similar to: Changing expired Samba AD password during Windows login

On win8.1 & srv2012r2 it is "The password for this account has expired" On 01/17/2018 10:44 PM, Luke Barone wrote: > (Remember to reply all) > > What error message, *specifically*, comes up when the user with the > expired password attempts to change it? > > On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > > To

I'm running a Samba AD 4.7.4 and cannot set a new password for a user with an expired password during login from a Windows PC. Changing a password from inside a login with cntl-alt-del "change password" works ok. I've already decreased the minimum password age to 0 samba-tool domain passwordsettings show Password complexity: on Store plaintext passwords: off Password history

On 1/18/2018 9:22 AM, Ken McDonald via samba wrote: > > Hi, thanks for your help. Your suggestion makes sense, however I think there should be some way for users to be able to change an expired password from login dialogue. > Actually I had a problem doing this previously with NT4 style Samba domain and never looked into a resolution. > Now that I've found Samba does AD style

(Remember to reply all) What error message, *specifically*, comes up when the user with the expired password attempts to change it? On Jan 17, 2018 7:36 PM, "Ken McDonald" <ken at generation.tech> wrote: > To test, I use a desktop OS (win8.1) with rsat installed to create a new > user with ADUC and set the "user must change password at next logon" OR for > an

Hello I have a Samba 4.6.7 server installed with the sernet package on Ubuntu 12.04 precise which I like to upgrade to 4.7 and also I want to do a release upgrade for Ubuntu from 12.04 to 14.04. Before I continue I like know if I should first do a release upgrade for Ubuntu or do I have to upgrade Samba to 4.7 first and then run the release upgrade. Thanks n Regards *Harsh Kukreja *Systems

Hi I am trying to remove a dead offline domain using the below command which is failing samba-tool domain demote --remove-other-dead-server=IUMONG-RODC -UAdministrator ERROR: Demote failed: DemoteException: IUMONG-RODC is not an AD DC in iumnet.edu.na A transaction is still active in ldb context [0x2bf15b0] on tdb:///var/lib/samba/private/sam.ldb IUMONG-RODC domain is still visible under domain

Hi Denis Thanks for your response without your crystal ball. I have increased the log level =9 dns:0 on both the servers. It replicates successfully by manually running the command samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync but it is still failing when I check from the samba-tool drs showrepl Also I run samba-tool dbcheck --cross-ncs --fix on both the servers

On Wed, 4 Oct 2017 09:08:30 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 10/4/2017 3:59 AM, Harsh Kukreja via samba wrote: > > Hello > > > > I have a Samba 4.6.7 server installed with the sernet package on > > Ubuntu 12.04 precise which I like to upgrade to 4.7 and also I want > > to do a release upgrade for Ubuntu from 12.04 to 14.04.

Hi Rowland The samba-tool command is not working please see the error below: root at iumdcdp01:/home/administrator# samba-tool ERROR(<type 'exceptions.ValueError'>): uncaught exception - bad marshal data (unknown type code) File "/usr/bin/samba-tool", line 46, in <module> retval = cmd._run("samba-tool", subcommand, *args) File

Hi I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4 AD 4.7.2 The Inbound replication on the Server-1 is failing with the error below: DC=iumnet,DC=edu,DC=na Default-First-Site-Name\Server-2 via RPC DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311 Last attempt @ Tue Jan 9 12:55:59 2018 WAST failed, result 58

Hi Denis & Rowland Thanks for the suggestion to trim the smb.conf after which the DC-1 is connecting to the Windows Server 2008 shared folder smbclient -k //IUMSVRAPP01/Pastel12 -d 9 and DC-2 is also connecting after using the DNS name of the Windows server. *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good for larger site (looking at your DNS domain name, I guess

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Hi I have two Samba 4 DC’s as below server-1 with all FSMO roles running Samba 4.6.12 on Ubuntu 12.04 server-2 joined to server-1 as a DC running Samba 4.7.4 Ubuntu 16.04 The problem is when I share files from my Windows 2008 file sharing server which shows it is logged on to Server-2 DC and the client PC which logs on to the server-1 DC cannot access the shared folder and gives an error Logon

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of

Hi Denis Thanks for your advise I will not use these wordings here. Please check the result below when I run the command on the DC-1 when DC-2 is off or on smbclient -k //IUMSVRAPP01/Pastel12 -d 9 INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9 quota: 9

The upgrade shouldn't have touched the Samba database, just the binaries etc, so check the smb.conf file and recreate it if you cannot find it, or if it is incorrect. The smb.conf still exists [global] workgroup = IUMNET realm = IUMNET.EDU.NA netbios name = IUMDCDP01 server role = active directory domain controller dns forwarder = 172.16.10.254

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

Hi Stefan I am also one of the Sernet customer. Can you guide me how to run the patch to fix the bug. I am running 2 DC's Sernet Samba 4.7.4 with 2 RODC's running Sernet Samba 4.7.4. Whenever I run samba-tool drs replicate --fix --yes command on the DC it shows the below errors which cannot be fixed: Failed to remove deleted DN attribute fromServer : (65, "objectclass_attrs: at

Hi James Thanks for your response. hots -t A iumsvrpdc (use it's fqdn as well) I have verified it with the FQDN which says that the record iumsvrpdc.iumnet.edu.na exists Search for 'iumsvrpdc' objectGUID ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationId=*)' --cross-ncs objectguid : it shows 2 records found # record 1 dn: CN=NTDS

Hi I upgraded my samba 4 DC running on Ubuntu 12.04 from 4.6.7 to 4.6.10 sernet samba package. apt-get update apt-get upgrade sernet-samba While downloading the new package the internet went down and it stopped so later when the connection was restored I started it again with ap-get upgrade sernet-samba and it started again. Now after rebooting the server the sernet-samba-ad service is not