similar to: Samba with AD : SID rejected

Le 03/05/2019 à 16:20, L.P.H. van Belle a écrit : > Hai, > > wbinfo -Y S-1-5-21-2816186202-4468957523-2022743653-513 > Does this resolve? > You should see "domain users" I see 13010 (that's normal according to the doc) but wbinfo --sid-to-fullname S-1-5-21-2816186202-4468957523-2022743653-513 give me "domain users" > > And your missing your

Hi, Louis, Rowland, thanks for you answer. @Louis All packages were installed. I change my config file following your advices, the problem is still here. I already followed guides from thctlo's github. @Rowland Yes, my dns domain was different, but answered also to test.lan. It's now set to 'kdc=dc.foo.lab' I have my user vincent with uidNumber 10010 and gidNumber 13010

Thanks for your time. Now,  wbinfo -G 13010 and wbinfo -Y work. But I still don't see any domain users in getent passwd, and wbinfo --user-sids=S-1-5-21-2816186202-4468957523-2022743653-4403 still fails with getusersids S-1-5-21-2816186202-4468957523-2022743653-4403 [2019/05/03 15:50:51.978858,  3, pid=910, effective(0, 0), real(0, 0), class=winbind]

Hello, I'm building a samba share with Active Directory authentication, based on samba wiki documentation. I'm using Samba Version 4.7.6-Ubuntu (Ubuntu 18.04) and Windows Server 2019. I added manually Unix fields in my AD users attributes (based on https://wiki.samba.org/index.php/Installing_RSAT#Missing_Unix_Attributes_tab_in_ADUC_on_Windows_10_and_Windows_Server_2016) I joined correctly

On Fri, 3 May 2019 17:16:41 +0200 Vincent Ducot via samba <samba at lists.samba.org> wrote: > getent passwd still only shows local unix accounts, and I got the > error "getpwent failed: NT_STATUS_NO_MORE_ENTRIES" in log.winbindd. > > getent passwd vincent shows nothing and I got in the log file: > > winbindd_getpwnam: My domain -- rejecting getpwnam() for

Le 06/05/2019 à 12:06, Rowland Penny via samba a écrit : > On Mon, 6 May 2019 11:47:34 +0200 > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > >> Le 06/05/2019 à 11:23, Rowland Penny via samba a écrit : >>> On Mon, 6 May 2019 10:58:56 +0200 >>> Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: >>> >>>> Le

Le 06/05/2019 à 11:23, Rowland Penny via samba a écrit : > On Mon, 6 May 2019 10:58:56 +0200 > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > >> Le 06/05/2019 à 10:46, Rowland Penny via samba a écrit : >>> On Mon, 6 May 2019 09:08:10 +0200 >>> Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: >>> >>>> Hi,

Le 03/05/2019 à 13:10, Rowland Penny via samba a écrit : > On Fri, 3 May 2019 12:06:38 +0200 > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > >> Hi, >> Louis, Rowland, thanks for you answer. >> >> @Louis >> All packages were installed. >> I change my config file following your advices, the problem is still >> here. I already

Le 06/05/2019 à 10:46, Rowland Penny via samba a écrit : > On Mon, 6 May 2019 09:08:10 +0200 > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > >> Hi, >> >> sorry for the mistake, I meaned >> >> getent passwd vincent shows nothing and I got in the log file: >> >> winbindd_getpwnam: My domain -- rejecting getpwnam() for FOO\vincent.

On Mon, 6 May 2019 09:08:10 +0200 Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > Hi, > > sorry for the mistake, I meaned > > getent passwd vincent shows nothing and I got in the log file: > > winbindd_getpwnam: My domain -- rejecting getpwnam() for FOO\vincent. > > 'wbinfo -u | grep 'vincent' returns vincent, it's the good username.

On Mon, 6 May 2019 15:33:08 +0200 Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > Le 06/05/2019 à 12:06, Rowland Penny via samba a écrit : > > On Mon, 6 May 2019 11:47:34 +0200 > > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > > > >> Le 06/05/2019 à 11:23, Rowland Penny via samba a écrit : > >>> On Mon, 6 May 2019

On Mon, 6 May 2019 11:47:34 +0200 Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > Le 06/05/2019 à 11:23, Rowland Penny via samba a écrit : > > On Mon, 6 May 2019 10:58:56 +0200 > > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > > > >> Le 06/05/2019 à 10:46, Rowland Penny via samba a écrit : > >>> On Mon, 6 May 2019

On Mon, 6 May 2019 10:58:56 +0200 Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > Le 06/05/2019 à 10:46, Rowland Penny via samba a écrit : > > On Mon, 6 May 2019 09:08:10 +0200 > > Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > > > >> Hi, > >> > >> sorry for the mistake, I meaned > >> > >>

On Fri, 3 May 2019 12:06:38 +0200 Vincent Ducot <vincent.ducot at rubycat-labs.com> wrote: > Hi, > Louis, Rowland, thanks for you answer. > > @Louis > All packages were installed. > I change my config file following your advices, the problem is still > here. I already followed guides from thctlo's github. > > @Rowland > Yes, my dns domain was different,

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

> we point them to somedom.contoso.com which is then > resolved to both and the client can pick I want to avoid Round-Robin DNS > You cannot use CTDB with AD DCs You can. /etc/ctdb/nodes 192.168.30.11 192.168.30.12 /etc/ctdb/public_addresses 192.168.30.10/24 ens18 /etc/ctdb/events/legacy/20.samba-ad.script #!/usr/bin/env bash function monitor_ldap() { ldbsearch -H

Hi to all, I'm having a CTDB-Cluster with two nodes (both Ubuntu wit Sernet-packages 4.17.4). Now I want to replace one of the nodes. The first step was to bring a new node to the CTDB-Cluster. This time a Debian 11 but with the same sernet-packages (4.17.4). Adding the new node to /etc/ctdb/nodes at the end of the list. And the virtual IP to /etc/ctdb/public_addresses, also at the end

Can someone help me determine if these errors are normal or if this could somehow be the cause? I've removed the last three columns for readability - they were all zeros. # column -t /proc/net/dev Inter-| Receive | Transmit face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo lo: 133093161 146045 0

Hello All, Please help.. I can not join an additional new samba dc ver. 4.19.5 to an existing samba Ad version 4.19.5 functional level 2008 R2. Last week I successfully demote an offline dc3 and move the fsmo role to dc4. The command i used to join: it at dc6:~$ sudo samba-tool domain join NICHO.COM DC -UAdministrator at NICHO.COM --option='idmap_ldb:use rfc2307 = yes'