similar to: Open sessions on the server

On Sat, 8 Apr 2017 15:18:18 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote: > Gentlemen, > > I upgraded my two DCs, from Samba 4.4.5 to 4.6.2. > When I check the database, I get the errors below. > Could someone help me in this case? > try 'samba-tool domain tombstones expunge' Rowland

On Mon, 2017-04-03 at 13:36 +0000, Ricardo Pardim Claus via samba wrote: > Gentlemen,  > > Can anyone tell me if the modules below are working normally in versions later than 4.4.5? > > Shadow Copy service What problems were you facing with shadow_copy2 module in later versions? >   > full_audit > I'm in version 4.4.5. However, when I had to use these modules, they

Dear, I have three installations of Samba 4, version 4.4.5. Being two DC's and a file server (domain member). I would like to update Samba to the latest version. The current installation was done by compiling the Samba packages. Could someone tell me if I can upgrade directly to the latest version available? Should I compile the new package to overlap the previous version? Thank you!

Gentlemen, I am struggling to solve this problem. My file server Samba 4.4.5. Even the administrator user (domain admin) could not write to the share. Could someone give me a hint, in order to solve this problem? shared folder: /mnt/data Folder permissions: # getfacl /mnt/data/teste/ getfacl: Removing leading '/' from absolute path names # file: mnt/data/teste/ # owner: ricardo

Yes, I performed tests on both DC's. 2 DC's working normally. The sysvolreset works in both DC's after I disabled full_audit. The gpupdate / force works perfectly. And also through the RSAT, I do not get more permission error when I edit any GPO. If this is a bug, who can inform / report? What I find strange in DC's, is when I view the sysvol permissions. The DC2 appears the

Dear,The FAQ Samba 4 states that it is not compatible with Windows Server 2012, as the link below: https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD My question is, is incompatible with the Server 2012 or the functional level of 2012?Here we have a Windows Server 2012 R2 with AD level of Windows 2008 R2 functionality.Samba 4 is compatible with this

Dear It is possible to configure Samba 4.4.5 to accept queries that do not use TLS? I'm having trouble authenticating the Proxy / SquidGuard in AD Samba 4.4.5. I get this error: (squidGuard): ldap_simple_bind_s failed: Strong(er) authentication required I read the wiki Samba, the new versions are working with authentication TLS encrypted connections. It is possible to configure Samba

I had joined the Samba as a secondary DC. At first he imported all (accounts, groups, users and gpo).I can see all the objects that were imported. But the version of Schema Samba came as 69. The errors that I notice is regarding DNS and ForestDNS synchronization.It seems that the error is displayed when you synchronize Samba for Windows. When Windows to Samba, the commands do not return error.

Dear Marc, Thanks for initial contact. The file server that need to migrate is a Windows 2012 R2. He's just a domain member. Being Win 2012, I can face any problems in the migration? Once the shares are ready, I plan to use Robocopy to copy the files and also the permissions of users and groups from Windows to Samba. De: Marc Muehlfeld <mmuehlfeld at samba.org> Para: Ricardo

> Hmm, the numbers seem extremely large, did you set this number in the > users 'uidnumber' attribute in AD ? How do I do this uidNumber configuration? I'm running all services: smbd, nmbd and winbind It's hard to run the file server as a domain member. When was a file server with DC was much more easy.

Dear Marc,In the field we have only simple objects (GPO desktop, file server, users and groups).In total, there are approximately 100 desktops +120 users. Only one site. How to create a new domain in the Samba with the same SID of the current domain? So I could create a new DC with the same domain and SID, and import objects (users and desktops accounts). De: Marc Muehlfeld <mmuehlfeld

James, I configured the account lockout policies by RSAT, GPEDIT.MSC. By GPEDIT.MSC I set the value = 10 attempts. Through the samba-tool, I used this command: # samba-tool domain passwordsettings set --account-lockout-threshold=11 INFO: Current debug levels: ... pm_process() returned Yes Module 'tombstone_reanimate' is disabled. Skip registration.lpcfg_servicenumber:

Dear Regards, Confirmed here, the AD schema is at version 69. Other settings: Domain Level and Forest Functional Level could downgrade to Windows 2008. We need to replace this DC MS by Samba, but keeping the same domain. Does anyone have any suggestions or tips? De: Marc Muehlfeld <mmuehlfeld at samba.org> Para: Ricardo Pardim Claus <ricardo.claus at yahoo.com.br>; "samba

Dear,Samba updated to 4.4.5 version.The Samba is a secundary DC.I'm getting some authentication errors. smbclient -k -L //domain.localsession setup failed: NT_STATUS_INTERNAL_ERROR Using my PC when I try to access the \\sambadc, is asking User and Password.The logs appears this: ctx setting sec (0, 0) - 0 = sec_ctx_stack_ndx[25/07/2016 14: 08: 04.581532, 5]

Dear,We are in MS migration phase to Samba 4.Besides replacing the AD MS by Samba 4, we must also migrate the file server MS to Samba 4. I have some doubts and I ask the opinion of you:   1 - Is there any way to migrate MS folder permissions for Samba 4?  2 - We will need a secondary domain control. Based on best practices in this Samba 4 is that the file server, we can use it as a secondary DC?

On Sat, 2017-04-08 at 16:13 +0000, Ricardo Pardim Claus via samba wrote: > Dear Rowland > > When I execute the command, I get the following error: > > # samba-tool domain tombstones expunge > ERROR(<type 'exceptions.AttributeError'>): uncaught exception - > 'module' object has no attribute 'time' >   File

Dear, I'm looking for a material that explains how to apply disk quotas by groups in Samba 4. However the materials I found left me confused. My environment: Centos 7, XFS filesystem, file server integrated with AD Samba 4. My objective: In my file server, create and configure quotas for AD groups in Samba 4. Could someone give me a help? Appoint a site for reading? Thank you!

>Sorry, but the lines you have added to the [global] section of >your smb.conf will do nothing on an AD DC. >Does 'getent group Domain\ Admins' produce any output ? >If not you need to set up libnss-winbind. >Rowland Dear Rowland; I appreciate the contact. The commands: getent group 'DOMAIN\Domain Admins' getent group 'Domain Admins' Return

> Is the 'vfs objects' line in the [global] section ? if so, try moving > it to the shares, there have been reports that adding 'vfs objects' to > [global] causes problems. > Rowland Dear Rowland This host is a Samba 4.6.2 domain member server. In the Global session of smb.conf, I have this line: Vfs objects = acl_xattr On Sharing: Vfs objects = recycle,

Colleagues, I come to seek help to solve this problem. I use Samba 4.4.5. I'm getting errors when running gpupdate / force on local desktops. I get the following error: User policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows could not apply the registry-based policy settings for the Group Policy object