similar to: IDMAP + GETENT

Hi guys! I´m experiencing a problem with samba 4 policies and acl and i don´t known how it starded to do. Some problems like copy Policies, edit them, etc. It seems like permissions, but i´ve checked the list and can´t find a solution. Here are some outputs that i hope can help to understand: # Sysvol permissions: drwxrwxrwx+ 3 root DOMAIN\domain admins 4096 Mar 7 12:17 sysvol #

This is what there is in winbindd_idmap.tdb of both members that i have, whewre file server 2 is working well and file server 1 lose winbind rfc track. # # FILE SERVER 1 - PROBLEM # # tdbdump winbindd_idmap.tdb { key(9) = "USER HWM\00" data(4) = "\D0\07\00\00" } { key(10) = "GROUP HWM\00" data(4) = "\D0\07\00\00" } { key(14) = "IDMAP_VERSION\00"

I don't know if it is a coincidence, but, after add "dead time = 10" in my smb.conf, my server is about 1 hour without increase de number of processes... tks! 2016-09-17 12:49 GMT-03:00 Jeremy Allison <jra at samba.org>: > On Sat, Sep 17, 2016 at 12:19:16PM -0300, Edson Tadeu Almeida da Silveira > via samba wrote: > > Hi Guys! > > > > I've been

i have been trying to join my windows 7 machines in a samba domain, but it aways fails. I can join a windows 7 machine in a Samba domain. Then i have an error: _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client USER machine account USER$ But the machine joined. Then, when i will log in with an user, i cant do it, and the same error is showed in the

Hi Rowland. But, samba automaticaly do this mapping. root at server:/usr/local/src/samba-4.4.10# id 'domain admins' uid=3000008(DOMAIN\domain admins) gid=3000008(DOMAIN\domain admins) groups=3000008(DOMAIN\domain admins) Because of this options in smb.conf: winbind enum users = yes winbind enum groups = yes Can i remove this mapping only for domain admin group? Thanks 2017-03-07

Hi Guys! I've been using Samba since 4.4.4 without any problems. But yesterday, when i upgraded it to 4.5 my servers are using lots of memory resources because it is opening lots of samba processes. Now, it is with 4000 samba processes open, and i have to restart samba 4.5 time from time. Can anyone help me with this problem? Thanks! -- ------------------------------------------- Edson

Can you tell me what are correct permissions to set at sysvol in order to work and how to solve that problem with 'Domain admins' uid ? I´m using samba 4.4.6 and i will upgrade to 4.4.10 but i´d like to correct this issue before. Thanks again Rowland. 2017-03-07 13:34 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 7 Mar 2017 13:16:23 -0300 > Edson

Hehehehe. I'm trying to get courage to update to 4.6. And i saw that version 4.5.x had a change about ntlmv1 and i use it to auth vpn and wifi users. I need to test before put in production environment. Thanks! 2017-03-07 14:32 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 7 Mar 2017 14:21:38 -0300 > Edson Tadeu Almeida da Silveira <edson.tadeu

Hi guys! Do you known if there is something to do to let samba 4 member server to work in a different subnet? My AD/DC is on subnet 10.40.11.0/24 and im putting an member File server at 10.4.16.2/24 But im having problem to join in DC with this member. I have other members in the same ad subnet and all of them are working well. Thanks! -- ------------------------------------------- Edson

Hi Guys. Today i experienced a problem with my samba 4 AD. I have a master(AD1) and a member(AD2) in a replicated environment. I´ve just checked that my AD2 has some issues when i did this test: ---------------------------------------------------------------------------------- ldbsearch --url=/usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid # record 1 dn:

Hi guys. I´m experiencing some problems with corrupted files with samba 4.x. I´m using samba 4.4.4 and some files like excell, word, libreoffice are getting corrupted. The only thing that i saw at log files is this: [2016/09/19 13:54:00.312578, 0] ../source3/rpc_server/svcctl/srv_svcctl_nt.c:326(_svcctl_OpenServiceW) [2016/09/19 14:06:02.591121, 0]

Hi guys! Do you know if there is a away to rename a list of samba 4 user accounts ? I need to change a list of 2000 users from "login name" to a "login number" i would not like to do this one by one. I know that in windows server i can do using powershell script, but it doesn´t work with samba. If you have any ideia on how to do this i appreciate. Thanks!! --

Hi guys! I'm integrating samba4 with zimbra 8 collaborate server and i need your help. I need to import all zimbra users and password to samba4. Zimbra 8 uses a SHA512 hash. Can anyone help me with this? Thank you!! -- ------------------------------------------- Edson Tadeu Almeida Silveira http://sites.google.com/site/edsontadeu/ -------------------------------------------

Anyway everything seems to work well. The shares are correctly and users recognize them without problems. getent and wbinfo. The main problem is that apparently the Member DC does not get the UID properly containing the user in the ADDC. There is something that can change in the smb.conf the Member DC, I remember a few years ago with the same AD DC we get the UID correctly. 2016-06-14 12:58

Hello All! I´m having a problem with an external application that need to authenticate at samba 4 database using ldap. We are experiencing many ldap_bind errors when bind at samba 4 ldap with php. Do you know if there is some kind of tunning that i can do at samba4 to work with many php ldap binds ? thanks!! -- ------------------------------------------- Edson Tadeu Almeida Silveira

Rowland, now two members are working great. Past 24 hours and they didn´t lost uid/gid. root at fs1:/var/lib/samba# wbinfo -i edsontadeu edsontadeu:*:11106:10513::/home/DOMAIN/edsontadeu:/bin/false root at fs2:/var/lib/samba# wbinfo -i edsontadeu edsontadeu:*:11106:10513::/home/DOMAIN/edsontadeu:/bin/false Thanks! 2016-10-06 9:24 GMT-03:00 Rowland Penny <rpenny at samba.org>: >

all currently 4.5.5 want to downgrade them all to 4.4.12. What's the best method? I'm thinking that if I stop before install, remove all the right ldb files, install and rejoin, that should do it for everything but the fsmo master. if I transfer all the roles to a new 4.4.12 dc, and do as above that will take care of that one and we will all be over to the new "old" version

Besides this change on vfs objects, i delete winbindd_idmap.tdb and restarted winbind. Change smb.conf: vfs objects = acl_xattr full_audit full_audit:facility = LOCAL7 full_audit:priority = NOTICE full_audit:prefix = %u|%I|%m|%S full_audit:success = pread pwrite rename rmdir mkdir unlink chown full_audit:failure = none Here are my configurations: #

Sorry, the problem came back, after 3 hours. att, 2016-09-17 13:11 GMT-03:00 Edson Tadeu Almeida da Silveira < edson.tadeu at gmail.com>: > I don't know if it is a coincidence, but, after add "dead time = 10" in my > smb.conf, my server is about 1 hour without increase de number of > processes... > > tks! > > > 2016-09-17 12:49 GMT-03:00 Jeremy

I reported the problem two months ago . I knew this would happen . :(( 2016-09-17 22:42 GMT+03:00 Edson Tadeu Almeida da Silveira via samba < samba at lists.samba.org>: > Sorry, the problem came back, after 3 hours. > > att, > > 2016-09-17 13:11 GMT-03:00 Edson Tadeu Almeida da Silveira < > edson.tadeu at gmail.com>: > > > I don't know if it is a