similar to: Convert from NT style Domain to AD on Ubuntu 18.04

On 3/19/19 2:52 PM, Rowland Penny via samba wrote: > On Tue, 19 Mar 2019 14:04:27 -0500 > John McMonagle <johnm at advocap.org> wrote: > >> I'm open to alternatives but need to be up and running 24/7 on the >> linux side. >> My boss hates windows more than I do and will likely be looking for a >> new job if I use windows to administer the the linux side.

Hello Christian, Can you post me the message you got from the samba-check-db-repl.sh, Then i'll add something for it. And can you tell with version nummer of the script your using. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: woensdag 10 mei 2017 9:30 > Aan:

In addition to Rowland comment. if you still able to test it. Remove 1 setting at a time, restart and test it. Start with these, in this order. logging = syslog only prefork children = 8 I think if the logging line is removed your problem is solved. man smb.conf /logging should explain more. Because I cant/find the setting : logging = syslog only Greetz, Louis

Hello Cristian, Well, nothing to say about your steps, these looks good. And lmdb could be disable in the sernet packages, cant say, i dont know. And only one DC has these problems or all? If only one DC crashed. Which DC crashes. Last added? Oldest? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian

On Thu, Apr 11, 2019 at 11:32 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 11 Apr 2019 10:54:13 -0700 > Vex Mage via samba <samba at lists.samba.org> wrote: > > > Hello, I've done a lot of reading and searching however; I could use > > some guidance. I just started working for a school in which there are > > a few Windows labs

Dear all, somehow, new PTR records are not visible. This is on 4.11.6 DC with BIND9 ... Here is what happens: root at dc1:~# cat /etc/samba/smb.conf # Global parameters [global] bind interfaces only = Yes interfaces = 127.0.0.1 XXX.YYY.103.1 netbios name = DC1 realm = SAMDOM.REST_OF_FQDN server role = active directory domain controller server

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

Hello you all, this is a bit OT but I think I'll find some people here that can help. We have 4 DCs all on the same site. This is working fine. 3 Are VMs one is a physical server. They are the only DNS servers in that network. On a member server running our icinga2 installation I have this in the resolv.conf: options rotate timeout:2 retries:1 search example.com nameserver x.x.x.x (ip dc1)

So strange.. I copied your commando's only change the arpa and servername / domainnames All worked. So far nobody told how there ad-dc and DNS is setup.. Which i why i added : > > Debian 10, my own packages. > > Samba 4.11.6 + BIND9_DLZ is used . Now are you using samba DNS or BIND_DLZ dns ? That might help here. Greetz, Louis > -----Oorspronkelijk

Hi, I am trying to implement bitlocker key management in samba4 ad. This has been posted a view times before: https://lists.samba.org/archive/samba/2015-December/196771.html https://lists.samba.org/archive/samba/2018-July/217168.html According to Andrew and this: https://docs.microsoft.com/en-us/previous-versions/orphan-topics/ws.10/cc722309(v=ws.10) the Schema should be ready for this.

Hello all, we have upgraded our 4 DCs from samba 4.4.12 to 4.6.3. The setup is working fine and no errors were displayed during the upgrade. After a day I noticed that the DC (dc1) holding the fsmo roles is missing one kcc connection (to dc3) in the output of samba-tool drs showrpl. Otherwise there are no errors displayed. On windows in the ADSites tool I see that the connection is missing and I

Hello you all, we are in the process of upgrading to windows 10 on all our workstations. We see one problem with redirected folders. We redirect Appdata to a network share. [profdata] comment = Profile Data Share path = /srv/profdata csc policy = disable hide files = /?esktop.ini/ntuser.ini/NTUSER.*/?humbs.db/$RECYCLE.BIN/ This worked great (although slow) with

Hai, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stephen Davies via samba > Verzonden: donderdag 25 april 2019 8:34 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] User mapping/login issue > > > > It would appear that there may be more than one issue with my smb.conf. > The scenario is a Centos 7

Am 20.05.19 um 11:59 schrieb Rowland penny via samba: >>          logging =syslog only > > Why do you have a parameter with another parameter as its value ? > > both 'logging' and 'syslog only' are both parameters, did you mean > 'logging = syslog' ? Yes I meant this "logging = syslog" > >>          server role = active

I've now changed the ownership to root, as you suggest. I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them. The ACLs on my individual home directory: root at server:/shares# getfacl /shares/DOMAIN/username getfacl: Removing leading '/' from absolute path names # file:

I don't know if this still works but it does what you want: https://www.samba.org/samba/docs/current/man-html/idmap_nss.8.html Regards Am 13.11.18 um 15:37 schrieb Rowland Penny via samba: > On Tue, 13 Nov 2018 09:21:14 -0500 > Richard Bollinger <rabollinger at gmail.com> wrote: > >> Prior to 4.8, without winbind in the picture, a windows user named >>

Hello all, I have a weird problem. We have several Windows 10 machines on our Network. All but one run older releases than 1709. We are using roaming profiles on those machines. The share is setup up as to allow different profiles depending on the machine used (see below). The %a is used as a legacy from times where WinXP and Win7 were used in parallel. The path then looks like this:

Hai, It does not happen often but yes, i also need some help as i cant know everything also and im new with freeradius. Im working on a configuration for samba member + freeradius with ntlm_auth. Why ntlm_auth, because the next one is kerberos and ldap auth to configure.. I want to have some fallback options here and you have to start somewhere. This is running on my new proxy/gateway

Has anyone found a workaround for Samba print servers? https://social.technet.microsoft.com/Forums/en-US/030ee94a-047d-460a-bc39-52351a199364/kb31639 12-breaks-point-and-print-restrictions-gpo-settings If I set the GPOs as stated on the WIKI (https://wiki.samba.org/index.php/Setting_up_Automatic _Printer_Driver_Downloads_for_Windows_Clients) Windows 10 refuses to install the driver with "a

Am 18.03.20 um 22:26 schrieb Andrew Bartlett: >> Also "samba-tool domain tombstones expunge --tombstone-lifetime=0" >> does >> not delete the records with "dNSTombstoned: TRUE". Is this a >> different >> tombstone? > > That would be a different tombstone, yes. Can someone help me out with the ldap/ldb syntax to delte those by cron? >