similar to: Differences between the Primary and Secondary DC

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

I want to create another DC in my network. Today, my DC is Debian 7 with Samba 4.2.1 compiled (source package). Are ther problem if I install another DC with Debian 8 and Samba 4.1.17 (apt-get -t backports)? I will follow the tutorial below: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC Regards, Márcio

Hi, I have saw many tutorials to ingress Ubuntu 14 in the Samba4 domain, but none worked properly. I put the Ubuntu workstation in the Domain, but when I try to login, appear the following messenge: "your password will be expire in 42 days " and does not permit the authentication. How can I configure correctly Ubuntu 14 workstation to authenticate in the Samba 4 domain? Thanks

See inline comments: On Thu, 3 Nov 2016 19:17:58 -0200 Marcio Demetrio Bacci <marciobacci at gmail.com> wrote: > Hi Rowland > > Following the results to: > > *USER:* > wbinfo --uid-info=10060: > bacci:*:10060:30049:bacci:/home/EMPRESA/bacci:/bin/false > It looks like 'bacci' is a normal user and the owner of the Policies GUID dir should be 'Domain

My user is member of the 'Group Policy Creator Owners' group, but when I try to create a GPO, the following message appear: Denied Access. I am using* Group Policy Management Console* What is the problem? Regards, Márcio Bacci

Hi, I have a problem. My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR. Is it possible in Samba 4? How can I migrate users account? I'm using Samba 4.6.3. Regards, Márcio Bacci

Hi, I would like to know which the best way to replicate Sysvol between my DC Samba 4 is with Rsync/Osync, as per the article below? https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround I have 3 Samba 4 DC. Regards, M?rcio Bacci

I can configure UidNumer and gidNumber attributes by Microsoft RSAT tool and the value is stored. When I click again on the tab "Unix Attributes" appears a message saying "Not is possible the execution". I click OK button and the attribute is correct. Why appear this message? How can I verify if the NIS service is working correctly? Regards, Márcio

Hello , ( samba 4.6.9 - centos 6 DC1 centos DC2 ) I tried to sync sysvol as described in https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround between two DC but rsync shows some errors like this rsync: set_acl: sys_acl_set_file(apam-ad.apam.it/Policies/{D725AAC4-27E8-46AC-918D-55B560988386}/Machine/Applications/{031B2C75-D832-429B-B4C4-226BAA665E3A}.aas,

Hi, I'm trying demote my old DC, but the following message appear: root at dc-old:~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to synchronize from us Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -

Hi, I have posted the following message to Squid-Users forum ( squid-users at lists.squid-cache.org). "I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid authentication doesn't work. In samba 4.2.1 is working properly. This is my authentication block: auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b DC=empresa,DC=com,DC=br -D

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

Hello, i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT Kerberos (clean, not upgraded). I just wan to create/activating a simple GPOs. # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not displa last user name -> activate When im activating this Policys (no errors or something like that) nothing happend. I reboot two Domain

I have installed a secondary DC in my network, following the tutorial: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC#Kerberos I have ran the following command: samba-tool domain join mydomain.com.br DC -Uadministrator --realm = mydomain.com --dns-backend = BIND_INTERNAL It seems that everything is OK. I have ran the following commands in both DC and the result was the same: ldbsearch

Hi, Sorry, but I have the following doubt: Is need apply the CVE-2017-7494 (Remote code execution from a writable share) patch or this patch already was included in Debian repository, this way I need only to execute apt-get upgrade? In the case that I need to apply manually, how do I do it ? I'm using Samba 4.6.3 on Debian 8. Regards, Márcio Bacci

I've been thinking if it's better to make a new Samba 4 DC server instead upgrade the old DC and then transfer the FSMO roles to it and shut down the old server. This way the installation would be cleaner and free of any errors of the old installation. I'm using Samba 4.2.1 and the result of command below is: root at EMPRESA:~# samba-tool fsmo show InfrastructureMasterRole owner:

Hi, I have set up an Ubuntu 14.04-64 bits workstation to join a samba 4 domain and is apparently running perfectly. However I need to put 300 stations in the domain, so I thought I'd create a iSO to facilitate the work. Thus I would like resolving some doubts before generating the ISO image: 1) Must be put the client's netbios name in smb.conf or is optional, as below?

I upgraded my Secondary DC (version 4.2.2) to version 4.5.5. The *samba-tool drs showrepl command* is OK. Now the authentication of the users is not working, as message below: root at dc2:~# wbinfo -a mane Enter mane's password: plaintext password authentication succeeded Enter mane's password: challenge/response password authentication failed wbcAuthenticateUserEx(EMPRESA\mane): error

I want it when a user if to authenticate to the system a network mapping to be automatically mounted by the /etc/fstab Sample: //192.168.200.3/Commercial /media/Commercial cifs auto,users,username=<domain-user>,passwor=<password> How do I get the domain username of the user logged and the password to set up the mapping? If isn't possible, what is the best way ? I'm using