similar to: samba-tool group removemembers, not working

I hate to be a complete moron on this, but I'm apparently not setting YOURDCNAME_HERE correctly. I get the errors: Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to connect to 'ldap://mail' with backend 'ldap': LDAP client internal error: NT_STATUS_INVALID_PARAMETER Failed to connect to ldap://mail - LDAP client internal error:

On Tue, 28 May 2019 11:04:01 +0200 Denis Cardon <dcardon at tranquil.it> wrote: > Hi Mark, > > > Because of other issues using ADUC, I tried to remove a domain member using: > > > >> samba-tool group removemembers "Domain Computers" MARKA\$ > > Removed members from group Domain Computers > > > > As shown, it say it "Removed

Hai, Can you post the output of : ldbsearch --show-binary -H ldap://YOURDCNAME_HERE "(&(objectClass=computer)(sAMAccountName=MARKA$))" -k yes | grep -v '#' | grep -v 'ref:' (https://bugzilla.samba.org/show_bug.cgi?id=11482) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Denis

Hi Mark, > Because of other issues using ADUC, I tried to remove a domain member using: > >> samba-tool group removemembers "Domain Computers" MARKA\$ > Removed members from group Domain Computers > > As shown, it say it "Removed members", but ... > >> samba-tool group listmembers "Domain Computers" > : > LABRAT$ > : >

Hello Folks, We're using Samba as AD servers along with Windows AD Servers (2008R2 FL). We also use SCCM (Current Branch) that is dependent on AD for lab deployments (Windows 10). Currently, SCCM (current branch) supports 2008R2 FL, but for how long??? Samba does not support 2012R2, 2016, 2019 FL. We'd like to remove the Windows Servers from our AD infrastructure, but would also like

Hello, A client is asking about disabling, deleting or renaming the domain "Administrator" account on a Samba AD. I've seen this done on Windows AD domains for security purposes. Assuming the risk of being locked-out is mitigated (i.e. an equivalent user is created and is a member of the same groups), is there any reason this can't be done on a Samba AD as well? Is the

I'm trying to move my current Samba AD DC VM from EXSi vSphere to XenServer (XCP-NG). I was able to export the VM to .OVA file & import it into XCP-NG fine. I was able to open ADUC & the DNS manager in Windows without an issue. But my web server had a lot of these errors in the log & couldn't mount the SMB shares from the file server: kerberos_kinit_password <HOSTNAME>

Over time I have ignored the fact that my AD administrator has stopped being able to administer. For example, the Ad administrator cannot install drivers or updates. Once a week now, I logout as workstation user and login as the "local administrator" to install drivers or run windows updates (in today's case a printer driver on the workstation.) Does this falls into that "gray

FreeBSD 12 Samba 4.8.12 Samba is not showing up on my Win 10 PRO machine. I can access the shares if I use the machines hostname or IP, though. How can I determine what version of ?smb? is being used? I have set ?client max protocol = SMB3? in the config file; however, I am not sure if it is being used. Thanks! -- Gerard -------------- next part -------------- A non-text attachment was

Sorry for the repost: my message delivery was set to digest, and that was hard to manage use for conversation. I changed that setting. So starting clean with the same subject... I don't care about SSSD or whether it's even on the machine or not. Right now, it's only used by the machine for login. It isn't used by Samba, and I am very careful to let libwbclient-sssd nowhere near

Hello, a few years ago, I had encountered a problem regarding the inclusion of "%G" in logon script (logon script = %G.bat). The logon script with %G" was not executed I have this problem again with samba Version: 2:4.9.5+dfsg-5 on debian stable. Is it the same bug? For the moment i use this kind of script to use group definition : logon script = logon.bat logon.bat script :

Hello All, I would like to use OpenVPN with Samba 4 AD using the LDAP Auth plugin. However, my tests come up with the following errors in the OpenVPN... LDAP bind failed: Strong(er) authentication required (BindSimple: Transport encryption required.) Unable to bind as CN=VPN Connect,CN=Users,DC=MYDOMAIN,DC=COM LDAP connect failed. PLUGIN_CALL: POST

On 18/07/19 7:12 AM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> >> Here's the full error: >> >> Could not find machine account in secrets database: Failed to fetch >> machine account password for EDM from both secrets.ldb (Could not >> find entry to match filter: >>

Dear Samba Users, I set a samba share (4.8.1) on a linux (centos 7) as server member ; authentication is done against a AD win 2012 R2 server through winbind. I thought authentication was using kerberos, but I checked log and found : Auth: [SMB2,(null)] user [MYDOMAIN]\[mydomainuser] at [mar., 11 juin 2019 10:21:42.000927 -03] with [NTLMv2] status [NT_STATUS_OK] workstation [CANONDCE0BD]

> Hi Mark, can I ask just what you are trying to achieve ? Well, it's rather simple. I want to remove a domain member from the domain. Normally, I do that with ADUC, no problem. But for some reason I was having trouble with ADUC (since resovled, magically), so I thought I'd try the same thing using samba-tool. That's it really. You wrote further: > I hope you can see that

Hai guys, I've updated the Debian Stretch package for Samba 4.10.2, 4.9.6 and 4.8.11. Repo info : https://apt.van-belle.nl Build logs: http://downloads.van-belle.nl/samba4/Buildlogs/stretch/ Quick repo setup: Optional: apt-get install apt-transport-https Import my public key: wget -O - http://apt.van-belle.nl/louis-van-belle.gpg-key.asc | apt-key add - # Example repo stretch samba

Hi list, Does someone know a way to automatically store the hwaddress in the AD? I'm using Veyon in my school to manage the students PCs and if the hwadress is populated in the AD, the Room configuration can be set with AD otherwise i have to manage rooms manually. I'm using samba4 with bind and isc-dhcp-server are on the same server. Can we use scripts or some ways? thanks in advance

We stopped the migration, because we had to many problems. For your information: The windows-domain was set up in 2002 with windows 2000 and was raised up to windows 2012 over the years. The domain is responsible for the login of all 20.000 students. So over the years they have over 170.000 Objects. For the migration we used the 4.11 sernet-packages. We started with 32GB of RAM and noticed that

Hi folks, we'd like to provision new Samba servers (file sharing only) with the system keytab. It will precreated by some other process (msktutil) because we don't have direct access to a domain admin account. Is there any degragation in functionality by not using "secrets and keytab" and not doing "net ads join"? This is somewhat similiar to my question from

Actually, I do/did leave the domain in the normal Windows way. But the (former) domain member computer still always show both in ADUC and samba-tool group listmembers "Domain Computers". So, I normally do a 2nd step by deleting the computer with ADUC. After doing so the computer no longer shows with samba-tool group listmembers "Domain Computers". I was simply looking for