similar to: The 'not-always-on' infrastructure at home and Samba4 AD DC's..

Hi everyone, Apologies in advance, this will be a bit long but I'm hoping to get some guidance and hints on usual practices for using Samba4 AD DC as an Idm for W10 laptops that might be on the road elsewhere.. As much as I have been using samba for file serving, a Samba AD DC is something new to me. I built a small Samba AD DC infrastructure to serve UIDs and Passwords (4 VMs on 4 KVM

Hi all, I've had this error come up after my samba AD DC servers are up and running for awhile. In the most recent case, it's been months of uptime. Symptom 1) include this message when I try to access a standalone samba file server with guest access allowed. I can access this server from W10 by typing in "\\<server_ip_address>\<share_name>" in the windows explorer

Hi Vincent, > I started using Samba as an AD DC on el7 a few weeks ago. I have some > questions for others who mights also be using Wing's rpms on el7 > (http://wing-net.ddo.jp/wing). > > A) Is there a wiki/issues page for that repo? I could not find any.. > > B) is that the only repo of samba rpms available for el7/centos7? You can use the RPM at https://samba.plus from

Hi Rowland, Yes, that's right (Thank you). Here is what happened: On the DC's, libldb was this version on el7.4: - libldb-1.1.29-2.el7_4.wing.x86_64 (from Wing's repo). el7.5 brought in a more recent version: - libldb-1.2.2-1.el7.x86_64 - libldb-1.2.2-1.el7.i686 What would be the best course of action here? A) Downgrade el7.5 to libldb-1.1.29-2.el7_4.wing.x86_64? B) rebuild

Sorry for all these replies, i missed this. > Is the upgrade path from samba 4.6 + libldb 1.1 to samba 4.6 + libldb 1.3 No, that wil break your samba!!! Samba 4.6 max 1.1.29 for ldb. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Vincent S. Cojot via samba > Verzonden: woensdag 18 april 2018 14:06 >

Hi Rowland, Yes, I noticed that el7.5 had samba 4.7.1. Unfortunately, one cannot use that version as an AD DC. Here's the situation: # rpm -ql samba-dc /usr/share/doc/samba-dc-4.7.1 /usr/share/doc/samba-dc-4.7.1/README.dc (and it mentions that because of MIT kerberos the samba AD DC features cannot be enabled on el7 at this moment). Perhaps the best way forward would be to rebuild

Hey guys, I had recently setup a new DC (called dc0) (in accordance with the wiki) and now I would like to demote the old DC (called pdc0 :)). I followed the wiki again, but I ran into the following issue. When trying to demote the old DC, I get this error message: pdc0 # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another

Hi All, I started using Samba as an AD DC on el7 a few weeks ago. I have some questions for others who mights also be using Wing's rpms on el7 (http://wing-net.ddo.jp/wing). A) Is there a wiki/issues page for that repo? I could not find any.. B) is that the only repo of samba rpms available for el7/centos7? C) Is there a reason why samba46-4.6.14 is the latest available version? Are

Hello, I have just setup some ipfw rules to checkout some traffic to one of my boxes. I have three servers, only one of which has weird traffic. It is getting ping'd on a five minute interval from approx 3 to 8 different ip addresses within the same second. For example: May 3 20:20:03 gaspra kernel: ipfw: 65002 Deny ICMP:8.0 202.160.241.130 xxx.xxx.xxx.xxx in via dc0 May 3 20:20:13

On 18/10/2019 18:48, John Redmond wrote: > DNS is another area where I have read and experimented a lot.? Result: > confusion.? Again, I'm using fresh installs of Ubuntu 18.04 LTS > "server" for both the AD-DC and the fileserver machines.? Here's what > the various config files on the fileserver look like now.? Test > results are not exactly what they

Hi all, Running Samba 4.0.0apha18 with good results but getting an error when I attempt to replicate the Global Catalog to a Windows 2008 Machine. Samba machine = DC1 Windows 2008 machine = DC0 samba-tool Showrepl result: Default-First-Site-Name\DC1 DSA Options: 0x00000001 DSA object GUID: 05c3c860-0a0d-4672-a39e-a212ccb0ce9c DSA invocationId: abb0cab3-13d3-456c-8a16-e65a4855a2df ==== INBOUND

On Thu, 28 Feb 2019 18:04:50 -0600 (CST) Mike Ray via samba <samba at lists.samba.org> wrote: > Hello all- > > I am trying to upgrade a old domain to a newer version. The old DCs > are a custom compiled version of Samba, so instead of upgrading the > DCs in place, the plan is to upgrade by joining new DCs to the > domain, replicating data and then shutting down the old

On 15/05/2019 21:43, durwin at mgtsciences.com wrote: > > > *named.conf.options* > > > options { > > >         directory "/var/cache/bind"; > > > > > >         // If there is a firewall between you and nameservers you want > > >         // to talk to, you may need to fix the firewall to allow > multiple > > >         //

> > > > > Why are you using the internal dns server on one DC and Bind9 on the > > other ? > > I am very familiar with configuring Named on Fedora. I thought it > > would be > > just as easy on Ubuntu. After discovering the files were in different > > places > > and so many more being 'included', I decided to use internal on the

Hello all- I am trying to upgrade a old domain to a newer version. The old DCs are a custom compiled version of Samba, so instead of upgrading the DCs in place, the plan is to upgrade by joining new DCs to the domain, replicating data and then shutting down the old ones after transferring the FSMO roles. I had the new DC (dc3, version 4.9.4-12) replicating to the other DCs (dc0, versions

Hello. We're trying to integrate Samba 4 as a DC in production. We aim to replace our only Windows 2003 Enterprise R2 Russian DC with 2 Samba DCs. However, we've got a replication problem, we aren't shure is it a bug or misconfiguration. Both Windows and Samba DCs are virtual amd64 machines, running under the control of Xen (so, at least the time is the same). Windows VM has GPLPV

Hai, Why would you ever add Domain users to Local Admins? Thas really a very big NO NO, dont do that, really.. Dont.. If you want to be an victum of online crime, that thats the way to allow it to happen. Now your GPO. Its a new setup, correct? If so. Login on the AD and kinit Administrator Run : samba-tool ntacl sysvolreset -k Now, goto the Default Domain policy, is

I only have a tga user. But it says it has multiple entries. ( ERROR: Failed to add members ['tga'] to group "backup" - Found multiple results for "tga": ) root at dc0:~# samba-tool group list |grep backup lpcfg_do_global_parameter: WARNING: The "domain logons" option is deprecated ldb_wrap open of secrets.ldb backup root at dc0:~# samba-tool user

I looked into Windows EventViewer and I found 'Invalid Credentials'. But I do not know how to deal with it. I have authenticated with Domain Controller, why is it saying 'Invalid Credentials'? - System - Provider [ Name] Microsoft-Windows-GroupPolicy [ Guid] {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9} EventID 1006 Version 0 Level 2 Task 0 Opcode 1

Hey all- Trying to upgrade the domain and running into issues getting my data into the new controller. Current configuration: dc0 - Ubuntu 12.04.2 - Samba: 2:4.0.6-12 dc1 - Ubuntu 12.04.2 - Samba: 2:4.0.6-8 dc2 - Ubuntu 12.04.3 - Samba: 2:4.0.6-8 I'm trying upgrade to Ubuntu 16.04.3, Samba: 2:4.3.11+dfsg-0ubuntu0.16.04.10 The documentation