similar to: Convert Member Server to DC

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

On 12/30/2017 05:22 PM, Paul R. Ganci via samba wrote: > 1.) net ads leave -U administrator > 2.) Remove the machine entry on the 1st DC (used ldbedit) > 3.) mv /var/lib/samba /var/lib/samba-client > 4.) mv /etc/krb5.keytab /etc/krb5.keytab-client > 5.) samba-tool domain join 2nd DC I tried this procedure and it just doesn't want to work. I have this error: >samba-tool

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

other errors that I have when I try to join BDC with samba 4 is the follow Try the mounting the filesystem with the 'acl' option.") Deleted CN=DANTES,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=eccmg,DC=cupet,DC=cu ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: Your filesystem or build does not

Hi All, I run a small domain for my home that consists just of two user accounts... one for my wife and one for me. I just have a single DC and the home and profile shares are located on the DC. For years this setup has served just fine giving me access to both linux and windows with a unified authentication and file server base. However, on Monday around 12 noon MST my wife lost permissions

Hi Everybody, I'm stumped. I'm pretty sure I've tried everything to get this to work. I'm trying to join my CentOS 6 server to my Server 2008 AD Domain. I'm using SerNet's samba4 packages: [root at files ~]# samba -V Version 4.1.4-SerNet-RedHat-7.el6 I've done the xattr and acl tests and they all come out just fine. So I don't think it has to do with ACLs

I would like to move a Samba AD from one server to another. I am finding the documentation on the web somewhat lacking. Can somebody point me to documentation that might help step me through an acceptable migration path? Will the command > samba-tool drs clone-dc-database <dnsdomain> --server=SERVER -targetdir=TARGETDIR essentially do what I want? Basically clone the AD on another

On 03/01/2018 01:02 AM, Rowland Penny wrote: > Is this a PDC (NT4-style domain) or an AD DC ? > Either way, I have never heard of anything like this happening before, > perhaps it might help if you post your smb.conf. Hi Rowland, Whatever is occurring has happened again today. I had to "chown -R" my wife's home/Profile directories and files. Very strange and makes me

Hello, i try to upgrade a NT4-PDC to AD. OS: Debian 10.1 Samba: 4.9.5-Debian read https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade) scp -r /var/lib/samba/private/ /var/lib/samba/samba3tdb/ scp /etc/samba/smb.conf /var/lib/samba/samba3tdb/ samba-tool domain classicupgrade --dbdir=/var/lib/samba/samba3tdb/ --realm=samdom.example.com

On 04/05/2018 08:29 PM, Paul R. Ganci via samba wrote: > Back on February 28, 2018, I started a thread "User permissions of > profile/home directory lost" describing a problem occurring with my > wife's user account. Since that time the random problem has persisted > so I turned on some debugging. I have been able to determine that > somehow her account idmap is

which samba version, because i've een reports the 4.8 fails and 4.7 fails but 4.6 should work, and i dont know about 4.9.2 Can you show your /etc/hosts file and /etc/resolv.conf and /etc/krb5.conf You used : samba-tool domain join mydomain.com DC -U"MYDOMAIN\administrator" --dns-backend=SAMBA_INTERNAL --option="interfaces=ens2f0" not wrong, but can you try. kinit

I have a system with two CentOS 7.1 guests. When I created the VMs I did not have enough storage space in the default location /var/lib/libvirt/images so I moved the default location to a directory /home/vmimages. While this configuration is functional I regret creating a new storage pool in /home. I would like to create a separate partition to place the VM images removing them from their

I have something very strange that occurred. After updating the kernel on my host CentOS 7 Dell 2950iii I have found that one of my CentOS 7 guest VMs will no longer boot... it just stops at the grub prompt (a second VM functions just fine). I have no idea why this problem occurred and have been unable to fix it. On google I have found several suggestions as to how to repair grub but so far

> > Some more information. RSAT on the windows 10 client shows all the > proper UNIX attributes. The uidNumber is the correct 3001108. So I > removed the idmap.ldb entry for my wife's sid and restarted the AD. > The new idmap entry was created and I noticed that getent returned the > xidNumber from the new entry. It appears that the AD is ignoring the > UNIX

Make a note: it is better to disable 'check password script' in the DC(s) before trying to join a new DC. ;( root at vdcpp1:~# samba-tool domain join ad.my.dom DC -U"MYDOM\administrator" --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'ad.my.dom' Found DC vdcsv1.ad.my.dom Password for [MYDOM\administrator]: workgroup is MYDOM realm is ad.my.dom Adding

On 09/11/2016 01:23 AM, Rowland Penny via samba wrote: > On Sun, 11 Sep 2016 00:48:09 -0600 > "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: >> essentially do what I want? Basically clone the AD on another server. >> Then is it as easy as joining the new server to the domain and then >> demoting the old server? How do others do this task? >

On 10/30/2016 12:26 PM, Paul R. Ganci wrote: > <snip>I am thinking of putting the CentOS iso out and then booting the > VM into it just to poke around the file system. Otherwise my other > option is to just clone a twin VM on another server and then just > change the networking IPs/hostname. Anybody have any other ideas as to > how to debug this problem? So I booted off

Hi All, A while ago I replaced a Samba AD on old hardware with a another AD on newer hardware. Everything went smoothly including the demotion of the old AD. However after I did some cleanup DNS records and turned off the old hardware I noticed that there still was a NS record associated with the old AD. So I went to the wiki page https://wiki.samba.org/index.php/DNS_Administration and

On 12/22/19 12:07 PM, Rowland penny via samba wrote: >> >> Are there any suggestions to to fix the problem? >> > Cached record somewhere ? > > You seem to have done everything correctly. > Okay I discovered that any changes to my DNS are not being seeing by bind.? So exploring the Wiki

Hello list, after somes days I have this error when I run git pull in samba4 error: Unable to find 3b6a88a1a49fdc23cd956c6583e9ec56e541eeae under http://gitweb.samba.org/samba.git Cannot obtain needed blob 3b6a88a1a49fdc23cd956c6583e9ec56e541eeae while processing commit 1a596076697624545f415eb558c4647267cfe46c. error: Fetch failed. root at jupiter:/home/run# error: Unable to find