similar to: SysVol replication (DFS-R)

Mandi! Sérgio Basto via samba In chel di` si favelave... > As far as I can tell and in my experience the replications methods that > we find in wiki fail in be bi-directional. So to workaround we may > force just write POL(s) in just one DC and sync it to the other. AFAIK gpedit just write to the DC with FSMO role by default.

On Fri, 26 Apr 2019 18:22:54 +0000 (UTC) ray klassen via samba <samba at lists.samba.org> wrote: > > I mentioned the DNS editing issue and I think that was giving us > headaches as well, but the actual problem was > this: /usr/local/samba/private/idmap.ldb was different enough on one > of the DC's so that after an rsync with acl's, uid's and everything, >

On Wed, 17 Apr 2019 18:29:19 +0100 Sérgio Basto via samba <samba at lists.samba.org> wrote: > My experience was : > > 1. Mit kbr doesn't support it, we need to use the old kbr system. Do not use MIT, it is, at best, experimental. > 2. We need disable selinux , selinux permissive is not enough to allow > to write on shared folder sysvol. it cause crashes on windows.

Hi, For me this is the most important feature that we miss in Samba4 AD [1] . First, IMHO , I don't see mounting a rsync server as the most easy way but in that page have a crucial clue [2] which is just write GPO(s) in the master. But we need not forget [3] "To use a Sysvol Replication workaround, all domain controllers (DC) must use the same ID mappings for built-in users and

Hi folks! I'm having some trouble replicating a domain. I followed the steps in this guide: https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC I followed the steps and everything worked fine for me. but... If I make changes on the PDC, these changes are replicated to the Secondary DC, but if I make changes to the Secondary, these are not seen in the PDC. Is there any way

I mentioned the DNS editing issue and I think that was giving us headaches as well, but the actual problem was this: /usr/local/samba/private/idmap.ldb was different enough on one of the DC's so that after an rsync with acl's, uid's and everything, sysvol on one server was not able to give access to the users because the uid/gid's did not correspond to the right domain or builtin

Hi, did anybody try this already? Seems to be the easiest to set up, esp. when more than two DC's are involved. Bye... Dirk -- Dirk Heinrichs <dirk.heinrichs at altum.de> GPG Public Key: D01B367761B0F7CE6E6D81AAD5A2E54246986015 Sichere Internetkommunikation: http://www.retroshare.org Privacy Handbuch: https://www.privacy-handbuch.de

Hai, ? Im try to get my id for administrator groups on both server the same. ? with?4.1.17 the solution was simple.. we stop samba on both servers. scp /var/lib/samba/private/idmap.ldb root at 192.168.0.2:/var/lib/samba/private/ ? started samba, and the id's where the same. ? Im using winbindd now with samba 4.2.1 but... ? DC1:? id administrator uid=0(root) gid=100(users)

Hi Jeremy, this is what I do to get windows explorer (mine was a virtual machine windows 10 pro upgraded recently to 1903) to crash: - on samba DC, obtain your sysvol directory from /etc/samba/smb.conf and do a sudo mkdir <sysvoldir>/<domain>/test validate the directory has permissions like drwxrwx---+ 2 root root 4096 Jul 19 12:58 test. - on windows PC navigate to

Hello all, I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 . For that I will use the following method : - build a new DC from 4.9.4 sources (on CentOS 7) - join this new DC to the domain - transfer the FSMO roles from the old DC (4.6.7) to the new DC (4.9.4) - replicate the sysvoldir from old DC to new DC - demote the old DC - switch off the old DC Since I prefer to

Hello, i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT Kerberos (clean, not upgraded). I just wan to create/activating a simple GPOs. # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not displa last user name -> activate When im activating this Policys (no errors or something like that) nothing happend. I reboot two Domain

Really my user IDs are different, but I can not adjust it. Using Samba 4.3.3 (Upgrade from 4.2 -> 4.3 -> 4.3.3), I think it has something it was initially used with Windows 2003 (no longer usaddo) to replicate data Win 2003 -> Samba. Today only own Samba (which had to increase Schema) Em 29-03-2016 10:27, Sketch escreveu: > On Tue, 29 Mar 2016, Carlos A. P. Cunha wrote: >

What's the current wisdom on sync of sysvol to other (samba) DC's? [I should probably search, but I don't recall seeing discussion on sysvol sync details hit the list recently.] A quick search dud turn up this wiki article - is that current best-practice? https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround I'm running the Ubuntu 18.04 packaged Samba

I have two DC (DC1 and DC2) Samba 4.2.1. In DC1 has 2 pastes in sysvol\ empresa.com.br: Policies and Scripts. But in DC2, the Policies paste there isn't. Is this normal? When I have executed gpresult /r command in Windows client, I verified that DC2 is used to apply GPO for the workstations too. Regards, Márcio

Hello James, Thanks for your suggestion. When we had two servers in the pool, we were pushing GPO using rsync from PDC at every 30 minutes. However when we added the two more domain controllers, our rsync script turned to be a pull from PDC every 30 minutes. Would this have made those policy objects inconsistent? We have set up sysvol replication using rsync unidirectional that is a push

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

Hello everyone! Whenever replicate the Sysvol need to run the DC command that received the data /opt/samba/bin/samba-tool ntacl sysvolreset This solves the problem (at least in min). Em 29-03-2016 08:28, mathias dufresne escreveu: > Check rights on sysvol (using samba-tool), check rsync process if several > DC. > > 2016-03-29 13:07 GMT+02:00 barış tombul <bbtombul at

Hello , ( samba 4.6.9 - centos 6 DC1 centos DC2 ) I tried to sync sysvol as described in https://wiki.samba.org/index.php/Rsync_based_SysVol_replication_workaround between two DC but rsync shows some errors like this rsync: set_acl: sys_acl_set_file(apam-ad.apam.it/Policies/{D725AAC4-27E8-46AC-918D-55B560988386}/Machine/Applications/{031B2C75-D832-429B-B4C4-226BAA665E3A}.aas,

Thank you Rowland for your answer . I reply inline. > > On Wed, 6 Feb 2019 15:20:56 +0400 > henri transfert via samba <samba at lists.samba.org> wrote: > > > Hello all, > > > > I've planned to upgrade a Samba DC from 4.6.7 to 4.9.4 . > > STOP! > > Do not do this directly, reports on here have shown that this will not work. > > You

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos