similar to: A lot of zombie processes on Debian 9

Can you try with this systemd unit file. Restarting does not close all prosesses with that one. ( you need : ExecReload=/bin/kill -HUP $MAINPID ) Jessie used probely sysv and not systemd, which should explain why there are so many zombies. [Unit] Description=Samba AD Daemon Documentation=man:samba(8) man:samba(7) man:smb.conf(5) After=network.target [Service] Type=notify NotifyAccess=all

Hello, I'm trying to replace a Windows Server 2003 DC that has problems, with a Samba 4 domain with HA. The linux client server seems to works fine even when main DC/DNS server fails, but as always, Windows clients not... They are able to log in (maybe using cached credentials), but the GPO are not being applied... I've checked the sysvol folder and both are syncsynchronized and

Hello, I'm using a Samba 4 as domain server and I've a lot of Windows computers that mounts shared drives on another server through GPO applied by user groups. Is there any way to do something similar on a Linux box, or I've to use a local script? Thanks! -- _________________________________________ Daniel Carrasco Marín Ingeniería para la Innovación i2TIC, S.L.

Hello, Some of my users have complained about that some of her shared drives are not there. After research on one of the computers I've noticed that all drives are mounted correctly by GPO (you can use that drives from cmd and are showed on "net use" command), but when you use the Windows Explorer some of that drives are not showed (and are no accesible even setting manually the

Hello, I've a computer that has XP for compatibility purposes and is outside the domain. I'm trying to mount some shares that are on a Member Server with Samba 4.5 but always get an error saying that password is wrong. All other computers can enter to shares without problem and I'm sure that the password is OK because I can login on Windows 7 computer and even I've mounted a share

Mandi! Rowland Penny via samba In chel di` si favelave... > Is this on a DC ? No, is a DM. > If it isn't, Try setting it up exactly like it is shown on the > wikipage, note that you only need the 'vfs objects' line if it isn't > set in [global] Wikipage say only: Create a new share. For details, see Setting up a Share Using Windows ACLs. and

Thanks Rowland. I'll give a try to both things (WG and SPN). To be honest, I ask here because the sssd daemon is working as expected allowing the authentication of the machine to the domain, and the real problem is that I'm not able to access to a shared drive using a Kerberos authentication (cifs and smbclient) and i've thought that maybe was a misconfiguration on member server

Thanks Rowland. Yes, I use ACONFI as Workgroup but I always try to hide my domain name on lists (today i've failed :P) Thanks for your recomendations. I'll change it, and I'll disable the acl_xattr because I use the linux tools to manage the permissions (setfacl). Greetings!! 2017-10-30 12:44 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>: > On Mon, 30 Oct

i've seen that is similar to your latest test. What about a gpresult -h result.html. The GPo is appplied to the user? Greetings!! 2017-11-30 13:29 GMT+01:00 Daniel Carrasco <d.carrasco at i2tic.com>: > I don't know if is relevant and maybe is the same as GPO that you've > created, but Ive a profiles folder with this configuration: > > [profiles] > path

Hello, thanks for your response. I'm using samba_internal as DNS because I don't want to add bind to only relay the internal DNS. The hosts file is clean on srv2 DC (default localhost), and this is the srv1 hosts: 192.168.0.251 srv1.domain.com srv1 resolv.conf srv1: domain domain search domain.com nameserver 192.168.0.251 nameserver 8.8.8.8 resolv.conf srv2: nameserver

Hai, Did you check the systemd units? ( not left overs from other versions? ) Is this a member of ADDC ? ) process shows [samba] so im asumming a member server. And what parameters are used, did you add --with-systemd ? and on debian DONT use : --with-system-mitkrb5 Debian used Heimdal kerberos ( centos/RH MIT ). Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba

Hello, I'm trying to replace an old Windows Server 2003 with Samba 4 and I've got a problem trying to add some DNS entries. When I open the RSAT DNS manager I got an Access Denied error and I can't edit the zones. My config file is the generated by samba-tool and I'm using Samba 4.7.0rc5 compiled on a Debian 8 amd64: [global] netbios name = DC1 realm = DOMAIN.DOM

Hello, I've a member server that is working fine as shared folder server (all shares works and it permissions). My problem is that when I add the nsswitch winbind entries then the server uses the DC to authenticate even when I use ssh, so if Samba DC server fails I have problems to login into the member server. My nsswitch: passwd: compat winbind group: compat winbind

Hai, I did a re-read of you thread. First. If you use smblcient, with a samba installed, use -s /path/alternative/smbclient.conf If i did read it correct. Your connecting from xUbuntu (samba version ??) to (debian8) samba 4.2 member How did you join the xUbuntu? https://docs.pagure.org/SSSD.sssd/users/ad_provider.html Like this setup? ^^^ > This setup is working as expected (some

Thanks L.P.H and Rowland, I've just tested the L.P.H solution and after reboot I'm able to authenticate with the member server without problem. Is slow listing folders with much objects but works (maybe happened always). Here's my smb.conf: [global] workgroup = DOMAIN security = ADS realm = DOMAIN.COM server role = member server dedicated keytab file = /etc/krb5.keytab kerberos

I think MJ is using samba with AD backend and Rowland RID. Rowland, try AD backend if your using rid atm. Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mj via samba > Verzonden: woensdag 11 oktober 2017 13:25 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Using GPO to mount shares on Linux > > >

Hello, El 20 oct. 2017 4:50 p. m., "Rowland Penny via samba" <samba at lists.samba.org> escribió: On Fri, 20 Oct 2017 14:57:42 +0200 Daniel Carrasco via samba <samba at lists.samba.org> wrote: > Hello, > > Sorry for take so long to answer, but I was not able to do the tests > because the computer is in use and out of my office. > > Finally I've

Hai,   now realmd sssd and autofs are all not my cookies.. but..   i see 2 things. 1) you missing the CIFS spn. here is shows how to make them and extract them. https://wiki.samba.org/index.php/Generating_Keytabs  https://wiki.samba.org/index.php/Keytab_Extraction      2) for the smblcient try :  smbclient //server.domain.dom/escaner -U user -W DOMAIN.DOM -R host -k -d 3 -m SMB2 ....added

Hello, The GPO must be linked to the computers OU also, then the computer part will be applied too. Greetings!! 2017-11-30 14:54 GMT+01:00 Marco Gaiarin via samba <samba at lists.samba.org>: > Mandi! Daniel Carrasco via samba > In chel di` si favelave... > > > What about a gpresult -h result.html. The GPo is appplied to the user? > > Mmmhhhh... seems me no. Clearly

Thanks Rowland. 2017-09-27 17:49 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 27 Sep 2017 17:05:31 +0200 > Daniel Carrasco via samba <samba at lists.samba.org> wrote: > > > Hello, thanks for your response. > > > > I'm using samba_internal as DNS because I don't want to add bind to > > only relay the internal DNS.