similar to: classicupgrade

Hello Rowland and thanks for fast answer according with your suggestion i modified my smb.conf like this: [global]         lanman auth = Yes         log file = /var/log/samba/%m.log         ntlm auth = ntlmv1-permitted         realm = LXCERRUTI.COM         security = ADS         winbind offline logon = Yes         winbind use default domain = Yes         workgroup = LXCERRUTI        

On Fri, 26 Oct 2018 16:47:52 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > thank you for your comprehension > > Il 26/10/2018 16:40, Rowland Penny via samba ha scritto: > > OK, two further ldbsearches: > > > > ldbsearch -Hldap://$(hostname -s) -k yes -P > > '(&(samaccountname=*)(uidNumber=*))' uidNumber | grep uidNumber

On Mon, 5 Nov 2018 11:51:00 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 05/11/2018 11:41, Rowland Penny via samba ha scritto: > > You might as well remove the line 'winbind use default domain = > > Yes', it does nothing on a DC. > > I would also add 'idmap_ldb:use rfc2307 = yes' > ok, i did it > > When

Hello Luis tomorrow i'm not in office, reply to you thursday One question : who is owner and whats rights for dir     /home     /home/samba     /home/samba/sysvol because, from windows client, user into domain admins, when i change in security tab, explorer always crash bye Il 06/11/2018 17:16, L.P.H. van Belle via samba ha scritto: > Ok, next, > > From a windows pc connect to

Il 26/10/2018 13:45, Rowland Penny via samba ha scritto: > ldbsearch -Hldap://$(hostname -s) -k yes -P '(&(samaccountname=Domain > Users)(gidNumber=*))' gidNumber | grep gidNumber | awk '{print $NF}' sorry but nothing happen [root at dc1 ~]# ldbsearch -H ldap://$(hostname -s) -k yes -P '(&(samaccountname=Domain Users)(gidNumber=*))' gidNumber | grep

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx

On Fri, 26 Oct 2018 14:25:52 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 26/10/2018 14:03, Rowland Penny via samba ha scritto: > > ldbsearch -Hldap://$(hostname -s) -k yes -P > > '(&(samaccountname=Domain Users)(gidNumber=*))' gidNumber | grep > > gidNumber | awk '{print $NF}' > > [root at dc1 ~]#

On Fri, 26 Oct 2018 12:57:52 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 26 Oct 2018 13:50:44 +0200 > Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > > > > > Il 26/10/2018 13:45, Rowland Penny via samba ha scritto: > > > ldbsearch -Hldap://$(hostname -s) -k yes -P > > >

On Fri, 26 Oct 2018 15:09:35 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 26/10/2018 14:49, Rowland Penny via samba ha scritto: > > Please post the smb.conf from the PDC. > > [global] >         workgroup = LXCERRUTI >         netbios name = SRVCERRUTI >         server string = Samba PDC - Versione %v >         passwd

here my smb.conf [global]         netbios name = DC1         realm = LXDOM.COM         server role = active directory domain controller         workgroup = LXDOM         idmap_ldb:use rfc2307 = yes         log level = 1         log file = /usr/local/samba/var/log.%m Il 29/11/2018 12:43, Rowland Penny via samba ha scritto: > On Thu, 29 Nov 2018 12:34:29 +0100 > Corrado

Il 26/10/2018 10:48, Rowland Penny via samba ha scritto: > I am willing to lay money that the gidNumber attribute for Domain Users > contains '513', if so, your ranges are not compatible are yuo a wizard ?? :-) > > What does 'wbinfo --group-info Domain\ Users' return ? on dc LXCERRUTI\domain users:x:100: :-( on member , after i added     idmap config LXCERRUTI :

> It looks like Domain Users does not have a gidNumber attribute, '100' > is the default ID set by Samba in idmap.ldb on a DC. can i change this id or is better if i change id in my userers/folders ?? > How did you carry out the classicupgrade and what from ? like wiki.samba.org suggest in classicupgrade and i used samba 4.9.1 compiled from source -- *Corrado Ravinetto *

On Mon, 29 Oct 2018 10:39:21 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > MAGIC !! > after last email i can see my groups in member : > > dr-xr-xr-x.  11 root     g_cerruti          4096 19 ott 10.43 > AntiVirus drwxrwx---.   8 root     g_comdise          4096  7 ott > 2017 CommDise drwxrwx---.   2 root     g_datidirezione       6 21 > apr 

Il 31/10/2018 16:59, Rowland Penny via samba ha scritto: > The 'idmap config' doesn't work on a DC. > The 'winbind' line doesn't work on a DC. ok, this smb.conf is default from classicupgrade i take out they > Do you really need an insecure auth method ? why ?? > Who was the user you where trying to connect as ? a normal user i tried also with users with

Hallo at all after classicupgrade in my production environment, i found many of this alert in log.wb-LXDOM [2018/11/29 12:07:55.180009,  3] ../source3/winbindd/winbindd_rpc.c:272(rpc_name_to_sid)   name_to_sid: LXDOM\SPECOLA8$ for domain LXDOM [2018/11/29 12:07:55.181274,  3] ../source3/winbindd/winbindd_samr.c:659(sam_sid_to_name)   sam_sid_to_name [2018/11/29 12:07:55.837701,  3]

On Mon, 29 Oct 2018 09:41:40 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > Hello Rowland > > Il 26/10/2018 18:03, Rowland Penny via samba ha scritto: > > what does 'getent passwd ausername' show ? > nothing :-( is this on a DC or a Unix domain member ? If you are compiling Samba yourself, have you created the libnss_winbind links ? See

On Fri, 26 Oct 2018 16:23:32 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 26/10/2018 15:59, Rowland Penny via samba ha scritto: > > Did you test the upgrade process in a separate network ? > yes i have installed 2 new vm with centos 7 from dvd > > Did you carry out the upgrade on the original PDC or on a new > > computer ? >

On Fri, 26 Oct 2018 08:27:10 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > Hello > I used > https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade) > to migrated my old samba 3, i created a dc and a member file server, > but on member i can't see id for usernames and groups. > This is my smb.conf on dc >

Hello all this morning i followed wiki in subject to replicate my active directory, but it fails with this error: [root at dc1 etc]#  samba-tool drs showrepl Default-First-Site-Name\DC1 DSA Options: 0x00000001 DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f DSA invocationId: 834770f4-c5a7-48c7-bc77-66e2cf37e557 ==== INBOUND NEIGHBORS ==== DC=ForestDnsZones,DC=lxcerruti,DC=com        

On Fri, 26 Oct 2018 10:20:21 +0200 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > Hello Rowland and thanks for fast answer > according with your suggestion i modified my smb.conf like this: > [global] >         lanman auth = Yes >         log file = /var/log/samba/%m.log >         ntlm auth = ntlmv1-permitted >         realm = LXCERRUTI.COM >