similar to: Migration Of Records From Old Samba Domain To New One

Thank you for taking time to do this, Andrew. But, of course, it will be too late for me. I’ve just returned from exile, where I went on a spirit quest of sorts. Except that, on this quest, I was obliged to keep my distance until I had found a way to export and import all users, groups and group membership from my old samba domain to my new one. I updated schema to support Kerio Connect using

Thanks for taking a shot at helping me, Rowland. I found that someone had made this suggestion for another person in the past, so I ran this command before reaching out on Monday: > ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=Schema,CN=Configuration,$(echo "DC=$(hostname -d)" | sed 's/\./,DC=/g')" -s base objectVersion | grep 'objectVersion' | awk

In general we do not allow the removal of schema. In particular, because records in samba are stored under the attribute name, removing schema or renaming schema items describing those attributes and objectclasses can mean records cannot be processed correctly. However, if you confirm you really have exactly the entry already in the schema, you could edit the new schema not to add that

Hello Samba People, We have a Kerio Connect (email) server using Samba 4.8.5 as it’s directory service (3 AD DCs). We’ve been using this setup for about 3 years now. Over the last several months, we’ve been trying to find out why Samba starts rejecting attempts that the Kerio Connect mail server makes to authenticate our users. The errors in Kerio look like this: Authentication failed for user

On 2015.11.16, at 2:53 AM, Andrew Bartlett <abartlet at samba.org> wrote: > On Sun, 2015-11-15 at 20:36 -0600, Matthew Delfino wrote: >> Hello Colleagues and Mentors, >> >> I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 >> on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on >> Ubuntu 14.04.3, but each of them is

Hello Colleagues and Mentors, I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on Ubuntu 14.04.3, but each of them is running Canonical's pre-compiled Samba package, v4.1.6. This already-existing domain has had it's schema updated to include Kerio Connect-specific schema (to support our mail

On Sun, 2018-02-11 at 11:01 -0600, Matthew Delfino via samba wrote: > Hello from Sunny and frigidly cold Minneapolis, MN, USA! > > I have a SAMBA domain with three DCs running v4.4.16 on Ubuntu Server 14.04.5 LTS (BIND9 DLZ Backend). I need to move all my records to a new domain (from DOMAIN.LOC to SAMDOM.DOMAIN.NET). > > I know that it's not possible to change domains on a

Andrew, I feel that it is your prerogative to determine how many odd possibilities you want your tools to account for, so that they might know what to do rather than exit with an error. You have a better sense for how likely it is that someone in the wild is altering their schema and might have changed an already existing attribute, as it seems I did. If you'd allow me to impose upon your

Hello, Since responses were not forthcoming, I started looking for plausible explanations that might be unique to my company's setup. A few years ago, we imported ldif schema files to support directory integrations with Kerio Connect server. The attribute "msDS-MembersOfResourcePropertyList" was included in one of those ldif files. Since we no longer require directory integration

If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of your directories reused (/etc/samba, /var/lib/samba...) That worked for me as I don't care polluting /usr and others (I use VMs and destroy them without a tear) on Centos 7 when I switched from

On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: > On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: > >> If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of

> On 2017.01.18, at 2:06 PM, Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > > On 2017-01-18 13:41, Rowland Penny via samba wrote: > >> OK, I give in, why didn't I get the OPs reply to my post ? >> >> On Wed, 18 Jan 2017 13:23:16 -0600 >> Matthew Delfino via samba <samba at lists.samba.org> wrote: >> >> On

On 10/11/2020 22:47, Matthew Delfino Samba List via samba wrote: > Andrew, > > I feel that it is your prerogative to determine how many odd possibilities you want your tools to account for, so that they might know what to do rather than exit with an error. You have a better sense for how likely it is that someone in the wild is altering their schema and might have changed an already

On 4/21/2017 1:28 PM, Matthew Delfino via samba wrote: > Hey Samba Friends, > > Maybe the below question is too general. How about this: I’ve set my "log level = auth:10" in the global parameters of my smb.conf file. > > I then purposely failed to log into an account on my Windows 10 machine until the account was locked. > > I’ve run the following command where x

I'm wondering if anyone can make any suggestions? Rowland? Andrew? Even if it's just to suggest a framework for troubleshooting on my own? I really appreciate any time you can spare. Matthew On 2020.11.02, 5:59 PM, "samba on behalf of Matthew Delfino Samba List via samba" <samba-bounces at lists.samba.org on behalf of samba at lists.samba.org> wrote: Hello! I

On Wed, 2020-11-18 at 23:12 +0000, Matthew Delfino Samba List via samba wrote: > > There is only one thing that concerns me: One of the attributes > specified in the Samba script has a parameter whose value directly > contradicts the value specified in my old ldif file: > Well done with the analysis! > > In Samba script: > > dn:

On 20/11/2020 02:13, Matthew Delfino Samba List wrote: > Thank you, Andrew! > > This evening I attempted the upgrade. I first carefully commented out each of the attributes from the Schema-Updates.md file. I then saved the file and ran the following command, which gave me the subsequent output: > > (as root) > > # samba-tool domain schemaupgrade > Temporarily

Hello Samba Friends, For those of you who have had to sift through Samba logs for clues on how to determine what caused an account to lock after repeated failed logon attempts, what "log level" settings have you found to be most helpful? Thanks, Matthew ©2017 KNOCK, inc. All rights reserved. KNOCK is a registered trademark of KNOCK, inc. This message and any attachments contain

Hey Rowland, thanks for your quick reply. Answers below… > On 2017.01.18, at 12:41 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Wed, 18 Jan 2017 11:34:41 -0600 > Matthew Delfino via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> I have an Ubuntu 14.04 server with Samba 4.4.6 and a BIND DLZ backend >> that

> On 2017.01.18, at 3:21 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Wed, 18 Jan 2017 14:57:43 -0600 > Matthew Delfino via samba <samba at lists.samba.org> wrote: > >> >>> On 2017.01.18, at 2:06 PM, Bob of Donelson Trophy via samba >>> <samba at lists.samba.org> wrote: >>> >>> On 2017-01-18