similar to: can't log in as domain admin

I'm running Version 4.1.17-Debian as a DC on a Debian/Jessie AMD64 system. After rebuilding a domain with slightly different settings, roaming profiles stopped working. https://wiki.samba.org/index.php/Implementing_roaming_profiles contains a suggestion (see Troubleshooting roaming profiles) that gets them working again - deleting the user subkey from

On 24/10/15 01:26, Gary Dale wrote: > I'm running Debian/Jessie (stable) on an AMD64 machine, with Samba > Version 4.1.17-Debian. This is the domain controller, DNS server, Time > server and File server for the local network. > > The problem I'm having is that Windows machines sometimes can't open > files for editing. Other files in the same directory don't

I'm following the Debian wiki at https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory since it seems to be the only one I can find and since I'm running Debian/Bookworm on an AMD64 system. I'm in the section "Configure Kerberos" which is near the start. My /etc/krb5.con file (with most comments removed) is: > # cat /etc/krb5.conf > [logging] >

On 22/12/15 23:51, Gary Dale wrote: > On 22/12/15 12:25 AM, Gary Dale wrote: >> I'm running Version 4.1.17-Debian as a DC on a Debian/Jessie AMD64 >> system. >> >> After rebuilding a domain with slightly different settings, roaming >> profiles stopped working. I suppose the questions are, why did you rebuild the domain, what settings did you change and did

On 04/07/15 00:58, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

I'm running Debian/Jessie on a server which is used as an AD DC. I'm getting errors like this: Hit http://ftp.ca.debian.org jessie InRelease Hit http://ftp.ca.debian.org jessie/main Sources Hit http://ftp.ca.debian.org jessie/main amd64 Packages Hit http://ftp.ca.debian.org jessie/main Translation-en Err http://ftp3.nrc.ca jessie InRelease Err http://ftp3.nrc.ca jessie-updates InRelease

On 03/07/15 17:45, Gary Dale wrote: > On 03/07/15 02:44 AM, Gary Dale wrote: >> I've got roaming profiles for one account on a Debian/Jessie AD DC >> server but I can't get them to work for the other accounts. The >> differences are that the one account is also a Linux account in the >> AD DC and is in the Domain Admins group. The other accounts were >>

On 04/07/15 18:51, Gary Dale wrote: > On 04/07/15 04:22 AM, Rowland Penny wrote: >> On 04/07/15 00:58, Gary Dale wrote: >>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>> On 03/07/15 17:45, Gary Dale wrote: >>>>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>>>> I've got roaming profiles for one account on a Debian/Jessie AD

I've got roaming profiles for one account on a Debian/Jessie AD DC server but I can't get them to work for the other accounts. The differences are that the one account is also a Linux account in the AD DC and is in the Domain Admins group. The other accounts were created with ADUC on a Windows 7 machine logged in as the Domain Admins user just mentioned. They are Domain Users but not

On 04/07/15 22:53, Gary Dale wrote: > On 04/07/15 02:37 PM, Rowland Penny wrote: >> On 04/07/15 18:51, Gary Dale wrote: >>> On 04/07/15 04:22 AM, Rowland Penny wrote: >>>> On 04/07/15 00:58, Gary Dale wrote: >>>>> On 03/07/15 01:21 PM, Rowland Penny wrote: >>>>>> On 03/07/15 17:45, Gary Dale wrote: >>>>>>> On

On 03/07/15 07:58 PM, Gary Dale wrote: > On 03/07/15 01:21 PM, Rowland Penny wrote: >> On 03/07/15 17:45, Gary Dale wrote: >>> On 03/07/15 02:44 AM, Gary Dale wrote: >>>> I've got roaming profiles for one account on a Debian/Jessie AD DC >>>> server but I can't get them to work for the other accounts. The >>>> differences are that the

I have multiple Windows 7 machines connecting to a Debian/Jessie server (4.1.17-Debian). They don't use active directory - never bothered converting (why look for trouble when the existing setup is working?) but do use roaming profiles. It takes them about 45 seconds to logon or off, which is acceptable. I also have one XP/64 machine that takes a lot longer. Logons are fast but logging

> > I don't see where exactly the ways differ. I already played with idmap settings and keytab. It makes no difference. > > BTW the wiki entry does not explain how to create the keytab, so the setting is not really useful if you just follow that page. > > With the 'old system' you just have one range, this is now depreciated > and you should use the new

I had to move an existing member server to new hardware. Using getent on this Debian Jessie system, I cannot get winbind to retrieve the domain users, except for administrator, guest, tsinternetuser, and krbtgt. Although none of my other working systems have it, I added the "dedicated keytab", "kerberos method", and "winbind refresh tickets" parameters to match

> On 25 Jul 2016, at 19:49, Rowland penny <rpenny at samba.org> wrote: > > On 25/07/16 19:32, Kevin Davidson wrote: >>> On 25 Jul 2016, at 16:39, Rowland penny <rpenny at samba.org> wrote: >>> >>> On 25/07/16 16:02, Kevin Davidson wrote: >>>> Having problems with rfc2307 user ids. This was working briefly and now it’s not.

I've been using Samba4 on Debian/Jessie since it became "stable". After the last upgrade however, I got a massive failure. The first symptom I noticed was that I couldn't grab updates from the Debian servers. However when clients tried to log in, the real problem revealed itself. They could only log on using a temporary profile and couldn't connect to any of the shares

Hi, I''ve been using puppet for about a week and a half now, and it''s definitely making my life a lot easier. I''m using 0.24.1 and I''ve run into a small snag. I''m trying to write some code to make sure user home directories exist for users in LDAP. I''m trying to get their uid, gid and home directory from getent with something like: $uid =

On 11/04/2023 00:19, Gary Dale via samba wrote: > On 2023-04-05 09:56, Gary Dale via samba wrote: >> On 2023-04-04 19:36, Gary Dale via samba wrote: >>> On 2023-04-02 02:49, Rowland Penny via samba wrote: >>>> >>>> >>>> On 02/04/2023 04:54, Gary Dale via samba wrote: >>>> >>>>> I could, but that seems like overkill. A

I am running Samba4 on a Debian/Jessie AD DC. I have a network netlogon share with a single script in it. This .bat file is referenced in the ADUC profile and I can navigate to the netlogon share and run it, where it does what it is supposed to do. However when I log onto the workstation, it never executes. For example, it maps a drive but the drive is not mapped after a logon.

Good morning! First of all thanks Rowland for the fast answer yesterday! I realized that samba-technical might have been the wrong mailing list and switched it to the normal samba users list (hopefully it worked, as it does get a bit confusing with spamgourmets sendto addresses!). Unfortunately the problem with samba_dnsupdate remains after the changes. I did changed the smb.conf, krb5.conf, and