similar to: Rename a Domain

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

Hi, I'm trying demote my old DC, but the following message appear: root at dc-old:~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to synchronize from us Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -

Hi, I have posted the following message to Squid-Users forum ( squid-users at lists.squid-cache.org). "I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid authentication doesn't work. In samba 4.2.1 is working properly. This is my authentication block: auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b DC=empresa,DC=com,DC=br -D

I have two DC (DC1 and DC2) Samba 4.2.1. In DC1 has 2 pastes in sysvol\ empresa.com.br: Policies and Scripts. But in DC2, the Policies paste there isn't. Is this normal? When I have executed gpresult /r command in Windows client, I verified that DC2 is used to apply GPO for the workstations too. Regards, Márcio

I've been thinking if it's better to make a new Samba 4 DC server instead upgrade the old DC and then transfer the FSMO roles to it and shut down the old server. This way the installation would be cleaner and free of any errors of the old installation. I'm using Samba 4.2.1 and the result of command below is: root at EMPRESA:~# samba-tool fsmo show InfrastructureMasterRole owner:

Hi, I have saw many tutorials to ingress Ubuntu 14 in the Samba4 domain, but none worked properly. I put the Ubuntu workstation in the Domain, but when I try to login, appear the following messenge: "your password will be expire in 42 days " and does not permit the authentication. How can I configure correctly Ubuntu 14 workstation to authenticate in the Samba 4 domain? Thanks

I'm using Ubuntu 14.04-64 bits I had installed with apt-get the follows packages krb5-user krb5-config winbind samba samba-common smbclient cifs-utils libpam-krb5 libpam-winbind libnss-winbind The samba version is 4.1.16-Ubuntu Below are my files of configuration */etc/samba/smb.conf* [global] netbios name = cliente-ad192 workgroup = EMPRESA security = ads realm = EMPRESA.COM

See inline comments: On Thu, 3 Nov 2016 19:17:58 -0200 Marcio Demetrio Bacci <marciobacci at gmail.com> wrote: > Hi Rowland > > Following the results to: > > *USER:* > wbinfo --uid-info=10060: > bacci:*:10060:30049:bacci:/home/EMPRESA/bacci:/bin/false > It looks like 'bacci' is a normal user and the owner of the Policies GUID dir should be 'Domain

Hi When I work with RSAT on Samba4 appear the following message: "A global catalog (GC) cannot be contacted. A GC is needed to list the objects group memberships. ..." Occur, for example, when I access properties about an user or computer, as member of or Unix Attribute tab I have executed some tests, and for me looks like is healthy my DC. Is there another test to verify the health

Hi, I have set up an Ubuntu 14.04-64 bits workstation to join a samba 4 domain and is apparently running perfectly. However I need to put 300 stations in the domain, so I thought I'd create a iSO to facilitate the work. Thus I would like resolving some doubts before generating the ISO image: 1) Must be put the client's netbios name in smb.conf or is optional, as below?

Hi, My DC doesn't know domains users and groups by name, only by uid/gid. Ex: chmod mike:'EMPRESA\unix_admins' test chown: invalid group mike:EMPRESA\\unix_admins if run with GID work properly chmod mike:30059 test drwxr-xr-x 2 root 30059 4096 Jul 6 00:17 test There is unix_admins group wbinfo --gid-info 30059 EMPRESA\unix_admins:x:30059: In File Server Domain Member

I have two DC with Samba 4.2.1 and now I have set up a third DC with Samba 4.6.3. I have executed the command: samba-tool domain join empresa.com.br DC -U "EMPRESA\administrator" --dns-backend = SAMBA_INTERNAL And everything went well, however with the command: samba-tool drs showrepl The following message appears: root at dc3:/home/marcio# /usr/local/samba/bin/samba-tool drs

I upgraded my Secondary DC (version 4.2.2) to version 4.5.5. The *samba-tool drs showrepl command* is OK. Now the authentication of the users is not working, as message below: root at dc2:~# wbinfo -a mane Enter mane's password: plaintext password authentication succeeded Enter mane's password: challenge/response password authentication failed wbcAuthenticateUserEx(EMPRESA\mane): error

Hi, I have a File Server as Domain Member and it was working properly. Recently I changed my DCs and after I am not getting authenticate users with winbind. I'm using Samba 4.6.3 as DC and Samba 4.1.17 as File Server. When I restart Samba Service, this message appears: root at dc1:/root# /etc/init.d/samba4 status ● samba4.service - LSB: start Samba4 daemons Loaded: loaded

Hi, Sorry, but I have the following doubt: Is need apply the CVE-2017-7494 (Remote code execution from a writable share) patch or this patch already was included in Debian repository, this way I need only to execute apt-get upgrade? In the case that I need to apply manually, how do I do it ? I'm using Samba 4.6.3 on Debian 8. Regards, Márcio Bacci

Hi I'm using Samba 4.6.5 on Debian 8. Recently, in samba Service appears problems with SMB2 SIGNATURE as the message below: root at dc2:/home/suporte# /etc/init.d/samba4 status samba4.service - LSB: start Samba4 daemons Loaded: loaded (/etc/init.d/samba4) Active: active (exited) since Seg 2017-07-31 17:14:07 -03; 15h ago Process: 443 ExecStart=/etc/init.d/samba4 start (code=exited,

Hi, My Domain Controllers are using Samba 4.2.1 on Debian 7 I have upgraded my Secondary DC of the 4.2.1 to 4.5.5 version, as the follow: 1) cd /root 2) wget -c https://download.samba.org/pub/samba/samba-4.5.5.tar.gz 3) tar -xzvf samba-4.5.5.tar.gz 4) cd samba-4.5.5 5) ./configure --prefix=/opt/samba --enable-debug --enable-selftest 6) make 7) /etc/init.d/samba stop 8) /etc/init.d/ntp stop 9)

Hi Louis I have moved "empresa.com.br" folder to /root. After I run samba-tool ntacl sysvolreset, but some errors appear: samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error') File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run

Hi Rowland > My DC doesn't know domains users and groups by name, only by uid/gid. Sounds like you haven't set up the libnss_winbind.so links or /etc/nsswitch.conf I had not installed Winbind, but I installed it now. (winbind, libnss-winbind and libpam-winbind packages). I configured /etc/nsswitch as below: passwd: compat winbind group: compat winbind shadow: