similar to: Workstation Logon Restrictions (Log On To) with samba 4 AD

hi andrew and james, my configurations is made from aduc tools as you described but doesn't work correctly about andrew message about this issue, I understand that is an issue and is not solved and any solutions is available... only workaround is disable log on restrictions in aduc, then works, but without security... additional information with samba 3 and nt domain was working perfect

hi, Can I do any action to recover this feature or similar feature as It was available to samba 3? thanks 2016-11-01 19:27 GMT+01:00 Trenta sis <trenta.sis at gmail.com>: > hi andrew and james, > > my configurations is made from aduc tools as you described but doesn't > work correctly > about andrew message about this issue, I understand that is an issue and > is

On Sun, 2016-10-30 at 20:20 +0100, Trenta sis via samba wrote: > Hi, > > After a migration from samba 3 nt domain to samba 4 AD we have > detected > that Workstation Logon Restrictions (Log On To) is not working > correctly, > with samba 3 was working perfect, but after migration we have > detected that > some resources are not available, for example roaming profiles,

hi, I'm evaluating to migrate our samba and ldap domain with samba 3 to samba 4 ad, and I have problem with roaming profile in samba 4. I have configured with https://wiki.samba.org/index.php/Implementing_roaming_profiles and for new profiles created works perfect, but my problem is that I have many users to migrate keeping profiles from samba 3 domain but our problem is that wiht migrated

Hi, I have installed samba 4.4.4 and configured and works perfect, now I need to configure roaming profiles and reading https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I have detected that I can't configure chgrp "Domain Admins" /srv/samba/Demo/ I'm creating this share on our dc, but seem that with # getent group "Domain Admins" any samba AD group is

Hi, compiled from sources with # ./configure # make # sudo make install 2016-07-07 12:34 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > Hi tried with: > > winbind enum users = Yes > winbind enum groups = Yes > > > and winbind in nsswitch but same output, no result with getent from users and groups from samba 4 ad > > > 2016-07-07 11:40 GMT+02:00 Trenta

with getfacl userprofiles appear that domain admins has no permission, and I have configured as appear in wiki profiles, but only step that I can't configure is chgrp doamin admins # getfacl /local/var/profilesad/usertest/ getfacl: Removing leading '/' from absolute path names # file: local/var/profilesad/usertest/ # owner: 20087 # group: 513 user::rwx user:20087:rwx user:3000001:rwx

Hi, Thanks, Well winbind enum is needed, and ntlm auth is required by some applications, seems that samba has disabled by default but windows has enabled, we have to migrate some old applications I understand taht is OK with yout comments thanks Missatge de Trenta sis <trenta.sis at gmail.com> del dia dl., 23 de set. 2019 a les 11:22: > > Hi, > > I have used testparm. >

hi, I have a problema with rsta installed win windows 10 spanish version, I have detected that for example environment tab that allows to configure msinitialprogram, is not showed from rsta. I have tried to configure with advanced features but environment tab is not showd never... How can I configure to allow environment tab? thanks

Hi, Recently we have added 4.10.7 as additional dc, to our existing 4.4.5 samba AD DC, comparing output testparm I have detected that 4.4.5 has map readonly = no store dos attributes = Yes but 4.10.7 doesn't have Also compared smb.conf and both has the same configuration. Is this correct? Are required this configurations on 4.10.7? In a few day I want to upgrade this 4.4.5

Hi, I'll try to give information asked in preious messages: - We have only one samba Domain controller and one dns (bind in same samba server) - Our domain doesn't have any .local - avahi is not running and we use debian lenny - This is a samba 4 AD domain, migrated form samba 3 nt domain using classic upgrade as it is described in samba wiki - problem is reported in lan network, is not a

Hi, About duplicate issues warning during join, What I can do to find and solve this errors? I like to investigate source of this issue and solve this errors before join Thanks Missatge de Trenta sis <trenta.sis at gmail.com> del dia dt., 10 de set. 2019 a les 11:14: > > Hi, > > About duplicate issues warning during join, What I can do to find and > solve this errors? >

Tried with a windows 2008 r2 AD master brouser is available, microsoft is migrating to what option? 2016-06-20 18:49 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > First of all, thanks for you answer. > > "Problem" is that our users are using this feature, and if we can keep > this should be the best option to ensure that our user have detecte any > difference

Hi, Reproduced error with internal dns and bind_dlz, on both situations with a new provisioned domain 2016-06-10 18:27 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > Hi, > > I have made all dns test and other tests decribed in > https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Testing_DNS > with success > > We use dns bind_dlz, all

Hi, If you try net group /domain "Domain Users" in samba domain with domain users as primary group any user is showed, but If you try the same in a native AD then users are listed, try this to reproduce the error Thanks 2018-02-12 20:24 GMT+01:00 Trenta sis <trenta.sis at gmail.com>: > Hi Rowland, > > Not really sure if that is correct, tried with native AD and domain

Hi, I have searched and not found waht tls versions are supported with samba 4.4.5 as AD. IS tls 1.2 supported with samba 4.4? If not what version? Thanks

Not possible, I do not have a Windows AD DC, but I don't doubt it works, probably because windows has a similar work around to 'samba-tool group listmembers Domain\ Users' --> Correct this command returns correctly the users Can you create a file on the netapp that ends up belonging to 'username:Domain Users' ? --> Correct fiel created without issues Does 'getent

Just run some samba as file server, or perhaps you can even just run nmbd on another host than on your DC. That host running nmbd will participate to browsing election, it should win election if you ask for it in smb.conf. Only DC won't appear in network neighborhood, which is not an issue as even your users loves waste your company time in searching in network neighborhood, they have nothing

Hi, during a demote of an online and working DC I receive this error dsreplicasync failed (8440 'werr_ds_dra_bad_nc') Any suggestion where could be the issue, server is not really demoted Server is samba 4.4.5 and other server that has fsmo roles is 4.10.7 Thanks

Hi, I am evaluating samba 4 and I hace tried to create a neu samba domain and also simulate a samba 3 migration to samba 4, in both cases I hace detectes that cifs resources to dc, for example netlogon, are not working if are called by ip, by name are working without problems. where is the problem? thanks