similar to: can't log in as domain admin

I'm running Version 4.1.17-Debian as a DC on a Debian/Jessie AMD64 system. After rebuilding a domain with slightly different settings, roaming profiles stopped working. https://wiki.samba.org/index.php/Implementing_roaming_profiles contains a suggestion (see Troubleshooting roaming profiles) that gets them working again - deleting the user subkey from

On 24/10/15 01:26, Gary Dale wrote: > I'm running Debian/Jessie (stable) on an AMD64 machine, with Samba > Version 4.1.17-Debian. This is the domain controller, DNS server, Time > server and File server for the local network. > > The problem I'm having is that Windows machines sometimes can't open > files for editing. Other files in the same directory don't

On 22/12/15 23:51, Gary Dale wrote: > On 22/12/15 12:25 AM, Gary Dale wrote: >> I'm running Version 4.1.17-Debian as a DC on a Debian/Jessie AMD64 >> system. >> >> After rebuilding a domain with slightly different settings, roaming >> profiles stopped working. I suppose the questions are, why did you rebuild the domain, what settings did you change and did

I'm following the Debian wiki at https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory since it seems to be the only one I can find and since I'm running Debian/Bookworm on an AMD64 system. I'm in the section "Configure Kerberos" which is near the start. My /etc/krb5.con file (with most comments removed) is: > # cat /etc/krb5.conf > [logging] >

I'm running Debian/Jessie on a server which is used as an AD DC. I'm getting errors like this: Hit http://ftp.ca.debian.org jessie InRelease Hit http://ftp.ca.debian.org jessie/main Sources Hit http://ftp.ca.debian.org jessie/main amd64 Packages Hit http://ftp.ca.debian.org jessie/main Translation-en Err http://ftp3.nrc.ca jessie InRelease Err http://ftp3.nrc.ca jessie-updates InRelease

On 04/07/15 00:58, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

On 03/07/15 17:45, Gary Dale wrote: > On 03/07/15 02:44 AM, Gary Dale wrote: >> I've got roaming profiles for one account on a Debian/Jessie AD DC >> server but I can't get them to work for the other accounts. The >> differences are that the one account is also a Linux account in the >> AD DC and is in the Domain Admins group. The other accounts were >>

On 04/07/15 18:51, Gary Dale wrote: > On 04/07/15 04:22 AM, Rowland Penny wrote: >> On 04/07/15 00:58, Gary Dale wrote: >>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>> On 03/07/15 17:45, Gary Dale wrote: >>>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>>> I've got roaming profiles for one account on a Debian/Jessie AD

I've got roaming profiles for one account on a Debian/Jessie AD DC server but I can't get them to work for the other accounts. The differences are that the one account is also a Linux account in the AD DC and is in the Domain Admins group. The other accounts were created with ADUC on a Windows 7 machine logged in as the Domain Admins user just mentioned. They are Domain Users but not

On 03/07/15 07:58 PM, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

On 04/07/15 22:53, Gary Dale wrote: > On 04/07/15 02:37 PM, Rowland Penny wrote: >> On 04/07/15 18:51, Gary Dale wrote: >>> On 04/07/15 04:22 AM, Rowland Penny wrote: >>>> On 04/07/15 00:58, Gary Dale wrote: >>>>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>>>> On 03/07/15 17:45, Gary Dale wrote: >>>>>>> On

I have multiple Windows 7 machines connecting to a Debian/Jessie server (4.1.17-Debian). They don't use active directory - never bothered converting (why look for trouble when the existing setup is working?) but do use roaming profiles. It takes them about 45 seconds to logon or off, which is acceptable. I also have one XP/64 machine that takes a lot longer. Logons are fast but logging

> > I don't see where exactly the ways differ. I already played with idmap settings and keytab. It makes no difference. > > BTW the wiki entry does not explain how to create the keytab, so the setting is not really useful if you just follow that page. > > With the 'old system' you just have one range, this is now depreciated > and you should use the new

I've been using Samba4 on Debian/Jessie since it became "stable". After the last upgrade however, I got a massive failure. The first symptom I noticed was that I couldn't grab updates from the Debian servers. However when clients tried to log in, the real problem revealed itself. They could only log on using a temporary profile and couldn't connect to any of the shares

Hi, I''ve been using puppet for about a week and a half now, and it''s definitely making my life a lot easier. I''m using 0.24.1 and I''ve run into a small snag. I''m trying to write some code to make sure user home directories exist for users in LDAP. I''m trying to get their uid, gid and home directory from getent with something like: $uid =

I had to move an existing member server to new hardware. Using getent on this Debian Jessie system, I cannot get winbind to retrieve the domain users, except for administrator, guest, tsinternetuser, and krbtgt. Although none of my other working systems have it, I added the "dedicated keytab", "kerberos method", and "winbind refresh tickets" parameters to match

> On 25 Jul 2016, at 19:49, Rowland penny <rpenny at samba.org> wrote: > > On 25/07/16 19:32, Kevin Davidson wrote: >>> On 25 Jul 2016, at 16:39, Rowland penny <rpenny at samba.org> wrote: >>> >>> On 25/07/16 16:02, Kevin Davidson wrote: >>>> Having problems with rfc2307 user ids. This was working briefly and now it’s not.

On 2023-04-12 15:42, Peter Milesson via samba wrote: > > > On 12.04.2023 21:26, Gary Dale via samba wrote: >> I'm following the Debian wiki at >> https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory since >> it seems to be the only one I can find and since I'm running >> Debian/Bookworm on an AMD64 system. I'm in the section "Configure

Hi, I thought Samba4 was able to do everything what was doing Samba3. According to that isn't it possible for you to add a new DC into your NT4 domain which runs Samba4? As it is a DC in addition to others DC (those running Samba3) your domain should continue to work as it did for years. You would just get another DC running more recent Samba. I expect that Samba4 as filesrv is able to

I am running Samba4 on a Debian/Jessie AD DC. I have a network netlogon share with a single script in it. This .bat file is referenced in the ADUC profile and I can navigate to the netlogon share and run it, where it does what it is supposed to do. However when I log onto the workstation, it never executes. For example, it maps a drive but the drive is not mapped after a logon.