similar to: Nested OU’s fail to return user / group lookups

On 11/10/2020 13:59, Robert Wooden wrote: > Yes, thank you for the guidance. > > Regarding "/You do not put the users password here (if that is what > you are trying to do): --password=PASSWORD1/" > > My experience has been this, no matter where I put "--password=" in > the string, after the "user" as the manpage suggests or the end. When >

I am confused as with samba-tool it does practically everything and all the default methods of M$ AD are covered. For some reason OU's seem to be missing I know OU's are very Group policy orientated but also they are simply Organisational Units. The ability to list, create and delete OU's seems to be omitted. Also when you add a user the destination OU parameter is missing. Is this

Hi, We have an AD Forest in the following hierarchy made of parent and child domain controllers. Recently we joined an Ubuntu 16.04 server as a domain member to a Windows 2012 child domain controller. Integration was completed successfully. The domain user we used for joining to DC is a member of our own created "domain admins" group which has rights to join a domain member to

Specifically what I am asking is, if I have a computer named ralph$ who is uidNumber 678 in ou=Computers and I have a user who is uidNumber 678 in ou=People, will this cause problems? Must the different sets of uidNumbers be disjoint acrossed different ou's?

I've been noticing that group policies in OU's haven't been working for me. So far I've installed samba 4.1.4 on a fresh install of FreeBSD 10.0 with UFS + acls turned on with the only shares being sysvol, and netlogon. I can get Windows 7 machines to take policies that are in the root of my domain. If I create an OU move a computer or user to that OU and move the policy to that

I am trying to implement the following structure in OpenLDAP for a backend to Samba 3: / ou=People /ou=Internal-----<- ou=Groups dc=btd,dc=com ---< \ ou=Computers \ou=External I have been able to authenticate users but they are only able to access shares based on their primary group. I am wondering if

Hello! Ok! I switch the IP inside Member AD > 127.0.0.1 localhost *> 10.1.1.16 * E-PLANO.ad.mydomain.br e-plano Only to clarify 10.1.1.16 - AD Member - File server 10.1.1.21 - Only AD-DC But, sorry! Follow the wiki https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs The command: # net rpc rights grant "SAMDOM\Unix Admins" SeDiskOperatorPrivilege -U

Yes, thank you for the guidance. Regarding "*You do not put the users password here (if that is what you are trying to do): --password=PASSWORD1*" My experience has been this, no matter where I put "--password=" in the string, after the "user" as the manpage suggests or the end. When I run the create string I am asked for a "New Password:' and then

On Mon, 19 Nov 2018 03:23:29 +0000 "Barry D. Adkins via samba" <samba at lists.samba.org> wrote: > >What is wrong with the Samba wiki, what didn't go exactly like the > >wiki ? > > https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC > > Well take this wiki that I'm trying to follow to add the AD uid/gid > to the

Hello, all. I was wondering if anyone could help me with this configuration: I had a LDAP tree with this structure: dc=base + ou=unit1 + ou=People + ou=Groups + ou=Computers + ou=unit2 + ou=People + ou=Groups + ou=Computers + ou=unit3 + ou=People + ou=Groups + ou=Computers ... And I need people from unit1 logging on unit2, unit3, etc. First thing is to put all users on one

(Ah, just finish my message and Rowland also mosted. Well, see this as extra info ) This "should" not be needed. Run this : https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-SePrivileges.sh bash samba-check-SePrivileges.sh And you see all default settings. And you should see: (everyhere) but i picked SeDiskOperatorPrivilege as example SeDiskOperatorPrivilege:

On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 13/07/2020 18:18, Douglas G. Oechsler wrote: > > > > Hello! > > > > Ok! I switch the IP inside Member AD > > > 127.0.0.1 localhost > > *> 10.1.1.16 * E-PLANO.ad.mydomain.br <http://E-PLANO.ad.mydomain.br> > > e-plano > > > >

On 13/07/2020 18:18, Douglas G. Oechsler wrote: > > Hello! > > Ok! I switch the IP inside Member AD > > 127.0.0.1 localhost > *> 10.1.1.16 * E-PLANO.ad.mydomain.br <http://E-PLANO.ad.mydomain.br> > e-plano > > Only to clarify > 10.1.1.16 - AD Member - File server > 10.1.1.21 - Only AD-DC > > But, sorry! > Follow the wiki >

On 13/07/2020 18:50, Andrew Walker wrote: > > > On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > On 13/07/2020 18:18, Douglas G. Oechsler wrote: > > > > Hello! > > > > Ok! I switch the IP inside Member AD > > > 127.0.0.1 localhost

Hello! > net rpc rights grant "MYDOMAIN\Unix Admins" SeDiskOperatorPrivilege -U > > "MYDOMAIN\Administrator" > > Enter MYDOMAIN\Administrator's password: > > Could not connect to server 127.0.0.1 > > > Not sure where to go from here, if I run the command I get this: > > pi at raspberrypi:~/tests $ net rpc rights grant "SAMDOM\Unix

Hello Em qua., 15 de jul. de 2020 ?s 11:54, L.P.H. van Belle via samba < samba at lists.samba.org> escreveu: > What Rowland asked and try this. > > ohhh, soryy kinit administrator > From: ad-dc: kinit administrator Password for administrator at AD.PREFPRUDE.BR: > net rpc rights list -k -S $(hostname -f) > > from AD member: # net rpc rights list -k -S $(hostname -f)

On 15/07/2020 14:27, Douglas G. Oechsler via samba wrote: > Hello! > > I really do not know what to do. Still in error. I did step by step ad-dc > and AD Member file server. > Any other idea please? > > Error: > net rpc rights grant "MYDOMAIN\Unix Admins" SeDiskOperatorPrivilege -U > "MYDOMAIN\Administrator" > Enter MYDOMAIN\Administrator's

>What is wrong with the Samba wiki, what didn't go exactly like the wiki ? https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC Well take this wiki that I'm trying to follow to add the AD uid/gid to the objects. It's helpful and confusing, but maybe because I'm just not informed enough. I got the property pages to show in AD Users & Computers,

What Rowland asked and try this. kinit administrator net rpc rights list -k -S $(hostname -f) Then remove the -S part again try again. What do you seen then. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: woensdag 15 juli 2020 15:54 > Aan: samba at lists.samba.org > Onderwerp: Re:

On Mon, Jul 13, 2020 at 2:04 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 13/07/2020 18:50, Andrew Walker wrote: > > > > > > On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba > > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > > > On 13/07/2020 18:18, Douglas G. Oechsler wrote: >