similar to: DNS issue in samba 4.9.0rc3

Hello, Rowland. what I set in RSAT is: nis domain "ntbaobei" uid "10000" login shell "/sbin/nologin" home dir "/home/Administrator" primary group "domain admins" I never used user map beacuse everything worked ok before. I knew the "root" user can granting the SeDiskOperatorPrivilege Privilege. Is there any changelog in samba 4.7.7 that

Hi Rowland, Yes. all users primary group is "domain users". my "domain admins" has a gidNumber. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 22:44 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of

Hi Rowland, I have checked that Adinistrator is a member of "Domain Admins" in ADUC. Base Permission of the share folder is 0770 and own is root and the groups is "domain admins" in linux. since "smbstatus -b" show that administrator's group is root. Is this related to my previous configuration? I once give a uidNumber to administrator. here's full contant

On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of "Domain Admins" in ADUC. > Base Permission of the share folder is 0770 and  own is root  and the > groups is "domain admins" in linux. > since "smbstatus -b" show that administrator's group is root. Is this > related to my

Hello, everyone. I have set up a new samba AD DC in my experimental environment. Version 4.7.7 of sernet samba. Everything is Ok. and I set some user's unix attributes in a windows client wia RSAT. every user can be got in a linux domain member via "getent passwd", but the user administrator who has been set unix attributes can not be got in that linux domain member. here is

Thanks, Rowland , 'net cache flush' solved my problem. but I found that I can't access any share in \\myshare. some related configurations in my smb,conf .... access based share enum = yes hide unreadable = yes username map = /etc/samba/user.map I can't see any share folder of my fileserver in fsmgmt.msc. and I run "smbstatus -b" PID Username Group

Hi, I eventually managed to install and join a Samba4 server as a member in an AD environment but I have a problem with the id command. wbinfo commands work but when I launch id command with a domain user I get "user unknown". Here is my smb.conf (Took from Samba Wiki) : idmap config *:backend = tdb idmap config *:range = 70001-80000 idmap config MYDOMAINNAME:backend = ad

Hi! I?m new to the list, and I?m not really having a ?problem?, but I?m seeing something in my log files that I wonder if I should be concerned. I?ve been using Dovecot (dovecot-0.99.14-8.fc4) on my Fedora Core 4 (kernel 2.6.17-1.2142_FC4) machine from quite some time. For the last few days, I?ve been seeing this in my daily ?Logwatch? e-mail: dovecot: Authentication Failures:

Andrew Bartlett, samba Think you for your reply. I know the process to resovle the problem now. first ,I need transferring and Seizing FSMO Roles to DC2 and then demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again. Right? Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1?

Hi. I've a Samba 3.4.7 running on Ubuntu 10.04 configured as PDC. It has always worked but lately these months strange things started to happen: clients cannot join the domain anymore. I had to reinstall a computer but when I tried to add it back to the domain I get this error message in Windows XP: DNS_INFO_NO_RECORDS. It seems windows cannot get server name via dns? The samba server runs

On Wed, 25 Apr 2018 22:32:10 +0200 Jakub Kulesza <jakkul+samba at gmail.com> wrote: > Rowland, thank you for answering! > > I have investigated this a bit, and I think that using 18.04 for the > new DC will not be successful anyway. Reasons: the AD I have has been > created back in the days when 14.04 LTS was fresh. The provisioning > scripts worked differently. 14.04 has

Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with FSMO role. And another is DC2. there's a error in DC1 when i use dbcheck tool. And samba-tool dbcheck --cross-ncs--fix can't fix that. And I made a big mistake ! In DC2 I use "tdbbackup -s .bak /var/lib/samba/private/sam.ldb" create a bak file. and using that bak file replace the sam.ldb

Rowland, thank you for answering! I have investigated this a bit, and I think that using 18.04 for the new DC will not be successful anyway. Reasons: the AD I have has been created back in the days when 14.04 LTS was fresh. The provisioning scripts worked differently. 14.04 has been upgraded to 16.04, and I think that I do not have all of the DNSes configured properly and this might be the cause

That link your using has few poing that needs fixing.. Its not a bad exampl.e For example. 5. apt-get install ntpdate.. Should be : apt-get install ntp You should configure the NTP daemon also on the AD-DC. Point (step 3) 10. systemctl stop samba-ad-dc smbd nmbd winbind Also needs systemctl stop disable smbd nmbd winbind systemctl stop mask smbd nmbd winbind 12. winbind enum users =

yes, I tried working with samba wiki and quad-verifying what is recommended to be checked. OK, I'll try to join using 18.04. the samba_dnsupdate tool does not have the --use-samba-tool option in ubuntu 16.04 2018-04-25 22:47 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 25 Apr 2018 22:32:10 +0200 > Jakub Kulesza <jakkul+samba at gmail.com> wrote:

Hi, thanks for the quick reply. I've now installed libpam-krb5 and copied the krb5.conf to /etc instead of the symlink. I've also installed the ntp service, but I'm still getting the same errors in the dns replication. The /etc/resolv.conf is managed by netplan under Ubuntu 18: nameserver 127.0.0.53 options edns0 search domain.com I've now changed the nameserver to

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote: > Hi Rowland, > >  I can manage the security permission, but I can't manage the share > permission after I remove the user "everyone"'s share permission and > add "domain admins" and "domain user" share permission. > Do you have any advice? > I take it you are referring to the

Hi, I hope someone can help me with the following problem. I followed the following guides to setup samba as an additional active directory server to my windows server with bind9 dns: https://www.tecmint.com/join-additio...r-replication/<https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/>

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber in ADUC? should I create another user in > Domain Adams"? >

Hello everybody, I've had a samba environment with the following "brief" description: - There are 2 DC (*samba4 *and *samba4bkp*) running samba version 4.1.6 on my domain (*SMB*). DNS back end is Samba Internal DNS; - I've added a new DC (*king*) running samba version 4.10.2 and as DC to *SMB *domain with BIND9 DNS Back End; - *king* has updated dns zones and