similar to: Announcing "adam" - Active Directory Automated Maintenance tool

Hello, I'm trying to use the "notify" API of libsmbclient, testing against a Samba AD DC. The function is returning with errno=22 (mapped from NT_STATUS_REVISION_MISMATCH), and I'm getting the following error message: smb1cli_req_writev_submit: called for dialect[SMB3_11] server[dc1.example.com] It looks like libsmbclient is, for some reason, using SMB1 but needs to be

On Sat, 2 Mar 2019 17:57:41 -0500 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > On Fri, Mar 1, 2019 at 9:04 AM L.P.H. van Belle via samba > <samba at lists.samba.org> wrote: > [snip] > > few minor points. > > > > REALM="ad.onthefive.com" > > Realm always in CAPS, this prevens problems with other programs. > > Most

On Fri, 1 Mar 2019 08:21:54 -0500 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > Hello, > > I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab > environment, set up like this: > https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up-a-samba-4-domain-controller-on-debian-9/ There are a few 'not quite right' things there

In one word: DONT! Tried it once and realmd moved the DC to the Computer OU in AD. There it no longer is a DC and nothing worked for us... As it is already joind you don't need realmd at all. Just configure sssd.conf and start sssd. However, I would not recommend that. We have since switched to winbind as this is already running and with the sernet packages can not be installed alongside

Thanks for the answers. >Here is the tool: > > https://gitlab.com/JonathonReinhart/adam > > Also, look for my post on the mailing list: "Announcing "adam" - > Active Directory Automated Maintenance tool". > > Cheers, > Jonathon > > On Fri, Jun 21, 2019 at 9:46 AM Tom <kleyoneo at hotmail.com> wrote: > > > > It's really a

Hello, A user of my "adman" utility recently opened this issue [1]: "Add support for setting uidNumber for machine account" I was aware that computer accounts were also users in AD, but I hadn't considered assigning a uidNumber to them. It makes sense that winbind (in idmap="ad" mode) would not "see" the accounts with a uidNumber. Naturally, groups of

Hai Jonathon, in addition to Rowlands coment.. .. He is always quicker in the resonse when im typing them.. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Jonathon Reinhart via samba > Verzonden: vrijdag 1 maart 2019 14:22 > Aan: samba at lists.samba.org > Onderwerp: [Samba] (no subject) > > Hello, > >

On Tue, Jul 02, 2019 at 11:24:55PM -0400, Jonathon Reinhart via samba wrote: > Hello, > > I'm trying to use the "notify" API of libsmbclient, testing against a > Samba AD DC. The function is returning with errno=22 (mapped from > NT_STATUS_REVISION_MISMATCH), and I'm getting the following error > message: > > smb1cli_req_writev_submit: called for

On Thu, Dec 19, 2019 at 10:19:28PM +0000, Rowland penny via samba wrote: > On 19/12/2019 21:46, Sebastian Lisic wrote: > >Thanks for the quick reply, Rowland! > > > >The problem I have is that the clients of each domain do not have access to the other domain's DC. Only the DCs of each domain can talk to one another. With Microsoft no longer allowing POSIX attributes to be

Hello, I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab environment, set up like this: https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up-a-samba-4-domain-controller-on-debian-9/ I would now like to configure this server to enable login via domain credentials. I'm aware that the Samba wiki recommends the following: -

Hey guys, sorry for the (no subject) message. I copy/pasted from a previous email and missed the subject. I really appreciate the quick feedback! I'm hoping to produce a series of blog posts that are guaranteed to work (on Debian 9 at least) and produce the ultimate Samba-powered Active Directory environment. On Fri, Mar 1, 2019 at 9:04 AM L.P.H. van Belle via samba <samba at

On Tue, Jul 16, 2019 at 12:32 PM Rowland penny via samba <samba at lists.samba.org> wrote: > > On 16/07/2019 16:40, Jonathon Reinhart wrote: > > On Tue, Jul 16, 2019 at 9:32 AM Rowland penny via samba > > <samba at lists.samba.org> wrote: > >> On 16/07/2019 14:16, Jonathon Reinhart wrote: > >>> On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via

Hi Howland, Thanks for the help, I will redo the structure. It is not complex and not large. Best regards, Gabriel Franca ----- Mensagem original ----- De: "Rowland penny via samba" <samba at lists.samba.org> Para: "sambalist" <samba at lists.samba.org> Enviadas: Quinta-feira, 19 de Dezembro de 2019 10:53:43 Assunto: Re: [Samba] NIS Domain Does Not Appear On

Listening to notifications can only complement another mechanism (and then reduce latency) as otherwise you are going to loose changes during downtimes. Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Jonathon Reinhart via samba Gesendet: Tuesday, 16 July 2019 22:22 An: Rowland penny <rpenny at samba.org> Cc: sambalist <samba

On 16/07/2019 14:16, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:02, Jonathon Reinhart wrote: >>> Rowland, >>> >>> You could go another step further and run that with "notify" to >>> monitor for changes, instead of having to run it in a cron

And a good read here: https://blogs.technet.microsoft.com/activedirectoryua/2016/02/09/identity-management-for-unix-idmu-is-deprecated-in-windows-server/ Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny via > samba > Verzonden: woensdag 1 februari 2017 14:49 > Aan: samba at lists.samba.org >

On 27/12/2019 17:06, Jonathon Reinhart wrote: > On Wed, Dec 18, 2019 at 9:52 AM Rowland penny via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > On 18/12/2019 14:34, Jonathon Reinhart wrote: > > On Wed, Dec 18, 2019 at 9:13 AM Rowland penny via samba > > <samba at lists.samba.org <mailto:samba at

On 16/07/2019 16:40, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:32 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:16, Jonathon Reinhart wrote: >>> On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba >>> <samba at lists.samba.org> wrote: >>>> On 16/07/2019 14:02, Jonathon Reinhart wrote:

On Sun, 7 Apr 2019 00:41:23 -0400 Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > Thanks for the example, Rowland. Whilst it was an example, it was actual code lifted from Samba's user.py If you run 'samba-tool user list' on a DC, it is the actual code that is run. > > Does ldb work against remote servers as well? I thought it was only > for local,

On Wed, 10 Apr 2019 18:35:04 -0400 Jonathon Reinhart <jonathon.reinhart at gmail.com> wrote: > Sorry to hop on an existing conversation but this seemed like a good > point to jump in with this question. You really should have started a new thread ;-) > > Say I have a service account, with a random password that is set to > never expire. What component is expected to