similar to: Second DC doesn't recognize users/groups on getent

Hello Rowland, I should also mention that Samba 4.3.0 was installed from tarball, I compiled it myself. DC2 does not have the /var/lib/samba/private/sam.ldb file. Also it did not return any result on DC1. However, using /usr/local/samba/private/sam.ldb, both DCs returned the same thing: # returned 4 records # 1 entries # 3 referrals I wonder why DC1 has the /var/lib/samba/private/sam.ldb file

On 13/10/15 14:19, Guilherme Boing wrote: > Hello, > > I just realized that my second DC does not recognize the users from the AD. > wbinfo -u/-g are working just fine. > > [root at dc1 ~]# id bruno.castro > uid=10004(POL\bruno.castro) gid=100(users) > grupos=100(users),10001(POL\ti),3000009(BUILTIN\users) > > [root at dc2 ~]# id bruno.castro > id: bruno.castro: no

Hi all, There has been some discussion on GPO's lately, and I find myself having a problem too. This error in logged on one of our win7 workstations: EventData SupportInfo1 2 SupportInfo2 1232 ProcessingMode 1 ProcessingTimeInMilliseconds 1638 ErrorCode 5 ErrorDescription Access is denied. DCName \\dc4.samba.company.com GPOCNName

Yes, I performed tests on both DC's. 2 DC's working normally. The sysvolreset works in both DC's after I disabled full_audit. The gpupdate / force works perfectly. And also through the RSAT, I do not get more permission error when I edit any GPO. If this is a bug, who can inform / report? What I find strange in DC's, is when I view the sysvol permissions. The DC2 appears the

msz De: Fern?ndez-L?pez, Ambito Iberoamericano, Paseo de la Castellana 223, Madrid. [1]InEnglish - [2]EnEspanol Caros amigos luso-brasileiros, ? de se perguntar se as "patrulhas ideol?gicas" esquerdistas estar?o impedindo que os ?ltimos artigos do ex preso pol?tico e escritor cubano Armando Valladares - que abordam delicados aspetos das rela??es entre o regime

Hello list, I am not sure if this is a bug or known already but I will describe it. I have two domain controllers running on 4.1.12/sernet which are linked together. I am using unison for bidirectional sync for the sysvol directory as described on samba's wiki, although in my opinion the problem I will describe in the following has nothing to do with the sync process. The sync occurs every

hey, first, i user bind 9.8.1 as my DNS backend Well, I have a domain controller, dc1.example.com, running correctly and with the following configurations... == smb.conf == [global] workgroup = EXAMPLE realm = EXAMPLE.COM netbios name = DC1 server role = active directory domain controller idmap_ldb:use rfc2307 = yes server services = -dns

Hi all, In my latest commit I have updated all version strings and copyright dates. I am now going to do a little testing (and encourage anyone else to do the same) and hopefully release in the next day or so. Cheers, Erik -- ---------------------------------------------------------------------- Erik de Castro Lopo http://www.mega-nerd.com/

On Wed, 27 Mar 2019 09:45:18 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > > I dont think one noticed this.. > > ldbsearch -H ldap://dc4 -UAdministrator > ldbsearch -H ldap://dc1 -U Administrator > > So whats the difference when you see this responce of the command: > Invalid option -U: unknown ... >

Hai,   Environment, Debian Jessie.     I got reports about pc's unable to login into the samba ad dc domain. The trust between this workstation and the primary domain failed. This happend on a win7 and win10 pc. Now, this is "normaly" easy fixed,by rejoining the pc to the domain with the domain wizzard in windows. I noticed this didnt work anymore.   I was running without

But will this idmap.ldb change work for upcoming new users or groups so that uid/gid will not be different? The wiki tells us about built-in groups. Those have the right ids. Am 9. Dezember 2014 23:03:44 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/12/14 21:07, Tim wrote: >> Hello all, >> >> I have a fresh install of two CentOS 7 machines. On

removed sssd. removed all sss occurrences and winbind from the shadow line. Selinux is disabled. firewalld is disabled. not sure if there is a difference but I have smb and winbind, I do not have nmbd or smbd. /etc/resolv.conf search mydomain.com nameserver "ipaddress for DC1" nameserver "ipaddress for DC2" Still no such user after restarting the services and executing net

Hi Marc, Ok, I apologise, I was unsure if the number {31B2F340-016D-11D2-945F-00C04FB984F9} was something sensitive password-like or not, so i changed it slightly.... Sorry..! The number is actually the number as you quote it below for the Default Domain Policy. > The two GUID directories, that exist on every AD DC, are > > {6AC1786C-016F-11D2-945F-00C04FB984F9} = Default Domain

I found this. But I didn't find it related to DC idmapping replication. I have two pieces of hardware. My goal is realize an active directory for the windows clients and a file server. The AD should have redundancy (this is why I provisioned two DCs). The file should integrate snapshots like a NetApp system (snapshots are done by rsnapshot). The snapshot functionality works so far by mounting

I think I will only need uid and gid due to fs stuff. There are only Windows clients in that domain. So when the IDs are the same on both DCs, all will be fine I think. In RSAT there are no Unix attributes set. As an example: user1 has uid 3000021 on DC1 (first provisioned one). DRS seems fine. On DC2 user1 gets uid 3000017. If I set ID in RSAT Unix attributes after choosing domain, the IDs

Using platform x86_64-pc-linux-gnu arch x86_64 os linux-gnu system x86_64, linux-gnu status major 2 minor 13.0 year 2011 month 04

Dear list: I encountered some problems using the function point.in.polygon() of the sp package, when trying to determine whether some points lye inside, outside, on the border or on a vertice of a polygon. I have a list of point I know should lye right on the border of a polygon, but some of them are not classified as such by point.in.polygon() (see the example code below). To make a long story

I will try this tomorrow. Possibly this is my fix. When a domain is provisioned with rfc2307 it would make sense that Unix attributes especially uid/gid would automatically be set. A member also needs this to be set for unique fs acls right? Am 10. Dezember 2014 18:07:02 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 10/12/14 16:33, Tim wrote: >> I think I will

yes windbind is installed and running yes sssd is installed, but it was not running. I did start it and ran net cache flush and id again and still no such user. This is the working nsswitch.conf file that was copied over from the 7.3 working system. /etc/nsswitch.conf passwd: files sss winbind shadow: files sss winbind group: files sss winbind #initgroups : files sss hosts: files

I have also run a `make fullcheck` on Mac OS X 10.8. Only one test fails: FLAC__TEST_LEVEL=1 FLAC__TEST_WITH_VALGRIND=no ./test_grabbag.sh ./test_grabbag.sh: line 39: 1N: value too great for base (error token is "1N") make[1]: *** [fullcheck] Error 1 make: *** [fullcheck] Error 2 The cause is that in test_grabbag.sh, line 39, it uses `date +%N` to get nanoseconds, which is unsupported