similar to: setup-sysvol-bidirectional.sh unable to id administrator

hi Louis thank for the suggestion. first i tried switching back to winbind in nsswitch.conf then getent an id worked as they should so i've cornered the problem down to sssd but i had another problem with the winbind solution the home dir was not being pulled from AD, with a bit of net searching i found this from the samba mail archives Sébastien Le Ray says in smb.conf idmap_ldb:use

I expect Winbind on DC do NOT retrieve home dir, by design. DC are not meant to be used by AD users, no session from standard users on DC, never. DC are meant to discuss with Windows clients and with tools as SSSD, Winbind or nslcd which use AD as a users database. This tools are configurable enough to use the database to make what we want on member servers. Winbind generates users from AD using

Hi all is there a way to retrieve the next available uid from the active directory to apply it as a rfc2307 attribute to a new user ? shadrock

Hi I use /usr/bin/rsync -XAavz --log-file /var/log/sysvol-sync.log --delete-after -f"+ */" -f"- *" /var/lib/samba/sysvol root at DC2:/var/lib/samba && /usr/bin/unison &> /dev/null and works ok but not working with crontab */5 * * * * root /usr/bin/rsync -XAavz --log-file /var/log/sysvol-sync.log --delete-after -f"+ */" -f"- *"

hi everyone i am trying setup point n print for canon ip7250, i have downloaded the windows driver which comes as an exe file, to retrieve all the setup files from the exe i started the installation then copied the installation files from the tmp folder, then cancelled the installation, i searched through the install files and cab files for drivers and was unable to recognise them, has anyone

hi everyone installed and joined a second dc following the instructions at https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory both version are 4.8.2 when i try to reset t the Sysvol folder's file system access control lists on the new dc i get the following error sudo samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

hi Roland > On Tue, 1 Nov 2016 11:00:15 +0000 > niya levi via samba <samba at lists.samba.org> wrote: > >> hi everyone >> >> i have configured 2 domain controllers and a domain member >> >> the domain member is joined to the domain and >> >> ad and rfc2307 is configured for idmap backend, >> >> wbinfo returns domain builtins for

> Re: [Samba] smb.conf root preexec ?.eml > > Subject: > Re: [Samba] smb.conf root preexec ? > From: > Rowland Penny <rpenny at samba.org> > Date: > 25/07/2018 08:26 > > To: > samba at lists.samba.org > > > On Wed, 25 Jul 2018 02:58:29 +0100 > niya via samba<samba at lists.samba.org> wrote: > >>> Subject: >>> Re:

hi everyone > Yes, but you can add these two lines to smb.conf: > > winbind enum users = yes > winbind enum groups = yes > > This will allow getent to list all users and groups, but is not > recommended if you have a lot of users. > > Rowland thanks the dc's now lists all the domain users and groups. the domain users gid is correct on both dc's the uid

hi everyone could someone show me there sasl configuration section in their dovecot.conf, i have postfix and dovecot setup for virtual users (no system users) everything works fine including tls, i have tried various examples off the web for sasl but they either have obsolete parameters or are for a setup with system users, i would prefer to use dovecots sasl implementation. dovecot --version =

hi everyone should my samba 4 ad dc be configured as the local and domain master browser or does this not apply to ad dc ? i ask because using the following command nmblookup -M MYNETBIOSNAME and got a positive name query response from a domain member not the dc, i disabled the domain and local browsing on the domain member reran the nmblookup command, and got a name_query failed to find name

hi everyone i have configured 2 domain controllers and a domain member the domain member is joined to the domain and ad and rfc2307 is configured for idmap backend, wbinfo returns domain builtins for groups and users on both the member servers an the dc's nsswitch.conf is configured with winbind, getent only returns local users and groups, is getent also suppose to return the builtins

> Subject: > Re: [Samba] Samba AD domain member and home directory creation > From: > Denis Cardon <dcardon at tranquil.it> > Date: > 09/02/2017 19:07 > To: > Dario Lesca <d.lesca at solinos.it>, Samba List <samba at lists.samba.org> > > Hi Dario, > > > On a Centos 7 minimal fresh install I have follow this howto: > > > >

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

I just setup replication of sysvol between my two DC's using the "Bidirectional Rsync/osync based SysVol replication workaround" and all went well with two exception. First, it seems that since an upgrade to Openssh version 7.0 that "dsa" key use is disabled by default by the Openssh team. There has been some questions for some time now regarding the security of

Hi Rowland > The problem is that the DC just provides authentication and yes, whilst > I suppose you could place a script in netlogon to do what you require, > there are better ways of doing this, autofs, pam-mount or pam-script, > so I suggest you investigate these, I would start with the last one > first. > > Rowland > i sat back and had a think for a while and decided

In the Samba wiki page "Bidirectional Rsync/osync based SysVol replication workaround". The FAQ "What to do if I've more than one DC?" Should not the last line say "DC3 <> DC2" like this: - DC1 <> DC2 - DC1 <> DC3 - DC3 <> DC2 <<<<??? Bob Wooden

Hai, Small update since i need som testers.. im trying to setup bi-directional sysvol replication. Unison has this ability. http://www.cis.upenn.edu/~bcpierce/unison/ This is beta, so if you have successed, please report this back. DONT TEST THIS ON YOUR PRODUCTION ENVIRONMENT. Thanks ! Louis

Hi everyone my sssd log shows the nsupdate command failing, how do i test ddns separately from sssd to see if the problem is in sssd or samba. shadrock /etc/sssd/sssd.conf ------------------------------------------------- (Fri Aug 1 12:18:30 2014) [sssd[be[tissisat.co.uk]]] [be_nsupdate_timer_schedule] (0x0200): Timer already scheduled (Fri Aug 1 12:18:30 2014) [sssd[be[tissisat.co.uk]]]

Does anyone have any hints or suggestions on getting some JetDirect-based printers set up for bidirectional printing in Samba? We're using LPRng 3.8.0, ifhp 3.4.7, and samba 2.2.2 From the LPRng standpoint, the printers seem to be set up for bidirectional communication fine.. but how do we get Samba to allow bidirectional communication? Thanks in advance! Glenn --- Glenn E. Sieb,