similar to: Issues with RPC, SID resolving; cannot use RSAT

seems removing idmap settings from smb.conf on both DCs having them has fixed it. smbclient and ADUC work as expected, now. Thank you! > I'm running a setup with 3 DCs, all Samba 4.5.12, Debian Stretch (is > patched for CVE-2018-1057, "samba_CVE-2018-1057_helper" been used). > > Probably unrelated to the upgrade and patch for CVE-2018-1057, there's > a new

I tried to run this script on a system running 4.5.15 built from source under Ubuntu 16.04, but I get the following exception: # PYTHONPATH="/usr/local/samba/lib/python2.7/site-packages/" ./samba_CVE-2018-1057_helper --lock-pwchange Temporarily overriding 'dsdb:schema update allowed' setting Traceback (most recent call last):   File "./samba_CVE-2018-1057_helper",

Am Mittwoch, 14. März 2018, 08:35:53 CET schrieb Brian Candler via samba: > I tried to run this script on a system running 4.5.15 built from > source under Ubuntu 16.04, but I get the following exception: > > # PYTHONPATH="/usr/local/samba/lib/python2.7/site-packages/" > ./samba_CVE-2018-1057_helper --lock-pwchange > Temporarily overriding 'dsdb:schema update

Replying to my own post - I can reset the mappings by "net cache flush", and this then persists for a while, but ultimately it ends up being overwritten somehow. I'm no longer sure if this is related to files owned by the old UID - because I've since tried to chown all of these, and this is still happening - but I guess I may have missed some, perhaps. On 11 June 2015 at 12:40,

Hi , I'm trying to migrate an old server with ubuntu 9.10 ,samba3 +ldap to a new server ubunut 14.04. I could follow the steps of https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_%28classic_upgrade%29 but when running samba-domain tool classicupgrade --dbdir = / util / tdb --use-xattrs = yes --realm = gruporesasco.local --dns-backend = BIND9_DLZ

Hello ! And i have problem with user validation. wbinfo work well, but i cant use de AD users. root at samba01:~# smbclient -L 127.0.0.1 -Ugalerna\\gcarballo Enter GALERNA\gcarballo's password: session setup failed: NT_STATUS_LOGON_FAILURE root at samba01:~# smbclient -L 127.0.0.1 -Ugalerna\\administrator Enter GALERNA\administrator's password: Administrator work with the mapping

Hello Volker. I come back after a long time. I captured today two Samba traces (log level globally cranked to 10) comparing, with a problematic user, a successful session and, later, a failed one. With one "net cache flush", the session will succeed again and... later (can be 2 minutes, can be 40), will fail again. This elusive bug is killing me. For some really annoyed users I

I *think* I may have encountered a bug, or a feature, in the idmap/winbind area. I have recently added rfc2307 attributes to my AD, and am in the process of switching over. This means that I still have (unintentionally) some files/directories/etc. around with old UIDs e.g. 3000007, rather than my rfc2307 specified UIDs. What I am seeing is that the SID2XID mapping is initially correct for a

Hi all, I'm pretty new to Gluster, and the company I work for uses it for storage across 2 data centres. An issue has cropped up fairly recently with regards to the self-heal mechanism. Occasionally the connection between these 2 Gluster servers breaks or drops momentarily. Due to the nature of the business it's highly likely that files have been written during this time. When the

Hai, Thank you for having trust in my packages.. :-) Now if you use my package, i suggest, do read the howto's also... All you need for a good setup on debian stretch is there. if anyone find/see's improvements, please tell me... Or change it on github, thats why its there. First is this an upgraded domain? Or a new domain? What does `getent passwd username` tell you. Same for `id

Hi fellow list users, I'm setting up a 4.0.3 DC and I am observing the following issue: - nsswitch.conf contains winbind for passwd and group - provisioned with use_rfc2307 - creating user with ADUC - creating group - adding Unix Attributes to user and group - 1st part of issue: ADUC throws error message (translated from German XP: "The object properties of the object could not be

I think there is a bug in the MediaWki installtion with Pages containing a "&" in the title. Example: https://wiki.samba.org/index.php/Samba_%26_Active_Directory This link doesn't work despite appearing on many pages, like https://wiki.samba.org/index.php/Category:Category_Integration Where ever it is linked, it looks like an existing page (blue link). Even when searching for

Hi, I have a Windows 2012R2 Domain controller and a FreeBSD 10.0 domain member. I can join the domain. All this command are ok and have no error : Wbinfo -u Wbinfo -g Wbinfo -t Wbinfo -S Wbinfo -n Wbinfo -Y But one fails : wbinfo -i administrator failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user administrator I try to connect with ssh to the server with an domain

See inline comments On 11/07/16 06:32, Zaphod Beeblebrox wrote: > So... I've been running Samba 3.6 for too long and I upgraded. I did save > my packages for 3.6, but I don't _think_ I'm going back. > > Points for the group: > > - Samba 4.4.x is broken on FreeBSD. I forget exactly, but it seems to > be a known problem (tm), so I'll move on. What is

Hi, I'm trying to setup a domain with two DCs based on 4.0.3. Following some hint, I wanna use glusterfs for the sysvol. Glusterfs it runs nicely. I can set acls on both machines using setfacl and the other one lists them almost immediately with getfacl. But running "samba-tool ntacl sysvolreset is failing badly giving the following error. In a later attempt, without significant

On 9/18/13 11:20 AM, Tim Groeneveld wrote: > > ----- Original Message ----- >> On 9/17/13 3:23 PM, Andreas Gaiser wrote: >>> Does anybody know about GlusterFS & Dovecot? >>> >>>> Time marches on, and I need to continue the service migration. I'd >>>> still >>>> like to use Dovecot (we're migrating away from Cyrus).

Hi, I am trying to create a tarball from a 4.0.3 git checkout using "make dist", but it throws errors (small sample below, detailed Copy&Paste on request), and apart from this, www.oasis-open.org seems stale on connects from xsltproc, as can be seen in the lsof sample, below as well. Briefly and cheekily asked, is that normal? Are we all omitting docs in packaging at the moment?

Hi fellow list users and admins, I hope it's not absolutely off topic, sorry if so. would there perhaps be a way to improve the usability of the list a bit. Let me explain what I mean. I'm using Thunderbird and it's a whole bunch of little things to watch out for not to produce a suboptimal posting: - don't forget to push SHIFT when clicking on write/reply to make sure it's

hi all, I can't figure out why winbind can't find ad users with wbinfo calls. It happens on a member server, Debian GNU/Linux stretch, samba is 4.7.5 from Louis repository: [global] security = ADS workgroup = EXAMPLEAD realm = EXAMPLE.ORG idmap config * : backend = tdb idmap config * : range = 1000000-3000000 idmap config EXAMPLEAD:backend = ad idmap config

On Mon, 16 Oct 2017 10:40:44 -0400 (EDT) me at tdiehl.org wrote: > Hi Rowland, > > > On Sun, 15 Oct 2017, Rowland Penny via samba wrote: > > > On Sun, 15 Oct 2017 13:38:13 -0400 (EDT) > > me at tdiehl.org wrote: > > > >> Yes I understand, however, there are 2 things I am concerned about. > >> > >> When the errors are spewing, winbind