similar to: samba as a dc in a windows ad

Am 15.06.2016 um 14:57 schrieb Sketch: > You can, as long as your windows DCs are not newer than 2008 R2. I > think the only real caveat is with sysvol replication. DRS replication > is not supported, so you'll have to use rsync or similar. See the > Sysvol section here: > > https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory

Dear,We are in MS migration phase to Samba 4.Besides replacing the AD MS by Samba 4, we must also migrate the file server MS to Samba 4. I have some doubts and I ask the opinion of you:   1 - Is there any way to migrate MS folder permissions for Samba 4?  2 - We will need a secondary domain control. Based on best practices in this Samba 4 is that the file server, we can use it as a secondary DC?

Why can't one use robocopy to do unidirectional replication from a Windows Domain Controller to a Samba Domain Controller? https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround

Hi, In reading https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Joining_the_Active_Directory_as_a_Domain_Controller it says "If the other DCs are Samba DCs and were provisioned with --use-rfc2307, you Should add --option='idmap_ldb:use rfc2307 = yes' to the join command" So does this mean that rfc2307 should not be used if the other DCs are MS

Hello, i few seconds ago i was on this site : https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround The Link under the section "Download" "Mircosoft Windows 2003 Resource Kit Tools" says, that the Download is no longer available. It makes sense , because Windows Server 2003 is not supported anymore :) Maybe Somebody of the Samba Team can update the

On Thu, 2017-11-30 at 15:46 +0000, Andrej Gessel via samba wrote: > Hello Andrew, > > thank you for the answer. > > 1) User credentials need to be preloaded with samba-tool to be > automatically replicated later if they change, its correct? No, preloading just makes the first login faster. > 2) And if user try to login on RODC without preloaded credentials, this >

On Wed, 13 Jun 2018 10:05:23 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi Rowland, > > > Same, as said; winbind isn't started :-) > > > > [root at dmzrodc ~]# ps ax | egrep "ntp|bind|named|samba|?mbd" > 650 ? Ss 0:00 /usr/sbin/ntpd -u ntp:ntp -g > 1205 ? Ss 0:00 /usr/sbin/samba -D > 1225 ? S 0:00 /usr/sbin/samba

Hi, I've tried replacing some 2012R2 RODC by samba-4.9.4 RODCs. One question about password replication: Samba wiki (https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) states that samba RODC acts as a proxy server to a writable DC if users are not member of the Allowed RODC Password Replication Group, which is the behavior we knew (and what we want) from the MS RODCs. Our test

Hi All I have a running SAMBA PDC on Debian Jessie on a PowerPC. I have backported Samba 4.3.18 and is working well. I have installed a SDC (if I may use that name) on a different network, the same version of Samba but on a Debian Jessie on AMD64. I followed every instruction in https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory. So every test

On Sun, 2 Oct 2016 11:45:15 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 02.10.2016 um 08:20 schrieb Trenta sis via samba: > > Hi, > > > > I have a samba 4.4.5 AD domain and is working perfect, but now I > > need to add a second samba 4 AD, I have found that in > >

On Wed, 13 Jun 2018 10:40:28 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi Louis, Hi Rowland, > > > I will respond to both in this mail. > > > Yes winbind is installed : > > > > [root at dmzrodc ~]# which winbindd > /usr/sbin/winbindd > [root at dmzrodc ~]# rpm -qa |grep winbind >

 Hi,  I am working on a deployment of Samba as a domain controller, with one central domain controller and several read-only DC.  The deployment works, and computers seems to interact with the RODCs as they should, but sometimes computers leave the domain after a password change.  This seems to happen only on RODC where the passwords have been replicated - on one occasion the RODC was

Really my user IDs are different, but I can not adjust it. Using Samba 4.3.3 (Upgrade from 4.2 -> 4.3 -> 4.3.3), I think it has something it was initially used with Windows 2003 (no longer usaddo) to replicate data Win 2003 -> Samba. Today only own Samba (which had to increase Schema) Em 29-03-2016 10:27, Sketch escreveu: > On Tue, 29 Mar 2016, Carlos A. P. Cunha wrote: >

Hi Le 09/06/2016 à 20:42, Rowland penny a écrit : > On 08/06/16 15:34, mathias dufresne wrote: >> Hi all, >> >> [snip] >> And we get issue with Linux ACLs: they are not the same because some >> BUILTIN users and/or groups do not have same id mapping on all DC. >> >> How to force all DC to get same id mapping? >> >> Using

Hi everyone, So, I am working with an AD environment where there is one 2008R2 DC (which holds the PDC emulator FSMO role) and one Samba DC running on Ubuntu 14.04 (Samba Version 4.1.6-Ubuntu). I have been trying to set up the rsync workaround for SYSVOL replication, but I've been unable to get it working properly due to the inability to compile rsync with xattr support under Windows. My

Hi Upgrading without knowing whats the problem I feel a bit like with Windows or lots of comercial software: "The next version will solve all your problems" and we all know that's never true. I appreciate any help. Cheers -------- Mensaje reenviado -------- Asunto: NT_STATUS_INVALID_SID in a SDC Fecha: Tue, 10 May 2016 12:22:25 -0500 De: Kasandra Padisha

Hello everyone! Whenever replicate the Sysvol need to run the DC command that received the data /opt/samba/bin/samba-tool ntacl sysvolreset This solves the problem (at least in min). Em 29-03-2016 08:28, mathias dufresne escreveu: > Check rights on sysvol (using samba-tool), check rsync process if several > DC. > > 2016-03-29 13:07 GMT+02:00 barış tombul <bbtombul at

Hi All, Is it correct that my RODC domain controller (DC2.ad.example.nl) has only one entry in the (internal) DNS on domain controller DC1? It seems to me that because of missing dns entries it is not used by clients in the ad domain I recently installed a second Domain Controller (DC2) along the smooth running first domain controller DC1. Samba version 4.8.5, Centos 7 Linux, further config

Hello, I just start testing the setup of an RODC with 4.8.3 (I use the packages from Louis). The join works fine. After a reboot of the rodc I can see all Objcts with: ldbsearch --url=/var/lib/samba/private/sam.ldb and all users and groups with: wbinfo -u wbinfo -g But as soon as I try to test the replication I got this message: ----------- root at rodc-01:/var/lib/samba/private# samba-tool drs

Hello, I published two new guides: * https://wiki.samba.org/index.php/Samba_NT4_PDC_quickstart A documentation, how to set up Samba as an NT4 PDC. I called it "Quickstart", because it covers only the basic stuff. * https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround For those of you having Samba DCs and Windows DCs in their domain. This is a