similar to: access domain via ldap failed

Hi, I want to use samba as AD on SLES 11 SP3. And I can make samba 4.5.x into some rpms which works well. Recently I try to build samba 4.8.0 using my spec file which works well on samba4.5.x. But when I test these rpms there is a problem. When I use ldap to access the domain to query some domain info, it remains me the directory service is not operational. This problem also appears in

See Inline LPHvBvs> Hi Gregory, LPHvBvs> On the questions. >> Is there a good reason to avoid Samba internal DNS? LPHvBvs> No, imo not, but i only use bind9_dlz because i need bind in my lan for other setups also. LPHvBvs> I just used my RSAT on my win7 64b, but at my point it works fine. LPHvBvs> I do have questions to get a better impression of the setup. LPHvBvs>

Hi, Rowland, I wanted to access the samba using an administrator account to query some info about the domain or the domain user, such as the sid of a computer in the domain. At first I thought the problem was the ldap configuration. But it seems not such simple. Today I find that joining the domain also has problem. When I try to join a Windows 7 machine into the domain with samba 4.8.0, it

Er,there it is. I want to use samba to build a domain. I want to join computers into this domain. And I need to access this domain to get sid of computers in the domain, using C# class DirectoryEntry as 'ldap://my domain info' in my another program. ---- On Fri, 20 Apr 2018 01:27:54,"Rowland Penny via samba" <samba at lists.samba.org> wrote: >On Fri, 20 Apr 2018

So bath samba 4.7.6 and 4.8.0 hava this problem. Can it be comfirmed to be a bug? If so, it seems to be an important issue that should be resolved as an important function of a DC. Up to now I only have samba 4.5.x that work normal. But 4.5.x won't have new version any more. While I want to keep my samba to be the newest security version. Hope this problem get resolved soon. Thanks for your

Hi, Some time back I had written to the list about integrating Cisco ISE and facing errors with RPC login. When we actually integrated using ISE 2.4.0357 we noticed that Kerberos authentication is working like a charm. But MS-RPC authentication throws error. From the samba logs, we noticed that ISE workstation is able to negotiate the RPC ports switch to higher Dynamic RPC ports,

I tried 'domain\username' in adexplorer as you say.But it doesn't work, too. It's the same warning. Do you remember I've ever mentioned that when I try to join the domain it succeed but still warned 'change the primary domain dns name of this computer to "" failed. the rpc server is unavailable.' I tried this in windows 7 and windows8.1, bath gave this

RPvs> On Tue, 22 May 2018 09:08:31 -0700 RPvs> Gregory Sloop via samba <samba at lists.samba.org> wrote: >> I was under the impression that during provision that the >> Administrator account got all the domain [and other] "root" privs by >> default. If that's the case, why doesn't Administrator have the privs >> we'd expect? [Perhaps I

On Wed, 18 Apr 2018 00:55:45 +0800 (CST) Ryan <ryanyang51 at 163.com> wrote: > Hi,Rowland, > Thanks for your reply. > In fact, I could build samba 4.5.16 and package it into several rpms. > Considering 4.5.16 is the last version of samba 4.5.x, I want to use > samba 4.8.0 instead. You don't want to use 4.8.0 , there is a problem with this version if you upgrade to it.

Hi, On 3/27/2018 6:37 AM, Erdei Miklos via samba wrote: &gt; Hi, &gt; &gt; I have a test AD running Samba on Ubuntu that I sometimes poke with Sysinternal's ADExplorer. &gt; A few days ago I tried connecting to it, but got a short reply of "The directory service is not available." &gt; As it was working earlier, I tried finding the problem. &gt; After

Hi, I have a test AD running Samba on Ubuntu that I sometimes poke with Sysinternal's ADExplorer. A few days ago I tried connecting to it, but got a short reply of "The directory service is not available." As it was working earlier, I tried finding the problem. After installing a few older releases, I found that it was working on Ubuntu 17.04, Samba 4.5.8 and stopped working on

Er..Actrually I don't use any windows as DC. Windows computer just the domain member for me. I've seen a similar thread https://lists.samba.org/archive/samba/2017-July/209728.html. I want to build a domain only using samba in linux as the DC. It's a new domain and my first DC. I'd like to believe it is not a samba problem. After all, it occurs in 4.7.x and 4.8.x, a such large

Actually 0904.huawei.com is just one of my test domain. I also built domain naned vds.huawei.com. Same problem exsts. Besides, samba 4.5.16 doesn't have this issue. I still doubt that some setting changed, such as encrypt method permission... After all, the log renainds password is wrong.Do you have any other clue? >On Fri, 14 Sep 2018 15:07:07 +0800 (CST) >Ryan via samba <samba at

On 3/27/2018 6:37 AM, Erdei Miklos via samba wrote: > Hi, > > I have a test AD running Samba on Ubuntu that I sometimes poke with Sysinternal's ADExplorer. > A few days ago I tried connecting to it, but got a short reply of "The directory service is not available." > As it was working earlier, I tried finding the problem. > After installing a few older releases, I

I'm trying to fix a replication error that occurs between Win2008R2 (srvwin) and Samba 4.7.6 DCs (srvsamba). Event viewer on Win2008R2 server reports that synchronization failed on a specific Computer object because of schema version misalignment between servers. I've then used repadmin to compare failing object on the two servers. Querying the windows server works but it fails

That was exactly what I was looking for. I hope 4.8 should not be too far away... ;) In the meantime I found this in the logs at level 2: [2018/01/22 21:15:50.010307,  3] ../source4/auth/ntlm/auth.c:240(auth_check_password_send)   auth_check_password_send: Checking password for unmapped user [(null)]\[cn=LDAP,cn=Users,dc=my,dc=domain,dc=com]@[(null)]   auth_check_password_send: user is:

Maybe as you said I was lucky before. Then if I have a computer account in my domain, how can I get this computer authencated in domain as I did before? Does the NetJoinDomain work either? Because I just try to create a computer account using RSAT, but use it to authencate with the domain by NetJoinDomain , which failed. Or how to offline domain join in samba4.9.0? Ryan >On Fri, 14 Sep

Hello, I find that samba support several encrypt method. Iwant to disable RC4, where can I set it? My samba version is 4.5.16. Thanks.

So, I setup Samba on Ubuntu 18.04, using the packaged Samba version. [Thanks Rowland/Louis et al.] I'm doing some testing/tinkering using FreeNAS as a share, using the AD as the authentication back-end. As part of that process, you need to add a computer account and change some security settings. I setup RSAT and can see the AD tree, and add users etc. When I try to switch to advanced view

Hi all. I'm experiencing a little problem when I rename an already joined windows machine. The rename operation is done in the traditional way "Computer properties> advanced settings> Computer name> change" in a windows 7 Machine. The rename itself finishes successful, but when I check the computer name in the ADUC, the old name is still displayed. Checking the object