similar to: Samba 4.4.8 AD member ads / nss fails to find group id

On Fri, 29 Mar 2019 09:30:13 -0400 "Thomas, David via samba" <samba at lists.samba.org> wrote: > I have a Centos 7.6 server with samba 4.8.3  configured as a member > of an AD domain using "ads' security and the "nss" idmap backend. > > Clients are unable to access the shares on the server - they > repeatedly get asked for their credentials. >

Hello, We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am able to duplicate this issue with both classicupgrade and a new provision (both cases using internal DNS). I am able to join a 2008R2 system to the domain and promote it to a DC, however I am unable to demote it. The problem appears to be that the 2008R2 server fails replicating to the S4 DC. The specific error that I

Hello, It seems Samba4 is having problems with CNAME records. I am seeing the same behavior as mentioned in the thread below. Is there any ETA on a fix for this? This is identical to the problem with MX records. This is currently a much bigger problem than the MX records. I appreciate any assistance. [root at DC1 var]# dig autodiscover.testdom.com CNAME ; <<>> DiG

Hi , We ran the classic upgrade and migrated the domain . We were then able to add a Windows Server 2008R2 and dcpromo it. Here are some of the issues we are seeing post migration - Pre the migration, the password backend was LDAP. We had some groups that we had migrated into LDAP from TBD. These groups doesn't seem to have come up in AD. - Any groups that were created in

Hi, We are running Samba 4.0.9 running on centos 6.5 (64bit) with SecureLinux disabled. Having some share access issues, what are we missing to solve this puzzle? We are attempting to get the MSDFS share working. Until we can fix this we cannot continue. This is the Domain provision and dns, and reverse zone setup. Dhcp server set point all clients at samba as primary dns server. Nslookup

It looks like I've gotten the majority of things working in regards to Winbind. Users are being authenticated by the NT4 PDC when connecting to shares, but I can't seem to get things set up correctly to allow logging in via SSH(OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f). It appears as though I'm successfully authenticated by the PDC, but then the connection is

Hi, I am having a problem with Winbind: First, some information .. Domain name :TESTDOM PDC's Netbios name : ubuntu Samba version : 3.0.20 (lateset patches installed) with LDAP backend. Linux : Ubuntu 2.6.10 Samba is running smoothly, with no problems. I want to use Winbin, so I followed Samba HowTo - chapter 23 http://us5.samba.org/samba/docs/man/Samba3-HOWTO/winbind.html#id2634776 I

Hi List, I used samba-4.1.18 as domain controller and tried to use romaing profile. I got memory leak when every account with profile path setting logout. Every account with profile path setting eat almost 10mB memory so my samba machine crash if there are many hundred account with profile setting in domain. Any option in smb.conf or operation can help ? This is my reproduce setps: 1. create

Hello all, I'm trying to set up my samba server rev 3.2.3 on opensuse 10.3 as a member of the active directory domain, so that client connections can be authenticated by the AD server. Unfortunately when I try to connect to the samba server from a windows XP system, it keeps on asking me for user name and password. I've been reading through various howto's and descriptions but no

My Question: ------------ Is it possible to get 2-way Interdomain Trust relationships working between a Samba domain and an NT4 SP6a domain, while restricting all password hashes to NTLMv2 only? Everything works except the inter-domain trust I'm able to get the NT4 domain to trust the Samba domain, but not the other way around. My System: ---------- I have a perfectly running Samba domain

Hello, After noticing some odd behavior on my domain, I realized that many of my DNS records are incorrect and that clients are no longer properly updating DNS. While looking into this, I also discovered that I am unable to delete MX records via AD DNS Manager or samba-tool. Both tools "see" the record but report it does not exist when I attempt to delete it. I can create new MX

Hello, we are running samba 3.3.8 on RHEL 5.5 - connected to Active Directory via winbind. Everything seems to work fine: matching of UID/GID is working which can be tested with ... wbinfo -i <username> wbinfo -n <username> wbinfo -s SID ... BUT it takes about 1 min until a connection to the samba server can be established or until the available samba shares are listed: net use x:

Hello, In an effort to get MX and CNAME records working, I have migrated from Samba's internal DNS to bind9_dlz. I am now seeing strange behavior where CNAME records resolve correctly on the S4 DC, but not from workstations. Please see the case below where I have foo.internal.testdom.com aliased to google.com using a CNAME record. I do not understand why this is occurring This should work,

Hi samba folks, I'm running an NT$-style samba PDC and 2 BDCs. They are all on samba 3.6.25 (the SERNET packages on debian wheezy) I have a domain trust with another server on another subnet, I think they run samba 3.5, also NT4-style domain. Everything ran fine, they can login to our machines and vice versa, winbind can resolve their usernames etc. Now I upgraded the PDC to debian jessie,

Hello, I?m unable to get Samba4 to join an existing AD domain as a DC. Running a Win2k12 R2 Server as primary. This is a test server, before rolling it out live to a remote location. it at testdom:~$ sudo samba-tool domain join example.com DC -Uadministrator ?realm=example.com --server "ad.example.com" --dns=SAMBA_INTERNAL -WEXAMPLE [sudo] password for it: Password for

Hello I configured a samba 4.3.1 service on a Centos 6.5 32 bit system and installed it in the /home/samba/samba-4.3.1 directory (I know this is not a good place but it was the only partition with enough free space). The samba is running as an Active Directory Domain Controller with rfc2307 enabled and embedded DNS server. This is my smb.conf # Global parameters [global] workgroup =

Greetings! I'm trying to get an OpenLDAP (2.4.15-1ubuntu3), Samba PDC (2:3.3.2-1ubuntu3.1) running under Ubuntu Jaunty. I've followed the instructions on the Ubuntu server guide (https://help.ubuntu.com/9.04/serverguide/C/samba-ldap.html) as closely as possible (twice. . .), and spent some time with Chapter 5 of the Samba3 By Example book, trying to use it to get things working. But I

After realizing my CUPS printername in /etc/cups/cupsd.conf must be the same as my samba printer sharename (I don't think it says that anywhere in any HOWTO, correct me if I'm wrong though) I am now getting to the printer resource but... Using Samba 3.0.1 and attempting to connect to a samba cups printer with Win2000 I am getting the following samba error: Returning domain sid for

On 27.08.2023 23:45, Andrew Bartlett wrote: > On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: >> Hi folks, >> >> I just wonder why it is not possible to set domain password policies >> with GPO, using the Windows RSAT Group Policy Manager? For most >> other >> settings, using GPOs through RSAT works. >> >> For somebody who sets

Hi Rowland, I tried that but didn't work. # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 9033b998 dn: olcDatabase={1}hdb objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {1}hdb olcDbDirectory: /var/lib/ldap olcSuffix: dc=testdom olcAccess: {0}to attrs=sambaNTPassword,sambaPwdLastSet,sambaPwdMustChange by dn="cn=admin,dc=testdom" write by self