similar to: The number of maximum ticket referrals has been exceeded

I tried using sssd but I couldn't get it working based on the info on https://wiki.samba.org/index.php/Sssd I may give it another go anyway. Nico On Mon, Dec 7, 2015 at 1:24 PM, mathias dufresne <infractory at gmail.com> wrote: > In case of... SSSD comes also with a caching method. Using SSSD rather than > Winbind could help in certain cases... > > 2015-12-07 13:00

Thanks! That's exactly what I was looking for. Nico On Mon, Dec 7, 2015 at 11:57 AM, L.P.H. van Belle <belle at bazuin.nl> wrote: > Hai Nico, > > Yes, you can do the same for linux laptops. > Read : https://wiki.samba.org/index.php/PAM_Offline_Authentication > > And here is an example. > >

In case of... SSSD comes also with a caching method. Using SSSD rather than Winbind could help in certain cases... 2015-12-07 13:00 GMT+01:00 Nico De Ranter <nico.deranter at esaturnus.com>: > Thanks! That's exactly what I was looking for. > > Nico > > > > On Mon, Dec 7, 2015 at 11:57 AM, L.P.H. van Belle <belle at bazuin.nl> wrote: > > > Hai Nico,

I tried the following: * rebooted both Samba DC's -- no change * restarted samba on storage server -- no change * remove client pc from domain, tried accessing the folder from non-domain pc -- no change * created a temporary server (running samba 4.x) to serve the same homedirectores -- no problem at all So that narrows the problem down to something on the storage server. I'll try

Hi Louis, I tried restarting samba on the server already. I also tried rebooting the client pc a number of times. The folders are mounted via GPO's. I assume rebooting the pc should have the same effect as remounting the shares? I also had a look at the permissions from Windows. When I look at the permissions of the new folder I managed to create I see there is a strange user with only

I expect the difference comes from the fact you are using ID mapping because, according to what I believe I understood, ID map generates UID (the map) and gives these generated UID to users. So one system give one UID to your teset users, another system gives him another UID. You can configure into AD uidNumber and gidNumber to give your AD users definitive UID/GID. Adding that information to AD

Hai Nico,   Ok great, its fixed, and yes, i do think that the reboot fixed it, dont ask my why, i dont know.. i only know the fix ;-) Seen this few times before..   About the script, did you run it without the password in the script or with the password in the script? So i can check whats wrong there.   Your running samba 4.1.17 ? on which os?   Greetz,   Louis       Van:

Hi, I am running a Windows Domain based on 2 Samba AD servers. The setup is running mostly fine but I have the impression that the 2 DC's are not syncing their information. For instance: - I added a Windows pc to the domain last week, when I started 'Active directory users and computers' today on a windows pc I could not see that pc, after rebooting one of the DC's the pc

Samba version: 4.1.17 I want to use a Samba AD controller to manage access to both my Windows and Linux boxes. I managed to import my old Samba users using pdbedit however as I want to use the new Samba AD controller to manage access to the Linux workstations too I want to configure Unix properties on all my accounts. Unfortunately I cannot find any command-line tool on Linux that will allow me

Hi, On 8 December 2015 at 08:53, Nico De Ranter <nico.deranter at esaturnus.com> wrote: > On Mon, Dec 7, 2015 at 8:39 PM, Ole Traupe <ole.traupe at tu-berlin.de> > wrote: > > Can I ask something related? Once I had used '23456' as uid for some test > > account, ADUC always wants to go that high, although I have plenty of > space > > below that. Is

On 07/12/15 16:08, Nico De Ranter wrote: > > I'm coming from a Debian system so my system accounts are below 1000, > regular accounts start at 1000. For some historical reason somebody > gave our main group id 500 so therefor I want my usable range to start > at 500. Bad idea, you will probably need at least one local Unix user, where are you going to put it. My advice

Hello again, I'm getting close to a working setup but still run into glitches here and there. I have 2 Ubuntu servers working as AD server, one Ubuntu desktop with winbind configured. I've setup a number of accounts with Unix properties. I've been primarily testing with my own account which works just fine. I've now assigned Unix properties to another account. When I run

Help, my Samba DC's refuse to sync :-( I have 2 Samba 4.1.17 DC servers. I made some changes via Active Directory USer and Computers on Windows. However even after a weekend the changes do not appear on the second DC. If I run samba-tool ldapcmp ldap://dc1 ldap://dc2 -Uadministrator --filter=msDS-NcType,serverState,subrefs I see:

I'm setting up a new Samba-based AD domain. The domain will be used to authenticate access to both Windows and Linux desktops and portables. When a Windows portable is not able to access the AD servers (e.g. you are using a portable outside of the office) you can still happily logon using cached credentials (as long as the user logged on the pc at least once before). Is there a way to get

Hai Nico, Yes, you can do the same for linux laptops. Read : https://wiki.samba.org/index.php/PAM_Offline_Authentication And here is an example. https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_howtos_add_linux_workstation_to_the_samba_domain Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Nico De

Hai Nico, Did your stop samba and start samba already. I have on one old server, also debian wheezy samba 3.6.6 about the same problem, stopping samba and starting solves it. !! restarting samba not !! Give it a try. If that does not work, try the following. Disconnect all you netwerk shares on the computer and reconnect them. I have 1 pc here (win7 64bit) which is getting a

Hai, Reboot both servers first, DC1 and wait until its fully up, then reboot DC2, and run the replicate again but now like this : samba-tool drs replicate dc_WITH_FSMO_ROLES dc_TO_SYNC_TO DC=win,DC=office report if this worked. And check with this one, you can run it on any samba DC. https://secure.bazuin.nl/scripts/samba-check-db-repl.sh configure it, and run it, and report back. For the

I always wondered why to reserve 8000 IDs for built-in accounts. I see ~40 built-in groups in ADUC and 2 such users (Administrator and Guest)... Ole Am 07.12.2015 um 17:27 schrieb Rowland penny: > On 07/12/15 16:08, Nico De Ranter wrote: >> >> I'm coming from a Debian system so my system accounts are below 1000, >> regular accounts start at 1000. For some historical

On Fri, Dec 4, 2015 at 1:48 PM, Rowland penny <rpenny at samba.org> wrote: > On 04/12/15 11:52, Nico De Ranter wrote: > >> Samba version: 4.1.17 >> >> I want to use a Samba AD controller to manage access to both my Windows >> and >> Linux boxes. I managed to import my old Samba users using pdbedit however >> as I want to use the new Samba AD

Hello again, I'm trying to move all my users from an old Samba server to a new Samba AD server. When I try to do a 'classicupgrade' the process crashes after a while without giving me a clear indication of what is going wrong. When I try to export the users using pdbedit -e smbpasswd , some of the accounts simply fail. If I look at the output I see something like: Processing