similar to: User idmap lost

On 04/05/2018 08:29 PM, Paul R. Ganci via samba wrote: > Back on February 28, 2018, I started a thread "User permissions of > profile/home directory lost" describing a problem occurring with my > wife's user account. Since that time the random problem has persisted > so I turned on some debugging. I have been able to determine that > somehow her account idmap is

Well I upgraded from 4.4.6 to 4.5.0 and discovered that one of my user accounts is completely borked. What is very strange is that everything in Samba looks okay. Here is the first problem symptom. The data is from the DC. total 80 drwxr-xr-x. 7 root root 4096 Oct 9 01:15 . drwx------+ 77 SAMDOM\prg-11868bg SAMDOM\domain users 20480 Oct 9 00:55

On 10/09/2016 02:51 AM, Rowland Penny via samba wrote: > Have you by any chance got another 3001108 'xidNumber' in idmap.ldb ? > If you give a user a 'uidNumber' attribute, the contents of this will be > used instead of the 'xidNumber' in idmap.ldb, hence you do not need to > (and probably shouldn't) use numbers in the '3000000' range. I managed to

On Sun, 9 Oct 2016 01:58:00 -0600 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > Well I upgraded from 4.4.6 to 4.5.0 and discovered that one of my > user accounts is completely borked. What is very strange is that > everything in Samba looks okay. Here is the first problem symptom. > The data is from the DC. > > total 80 > drwxr-xr-x. 7 root

On 10/09/2016 12:14 PM, Rowland Penny via samba wrote: > On Sun, 9 Oct 2016 11:50:42 -0600 > "Paul R. Ganci via samba"<samba at lists.samba.org> wrote: > >> >On 10/09/2016 02:51 AM, Rowland Penny via samba wrote: >>> > >Have you by any chance got another 3001108 'xidNumber' in >>> > >idmap.ldb ? If you give a user a

On 03/01/2018 01:02 AM, Rowland Penny wrote: > Is this a PDC (NT4-style domain) or an AD DC ? > Either way, I have never heard of anything like this happening before, > perhaps it might help if you post your smb.conf. Hi Rowland, Whatever is occurring has happened again today. I had to "chown -R" my wife's home/Profile directories and files. Very strange and makes me

Hi All, I run a small domain for my home that consists just of two user accounts... one for my wife and one for me. I just have a single DC and the home and profile shares are located on the DC. For years this setup has served just fine giving me access to both linux and windows with a unified authentication and file server base. However, on Monday around 12 noon MST my wife lost permissions

> > Some more information. RSAT on the windows 10 client shows all the > proper UNIX attributes. The uidNumber is the correct 3001108. So I > removed the idmap.ldb entry for my wife's sid and restarted the AD. > The new idmap entry was created and I noticed that getent returned the > xidNumber from the new entry. It appears that the AD is ignoring the > UNIX

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

I have some hardware running CentOS 7 and Sernet Samba 4.7 that started out as a member server that I would like to make into a 2nd DC. However I am having trouble converting it because it seems I am not removing all the remnants of the client setup. What I thought I would have to do is this: 1.) net ads leave -U administrator 2.) Remove the machine entry on the 1st DC 3.) mv /var/lib/samba

On Thu, 1 Mar 2018 20:08:29 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > Hi Rowland, > > Whatever is occurring has happened again today. I had to "chown -R" > my wife's home/Profile directories and files. Very strange and makes > me wonder if she doesn't have some kind of malware on her laptop. I > am checking that now.

Hello all, First, i present myself since this is the first time i post here. My name is Vincent Badier, and i'm a samba beginner. I tried to compil and install samba-3.0.0beta2. I configured it with the --with-acl-support and no error occured. The problem appear when i tried to join an active directory domain. firstly : # /usr/local/samba/bin/net ADS JOIN MEMBER -S mydc -Umyname ADS

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

Hi Denis, thanks a lot! > you said that the zone is empty. It is not a problem per se but for some > time Bind-DLZ has been a bit more strict and ask for a NS record for > every zone. So you just have to create a NS field in your zone pointing > to one of your DC and you should be fine. Internal DNS does not have > this requirements. > > samba-tool dns mydc

Daniel R. Meigs wrote: > Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan > Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf.

On Tue, 26 Dec 2017 18:08:11 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > I have a problem that is now becoming very annoying. Namely I have a > Centos 7 member server running Sernet Samba 4.7.4 for which > everything seems to work except gdm or ftp logins. On the linux > client it seems winbindd is set up correctly. For example (the data >

On 12/30/2017 05:22 PM, Paul R. Ganci via samba wrote: > 1.) net ads leave -U administrator > 2.) Remove the machine entry on the 1st DC (used ldbedit) > 3.) mv /var/lib/samba /var/lib/samba-client > 4.) mv /etc/krb5.keytab /etc/krb5.keytab-client > 5.) samba-tool domain join 2nd DC I tried this procedure and it just doesn't want to work. I have this error: >samba-tool

On Fri, 27 Jul 2018 21:25:04 +0000 (UTC) ray klassen via samba <samba at lists.samba.org> wrote: > so I had some time to follow this bunny trailand found that even > though all the other servers had no problems this one continued > to.Every so often a new computer couldn't connect and then it would > be all better after a net leave/net join. Net join would not work >

On 29/11/2019 18:17, S?rgio Basto via samba wrote: > On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote: >> Lets start by removing this: krb5-server-1.15.1-37.el7_7.2.x86_64 > ATM I can't, it will remove all samba packages :) Then your packages are depending on the krb5-server package, which is MIT, which is experimental. This shouldn't be a problem on a Unix

On Sun, 2 Oct 2016 22:01:32 -0600 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > > > On 10/02/2016 07:57 PM, Paul R. Ganci via samba wrote: > > > > > > On 10/02/2016 06:15 PM, Paul R. Ganci via samba wrote: > >> On 09/11/2016 10:38 AM, Paul R. Ganci via samba wrote: > >> > >>> On 09/11/2016 01:23 AM, Rowland