similar to: Fwd: Migrating server

Yes please for the notes. I re-ran the tests without the smbldap-tools. I installed phpldapadmin and am able to login to the apache page using the cn=admin, dn=mydomain and create entries. This kind of tells me that LDAP is working Then I run the pdbedit -Lv and it lists all the users. The following happens when I add the LDAP bits to smb.conf and restart samba.The issue seems to be with samba

Hi Harry, When I install slapd , I didn't get the option to use MDB, so used hdb I went through your suggestions and cleaned up the smb.conf. Also added the unixidpool ldif dn: sambaDomainName=mydomain,dc=mydomain sambaDomainName: mydomain sambaSID: S-1-5-21-3936576374-1604348213-1812434911 sambaAlgorithmicRidBase: 1000 objectClass: sambaDomain objectClass: sambaUnixIdPool

Hi Rob, please stay on list. Otherwise I will charge you :-) By the way I have no problem to get payed. > Hi Harry, > > The one very obvious difference is the result of this command: # > ldapsearch -xLLL -b dc=afrika,dc=xx -s sub -D > cn=admin,dc=afrika,dc=xx -w 'sambadomainname=*' > dn: sambaDomainName=SCHULE,dc=afrika,dc=xx > > I get dn:

Hi Gruss, At this stage there is only one server, running 3.6.25 on Ubuntu12.04. The plan to get LDAP to work on this one. Then add the second server 4.x and the promote it to BDC and then demote this one. Just a side info, we didn't want to go tdbsam in both as I read it breaks the domain trust. The domain names are real ones. I ran the commands you suggested, nothing in reply. I tried

Hi Gruss, Had to ditch the VM and start again. Here is the info: tdbdump secrets.tdb |egrep -v '^data|^}|^{' key(21) = "SECRETS/SID/mydomain" key(18) = "SECRETS/SID/sam3dc" key(42) = "SECRETS/LDAP_BIND_PW/cn=admin,dc=mydomain" key(25) = "SECRETS/DOMGUID/mydomain" key(42) = "SECRETS/MACHINE_SEC_CHANNEL_TYPE/mydomain" key(42) =

Am Montag, 5. März 2018, 22:16:36 CET schrieb Rob Thoman: > Hi Gruss, > > At this stage there is only one server, running 3.6.25 on Ubuntu12.04. > The plan to get LDAP to work on this one. Then add the second server > 4.x and the promote it to BDC and then demote this one. Just a side > info, we didn't want to go tdbsam in both as I read it breaks the > domain trust.

dn: cn=Domain Admins,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins description: Netbios Domain Administrators sambaSID: S-1-5-21-3936576374-1604348213-1812465911-512 sambaGroupType: 2 displayName: Domain Admins memberUid: root memberUid: sadmin dn: cn=Domain Users,ou=groups,dc=mydomain objectClass: top objectClass:

On Tue, 2018-10-16 at 15:18 -0700, Emil Henry wrote: > Hi Andrew! > > I included it in one response, but may have not done a Reply All. Am resending it. > > Thanks. It is reading the hashes, so it looks like it is working. Dumb question, but are you really sure the password is right? Otherwise, it might be some very odd NTLMv2 thing. Try (on the client) 'client ntlmv2 auth

Hi Harry, sadmin and tadmin are both admin logins. I was trying to domain join with both. sadmin is in ldap The olcdbindex.ldif gave this error SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional

Hi Harry, Here are the outputs. I've attached them as logs with this email too. root at sam3dc:/tmp/ldifs-gr# ldapmodify -Y external -H ldapi:/// -f olcdbindex.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={1}hdb,cn=config" root at sam3dc:/tmp/ldifs-gr# service slapd stop

Am Montag, 5. März 2018, 16:51:41 CET schrieb Rob Thoman: > Hi Harry, > > When I install slapd , I didn't get the option to use MDB, so used hdb OK, I have reread the thread. Some questions: Is your old server still running? Ubuntu, openldap, samba versions on old and new server I assume your old server use tdbsam and your new server ldapsam. > I went through your suggestions

