similar to: Is it possible to change the domain name?

When I enable server signing in Samba (server signing = mandatory), I can still join a Window 7 machine to the domain but I am no longer able to log on into the domain using a domain user. Is this normal? I am using Samba 3.6.3 on Linux 12.04. Is there anything that needs to be configured on the Windows machine? Thanks, Ali

The wiki page settings control a netlogon security setting. I guess the "server signing" parameter applies to all the other traffic. But my guess - and it is only a guess- is that requiring server signing is causing the netlogon process to break since it does not support signing. The e-mail chain you reference does not make it clear if the samba instance is a domain

I have not tried with a Samba 4.x DC. As far as I know Samba 4.x does not have this limitation. On 01/06/15 04:10, ali-reza.fahimi at schneider-electric.com wrote: > > Does this mean that we cannot use mandatory server signing in Samba 3? > What about the later versions? The problem is that lack of server > signing is considered a security hole. > > > Inactive hide

Hello @ALL planning to set my first samba4 ad-dc (coming from Samba3 NT-domain). Trying to fulfill the recommendation to separate the domain controller from the file server and needing roaming profiles, I do not understand where I have to declare and locate the Profiles and Home shares. Is it possible to declare the profiles and homes on the DC (smb.conf) and point their paths to the member

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering

What about DC as primary domain controller? No Windows servers. Only clients. On Mon, May 29, 2017 at 5:19 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 29 May 2017 17:01:56 -0400 > Philippe Clérié via samba <samba at lists.samba.org> wrote: > > > Is it normal for a fresh installation of Samba to have empty Default > > Domain Controllers Policy and

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC after

Hi all, Following this thread with interest, as we are also having some issues with GPO (they work on and off, unpredictably) We checked iddap.ldb on the DCs and noticed differences between DCs. We would like to ask some questions: On 10-6-2016 9:26, Rowland penny wrote: > Well, it is and it isn't, yes winbindd will display the user & group > names for sysvol, but sysvol still

Hi, I want to migrate a Windows Small Business Server 2011 domain controller to Samba 4. The SBS2011 has about 40 users and 100 client computers. Also about 50 GPOs are in use. Furthermore there is Exchange running on the SBS and it has to stay there for the next couple of month (it will be replaced by a new mail system later). So far I think I can either try to migrate or start from

Hi, Following the wiki page Setting_up_a_Share_Using_Windows_ACLs windows shows me this error after clicking on Shares: Disk Management could not start the Virtual Disk Service (VDS) on 'COMPUTER'. This can happen if the remote computer does not support VDS, or if a connection cannot be established because it was blocked by Windows Firewall. Tested on a new provisioned AD-DC server.

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

> On 04 Jun 2016, at 22:14, Miguel Medalha <medalist at sapo.pt> wrote: > > >> Can someone therefore please explain to me what exactly these GPO >> restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The

On 03/07/15 15:18, Ryan Ashley wrote: > The only Unix client I can think of would be the Buffalo NAS. It runs > Samba3 and hosts various shares via SMB. DNS is handled by BIND9 on the > Samba4 DC. DNS does work and the domain name resolves to the IP address > of the server. DHCP is also handled on the DC. As for the GPO's, they're > in the correct place as far as I can tell.

GPOs are not synchronized, because I'm going to delete the zentyal domain, how can I delete delete all GPOs from AD y sysvol? and start over [root at srv-cds ~]# samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9} GPO {31B2F340-016D-11D2-945F-00C04FB984F9} is linked to containers ERROR(ldb): Error removing GPO from container - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - El

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

On 02/07/15 16:55, Ryan Ashley wrote: > Rowland, here is what I found in the ldb. > > # record 68 > dn: CN=S-1-5-32-544 > cn: S-1-5-32-544 > objectClass: sidMap > objectSid: S-1-5-32-544 > type: ID_TYPE_BOTH > xidNumber: 3000000 > distinguishedName: CN=S-1-5-32-544 > > # record 70 > dn: CN=S-1-5-32-549 > cn: S-1-5-32-549 > objectClass: sidMap >

On Wed, 06 Dec 2023 09:45:13 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > I have provisioned a new DC with Samba 4.18.5. This DC is intended to > replace an older one in my AD domain. > > The old/current DC has a number of Group Policies set. Can I "rsync" > /var/lib/samba/sysvol/hprs.local/policies/ to my new >

On 03/07/15 15:58, Ryan Ashley wrote: > They left a PC on, so I got the info. The info pissed me off, but not > because of the issue. This time it worked flawlessly, but I got the > error from the event log from prior attempts. First, today's results. > > C:\Users\reachfp.KIGM>gpupdate > Updating Policy... > > User Policy update has completed successfully. >

Not sure if you are asking about server or client. Are you asking about : 1. Pushing GPOs via Linux SaMBa Server to Windows machines? 1. i believe this has been somewhat doable for years using a windows workstation mmc pointed at a Samba Server. 2. Pushing GPOs via Linux SaMBa Server to Linux machines? 1. At least four years ago, LikeWise.com had some very limited GPO

Hello I had a problem with different group IDs on my two DCs. They have both Version 4.7.6-Ubuntu and use the RFC2307 scheme. The first DC showed the group-IDs 200xx that I gave in the AD. The second DC gave the ID 100 to Domain Users and other 200xx IDs to the groups. To could solve the problem: ?1. I gave Unix UIDs to all users and GIDs to groups in the Active Directory with RSAT ?2. I