similar to: samba-tool ntacl sysvolreset questions

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC after

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering

Hi, I would like to know which the best way to replicate Sysvol between my DC Samba 4 is with Rsync/Osync, as per the article below? https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround I have 3 Samba 4 DC. Regards, M?rcio Bacci

On Sun, 2 Oct 2016 11:45:15 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 02.10.2016 um 08:20 schrieb Trenta sis via samba: > > Hi, > > > > I have a samba 4.4.5 AD domain and is working perfect, but now I > > need to add a second samba 4 AD, I have found that in > >

Hi Guys, I have run into a very interesting problem using GPO's on our DC's. As you may (or may not) know, we have migrated to a pure Samba4 (Git stable branch checkout) AD network. I can't be happier. *Kudos to the Samba team* We are running to DC's, DC1 and DC2, both full fledged DC's, both running CentOS 6.9, fully up to date. For the sysvol partition I decided to run a

On 22 November 2017 at 17:45, Rowland Penny <rpenny at samba.org> wrote: > On Wed, 22 Nov 2017 16:01:17 +0200 > Ian Coetzee via samba <samba at lists.samba.org> wrote: > > > Hi Guys, > > > > I have run into a very interesting problem using GPO's on our DC's. > > > > As you may (or may not) know, we have migrated to a pure Samba4 (Git >

hi everyone installed and joined a second dc following the instructions at https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory both version are 4.8.2 when i try to reset t the Sysvol folder's file system access control lists on the new dc i get the following error sudo samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

Mandi! Rowland Penny via samba In chel di` si favelave... > The error you are getting is usually caused by adding GPOs to the first > DC and then NOT copying them to the second DC before running > 'sysvolreset'. The GPOs are also stored in AD, 'sysvolreset' reads AD > to find where the GPOs are supposed to be, but if it cannot find any, > it errors out.

piggybacking on the "Syncing Sysvol" thread ... I had thought that the conventional wisdom was that ntacl sysvolreset should be mostly avoided once relative stability achieved and additional GPO's created. https://wiki.samba.org/index.php/Sysvolreset Has this changed recently? Kris Lou klou at themusiclink.net

Hi Rowland I removed the winbind lines, and added the 'idmap_ldb:use rfc2307 = yes' line to the second DC, and rebooted the servers, but the error does not go away. First DC: [global] dns forwarder = 8.8.8.8 netbios name = TESTBOX realm = SAMDOM.TESTING.COM server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use

Hi, I am finally revisiting my sysvol share (GPOs haven't been working for me for quite some time) and trying to get permissions sorted properly on it. For many years, "samba-tool ntacl sysvolreset" has always failed for me with errors that I have been unable to solve. Previously I have used guidance from Louis and got things working, but my sysvol is currently in a broken state.

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

On Wed, 17 Jul 2019 at 17:58, Rowland penny via samba <samba at lists.samba.org> wrote: > > On 17/07/2019 17:43, Kris Lou via samba wrote: > > I had thought that the conventional wisdom was that ntacl sysvolreset > > should be mostly avoided once relative stability achieved and additional > > GPO's created. > > > >

Samba 4.4.2 I was doing some maintenance work and I noticed that sysvolcheck gave some error. I ran "samba-tool ntacl sysvolreset". Running sysvolcheck again still gives errors. I tried with several sysvol backups and the result is always the same. The affected policies are always "Default Domain Policy" and "Default Domain Controllers Policy". These policies

On 10/4/2016 11:22 AM, Rowland Penny via samba wrote: > See inline comments: > > On Tue, 4 Oct 2016 10:44:07 -0400 > Bob Thomas via samba <samba at lists.samba.org> wrote: > >> Hey Samba team - Thanks for all your work >> >> I have three production samba 4 DCs 2 running on Ubuntu 16.04 (Samba >> 4.4.5 and 4.4.4) and one on 14.04 (Samba 4.3.3) all

Hey Samba team - Thanks for all your work I have three production samba 4 DCs 2 running on Ubuntu 16.04 (Samba 4.4.5 and 4.4.4) and one on 14.04 (Samba 4.3.3) all working well for the most part. However to keep everything in sync I setup osync for syncing Sysvol. As recent conversations on the list indicate following the sync operation I lose access to sysvol until I run 'samba-tool

On 09/11/2016 01:23 AM, Rowland Penny via samba wrote: > On Sun, 11 Sep 2016 00:48:09 -0600 > "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: >> essentially do what I want? Basically clone the AD on another server. >> Then is it as easy as joining the new server to the domain and then >> demoting the old server? How do others do this task? >

Hi List! I am working my way through getting familiar with samba and I have two domain controllers now with an additional samba file server. The servers are CentOS 7.4.1708; the domain controllers are built from source with samba-4.7.1; and the file server, installed winbind, smb and nmb from CentOS repos. My problem is after bringing up the second domain controller and successfully joining it

> On Tue, 11 Sep 2018 01:16:16 +0100 > niya via samba <samba at lists.samba.org <https://lists.samba.org/mailman/listinfo/samba>> wrote: > > >/hi everyone />//>/installed and joined a second dc following the instructions at />/https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory > />/both version are 4.8.2 />/when i try

Hi, On Thu, 18 Jul 2019 at 14:27, Rowland penny via samba <samba at lists.samba.org> wrote: > > On 18/07/2019 14:11, Jonathan Hunter via samba wrote: > > For me, at least, "ntacl sysvolreset" is definitely broken and has > > been for the last few years. It's on my list of things I really need > > to fix as soon as possible, but I just haven't had