similar to: auth_audit log event for disabled user

Hello,     I would like to share some info on how I was able to successfully run an online backup after several failed attempts. I would constantly get the following error when attempting to run an online backup. ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.') Looking

Hello, When viewing the Security tab of a user object I find 2 username/groups that display their SID as opposed to their username with Account Unknown. I tried to use 'wbinfo -s' with the SID but it's unable to return a result. Using a well know SID works without issue. At one point this domain used 'idmap_ldb:use rfc2307 = yes' in the smb.conf file when it was

On Thu, 16 Nov 2023 13:14:56 -0500 James Atwell via samba <samba at lists.samba.org> wrote: > Hello, > > > > When viewing the Security tab of a user object I find 2 > username/groups that display their SID as opposed to their username > with Account Unknown. I tried to use 'wbinfo -s' with the SID but > it's unable to return a result. Using a well

On 5/16/2020 5:00 AM, Rowland penny via samba wrote: > On 15/05/2020 19:52, James Atwell via samba wrote: >> Hello, >> >> ??????? I upgraded two DC's to 4.12.2 from 4.11.6 before I noticed >> authentication issues with a couple Netgear ReadyNAS we have. For >> reference I have a total of 6 DC's with 4 running 4.11.6 and two now >> running 4.12.2.?

On 5/16/2020 9:55 AM, Rowland penny via samba wrote: > On 16/05/2020 14:40, James Atwell wrote: >> >> On 5/16/2020 5:00 AM, Rowland penny via samba wrote: >>> On 15/05/2020 19:52, James Atwell via samba wrote: >>>> Hello, >>>> >>>> ??????? I upgraded two DC's to 4.12.2 from 4.11.6 before I noticed >>>> authentication

Rowland, I decided to start over with a fresh install and attempted again. Only change I made was to start my mappings at 10000. I gave 'Domain Users' group gid 10000 and 'tuser' has uid 10001. Still didn't work btw. dn: CN=Test User,CN=Users,DC=domain,DC=local objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: Test User sn:

> -----Original Message----- > From: samba <samba-bounces at lists.samba.org> On Behalf Of Rowland > Penny via samba > Sent: Thursday, November 16, 2023 1:28 PM > To: samba at lists.samba.org > Cc: Rowland Penny <rpenny at samba.org> > Subject: Re: [Samba] Account Unknown: SID not resolvable > > On Thu, 16 Nov 2023 13:14:56 -0500 > James Atwell via samba

Hi Rowland, I forgot to tell you the results were from my Domain Controller and not the member server. Member server returned something to the effect of 'user not found'. I am only starting the 3 services(smbd,nmbd and windbindd) listed in the wiki. Should I be starting Samba with command line switches to start as a member server? Is that even possible? Thanks for you

Hello, Updated samba from 4.4.5 to 4.5.0. All DC's are Ubuntu 12.04.5 LTS. I install samba from source(./configure,make,make install). Looking at the release notes I see the section on "replPropertyMetaData Chnages". I run 'samba-tool dbcheck --cross-ncs --fix --yes' and see the errors and samba attempts to fix. ERROR: unsorted attributeID values in

We have to Samba DCs and a couple of Synology NAS connected/bound to the Samba AD. On regular basis the Synology NAS (I believe Samba 4.4.16) looses its connection to the AD outputting the error message, that the domain cannot be found. In the logs of the NAS I can only find the error message ?synowin: domain_test_join.c:59 net ads test join fail?. In the logs of the DC I notice that from one

Hi Rowland, If you don't mind I like to post my member server configuration as I attempt again. This is how my member server(Ubuntu 12.04) is configured after fresh install and prior to Samba build. Anything I'm missing that could cause my issue as I proceed? I assume no other prerequisites must be done on the other DC's either? Thanks. /*# From Wiki for DC build*/ apt-get

Rowland, I've gotten a bit further. It appears my use of '.local' is causing the issue from what I've researched. I ran '|/etc/init.d/avahi-daemon stop'. |This allowed me to successfully join the domain. Enter administrator at DOMAIN.LOCAL's password: Using short domain name -- DOMAIN Joined 'PFMEMBER1' to dns domain 'domain.local' DNS Update

Rowland, I had a typo in my hosts file which is the reason my initial DNS update failed. Corrected and joined again. Successfully joined and updated DNS A record. I then made sure to give 'Domain users' a id of 10000. I am now able to run' getent passwd' and see all my domain users! YES! However I still see something that confuses me. When I run 'id tuser' I get

Hello, Attempting to run samba-tool domain backup online --server=pfdc1.domain.local --targetdir=/backups/ -U administrator gives the following errors. Pre-loading the Samba 4 and AD schema Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs Partition[DC=domain,DC=local] objects[1716/1738] linked_values[0/839] ../lib/ldb/ldb_tdb/ldb_index.c:2352:

Rowland, I did forget to change it. Is it as simple as renaming now or did I screw up? On 1/2/2015 12:18 PM, Rowland Penny wrote: > On 02/01/15 17:07, James wrote: >> Rowland, >> >> I had a typo in my hosts file which is the reason my initial DNS >> update failed. Corrected and joined again. Successfully joined and >> updated DNS A record. I then made

Samba DC: # Global parameters [global] log level = 1 auth_audit:3 netbios name = KA-H9-DC01 realm = DS.EXAMPLE.COM server role = active directory domain controller workgroup = EXAMPLE dns forwarder = 10.0.1.100 10.0.1.110 ntlm auth = mschapv2-and-ntlmv2-only tls enabled = yes tls keyfile = tls/ka-h9-dc01.key tls certfile = tls/ka-h9-dc01.crt tls

Rowland, That did it! Thank you so much. I do have a question regarding the 'getent' command before setting up file shares. When I run 'getent group Domain\ Users' I get domain_users:x:10000:user1,user2,user3,user4,user5,user6,user7,user8 Why does it show these specific users? I would assume it would only show my 'tuser'. I don't have uid's set for anyone

Hi, Since samba 4.7 I have setup auth logging, and while I can relate most failed passwords to users mistyping a password, there is one kind that I don't understand, happening across our samba-DCs. Things work without issues, but I'm just being curious. :-) > [2017/11/23 04:47:32.166753, 2] ../auth/auth_log.c:760(log_authentication_event_human_readable) > Auth: [Kerberos

Sorry about that I typed and sent a full message, but it looks like the entire body got swallowed up in transit. Here is the full text again. Let's hope this one works. I have a server running CentOS 7.9 with the system provided Samba packages (4.10.16-24.el7_9). It is joined to an Active Directory domain and acting as a member server. The active Directory domain has a user object with among

Rowland, Thanks for the clarification. It appears the member server is joined and I have created a share. [demoshare] path = /srv/samba/test read only = no I have enabled ACL support and given 'SeDiskOperatorPrivilege' per the wiki. I can navigate to the share using Windows Explorer. If I set the share permissions to only me(Full Control). I can't access the share.