similar to: Correcting "incorrect userParameters value on object...." ???

On Thu, 2016-10-20 at 16:43 -0400, Adam Tauno Williams via samba wrote: > On Thu, 2016-10-20 at 16:28 -0400, Adam Tauno Williams via samba > wrote: > > > > sernet-samba-4.2.14-23.el6.x86_64 > > Errors [on all DCs] related to incorrect userParameters values - on > > user's that are working.  How does one go about > > rebuilding/correcting > > this

Hi, I recently upgraded 4.1.8 installation to 4.4.2. As per documentation I ran samba-tool dbcheck. It reported some problems with userParameters: ERROR: wrongly formatted userParameters on CN=,OU=Users,OU=MyBusiness,DC=,DC=local, should not be psudo-UTF8 encoded. I ran --fix as I read in some discussion that this was actually tested. The problem after upgrade is, that it is no longer possible

On 20/08/2019 02:59, Marcio Demetrio Bacci wrote: > Hi, > > I performed the procedures below on Samba4-DC1 (Master) and apparently > everything went fine. > > /etc/init.d/samba-ad-dc stop > > sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ > ? ? ? ? ?-e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ > ? ? ? ? ?-e 's/${NISDOMAIN}/empresa/g' \ > ? ?

El 11/10/19 a les 17:29, Rowland penny via samba ha escrit: > On 11/10/2019 16:02, Luca Olivetti via samba wrote: >> El 11/10/19 a les 16:59, Luca Olivetti via samba ha escrit: >>> El 11/10/19 a les 16:12, Rowland penny via samba ha escrit: >>>> Try running this on a DC: >>>> >>>> samba-tool ldapcmp ldap://DC1 ldap://DC2 >>>>

Hi all, Our domain is running perfectly, but for the fun of it, I tried a samba-tool dbcheck, and (unexpected actually!) it returned many errors, on many users, like this: > ERROR: wrongly formatted userParameters on CN=username1,CN=Users,DC=samba,DC=company,DC=com, should not be psudo-UTF8 encoded > Not changing userParameters from UTF8 encoding on

On 1-12-2015 12:50, Rowland Penny wrote: > Not sure, what you have proved is that Andrew Bartlett cannot spell > 'pseudo' :-D :-) > > Have a look at this thread here: > > http://samba.2283325.n4.nabble.com/PATCHES-Fix-userParameters-once-and-for-all-td4667772.html Yes, I had read that thread too, however, I don't understand what it actually means. I guess the same

Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to another, all roles transfered except the DNS related ones - those fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS [root at larkin28 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=LARKIN28,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us InfrastructureMasterRole owner: CN=NTDS

On 05/12/2019 19:48, S?rgio Basto wrote: > I made the packages [1] (BTW I'm a fedora packager maintainer ). > > [1] https://github.com/sergiomb2/sambaad You have used heimdal and not MIT, haven't you ? > >>> I just migrate the users and his password nothing more ... I had >>> to >>> remove a lot of fields, OU(s) etc for example: [1] . >> Just

I have come across a few accounts (out of 300+) that seem to be locked that will not unlock. These accounts were migrated from S3. Can someone advise - what am I missing here? I've reset the password several times via RSAT, checking the "Unlock Account" checkbox, which has not helped. Resetting the user's password via smbpasswd gives me: pdb_try_account_unlock: Account dmscott

Attempting to debug issues with replication I ldapcmd finds differences with the case of the "DC" attribute? Is this normal? LARKIN28 is Samba4 4.5.4, while WINDC1 is Windows 2008R2. [root at larkin28 samba]# samba-tool ldapcmp ldap://larkin28.micore.us ldap://windc1.micore.us -Uadministrator dnsdomain Password for [BACKBONE\administrator]: * Comparing [DNSDOMAIN] context... *

> > Initially, it appears to have worked. ... > > It shows the same on one of the S4 DCs, but the > > DomainDnsZonesMasterRole still shows as "no current owner" on the > > third S4 DC [all Sernet 4.5.2].  Argh. > You could try checking the database on the third DC, 'samba-tool > dbcheck --help' for more info. > You could also try forcing

On Mon, 19 Sep 2016 11:57:38 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > > On Mon, 19 Sep 2016 10:42:34 -0400 > > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > >

On Mon, 19 Sep 2016 10:42:34 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > > No it shouldn't be replicated, the big hint is > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the DC that holds > > the > > RID master FSMO role, so I supposed the question is,

Hai MJ, ( gelukkig nieuwjaar he .. ;-) ) First, why sernet 4.2.5 current is 4.2.7 Upgrade to 4.2.7 first i suggest. And : Last attempt @ Wed Nov 11 <= 11 Nov ? latest really? The "misbehaving server" check the time first. Try to run : knit Administrator samba-tool drs replicate <destinationDC> <sourceDC> --full-sync -k reboot your server, check time, check

Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >> On Mon, 19 Sep 2016 11:57:38 -0400 >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >> >>> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>>> On Mon, 19 Sep 2016 10:42:34 -0400

On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote: > You seem to be missing two FSMO roles: > > > DomainDnsZonesMasterRole > > > ForestDnsZonesMasterRole > > > Just what version of Samba are you using ? > > My Samba 4.5.2 domain also appears to be missing these roles. > > Can I simply seize these roles? > > [root at larkin27 ~]#

On 9/19/2016 1:37 PM, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 19:19:08 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: >>> >>> Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >>>> On Mon, 19 Sep 2016 11:57:38 -0400 >>>> Adam

Hello I disabled samba4's user account , but can not see attribute "ms-DS-User-Account-Disabled" ( checked via adsiedit.msc ) is this attribute exist in samba4 schema ? Is there another attribute for this ?

El 11/10/19 a les 16:59, Luca Olivetti via samba ha escrit: > El 11/10/19 a les 16:12, Rowland penny via samba ha escrit: >> Try running this on a DC: >> >> samba-tool ldapcmp ldap://DC1 ldap://DC2 >> --filter='whenChanged,dc,DC,cn,CN,ou,OU' >> >> Replace 'DC1' and 'DC2' with your actual DC short hostnames >> >> It should

Package: sernet-samba-4.2.14-23.el6.x86_64 These DCs were very recently upgraded from a prior version. [2016/09/19 09:32:55.168161, 0] ../source4/libcli/smb2/signing.c:116(smb2_check_signature) Bad SMB2 signature for message of size 202 [2016/09/19 09:32:55.168511, 0] ../lib/util/util.c:559(dump_data) [0000] 77 B3 94 9B 70 78 8B 21 1E 56 D0 78 E1 80 BB 5C w...px.! .V.x...\ [2016/09/19