similar to: Problems with GPO

good to hear you made it all work :-) and thanx, its getting better not there yet, few more days the doc says.. some nasty virus did hit me.. takes time and rest...the rest, i dont mind ;-) Greetz Louis > Op 9 jul. 2017 om 11:23 heeft Stefan G. Weichinger via samba <samba at lists.samba.org> het volgende geschreven: > >> Am 2017-07-08 um 15:20 schrieb L.P.H. van Belle via

On 02/07/2018 05:01 AM, L.P.H. van Belle via samba wrote: > Hai, > > Ok, for the sysvol. > I'll put all steps here again. > > I suggest start with this one. > wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh > This checks and set the rights to be known to be right. ( aka works great for me ) ;-) > Thanks, but before I run that

to fix this, try the following remove the content in the sysvol folder (move it away) run samba-tool with sysvol reset copy the content back with now setfacl copy the acl recursive to the 'domain folder' in vol back. now on a windows open group policy editor klik on the gp objects. if needed , it say i needs some right fix. when this is done dont sysvol reset anymore. this is a

On 02/06/2018 03:24 PM, L.P.H. van Belle via samba wrote: > ok, > > do the following. > set ignore systemacl to yes on sysvol and netlogon. Added "acl_xattr:ignore system acls = yes" to both shares, restarted the server > > login as dom\administrator > computer manager, connect to dc. > share sysvol, goto share security, reset to defalts. > same for

hai Micha,   The why is explained here. https://wiki.samba.org/index.php/The_SYSTEM_Account  Which in the end has todo with SID_BOTH, one sid for a user and group, linux does not understand that correctly.   with : acl_xattr:ignore system acls = [yes|no] When set to yes, a best effort mapping from/to the POSIX ACL layer will not be done by this module. The default is no, which means that Samba

ok, do the following. set ignore systemacl to yes on sysvol and netlogon. login as dom\administrator computer manager, connect to dc. share sysvol, goto share security, reset to defalts. same for folder. goto gpo manager, klik on every gpo object, if one has wrong acl, you get a message to reset it, thats ok. now never samba-tool sysvol reset if you do, you might need to set share/file

Hai, Ok, for the sysvol. I'll put all steps here again. I suggest start with this one. wget https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh This checks and set the rights to be known to be right. ( aka works great for me ) ;-) Then follow these steps. - login as dom\administrator. - start computer manager, connect to dc. - klik Shared Folders, Shares,

a quick read and one thing, the dc4, after the upgrade to 4.7, did you reindex the ad database? if im correct, samba-tool dbcheck — reindex i did read that from a list somewere, a responce of andrew. greetz Louis (mobile) Op 23 okt. 2017 om 20:47 heeft mj via samba <samba at lists.samba.org> het volgende geschreven: Hi, Back in the samba 4.1 days, we experienced a samba database

Am 30.06.2016 um 12:00 schrieb mathias dufresne: > Sorry to ask that but this thread is quite long and that makes > understanding difficult, at least to me. What is the status of all that? I > believe at one moment it was writtent using winbindd is solution, that with > winbindd instead of winbind we don't need to synchronize idmap.ldb to get > GPOs working well even with

On 29/06/16 16:01, Achim Gottinger wrote: > Did you have an chance to look at your method for replication yet > Rowland? > > Am 27.06.2016 um 14:44 schrieb Rowland penny: >>> Thank you for the test. Do you run samba-tool ntacl sysvolreset >>> after rsync on dc2? >> >> This may be where the problems come in, let me look into this and >> report back

now, im on a phone and no browser, so limit help. first thing i see.   CN=Bj”rn <User>,CN=Users,DC=rootrudi,DC=de Bj”rn ?  is your system set to utf8? i dont know, but this does not look right. i see, wifi? yes, try utp. langsame Verbindung:500 kbps and do try the ignore systemacl.  that solves the user/group “nt authority\system” problems the easy way. greetz Louis Op 6 feb. 2018

that was a stupid answer, sorry, i did read it correctly. post your smb.conf (sanitized) so we can have a look what we are talking about. > Op 7 jan. 2016 om 20:56 heeft L.P.H. van Belle <belle at bazuin.nl> het volgende geschreven: > > try with an unc path and not a drive letter. > if you get the admin auth you loose the drive letter. > > greetz, > louis >

Hi, Op 5-okt-06, om 16:05 heeft Ryan Brown het volgende geschreven: > I don't know if that's valid but what about something like this: > int va_double_sum(int count,...){ > /*declare va_list for each original va_start*/ > /*llvm.va_start for each va_list*/ > /*call extracted_sum(count,va_list1, va_list2, ...)*/ > } That should work, I think, ... Op 5-okt-06, om

Currently away from my desk. Will post smb.conf as soon as I get to ssh terminal. Thanks for your help. On Jan 7, 2016 3:05 PM, "L.P.H. van Belle" <belle at bazuin.nl> wrote: > that was a stupid answer, sorry, i did read it correctly. > > post your smb.conf (sanitized) so we can have a look what we are talking > about. > > > > Op 7 jan. 2016 om 20:56 heeft

Hi Rowland I removed the winbind lines, and added the 'idmap_ldb:use rfc2307 = yes' line to the second DC, and rebooted the servers, but the error does not go away. First DC: [global] dns forwarder = 8.8.8.8 netbios name = TESTBOX realm = SAMDOM.TESTING.COM server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use

hi Rowland I got these of my 2008R2 server. i'll check your output against mine tomorrow. greetz, Louis > Op 20 mrt. 2017 om 17:26 heeft Rowland Penny <rpenny at samba.org> het volgende geschreven: > > On Mon, 20 Mar 2017 16:36:34 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > >> Im questioning this because of the

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Hi, Op 20-aug-06, om 21:18 heeft Reid Spencer het volgende geschreven: > I looked over your patch and it looks good. I applied a patch based on > yours. The llvm-ld tool now uses the PluginLoader just like the opt > tool. It will also run some cleanup passes after the loaded plugins > run > to ensure cruft is removed. OK, thanks. Your patch seems to work, although I also get

Do you have a verify option in your loaded module? Reid. On Sun, 2006-08-20 at 22:04 +0200, Bram Adams wrote: > Hi, > > Op 20-aug-06, om 21:18 heeft Reid Spencer het volgende geschreven: > > > I looked over your patch and it looks good. I applied a patch based on > > yours. The llvm-ld tool now uses the PluginLoader just like the opt > > tool. It will also run

Hi, First of all thanks for you answer, it seems that this can help, now some change made to gpo are applied and we are not receiving error in event viewer, but seem that some change are not applied, why and where I can find some information, in samba log anv event viewer any error is reported Also I have tried # samba-tool ntacl sysvolreset After this tried # samba-tool ntacl sysvolcheck