similar to: A db error that dbcheck tool can't fix

Hi, It appears to be an error in dbcheck, where we're making assertions on the primaryGroupID despite the fact that it is dealing with an inactive link. It should be safe to ignore, and should disappear once the stale link is deleted permanently after the usual tombstone period. There probably needs to be a bug filed though, to make sure we fix this unintended error. Cheers, Garming On

Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with FSMO role. And another is DC2. there's a error in DC1 when i use dbcheck tool. And samba-tool dbcheck --cross-ncs--fix can't fix that. And I made a big mistake ! In DC2 I use "tdbbackup -s .bak /var/lib/samba/private/sam.ldb" create a bak file. and using that bak file replace the sam.ldb

I think "after a sql server windows machine join the domain" should be better. Sorry, but I am not a native English speaker. ? 2020/7/22 15:48, Rowland penny via samba ??: > On 22/07/2020 08:37, Adam Xu via samba wrote: >> Hi Rowland >> >> I have no windows DC but only 2 samba AD DCs. > > Then what is this: 'when a sql server windows machine join the

Hi all my samba version is 4.12.5 and when a sql server windows machine join the domain, It shows error in samba : Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: acl: spn validation failed for spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com] nbname[DOMAIN] ntds[(null)] forest[domain.com]

Adam, you already tried my suggestions? What do you see here: > Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: > acl: spn validation failed for ... ^^^^^^ So read the links below and post your results The event id you showed, for now can be ignored. Inrelevant (for now). And mostlikly wil disapear when you added/fixed the "correct" spn's On

On Fri, 2018-02-09 at 01:01 +0800, adam_xu--- via samba wrote: > Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with FSMO role. And another is DC2. > there's a error in DC1 when i use dbcheck tool. And samba-tool dbcheck --cross-ncs--fix can't fix that. And I made a big mistake ! > In DC2 I use "tdbbackup -s .bak

Andrew Bartlett, samba Think you for your reply. I know the process to resovle the problem now. first ,I need transferring and Seizing FSMO Roles to DC2 and then demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again. Right? Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1?

hello.these days ,I diceded to migrating a Samba NT4 domain to a Samba AD domain.I follow all the steps as this link " https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_(classic_upgrade) " but I have error when samba-tool domain classic upgrade using sernet-samba-4.4.logs like this: [root at pdc dbdir]# samba-tool domain classicupgrade

Hello, Rowland. what I set in RSAT is: nis domain "ntbaobei" uid "10000" login shell "/sbin/nologin" home dir "/home/Administrator" primary group "domain admins" I never used user map beacuse everything worked ok before. I knew the "root" user can granting the SeDiskOperatorPrivilege Privilege. Is there any changelog in samba 4.7.7 that

Hello, everyone. After some windows 10 client join to our samba AD DC. A lot of setting is missing in the windows 10 PCs. so I need to import some windows 10 Administrative Templates to samba dc like that: https://support.microsoft.com/en-us/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra Unfortunately, I didn't see any dir named

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote: > Hi Rowland, > >  I can manage the security permission, but I can't manage the share > permission after I remove the user "everyone"'s share permission and > add "domain admins" and "domain user" share permission. > Do you have any advice? > I take it you are referring to the

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber in ADUC? should I create another user in > Domain Adams"? >

On 05/06/2019 09:26, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > English?is?not?my?native?language.It?seems?that?the?communication?between?us > was a?misunderstanding. what I want is just > "IGNORE?the?'share'?tab,?do?not?touch?it,?forget?it?is?there." > Thank?you?for?your?patience. > No problem, I sort of thought this was the case ;-) To be clear:

Hi Rowland, Yes. all users primary group is "domain users". my "domain admins" has a gidNumber. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 22:44 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of

Thanks, Rowland , 'net cache flush' solved my problem. but I found that I can't access any share in \\myshare. some related configurations in my smb,conf .... access based share enum = yes hide unreadable = yes username map = /etc/samba/user.map I can't see any share folder of my fileserver in fsmgmt.msc. and I run "smbstatus -b" PID Username Group

Hi Rowland , I have followed the wiki's step, the DNS works OK and I have use the fileserver for 2 years. here's a share folder "IT"'s acl getfacl IT/ # file: IT/ # owner: root # group: domain\040admins user::rwx user:root:rwx group::rwx group:domain\040admins:rwx group:it:rwx mask::rwx other::--- default:user::rwx default:user:root:rwx default:group::---

Hi Rowland, I have checked that Adinistrator is a member of "Domain Admins" in ADUC. Base Permission of the share folder is 0770 and own is root and the groups is "domain admins" in linux. since "smbstatus -b" show that administrator's group is root. Is this related to my previous configuration? I once give a uidNumber to administrator. here's full contant

Hello, I have one question for RSYC running on windows 2003, the rsyncd.conf like following log file = /var/log/rsyncd.log pid file = /var/run/rsyncd.pid lock file = /var/run/rsync.lock [tkbak] path = /local/tkbak comment = tk backup folder uid = root gid = root read only = no list = yes auth users = root secrets file =

Hi Rowland I have no windows DC but only 2 samba AD DCs. This error has been happening for years. I don't know what's the error means and what shoud I do in samba AD DC or Windows domain members. ? 2020/7/22 15:14, Rowland penny via samba ??: > On 22/07/2020 03:33, Adam Xu via samba wrote: >> Hi all >> >> my samba version is 4.12.5 and when a sql server windows

I've posted this before being subscribed but was thwarted by moderation. I have a new UPS, actual manufacturer unknown. It comes with USB and serial connections, and a CD with windows software and some old unix software for serial support only. I'm using pretty much bleeding edge linux, and I want to avoid rs-232 if possible. Am I hopelessly naive? This is what lsusb says: Bus 006