similar to: Upgrading samba from jessie (4.2) to stretch (4.5) in AD mode...

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > He did not post smb.conf ;-) It is full of comment, now, because i'm moving some settings from my old 'NT' domain... [From other thread...] > If he has added 'security = user' to his smb.conf, he needs to remove > it, you do not use this on a DC. Clearly, i've removed that; i've added

On Wed, 21 Jun 2017 18:06:45 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > > > He did not post smb.conf ;-) > > It is full of comment, now, because i'm moving some settings from my > old 'NT' domain... > > > [From other thread...] > > > If he has

I'm doing some test moving from a NT domain to ad AD domain, using debian jessie samba (4.2) and obviously the 'classicupgrade' procedure. In my setup i use(d) extensively some script to reset password to users. I was (ab)used to have 'smbpasswd' behave differently if executed by root, eg change the password without taking in consideration password policy and check password

On Fri, 23 Jun 2017 12:40:35 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > Better to fire up a bug in debian BTS? > > > Which version of samba did you upgrade to ? > > Where did it come from, a Debian repo or Louis's ? > > Louis's repo.

Mandi! Rowland Penny via samba In chel di` si favelave... > So, it sounds like you have a PDC for the domain 'DOMAIN' and an AD DC > for the domain 'DOMAIN' both using the same SID, I don't think this is > going to work. I suggest you turn the old PDC off. No no no! I'm not mad! ;-) There's the OLD PDC for the domain 'SVCORSI', and the new AD DC

Mandi! Rowland Penny via samba In chel di` si favelave... > samba-tool domain passwordsettings set --complexity=off Ahem, i've typed '--comploxity'... sorry... OK, option is available in samba-tool in 4.2, but does not seems to work: root at lupus:~# samba-tool domain passwordsettings set --complexity=off Password complexity deactivated! All changes applied successfully!

Mandi! L.P.H. van Belle via samba In chel di` si favelave... Sorry, forgot to say: > For any debian samba 4.1.x and debian samba 4.2.x upgrades to 4.5 and up I've seend that (on list archive, or in some debian bugs, i don't remember) but seems not relevant to me bacause i've had just do 'classic upgrade', eg i was just in AD mode when upgrade from 4.2 to 4.5. Because

Mandi! Rowland Penny via samba In chel di` si favelave... > > There's the OLD PDC for the domain 'SVCORSI', and the new AD DC for > > the domain 'LNFFVG', with different SID! They are different domains! > OK, but if the win7 machines were domain members of 'SVCORSI', then > they still might be trying to find it, best thing is to turn it off.

On Thu, 22 Jun 2017 12:23:15 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > > For any debian samba 4.1.x and debian samba 4.2.x upgrades to 4.5 > > > and up > > I've seend that (on list archive, or in some debian bugs, i don't > > remember) but seems not relevant to me bacause i've had just do > > 'classic

Mandi! Rowland Penny via samba In chel di` si favelave... [As you are supposing, i'm back... sorry to all...] > > > Hope this helps, but feel free to ask any questions. > > I try to summarize: > > a) as i supposed 'RFC2307 group membership' are totally ignored by > > samba, so i can use RFC2307 schema to associate UID to users and GID > > to

> -----Original Message----- > From: Matt [mailto:jackdachef@gmail.com] > Sent: Tuesday, February 15, 2011 5:12 PM > To: Minchan Kim > Cc: Dan Magenheimer; gregkh@suse.de; Chris Mason; linux- > kernel@vger.kernel.org; linux-mm@kvack.org; ngupta@vflare.org; linux- > btrfs@vger.kernel.org; Josef Bacik; Dan Rosenberg; Yan Zheng; > miaox@cn.fujitsu.com; Li Zefan > Subject:

Mandi! Rowland Penny via samba In chel di` si favelave... > How is the 'old' server now set up ? > Is it now an AD DC domain member ? No, it remain in the old state, simply we have a tool that keep in sync passwords, so access works to the old server because users and password matches. > It sounds like the machines are still looking for the old PDC. How do > the win7

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > This mean that the printer try to auth in LDAP 'plain' (no SSL, no > > TLS), and so samba refuse that? > No, it means that Samba is refusing to accept a NTLM or Kerberos > authenticated connection without SIGN or SEAL negotiated, as an > attacker could take over an unprotected network connection and do

Mandi! Rowland Penny via samba In chel di` si favelave... > No it isn't, you should definitely remove the 'idmap config' lines. OK, removed. Thanks. > You should only have the 'dsdb' line active in smb.conf when you need to > modify the schema, you should turn it off when not required. Ok. > > Clearly i've added 'logon *' options bacause i

> > For any debian samba 4.1.x and debian samba 4.2.x upgrades to 4.5 and up > I've seend that (on list archive, or in some debian bugs, i don't > remember) but seems not relevant to me bacause i've had just do > 'classic upgrade', eg i was just in AD mode when upgrade from 4.2 to > 4.5. Ok, my collegue reply. Simply and temporary commented out the:

Mandi! Rowland Penny via samba In chel di` si favelave... > > Better to fire up a bug in debian BTS? > Which version of samba did you upgrade to ? > Where did it come from, a Debian repo or Louis's ? Louis's repo. 2:4.5.8+dfsg-2~bpo8+1 . > Which package is the postinst script in ? 'winbind'. > If I can get this info, I will check just what the script is

Mandi! Rowland Penny via samba In chel di` si favelave... > > I'm again a bit confused... ;-((( > Yes I can see that ;-) ;-) Sorry for the late answer, but i was busy on other things... > Hope this helps, but feel free to ask any questions. I try to summarize: a) as i supposed 'RFC2307 group membership' are totally ignored by samba, so i can use RFC2307 schema to

Mandi! Andrew Bartlett via samba In chel di` si favelave... Ok, i coma back to an old thread, because vendor finally reply. Little fast-rewind: i own some Konica-Minolta BizHub multifunction printers/copiers, and i need to ''bind'' it to my new AD domain. But authentication does not work, seems bacause that printer try to use SASL over plain LDAP (no SSL nor TLS). After

On Wed, 21 Jun 2017 10:44:02 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > I'm doing some test moving from a NT domain to ad AD domain, using > debian jessie samba (4.2) and obviously the 'classicupgrade' > procedure. You will probably be better off using a later version of Samba, 4.2 is EOL as far as Samba is concerned. You can easily do this

Sorry, but I didn't really know how to word this. I have Univention Corporate server running as AD DC, with a UCS running as a member fileserver. One win10 client has file permission issues after lack of reboot or logout/login in roughly a weeks time. Symptom = can't write to shares even though permissions are correct. Sometimes files are created without honoring default ACL. Could this