similar to: We need to change our AD domain

Hi Andrew, I understand that Samba doesn't support domain renaming, which is why I'm looking for a way to export the data from one domain and import it into a new one. Passwords and machine accounts are not a problem and can be ignored for this exercise. The key things I need to copy across are user accounts and groups, as they would be an absolute pain in the rear end to redo from

On Wed, 2016-08-24 at 13:40 +1000, John Gardeniers via samba wrote: > Hi All, > > As a result of a company restructure and name change we need to > change  > our AD domain. I know that we can't change the AD domain name in > Samba  > 4, so I'm looking at the smoothest way to migrate everything from > one  > domain to another. > > Is there any (properly

Hi John, > I understand that Samba doesn't support domain renaming, which is why > I'm looking for a way to export the data from one domain and import it > into a new one. Passwords and machine accounts are not a problem and can > be ignored for this exercise. The key things I need to copy across are > user accounts and groups, as they would be an absolute pain in the rear

Hi Klaus, I haven't used that tool for at least 13 years but I do recall that, among other things, it read from the registry. Coupled with the fact that Samba 4 AD is not a complete implementation of AD I can't imagine that it could possibly work. More to the point, I'd be seriously concerned about the results. This is not something I'm prepared to test in a production

Hi all, I've scoured the net looking for a solution but to no avail. net groupmap list returns Domain Admins (S-############........) -> Domain Admins I would rather map Domain Admins to my root unix group. net groupmap modify ntgroup="Domain Admins" unixgroupreturns type=d returns an error; Could not update group database. If I delete via; net groupmap delete

On Sun, 2017-04-09 at 16:12 +0100, Rowland Penny via samba wrote: > On Sun, 09 Apr 2017 14:47:59 +0000 > Leonardo Bruno Lopes via samba <samba at lists.samba.org> wrote: > > > > > Is there any chance that this could mean I only need to wipe   > > 'supplementalCredentials' attribute -- I saw that it is possible > > --   > > after set the

Rebooted my system for a windows update. When it came back up, It said the trust between my workstation and DC was broken. (Running Windows 7x64 SP1). Very odd, haven't seen that for a while. I thought it would be easy: unjoin/rejoin. But upon trying to rejoin, I get: The join operation was not successful. This could be because an existing computer account having name 'ANY'

Now that CentOS 7.5 ships with Samba 4.7 and has MIT Kerberos support, I would like to migrate away from the Sernet packages. Currently I have two Samba4 DC's. Can I easily swap the packages? Do I need to move all roles from #1 to #2, demote/unjoin, swap packages, rejoin/promote? .. What's the right way to migrate? Thanks in advance! j

Yeah I know. Not a good question to ask on a samba newsgroup. Unfortunately for this client, the software they use requires a Windows server. Since the box is less than a year old, they do not want to purchase a second server for two applications. So, I am left with the task of converting the linux/samba server to WinBloze 2003 Server. There are only 10 workstations so if I have to unjoin

We have had a Samba LDAP-PDC-BDC system setup for close to 3 months with about 60 computers in the domain. Earlier we had a power outage and about 30 computers no longer were able to log into the domain or authenticate. Some were NT Workstations and some were W2k. But not all NT or W2K workstations were affected. If we went to network neighborhood we would see the error message "

On Tue, 2018-07-10 at 09:35 +0200, Ing. Claudio Nicora via samba wrote: > Some other info about this issue. > It's the same as the one described in this bug: > https://bugzilla.samba.org/show_bug.cgi?id=11415 Try with 4.8.3. We have managed to join Windows 2012R2 with that release, after doing a Samba-side schema upgrade to the 2012 schema. Andrew Bartlett -- Andrew Bartlett

Samba Version 4.1.4-SerNet-RedHat-7.el6 Using RSAT via Windows 8.1 -- For a computer that is on the domain, I rename it from the client, then reboot. This renames the computer as expected. The common name in AD, however, is not affected. Is there a way to do this? Am I missing a step? Details: Using RSAT, I see the old computer name, not the new computer name. If I double click on the entity,

Hello List, Im running an network with five samba 4 addc, all on debian wheezy with the sernet packages. Recently an replication error showed up for an single Computer (WIN7-M-ADMIN) record. So I unjoined the pc from the domain deleted it's record from dc1 manually on the other dc's it had been removed automaticaly during unjoin. Now I get the following error [2015/07/21

We are preparing for an email domain name change. Is there a way I can script this in AD? I can of course manually edit each user's email address but I'd rather use a script that can be tied in with other scripted processes that will be performed during the switch-over, which would save me considerable time. I can't use ADUC for this because the username part of the email address

Hi, i sync the passwords from samba to other backends using "samba-tool user syncpasswords" On my operative system (samba 4.10 and python2) all works fine. I upgraded my test-DC to samba 4.11 and python3 and now the samba-tool user syncpasswords --daemon crashes. Fri Oct 4 12:29:47 2019: pid[983]: Attached to logfile[/usr/local/samba/var/log.syncpw] Fri Oct 4 12:29:47 2019:

Hello all... I have a site of about 50 pcs connected to a Samba domain controller. The domain has been running flawlessly for several years through several upgrades, and the last one (From Fedora Core 4/ Samba 3.0.23a to FC7/ Samba 3.0.27) seems to have caused something to come unglued. The Workstations are periodically booting up in the morning and being unable to contact the domain controller.

On 13.09.19 21:12, Andrew Bartlett via samba wrote: > On Fri, 2019-09-13 at 17:08 +0200, basti via samba wrote: >> Hello, >> >> i try to upgrade NT4 to AD. >> The NT4 domain has name foobar.example.com. i need to rename the >> domain >> to samdom.example.com. >> >> Is there a way to rename all entry in tdb before classicupgrade? > > The NT4

What about creating a secondary samba domain that trusts the first? Can samba trust another samba? On Thu, Aug 25, 2016 at 2:33 PM, John Gardeniers via samba < samba at lists.samba.org> wrote: > Hi Klaus, > > I haven't used that tool for at least 13 years but I do recall that, among > other things, it read from the registry. Coupled with the fact that Samba 4 > AD is not

Hi, Recently we changed our samba server to a bigger and more powerful system ( centos 5.2 ) The config file and smbpasswd and other passwd and group files were copied to the new server and it then assumed the same identity as the old one in the dns and ip address. It seems to have gone very well except we now seem to have a problem. There are windows XP workstations that were domain joined to the

reetings, Greetings, Can anyone help me find out how to migrate Active Directory users to Samba+LDAP? I have everything working: Samba+LDAP+Kerberos PDC in Debian and I also have a Windows Active Directory in production with more than 100 users added. I just want to transfer all the AD users to de PDC in Debian. I tried using pwdump to extract AD users but with no positive results. Please