similar to: Congratulations!

On Sun, 6 May 2018 18:48:40 +0200 Davy Defaud via samba <samba at lists.samba.org> wrote: > > Thanks very much for making AD trusts /really/ usable at last in > > 4.8. For my use case just allowing trusted groups to access file > > shares with correct permissions is good enough for now. Child > > domains would be nice too ;-) > > Dear Samba developers, >

On Sun, 6 May 2018 22:14:38 +0200 Davy Defaud via samba <samba at lists.samba.org> wrote: > Le 06/05/2018 à 19:27, Rowland Penny via samba a écrit : > > On Sun, 6 May 2018 18:48:40 +0200 > > Davy Defaud via samba <samba at lists.samba.org> wrote: > > > >>> Thanks very much for making AD trusts /really/ usable at last in > >>> 4.8. For my

Le 06/05/2018 à 19:27, Rowland Penny via samba a écrit : > On Sun, 6 May 2018 18:48:40 +0200 > Davy Defaud via samba <samba at lists.samba.org> wrote: > >>> Thanks very much for making AD trusts /really/ usable at last in >>> 4.8. For my use case just allowing trusted groups to access file >>> shares with correct permissions is good enough for now. Child

On Sun, 2018-05-06 at 22:14 +0200, Davy Defaud via samba wrote: > > So, what’s the current status now? I can see RODC and SUBDOMAIN on the > roadmap. > But, as there are not “FUNDED”, is there someone actually working on it? > If so, are they targeted for a particular version or just “when it’s ready”? RODC support has been funded as is pretty good as of 4.8. There are still some

but I do not need a domain member ((( and another controller DC Flag compile %configure \ --enable-fhs \ --with-piddir=/run \ --with-sockets-dir=/run/samba \ --with-modulesdir=%{_libdir}/samba \ --with-pammodulesdir=%{_libdir}/security \ --with-lockdir=/var/lib/samba/lock \ --with-statedir=/var/lib/samba \

On Tue, 7 Aug 2018 17:44:37 +0200 Stefan Kania via samba <samba at lists.samba.org> wrote: > Hi Andrej, > > then it works, but on a "normal" addc it works without "-U ". This is probably because you will be running the command from the RODC on the RWDC. > > One more Question: > When I do a "host -t srv _ldap._tcp.example.net" I only see

Hi everyone, In my environment I am running a Domain Controller, on ubuntu 16.04, samba v 4.11. My doubt is now on joining workstations to this domain. I was adding joining the command "samba-tool domain join...", however, I found in the samba page: https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member a note to don't use samba-tool: " The domain join

(@Rowland) > Whilst it is quite correct to say that the REALM isn't the same as a > DNS domain, there is a correlation between them. The REALM must be the > DNS domain in uppercase, so this: > > SAMBA_PRINCIPAL=dehydrated-service at YOUR.DOMAIN No, you can have your.primayDNSdomain.tld and have REALM = SOMEREALM.TLD Its not obligated to have REALM the same as the DnsDomain.

Hello guys, i use Samba 4 AD (4.2.1) for a small company. I use a domain which is a subdomain of our internal DNS domain ( directory.mydomain.io) Now my company will open several sites in different countries. I was wondering what is the actual limitations of Samba4 concerning the multi domain (i'm not a Windows guy and have very limited knowledge about AD). I read about trust relationship

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: maandag 14 januari 2019 13:21 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] dehydrated hook for LetsEncrypt certs > and samba dns (was: samba-tool auth in scripts) > > On Mon, 14 Jan 2019 13:03:42 +0100 > "L.P.H.

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

On 05/08/2019 11:53, Patrik wrote: > the ?? file "/etc/bind/zones/enp1s0f3/patrikx3.com > <http://patrikx3.com/>"; are my domain names A, AAAA, CNAME-s, that is > where i store then, there is know AD records at all. it is all DLZ. > *_ > _* If 'patrikx3.com' is a registered dns domain name, then you should have used a subdomain of this for the AD dns

On Tue, 2015-11-17 at 12:44 +0000, Luchko Dmitriy wrote: > Andrew, thank for answer! > > We understand about limitation subdomains on Samba but we suggested > that is one cause of current problem. We can all agree that this is a current limitation. > May be you know why python process can hung with 100% CPU ? Does > samba have limitation of groups or OU hierarchy? > p.s.

Hi All, I am looking into the feasability of using Samba/LDAP for domain control across several schools in my area, and would be interested to hear of anyone who has any experience/thoughts on how this could work. The schools share a community learning resource centre, and I am looking for ways for all users to be able to log in at their own schools, and also at the learning resource

I need to implement split horizon DNS, as I have just one external IP address (dynamic.lindenberg.one in external DNS) but multiple internal ones. External requests are distributed by port or using sniproxy (in particular 443), and all externally visible names are in a distinct zone then my domain, but with an additional indirection: names like backup.lindenberg.one resolve to CNAME

Dear all, setting up a DMZ environment I was thinking to use an RODC there for user authentication. One of the application in the DMZ needs to access the directory via LDAP. When I tried to connect to the RODC using LDAP with simple bind, I always received the following error ldap_bind: Invalid credentials (49)         additional info: 80090308: LdapErr: DSID-0C0903A9, comment:

samba-tool domain join example.ru DC --server=srv-dc01.example.ru -- username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 srv-dc01.example.ru - windows server 2008 netdom query fsmo Schema owner srv-dc01.example.ru Domain role owner srv-dc01.example.ru PDC role srv-dc02.example.ru RID pool manager srv-dc01.example.ru

Am 10.09.18 um 10:06 schrieb Oliver Rath via samba: > For this, you could take roaming profiles for offline use. Here the > files were copied to the local machine cache and used, if no (or only a > slow) network connection is available. Alternativly, you could use a > "RODC" (Read only Domain Controller, a mirror of the AD) locally in the > another office. As a third

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: woensdag 11 oktober 2017 11:39 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Using GPO to mount shares on Linux > > On Wed, 11 Oct 2017 11:00:59 +0200 > Michael Wandel <m.wandel at t-online.de> wrote: > > >

Does samba4.2 support for subdomain? In others words, a forest with more than one domain. Or we just can create a DC with one domain yet. Thanks