On 06/03/16 17:28, Harry Jede wrote: > On 18:11:20 wrote Rowland penny: >> On 06/03/16 16:22, Harry Jede wrote: >>> On 17:13:33 wrote Martin Juhl: >>>> Hi guys >>>> >>>> >>>> When trying to set root's password, I get a segmentation fault: >>>> >>>> [root at bart ~]# smbpasswd -a root >>>> No

On 11.10.2016 17:22, Harry Jede via samba wrote: > Am Dienstag, 11. Oktober 2016 schrieben Sie: >> On 11.10.2016 13:52, Harry Jede via samba wrote: >>> On 10:43:49 wrote Gavrilov Aleksey via samba: >>> Until now, you have destroyed your domain. >>> Is the ldap directory on localhost in production or is this pc in a >>> test lab? >> a copy of the

Hi Rob, > olcDbIndex: ou eq > olcDbIndex: mail eq > olcDbIndex: surname eq > olcDbIndex: givenname eq > olcDbIndex: loginShell eq > olcDbIndex: uniqueMember eq,pres > olcDbIndex: sambaSID eq > olcDbIndex: sambaPrimaryGroupSID eq > olcDbIndex: sambaGroupType eq > olcDbIndex: sambaSIDList eq > olcDbIndex: sambaDomainName eq > olcDbIndex: default sub >

Hi, i try to create a new machine account, like i always did, but haven't done since 3.x. My backend is ldap: passdb backend = ldapsam:ldap://fileserver idmap backend = ldapsam:ldap://fileserver As root I do the following: smbpasswd -D 10 -a -m admeta --------------------------------- Netbios name list:- my_netbios_names[0]="FILESERVER" tdb(unnamed): tdb_brlock failed (fd=3) at

Am Montag, 5. März 2018, 22:16:36 CET schrieb Rob Thoman: > Hi Gruss, > > At this stage there is only one server, running 3.6.25 on Ubuntu12.04. > The plan to get LDAP to work on this one. Then add the second server > 4.x and the promote it to BDC and then demote this one. Just a side > info, we didn't want to go tdbsam in both as I read it breaks the > domain trust.

I have a working setup with samba & squid on one machine. However it seems that ntlm_auth is not doing what I expected. As an unprivilegd user I am able to test succesfull password: ute at alix:~$ ntlm_auth -V Version 3.5.6 ute at alix:~$ ntlm_auth --username=hans --password=keins NT_STATUS_OK: Success (0x0) Surely I know this password. Now the same with diagnostics on: ute at

On 19:47:03 wrote Rowland penny: > > I have just started an old vm with samba 3.6.6 as pdc and openlap > > as backend. smbpasswd -a someuser does not work, if someuser does > > not exist. > > Are you using smbldap-tools or ldapsam:editposix ? In this vm ldapsam:editposix. OK. I have just created a posix-only user in openldap. And then tried smbpasswd -a test01.

On Wed, 28 Feb 2018 20:41:43 +1000 Rob Thoman via samba <samba at lists.samba.org> wrote: > > root at sam3dc # smbldap-populate > Use of qw(...) as parentheses is deprecated at /usr/share/perl5/ > smbldap_tools.pm line 1423, <DATA> line 522. > Unable to open /etc/smbldap-tools/smbldap.conf for reading ! > Compilation failed in require at /usr/sbin/smbldap-populate

Hi Andrew, I've setup a new Samba 4 box (sam4dc) on Ubuntu 14.04 with Samba 4.3.11. I have the following Just to clarify, sam3DC is the current DC with samba 3.6.3 smb.conf [global] workgroup = STEST netbios name = Sam4DC password server = Sam3DC (This is the current DC) security = user resolv.conf nameserver = 192.168.10.1 (IP of Sam3DC) I can ping the sam3dc from the