similar to: Disabling or deleting domain "Administrator" account

On Mon, 31 Aug 2020, Jonathon Reinhart via samba wrote: > On Mon, Aug 31, 2020 at 9:21 AM Harald Hannelius via samba > <samba at lists.samba.org> wrote: >> On Wed, 17 Jun 2020, Harald Hannelius wrote: >>> On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:54,

Over time I have ignored the fact that my AD administrator has stopped being able to administer. For example, the Ad administrator cannot install drivers or updates. Once a week now, I logout as workstation user and login as the "local administrator" to install drivers or run windows updates (in today's case a printer driver on the workstation.) Does this falls into that "gray

On Wed, 16 Sep 2020, Rowland penny via samba wrote: > On 16/09/2020 09:02, Harald Hannelius via samba wrote: >> On Mon, 31 Aug 2020, Jonathon Reinhart via samba wrote: >>> On Mon, Aug 31, 2020 at 9:21 AM Harald Hannelius via samba >>> <samba at lists.samba.org> wrote: >>>> On Wed, 17 Jun 2020, Harald Hannelius wrote: >>>>> On Wed, 17 Jun

Because of other issues using ADUC, I tried to remove a domain member using: > samba-tool group removemembers "Domain Computers" MARKA\$ Removed members from group Domain Computers As shown, it say it "Removed members", but ... > samba-tool group listmembers "Domain Computers" : LABRAT$ : OHPRSSTORAGE$ MARKA$ : COMMON$ : listmembers still shows the computer

Sorry to hop on an existing conversation but this seemed like a good point to jump in with this question. Say I have a service account, with a random password that is set to never expire. What component is expected to periodically renew (or request anew) the Kerberos TGT using that password? I see lots of information about SSSD handling this, but less so with Samba. Also, I understand that in

On 17/09/2020 09:01, Nick Howitt via samba wrote: > > > On 17/09/2020 08:41, Harald Hannelius via samba wrote: >> >> >> On Wed, 16 Sep 2020, Rowland penny via samba wrote: >>> On 16/09/2020 09:02, Harald Hannelius via samba wrote: >>>> On Mon, 31 Aug 2020, Jonathon Reinhart via samba wrote: >>>>> On Mon, Aug 31, 2020 at 9:21 AM Harald

Hello Folks, We're using Samba as AD servers along with Windows AD Servers (2008R2 FL). We also use SCCM (Current Branch) that is dependent on AD for lab deployments (Windows 10). Currently, SCCM (current branch) supports 2008R2 FL, but for how long??? Samba does not support 2012R2, 2016, 2019 FL. We'd like to remove the Windows Servers from our AD infrastructure, but would also like

On 16/07/2019 14:16, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:02, Jonathon Reinhart wrote: >>> Rowland, >>> >>> You could go another step further and run that with "notify" to >>> monitor for changes, instead of having to run it in a cron

On Wed, 17 Jun 2020, Harald Hannelius wrote: > On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>> On 17/06/2020 11:54, Harald Hannelius wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:39, Harald Hannelius via samba wrote: >>>>

On 16/07/2019 16:40, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:32 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:16, Jonathon Reinhart wrote: >>> On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba >>> <samba at lists.samba.org> wrote: >>>> On 16/07/2019 14:02, Jonathon Reinhart wrote:

On Sun, Apr 7, 2019 at 2:17 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > > On Sun, 7 Apr 2019 13:45:11 -0400 > Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > > > Interesting, I'm getting the same error using the LDB tools: > > > > ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H > >

Interesting, I'm getting the same error using the LDB tools: ONTHEFIVE\jreinhart-admin at samba-dc3:~$ samba-tool user list -H ldap://localhost ERROR(ldb): uncaught exception - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: Operation unavailable without authentication> <> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run return

On 16/07/2019 14:02, Jonathon Reinhart wrote: > Rowland, > > You could go another step further and run that with "notify" to > monitor for changes, instead of having to run it in a cron job. In my > experience, "notify" works using smbclient, but not so with > libsmbclient. Problem is, the script is written to be run on DC's that do not hold the PDC

I'm trying to move my current Samba AD DC VM from EXSi vSphere to XenServer (XCP-NG). I was able to export the VM to .OVA file & import it into XCP-NG fine. I was able to open ADUC & the DNS manager in Windows without an issue. But my web server had a lot of these errors in the log & couldn't mount the SMB shares from the file server: kerberos_kinit_password <HOSTNAME>

On Tue, 26 Mar 2019 07:37:54 -0400 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > I recently went through these steps from the wiki and took the > following notes which I had not yet shared / suggested for the wiki. > (This is from mobile, sorry for the terse message.) > > - You need to clear the idmap cache after copying idmap.ldb ("net > cache

FreeBSD 12 Samba 4.8.12 Samba is not showing up on my Win 10 PRO machine. I can access the shares if I use the machines hostname or IP, though. How can I determine what version of ?smb? is being used? I have set ?client max protocol = SMB3? in the config file; however, I am not sure if it is being used. Thanks! -- Gerard -------------- next part -------------- A non-text attachment was

Hi list, Does someone know a way to automatically store the hwaddress in the AD? I'm using Veyon in my school to manage the students PCs and if the hwadress is populated in the AD, the Room configuration can be set with AD otherwise i have to manage rooms manually. I'm using samba4 with bind and isc-dhcp-server are on the same server. Can we use scripts or some ways? thanks in advance

Hello, I'm trying to use the "notify" API of libsmbclient, testing against a Samba AD DC. The function is returning with errno=22 (mapped from NT_STATUS_REVISION_MISMATCH), and I'm getting the following error message: smb1cli_req_writev_submit: called for dialect[SMB3_11] server[dc1.example.com] It looks like libsmbclient is, for some reason, using SMB1 but needs to be

On Sun, Mar 3, 2019 at 5:14 AM Rowland Penny via samba <samba at lists.samba.org> wrote: [snip] > > Correct me if I'm wrong, but winbind (on a Samba DC) can **only** use > > "template homedir" and "template shell", and will not respect the RFC > > 2307 attributes in LDAP. Is that correct? > > Yes and no ;-) > > If you use the

Sorry for the repost: my message delivery was set to digest, and that was hard to manage use for conversation. I changed that setting. So starting clean with the same subject... I don't care about SSSD or whether it's even on the machine or not. Right now, it's only used by the machine for login. It isn't used by Samba, and I am very careful to let libwbclient-sssd nowhere near