similar to: ERROR: missing backlink attribute 'memberOf'

On Wed, 2017-12-06 at 10:16 -0500, Bob Thomas via samba wrote: > Good Morning (or not), > > I am running three Samba AD DCs all at version 4.7.2 on Ubuntu 16.04.  > All three have run flawlessly for over a year. > Last night one of the DCs started failing Replication with both the > other DCs so I decided to run samba-tool dbcheck . > Resulting in several: > > ERROR:

Hello last week we updated three domain controllers (Sernet Samba) from 4.2 to 4.7, typical upgrade path (4.3->4.4->4.5->4.6->4.7), everything was ok. The next day we got a mail from the Sernet team informing they fixed a bug affecting the group memberships. https://bugzilla.samba.org/show_bug.cgi?id=13095 We've applied the update and few days after the update which should

On Mon, Jan 22, 2018 at 05:24:44PM +0100, Achim Gottinger via samba wrote: > Am 22.01.2018 um 10:49 schrieb Stefan Metzmacher via samba: > > Also DO NOT repair the following errors with samba-tool dbcheck! > > "Remove duplicate links in attribute" > > and > > "ERROR: orphaned backlink" > > as this removes the ability to repair the database >

Sorry for the delayed response, Louis, I'm not sure how to tell about having "cifs/UPN" - Please advise. I was able to mount with sec=krb5 after the user is logged in but that does not help getting "home" mounted during the login. But here is where I am now: I have been able to pam_mount "home" during the login but could not get the ACLs during the mount

Hi all, I have an old dc (4.0.9). Let's call it dc1. I also have a new one (4.5.16) which I'm planning to switch to. Let's call it dc2. After initial set up of dc2 I initialised replication and things looked ok for a couple of weeks. Recently I've managed to mess it up. Possibly by editing users and DNS records. Or copying Kerberos cache and trying to use it elsewhere for

Hello everyone, I'm having a problem with the replication of the Active Directory from a Windows Server 2003 r2 DC to a Samba 4.1.6 (Ubuntu 14.04) DC. The problem we have is that the *memberOf* attribute is missing on two users in the Samba ldap database after adding them to a group on the Windows DC. I can't easily add these through a Ldap administration tool and can't add them to

On Thu, 2017-11-02 at 15:56 +0100, Denis Cardon via samba wrote: > Hi Samba team and Maxence, > > > last week we updated three domain controllers (Sernet Samba) from 4.2 to > > 4.7, typical upgrade path (4.3->4.4->4.5->4.6->4.7), everything was ok. > > > > The next day we got a mail from the Sernet team informing they fixed a > > bug affecting the

On Mon, 2017-10-16 at 13:07 +0000, Andrej Gessel via samba wrote: > Hello list, > > maybe I saw the same error with backlinks. I try to use Samba 4.7.0 as rodc and perform join with "domain-critical-only"-option. Smb.conf is generated by samba. After starting joined samba I got error like this: Does it change if you don't use that option? > Failed to apply records:

Hello list, somebody can helpe, my problem is when I run this command ./samba-tool dbcheck Checking 6205 objects ERROR: missing backlink attribute 'memberOf' in CN=Sandy,OU=Administrador de Red,OU=Comercializadora,OU=CUPET,DC=eccmg,DC=cupet,DC=cu for link member in CN=SHARE\0ADEL:ddacaf41-c14f-4e7c-8606-704eec753a4f,CN=Deleted Objects,DC=eccmg,DC=cupet,DC=cu Not fixing missing backlink

On Mon, 2 Oct 2017 09:59:47 +1300 Garming Sam via samba <samba at lists.samba.org> wrote: > Can you provide a bit more logs? At first glance, it doesn't seem > quite related to group memberships. > > > Cheers, > > Garming > > On 29/09/17 22:07, gizmo via samba wrote: > > Hallo, > > we have 5 ADDCs. All of them did run with sernet-samba 4.6.7.

Rowland, How would I find this info? Check if 'Rachel Jones' has a 'gecos' attribute in AD. You seem to be being denied access to '.Xauthority', was it created on another machine ? No However, I am sure '-13' usually means incorrect password. I am sure the password is correct, the /mnt/home/rachel folder is created but the user files are not created because

Hello, I've been trying to get Ubuntu 18.04 to work with Samba AD, seems I am almost there but am unable to get home directories to mount properly.  The domain join went without a problem but because the default cifs ver changed in Ubuntu to get other Samba shares on a samba file server to mount I had to add to it's smb.conf: client min protocol = SMB2 client min protocol = SMB3 So

Hallo, we have 5 ADDCs. All of them did run with sernet-samba 4.6.7. I updated 4 of them to sernet-samba 4.7.0, one after the other, checked replication, everything seemed to be ok. One day later a colleague wanted to delete a lot of users with a powershell-script and since then the replication doesnt work anymore. (Im sure the script is not the problem, but it seemes like it triggered something)

Hi samba team ! I have found a very strange bug when changing my user's primaryGroupID with ldif files. The bug is very easy to reproduce : 1) Create a user, create a group, add the user to the group ------------------------------- ~# samba-tool user add stduser User 'stduser' created successfully ~# samba-tool group add stdgroup Added group stdgroup ~# samba-tool group addmembers

I tried to join a samba4 to a win2008r2 level domain (OS level 2012) running exchange 2010. The join succeeds but the later replication is broken due to schema differences. In order to to find the cause, I started a test setup with: * a win2008r2 DC w/ minimal AD * upgraded the schema and the OS to 2012 (function level is still 2008r2) * and added a exchange server to the domain. And that is

On Mon, 2017-10-02 at 09:59 +1300, Garming Sam via samba wrote: > Can you provide a bit more logs? At first glance, it doesn't seem quite > related to group memberships. > I agree, we need more logs here. Turn up the log level and see what the error causing that final error is.   However, take care not to publish confidential details like staff names and sensitive attributes like

Hi, here're patches to avoid a database corruption with linked attributes, e.g. member/memberOf. See https://bugzilla.samba.org/show_bug.cgi?id=13228 As a temporary solution admins can add "server services = -kcc" to the global section of smb.conf. Also DO NOT repair the following errors with samba-tool dbcheck! "Remove duplicate links in attribute" and "ERROR:

On 1/13/2017 4:58 PM, Rowland Penny via samba wrote: > On Fri, 13 Jan 2017 16:43:39 -0500 > Bob Thomas via samba <samba at lists.samba.org> wrote: > >> On 1/13/2017 3:30 PM, Rowland Penny wrote: >> >>> On Fri, 13 Jan 2017 15:20:52 -0500 >>> Bob Thomas <bthomas at cybernetics.com> wrote: >>> >>>> On 1/13/2017 1:45 PM, Rowland

[2017/09/28 03:46:51.256663, 1] ../source4/dsdb/kcc/kcc_topology.c:2730(kcctpl_get_spanning_tree_edges) ../source4/dsdb/kcc/kcc_topology.c:2730: failed to run Kruskal's algorithm: NT_STATUS_INVALID_PARAMETER [2017/09/28 03:46:51.256953, 1] ../source4/dsdb/kcc/kcc_topology.c:3283(kcctpl_create_connections) ../source4/dsdb/kcc/kcc_topology.c:3283: failed get spanning tree edges:

My samba4.11 server will only replicate one way: windows -> samba. Replication from samba -> windows fails. Details follow. I have a Samba 4.11 domain controller (fs1) that was added to an existing domain that had a Windows Server 2003R2 domain controller (fs) and Windows Small Business Server 2011 (sbs). fs1 is running on Debian 7.6 My issues seems similar to