similar to: Issue with LDAPS & Winbind

Hi Elias, > I thought it worked, but after I uninstalled the software that I deployed > via user scope, it did not reinstall. I selected the "Redeploy application" > option, but it also did not work. The user scope GPO are run with the privileges and access tokens of the logged on user, so the user have local admin rights for install and need access rights to the share you

Nope, but that was not the problem... root at samba01:~# dpkg -l | grep python-dns root at samba01:~# apt-get install python-dns Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: python-dns 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 28.7 kB of archives. After this operation, 135

Hi Denis Thanks for your response without your crystal ball. I have increased the log level =9 dns:0 on both the servers. It replicates successfully by manually running the command samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync but it is still failing when I check from the samba-tool drs showrepl Also I run samba-tool dbcheck --cross-ncs --fix on both the servers

Hi Denis & Rowland Thanks for the suggestion to trim the smb.conf after which the DC-1 is connecting to the Windows Server 2008 shared folder smbclient -k //IUMSVRAPP01/Pastel12 -d 9 and DC-2 is also connecting after using the DNS name of the Windows server. *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good for larger site (looking at your DNS domain name, I guess

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of

Good morning people from Argentine. again bothering with a doubt, It is posiblle, audit change password, create-delete-change users? and more? i have a file server with audit and works really really well and now I want more! any ideas? thanks for samba....i love it

Hi Denis, We are using the latest version of sharepoint. samba-tool domain level show : Domain and forest function level for domain 'DC=removed,DC=com' Forest function level: (Windows) 2008 R2 Domain function level: (Windows) 2008 R2 Lowest function level of a DC: (Windows) 2008 R2 I did not have to change the revision attributes by hand. I think the MSAD2K3 was an upgrade from MSAD2K.

Hi Denis. Since we have "tricky" people working on the Linux machines we prefer NFS because it's less hassle to mount and requires no credentials. Basically because of the users we tend to choose the easiest possible way for them to access the needed resources. I guess pam-script module mounting is exactly for this purpose, but I'll to research more since I'm not familiar

Hello @all, i have three samba dc's each running with Version 4.7 on raspbian strech On one oft hem i have now this problem and i don't know why? I'm not sure what caused the problem. because it worked before. root at samba01:~# /usr/sbin/samba_dnsupdate --help Traceback (most recent call last): File "/usr/sbin/samba_dnsupdate", line 52, in <module>

Hi I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4 AD 4.7.2 The Inbound replication on the Server-1 is failing with the error below: DC=iumnet,DC=edu,DC=na Default-First-Site-Name\Server-2 via RPC DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311 Last attempt @ Tue Jan 9 12:55:59 2018 WAST failed, result 58

Hi Denis Thanks for your advise I will not use these wordings here. Please check the result below when I run the command on the DC-1 when DC-2 is off or on smbclient -k //IUMSVRAPP01/Pastel12 -d 9 INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9 quota: 9

Hai, In a bit testing with software deployment through GPO. ? Now i noticed te following. If i setup my software source somewhere on the sysvol share ( and probely any other share on the DC) then i can deploy the software with computer and user GPO setting. Aka works ok good all settings with software deployment. ? Now i noticed the following. I did setup a share on a member server the AD

Hello Denis, I checked all the attributes and objectclass defined in /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt and /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Classes.txt exists in my samba 4 ldap. Nothing is missing. Can you give me some inputs to "recreate a Samba 4.7 domain with same SID by piping in all the objects" ?

Hi everyone, I would like to have some input on ressources access from a workstation logged on a RODC server that has to connect on hub site servers. After login in the remote windows workstation, I have LOGONSERVER environment variable set to the local RODC server (workstation and user credentials have been preloaded). Everything works fine on local server. However if I want to connect to

Hi Maxence, > Fyi, i've updated to 4.7.1, the dbcheck still not fix the broken links, > is the fix you talk about planned for a future release ? > > Our customer reported me, some users have issues when their logon server > is DC1 but not when it's DC2. > > On DC1 some users have access to all shares, some doesn't have any > access at all. actually this last

Hi I am trying to remove a dead offline domain using the below command which is failing samba-tool domain demote --remove-other-dead-server=IUMONG-RODC -UAdministrator ERROR: Demote failed: DemoteException: IUMONG-RODC is not an AD DC in iumnet.edu.na A transaction is still active in ldb context [0x2bf15b0] on tdb:///var/lib/samba/private/sam.ldb IUMONG-RODC domain is still visible under domain

Dear Samba users and admins, I am trying to deploy Samba4 as a domain controller and a file server and having some issues.* The domain have been well provisioned with option --use-rfc2307 I am then trying to create share by following this samba wiki https://wiki.samba.org/index.php/Shares_with_Windows_ACLs The problem is that i cannot succeed to change the group owner of the folder I want to

Hola Sandy, (mail rethreaded, please don't hijack threads) > Samba4 recently updated to version 4.2.2, but I have noticed that > since a policy which is to put a wallpaper on each machine is not > being implemented in windows 7 after upgrade ... somebody can helpme. Could you check the ACLs on the Sysvol share? samba-tool ntacl sysvolcheck samba-tool ntacl sysvolreset Cheers,

On 04/19/2016 3:49 PM, Helmut Hullen wrote: > Hallo, Dale, > > Du meintest am 19.04.16: > >>>>> As for smb.conf options: similar on the DCs and the smbserver, >>>>> with: >>>>> >>>>> server signing = mandatory >>>>> ntlm auth = yes >>>>> server min protocol = SMB2 >>>>> client max

Hi, Wondering if anyone can help with a weird issue I'm having - Just set up a new server (RHEL 7.4) and have migrated my samba configuration from my old server (Fedora 25), I'm experiencing an issue where by if my the name of my workgroup a domain i.e. it has a period in it, then none of my Linux clients can detect the broadcast and smbtree on both client and server is completely empty.