the details of your environment and the exact error. Then I can fix this in the next release. :) Bugs can be opened at GitHub or SourceForge:

We have a couple Samba4 AD domains we've implemented and I've noticed a difference between how users look when created via ADUC versus samba-tool. Created via ADUC, the following extra attributes are added: msSFU30Name: bilbo msSFU30NisDomain: netdirect unixHomeDirectory: /home/bilbo unixUserPassword: ABCD!efgh12345$67890 Created via samba-tool, the following extra attributes are added:

On Thu, 21 Apr 2016, John Gardeniers wrote: > Good news, I now have this working. Once I finish writing my notes I'll make > them available to whoever might want them. Good to hear. I tried to get his working by following some of the online docs and the sudoers docs, and never did get it to work. It'd be great if someone could put this up on the Samba wiki when it's

Hello, I want my domain users to be able to connect to our linux servers using their AD username through LDAP. I am using nslcd and pam_ldap to do so, but I am having some hard time trying to figure out why the GID is not working properly. # getent passwd Guilherme Guilherme:*:10000:*513*:Guilherme:/home/Guilherme:/bin/bash # getent group|grep 513 # id Guilherme uid=10000(Guilherme) gid=513

On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > That's correct, I don't have "Unix Attributes" but through the advanced > view I have access to all attributes. > > The ldbsearch command is not returning anything in my case, it gives me 0 > records - no matter which user I try, even the Administrator. I checked the > command several times to make sure

We are preparing for an email domain name change. Is there a way I can script this in AD? I can of course manually edit each user's email address but I'd rather use a script that can be tied in with other scripted processes that will be performed during the switch-over, which would save me considerable time. I can't use ADUC for this because the username part of the email address

On Mon, 19 Jun 2017 14:46:34 +0200 Viktor Trojanovic <viktor at troja.ch> wrote: > On 19 June 2017 at 14:20, lingpanda101 via samba > <samba at lists.samba.org> wrote: > > > On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > > > >> That's correct, I don't have "Unix Attributes" but through the > >> advanced view I have

Good Day All I need the full list of option supported by the command samba-tool create user. the online help does not provide them all, in fact I see: 8< ------------------------------------------------------------------------------------------------------------ Options: -h, --help show this help message and exit -H URL, --URL=URL LDB URL for database or target server

Hey, By "through LDAP" I meant that our linux servers would look for the users using pam_ldap. Anyway, I was able to "fix" this by mapping gidNumber to gidNumber instead of primaryGroupID on nslcd.conf. $ id uid=10000(Guilherme) gid=10001(it) grupos=10001(it) On Fri, Aug 21, 2015 at 4:28 PM, Rowland Penny <rowlandpenny241155 at gmail.com > wrote: > On 21/08/15

On 2/9/2016 3:48 PM, Rowland penny wrote: > On 09/02/16 19:59, Allen Chen wrote: >> Hi there, >> >> I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything >> is working fine. >> >> Issue: ldbadd cannot re-add a deleted user account. >> What I did: >> 1. save user account >> # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb