similar to: Log Level and Failed Authentication Attempts

On 4/21/2017 1:28 PM, Matthew Delfino via samba wrote: > Hey Samba Friends, > > Maybe the below question is too general. How about this: I’ve set my "log level = auth:10" in the global parameters of my smb.conf file. > > I then purposely failed to log into an account on my Windows 10 machine until the account was locked. > > I’ve run the following command where x

Hello James, Thank you for pointing me in the right direction. It sounds like Andrew Bartlett is committed to bringing this capability to a future version of Samba. Hopefully, he’ll find the process of adding this feature to be easier then he anticipates, and it’s available to all of us who need to perform forensics on failed logins. Have a great week, Matthew > On 2017.04.24, at 9:19 AM,

Hey Rowland, Thanks for getting back to me. I just finished my recompile. I even ran a "samba-tool dbcheck --fix". I still I get this error: samba-tool domain passwordsettings set --max-pwd-age=270 ERROR(<class 'TypeError'>): uncaught exception - unorderable types: NoneType() >= int()   File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line

Thanks for taking a shot at helping me, Rowland. I found that someone had made this suggestion for another person in the past, so I ran this command before reaching out on Monday: > ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=Schema,CN=Configuration,$(echo "DC=$(hostname -d)" | sed 's/\./,DC=/g')" -s base objectVersion | grep 'objectVersion' | awk

In general we do not allow the removal of schema. In particular, because records in samba are stored under the attribute name, removing schema or renaming schema items describing those attributes and objectclasses can mean records cannot be processed correctly. However, if you confirm you really have exactly the entry already in the schema, you could edit the new schema not to add that

Hey Rowland, thanks for your quick reply. Answers below… > On 2017.01.18, at 12:41 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Wed, 18 Jan 2017 11:34:41 -0600 > Matthew Delfino via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> I have an Ubuntu 14.04 server with Samba 4.4.6 and a BIND DLZ backend >> that

On Mon, 2017-04-24 at 09:35 -0500, Matthew Delfino via samba wrote: > Hello James, > > Thank you for pointing me in the right direction. It sounds like > Andrew Bartlett is committed to bringing this capability to a future > version of Samba. Hopefully, he’ll find the process of adding this > feature to be easier then he anticipates, and it’s available to all > of us who need

Thank you for taking time to do this, Andrew. But, of course, it will be too late for me. I’ve just returned from exile, where I went on a spirit quest of sorts. Except that, on this quest, I was obliged to keep my distance until I had found a way to export and import all users, groups and group membership from my old samba domain to my new one. I updated schema to support Kerio Connect using

Hello! I am on Samba 4.10.0, Ubuntu 16.04.2 LTS. I recently reset a password and found that my password expiration had somehow gotten set to 400 days. I went to one of my DCs and ran the following command: # samba-tool domain passwordsettings show Password informations for domain 'DC=samdom,DC=mydomain,DC=com' Password complexity: on Store plaintext passwords: off Password history

Hello, I have an Ubuntu 14.04 server with Samba 4.4.6 and a BIND DLZ backend that I’ve downloaded, configured and installed from source. I’ve downloaded the source for Samba 4.5.4, compiled and installed, and now Samba won’t launch. If I try to run samba, I get the following error: samba: /usr/lib/x86_64-linux-gnu/libwbclient.so.0: version `WBCLIENT_0.13' not found (required by

Hey Samba Friends, Maybe the below question is too general. How about this: I’ve set my "log level = auth:10" in the global parameters of my smb.conf file. I then purposely failed to log into an account on my Windows 10 machine until the account was locked. I’ve run the following command where x equals the syslog, the log.samba, log.smbd and log.winbindd, and username is the name of

On 2015.11.22, at 2:27 PM, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 22/11/15 19:49, Matthew Delfino wrote: >> On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: >> >>> On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: >>> >>>> If you plan to keep

Hello from Sunny and frigidly cold Minneapolis, MN, USA! I have a SAMBA domain with three DCs running v4.4.16 on Ubuntu Server 14.04.5 LTS (BIND9 DLZ Backend). I need to move all my records to a new domain (from DOMAIN.LOC to SAMDOM.DOMAIN.NET). I know that it's not possible to change domains on a samba install, so I've created three new DCs running v4.7.4 on Ubuntu Server 16.04.3 LTS

Hello Colleagues and Mentors, I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on Ubuntu 14.04.3, but each of them is running Canonical's pre-compiled Samba package, v4.1.6. This already-existing domain has had it's schema updated to include Kerio Connect-specific schema (to support our mail

On 2016.04.06, at 4:13 PM, Rowland penny <rpenny at samba.org> wrote: > > On 06/04/16 21:58, Sonic wrote: >> Would prefer to continue to use my NSD/Unbound installs for most DNS >> (if not all) services. NSD is the authoritative server for the domain, >> and Unbound is the cache/resolver that the clients connect to. I'd >> like to not disturb this setup but

On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: > On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: > >> If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of

Alright, I'm taking the plunge: We're switching our three AD DCs from Samba internal to BIND_DLZ back end. I needed a version of BIND with DLZ, as it appears support for that is not so ubiquitous. I went here first: https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates We use Ubuntu 14.04 here, and the Debian/Ubuntu instructions fail on apt-get

Thank you, Louis, for your reply. By simply asking me to provide outputs of the aforementioned files, I found the cause of my first problem (auth failing). It was my /etc/hosts file on dc1. All of them should look like this, and indeed DC2 and DC3's *did* look like this: # cat /etc/hosts > 127.0.0.1 ? ? ? localhost.samdom.mycompany.net ?localhost > 192.168.3.201

Hello, I have three Samba Active Directory Domain Controllers that, from all metrics seem to be working just fine, but for one thing: When I run the following command: # samba-tool visualize uptodateness -r I always get the following response: ERROR(<class 'IndexError'>): uncaught exception - list index out of range File

On 20/11/2020 02:13, Matthew Delfino Samba List wrote: > Thank you, Andrew! > > This evening I attempted the upgrade. I first carefully commented out each of the attributes from the Schema-Updates.md file. I then saved the file and ran the following command, which gave me the subsequent output: > > (as root) > > # samba-tool domain schemaupgrade > Temporarily