similar to: samba-tool ldapcmp attribute order

On Fri, 2018-09-07 at 07:34 +0200, Jakob Lenfers via samba wrote: > Hi List, > > I successfully added a new schema to my DCs a couple of weeks ago (and > didn't do anything with it yet.) Today I wanted to edit the schema some > more but found the samba-tool ldapcmp command and ran it between my two DCs: > > > * Comparing [SCHEMA] context... > > > > *

Am 09.01.19 um 14:01 schrieb Rowland Penny via samba: > Try reading this: > > https://wiki.samba.org/index.php/Configure_DHCP_to_update_DNS_records_with_BIND9 > > It's for DHCP updating dns records, but it uses a dedicated user and > kerberos, so it should help you. Thats exactly what I wanted, thanks. Just a little problem, "samba-tool [...] -k yes" after

Hi, I created a script to add DNS entries with samba-tool (for LetsEncrypt, as a dehydrated hook.) Works fine, but I have the password for the dedicated user to do that in the script in the clear. I think I read somewhere something about doing it with kerberos, but I never used kerberos and don't know where to start. Is there any good way to be doing this? Thanks, Jakob

Hi, I'm starting to manually migrate my samba3 (or now samba4 classic) servers into a new samba4 AD domain. (All servers are running with v4.7.4) The DCs are running fine and I'm testing my first member server. Works well with Windows 10 domain members, but we won't be adding all clients into the domain just yet. Our old login scripts that map the drives do create problems now, since

Hi, sorry if this is off topic, but it only happens when samba is involved, maybe anybody here has an idea. System info: - Clients used were Win10, ranging from 1803 to 1903. - The DCs are running Samba 4.7.6. - The print server is a member server. I tried both scenarios with two samba print servers, Ubuntu 18.04, Cups 2.7. One had Ubuntus Samba, 4.7.6. The other used Louis van Belles 4.10.7. -

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: donderdag 10 januari 2019 14:09 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] samba-tool auth in scripts > > On Thu, 10 Jan 2019 11:42:46 +0100 > Jakob Lenfers <lenfers at bigsss-bremen.de> wrote: > > > Am

Am 02.07.2018 um 11:01 schrieb Rowland Penny via samba: > On Mon, 2 Jul 2018 10:19:29 +0200 > Jakob Lenfers via samba <samba at lists.samba.org> wrote: > You can extend the schema, Samba even supplies a script to turn > openldap schemas to Active directory ldifs and it has the imaginative > name of 'oLschema2ldif' Thanks, will check it out. >> - Is it feasible

Am 10.01.19 um 14:09 schrieb Rowland Penny via samba: > You don't ;-) > You do what the script should have done (I feel version 0.8.10 will > soon make an appearance), export the cache to use <export > KRB5CCNAME="/tmp/dhcp-dyndns.cc"> and then use '$KRB5CCNAME' wherever > '/tmp/dhcp-dyndns.cc' appears, except for: > [...] Yes, that worked.

Hi, I'm setting up a server with Dovecot (2.2.2) and Postfix (3.1.0). Dovecot authenticates against LDAP and Postfix uses Dovecots SASL. That already works fine. But I would like to have slightly different LDAP settings for Dovecot and Postfix. Current setup: passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args =

Am 02.07.2018 um 15:13 schrieb Rowland Penny via samba: > You really need to speak to Louis about email, but I think he would > suggest investigating Kopano. I like it and checked it out in the past, but I cannot rent software, I can only buy. And nightly builds in the CE aren't my cup of tea. >> Nextcloud works out of the box, but if I want to manage quotas there, >>

Hi, we moved (or still are moving) our users manually from our Samba NT4 Domain with LDAP to a Samba AD (4.7.6). We had a few schema extensions in our openLDAP to feed some services (dovecot mail settings, nextcloud quota, ...). I would prefer to have only one place for our users, but I'm new to AD. I've read that I can extend the schema, which seems not too different from openLDAP, even

On Thu, 10 Jan 2019 11:42:46 +0100 Jakob Lenfers <lenfers at bigsss-bremen.de> wrote: > Am 09.01.19 um 14:01 schrieb Rowland Penny via samba: > > > Try reading this: > > > > https://wiki.samba.org/index.php/Configure_DHCP_to_update_DNS_records_with_BIND9 > > > > It's for DHCP updating dns records, but it uses a dedicated user and > >

Hello, I have three DC's in an environment, and ldapcmp is failing. How can I figure out either what went wrong, or how to resolve the issue so that the databases are truly in sync? * Comparing [DOMAIN] context... * Objects to be compared: 2277 Comparing: 'CN=Builtin,DC=ad,DC=domain,DC=com' [ldap://192.168.10.81] 'CN=Builtin,DC=ad,DC=domain,DC=com'

Hello Folks, I'm a Brazilian student. I'm doing some labs about SAMBA4 AD DC with 4 domain controllers (03 Linux Debian 8 x64 with SAMBA 4.3.1 installed by souce packeage and 01 Windows Server 2008 R2 Standard x64 to study for LPIC3 certification exam.) About the "samba-tool ldapcmp" (https://wiki.samba.org/index.php/Samba-tool_ldapcmp), in my lab, even applying the indicated

Hello I am running samba-tool ldapcmp, but is giving the following error. What may be happening? samba-tool ldapcmp ldap://dc-server1 ldap://dc-server2 -Uadministrator domain --filter=msDS-NcType,serverState Password for [UEL.BR\administrator]: * Comparing [DOMAIN] context... Failed search of base=DC=campus,DC=uel,DC=br ERROR(ldb): uncaught exception - LDAP client internal error:

I am in the process of preparing to demote a couple of (hardware) aging domain controllers. At moment, I have four DC's running on my domain. When I "ldapcmp" between any of the DC's I get failures that appear to be simple "typos". Like these: root at dtdc07:~# samba-tool ldapcmp ldap://dtdc03 ldap://dtdc07 -Uadministrator >>>>> snipped for brevity

Thank you Rowland for these info. So no more issue with 4.2.3 and auto-replication : ) Cheers 2015-09-03 11:52 GMT+02:00 Rowland Penny <rowlandpenny241155 at gmail.com>: > On 03/09/15 09:59, mathias dufresne wrote: > >> Hi Mourik, >> >> whenChanged was replicated in my test once I did replicate in both way, so >> it seems to me it is supposed to be

Hi all, I have just updated our dc's from sernet 4.1.11 to sernet 4.1.12. And suddenly since that update, we're getting many ldapcmp failures on the attribute 'whenChanged'. In 4.1.11 life was good, and ldapcmp reported no differences at all. Here is a sample: (dc2 <-> dc3) Comparing: 'CN=podcast,CN=Users,DC=samba,DC=company,DC=com' [ldap://dc2]

Attempting to debug issues with replication I ldapcmd finds differences with the case of the "DC" attribute? Is this normal? LARKIN28 is Samba4 4.5.4, while WINDC1 is Windows 2008R2. [root at larkin28 samba]# samba-tool ldapcmp ldap://larkin28.micore.us ldap://windc1.micore.us -Uadministrator dnsdomain Password for [BACKBONE\administrator]: * Comparing [DNSDOMAIN] context... *

Hi there! Here it is a setup with an Windows 2003 SBS and two Samba 4.1.2. Everything is working fine, but I found differences in LDAP and need to know if this is relevant for replication samba-tool ldapcmp ldap://sbssrv2003 ldap://samba4.1.2 [...] Comparing: 'CN=Builtin,DC=SAMBADOMAIN,DC=local' [ldap://gaia] 'CN=Builtin,DC=SAMBADOMAIN,DC=local' [ldap://samba1] Attributes