similar to: File server and AD

> > It is probably the only way, but I would read this before you start: Ok. > Do you mean you will be using the DC as a fileserver ? No. I was thinking of using the old samba server (NT4-style) as a file server. AD stays separate. On Wed, Sep 21, 2016 at 2:06 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 21 Sep 2016 13:33:43 -0300 > Elias

I set the local and domainsid the same as on my existing domain. On Tue, Sep 20, 2016 at 1:45 PM, Samba - General mailing list [via Samba] < ml-node+s2283325n4708407h17 at n4.nabble.com> wrote: > On Tue, 20 Sep 2016 13:35:16 -0500 > Kaz Staleman <[hidden email] > <http:///user/SendEmail.jtp?type=node&node=4708407&i=0>> wrote: > > > I do it on test

Hi Rowland, we make the classic upgrade samba3 fo samba4. We use this link https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_(classic_upgrade) tks. 2016-08-29 15:01 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Mon, 29 Aug 2016 14:25:25 -0300 > Maiquel Consalter <maiquelconsalter at gmail.com> wrote: > > > Let-me

Hey Luke, thanks for the help!!! It's working now!!! God bless you and your family!! :D Remember that GPOs need to run as the context of either the computer or the > user. Computers typically do not have access to many folders on a file > server, even as "Everyone". That is why the NETLOGON folder works. > > If you're deploying as a USER configuration, then it

Hello list, I tried to set up a folder on our fileserver domain member, so I can deploy software for users' machines, but is not working. If I put the software inside "netlogon" it installs correctly. \\172.16.1.7\storage\programs Auth Users - read & execute, list folder contents, read and write Do I need other permissions? -- Elias Pereira

Which GPO? Computer or User Configuration? Remember that GPOs need to run as the context of either the computer or the user. Computers typically do not have access to many folders on a file server, even as "Everyone". That is why the NETLOGON folder works. If you're deploying as a USER configuration, then it should run as the context of the user, meaning the Everyone permission

Hi Elias, > I thought it worked, but after I uninstalled the software that I deployed > via user scope, it did not reinstall. I selected the "Redeploy application" > option, but it also did not work. The user scope GPO are run with the privileges and access tokens of the logged on user, so the user have local admin rights for install and need access rights to the share you

> > Simple answer: > Administrator, No > Domain Admins, Yes Ok. It was already that way. root at fileserver:/etc/samba# getent group ... domain admins:x:10004: domain users:x:10000: dap:x:10003: dti:x:10001: For some reason with the administrator user is not working, I put my user as domain admin and include him as a member of unix and now I can access the security tab.

On 22/12/14 17:47, Elias Pereira wrote: > And now, I run the command "samba-tool user list" and the result is as > follows: > > *# samba-tool user list* > *ldb_wrap open of secrets.ldb* > *Could not find machine account in secrets database: Failed to fetch > machine account password from secrets.ldb: Could not find entry to match > filter:

root at fileserver:~# getfacl /home/dados/ getfacl: Removing leading '/' from absolute path names # file: home/dados/ # owner: root # group: domain\040admins user::rwx group::rwx other::--- Still with the same problem. No security tab on windows machine. :( The "Administrator" and "Domain Admins" also need to have an unix attribute? On Tue, May 30, 2017 at 4:08 PM,

On Tue, 20 Sep 2016 08:33:23 -0700 (PDT) kajkoz via samba <samba at lists.samba.org> wrote: > I did it again, mean. I followed the instruction > https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_%28classic_upgrade%29 > then I tried to log in from the client computer. ANd again. If that > user already existed on client computer there was not a

> > Who are logged into the win7 machine as, Administrator or a member of > Domain Admins ? As administrator. I take it /mnt/dados is a mount from somewhere else, how is it mounted > and where from ? For now it is mounted on the folder /mnt/dados in the same HD of the fileserver. Later I'll add another HD with more space. root at fileserver:~# cd /mnt/dados/ root at

> > Then why can the upgrade not contact the ldap server ? I dont know! :( Was ldap running on another computer before ? I installed a temporary openLDAP backend on the new host. Can you post the smb.conf from the old PDC ? the one you are trying to > upgrade from. I sent my smb.conf to your private e-mail. On Thu, May 21, 2015 at 3:08 PM, Rowland Penny <rowlandpenny at

Rowland, AD: 4.5.8 Fileserver: 4.6.3 root at fileserver:~# samba -Version Version 4.6.3-Debian root at fileserver:~# net rpc rights list privileges SeDiskOperatorPrivilege -U "ADDC\administrator" Enter ADDC\administrator's password: SeDiskOperatorPrivilege: ADDC\Domain Admins BUILTIN\Administrators chown root:Domain\ Admins /mnt/dados >>>> ok chmod 0770

Thanks Rowland for the quick answer!! :) If you are going to use more > than one Unix domain member as a fileserver, then you will probably be > better off using the winbind ad backend, this way you can ensure your > users and groups have the same ID everywhere. Maybe in the near future I'll set up a new fileserver. That way, I believe that ad as a backend is the best choice. I

hello guys, In my tests lab did the migration ldap base of the old samba3 to Samba4 ADCD. It's possible to migrate directories and files from users of the old samba3 to Samba4 ADDC? -- Elias Pereira

> > And I would just put 'forwarders { 172.16.1.10; };' in 'options' > I already have this entry, but for reverse lookup it does not work. Eg: dig suporte.domain.intra +short 172.16.1.15 dig -x 172.16.1.15 +short shows nothing On Mon, Mar 19, 2018 at 1:59 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Mon, 19 Mar 2018 13:51:00 -0300 >

The saga continues... I've spent a whole day with log level 5 and 7 and no error. All I have to do is return the log to the default and the error reappears. I monitored the "LDAP Query: Duration", but I didn't notice any crashes in the queries. I don't know if it's a long time, but some queries took 1.5s. Is there anything else I can do? On Mon, Mar 25, 2024 at

I greatly appreciate the answers. Are of great value to me and to others who like me do not have much experience. Another question. :D I believe that we will use debian as distribution for the new Samba4. What I need to copy from the old to the new distro? On Sat, Dec 6, 2014 at 12:49 PM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > On 06/12/14 14:32, Elias Pereira wrote:

1.5 seconds is pretty long, I would look into what those queries are. I would also look into repeated queries, sometimes these things are clients stuck in a loop where they don't complete because they expect some termination condition. Andrew Bartlett On Tue, 2024-04-02 at 09:25 -0300, Elias Pereira via samba wrote: > The saga continues... > I've spent a whole day with log level 5