similar to: idmap config ad: can't resolve domain users' uids

> Hai, > > > It might be handing to tell your OS and samba version. > A copy of smb.conf is also very handy.. oops, sorry. samba-4.8.5 compiled from source on Debian GNU/Linux 9 (stretch). smb.conf is: [global] netbios name = ADDC realm = EXAMPLE.ORG workgroup = EXAMPLEAD dns forwarder = [redacted] server role = active directory domain controller log level = 1

hi all, I can't figure out why winbind can't find ad users with wbinfo calls. It happens on a member server, Debian GNU/Linux stretch, samba is 4.7.5 from Louis repository: [global] security = ADS workgroup = EXAMPLEAD realm = EXAMPLE.ORG idmap config * : backend = tdb idmap config * : range = 1000000-3000000 idmap config EXAMPLEAD:backend = ad idmap config

The config looks ok, thats great. :-) Its not needed to stop samba running : net cache flush If you run: net cache list and have a look, then flush it and look again. You see its empty. If you need to copy the idmap than it is needed to stop samba. Can you show me an output of. dpkg -l | egrep "tevent|tdb|ldb|talloc|cmocka" Im running latest versions of these. Own compile or

> On Fri, 16 Feb 2018 12:12:32 +0100 > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > >> dear experts, >> >> I would like to setup idmap config ad. I have already the uidNumber >> attribute populated on AD. >> >> But there is something very basic wrong with my config: > > Yes, there is something wrong ;-) > See below

Hai, Thank you for having trust in my packages.. :-) Now if you use my package, i suggest, do read the howto's also... All you need for a good setup on debian stretch is there. if anyone find/see's improvements, please tell me... Or change it on github, thats why its there. First is this an upgraded domain? Or a new domain? What does `getent passwd username` tell you. Same for `id

On Fri, 16 Feb 2018 12:39:37 +0100 Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > > On Fri, 16 Feb 2018 12:12:32 +0100 > > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > > > >> dear experts, > >> > >> I would like to setup idmap config ad. I have already the uidNumber > >> attribute populated

On 18/06/2023 16:29, Dale Renton via samba wrote: > On Sat, Jun 10, 2023 at 1:49?PM Rowland Penny via samba < > samba at lists.samba.org> wrote: >> Dale, just checking back on what you posted earlier and you had: >> >> create krb5 conf = no >> >> in your smb.conf >> >> Is that line still there ? >> If so, try removing it. >>

Il 16/02/18 13:43, Rowland Penny via samba ha scritto: > On Fri, 16 Feb 2018 13:10:16 +0100 > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > >> >> So just to recap: there were two problems: >> >> 1) the syntax mistake in smb.conf pointed up before; > > This wouldn't have helped. > >> 2) a logical mistake because wbinfo

I am testing a Samba v4.1.3 instance on Ubuntu 14.04 prerelease. I set it up as a standalone server on a test network, and it was easy to set up and worked fine. Now I am trying to migrate it to a different network and join it to a Windows 2008 AD server. When I try to join it to the domain, I get this error: root at samba-4:/etc/samba# net ads join -U administrator Host is not configured as a

Il 16/02/18 12:58, Rowland Penny via samba ha scritto: > On Fri, 16 Feb 2018 12:39:37 +0100 > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > [...] >> >> should I remove tout-court this part? > > Not sure I understand that, but it sounds like you are asking if you > should remove the lines, if so, the answer is yes. You understood correctly.

I have a situation where users sometimes can't access shares on samba servers, and sometimes (a minute later) can. This is Samba 3.6.3 on Ubuntu 12.04, using Winbind against a Windows 2008 AD server. Comparing the success and failure debug logs I managed to capture, I see this difference: This line is present in the log of the failed attempt, but not the successful attempt: [2014/03/21

On Fri, 16 Feb 2018 14:26:57 +0100 Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > Il 16/02/18 13:43, Rowland Penny via samba ha scritto: > > On Fri, 16 Feb 2018 13:10:16 +0100 > > Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > > > >> > >> So just to recap: there were two problems: > >> > >>

Hi there, How should I prepare or put together crt-files for icecast to understand it? I have two files. One having one cert and the second two certs. I guess the first one is my host and the rest is for linking back to CA… Moimoi, Oskar ---------------------------------------------------------------------- Oskar Vilkevuori GSM +358 400 280500 oskar.vilkevuori at ovt.fi

Il 04/09/18 06:00, Volker Lendecke ha scritto: > Hi! > > Technical description below, but the exec summary is: Yes, we have a > performance problem with gencache. > > On Wed, Aug 29, 2018 at 10:28:05AM +0200, Francesco Malvezzi via samba wrote: >> Hi all, >> >> I have a midsize AD domain with some 50k users but only 100 workstations >> joined. >>

Il giorno lun, 04/12/2017 alle 16.00 +0100, Dario Lesca via samba ha scritto: > The samba command > > samba_dnsupdate --verbose --all-names --fail-immediately > > not work Following this howto, https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC I have try this: [ root at server-addc

Hello, I set up a domain with two DCs (dns-backend is BIND9_DLZ) on a Debian 10 system. I used either the Debian-packages or the Packages from Louis (4.12.8). I created an Ansible-role to setup everything, starting from installing the packages over doing the provision/join up to change the settings for bind9. The first DC runs fine. After the reboot services are all present, allthe SRV Record for

> > Yes, you have got it wrong ;-) :( If you do not want to add anything to AD, then you use the 'rid' > backend and 'ID' numbers will be calculated for you. You will also have > to place 'template' shell & homedir lines in smb.conf > If you want/need some of your users to have different login shells or > home directories, you will need to use the

On Mon, 04 Dec 2017 15:34:37 +0100 Dario Lesca via samba <samba at lists.samba.org> wrote: > Il giorno lun, 04/12/2017 alle 12.07 +0000, Rowland Penny via samba ha > scritto: > > Is the DHCP server updating the records for you ? > > Yes, but for now the problem is not dhcp (see follow) > > > If so, you need to stop the windows clients trying to update their >

Il giorno mar, 25/04/2017 alle 14.36 +0100, Rowland Penny via samba ha scritto: > > However I would like to enable also the DHCP service, and think > > it's right to activate it on this server. > > > > What is the best way to do so? > > Well you could always do it the way I have been doing it for the last > 5 years, see here: > >

Il giorno lun, 04/12/2017 alle 12.07 +0000, Rowland Penny via samba ha scritto: > Is the DHCP server updating the records for you ? Yes, but for now the problem is not dhcp (see follow) > If so, you need to stop the windows clients trying to update their > own records, they don't own them. I have the problem when join to domani via samba on another server, or when I run