similar to: moved DM config to new server : gids different etc

Am 26.11.19 um 17:15 schrieb Rowland penny via samba: > On 26/11/2019 16:00, Stefan G. Weichinger via samba wrote: >> Last week the mobo in a DM server died, so we had to set up a fallback >> machine and reinstall Debian 10.2 including Samba >> >> I had smb.conf but not /var/lib/samba in backups. >> >> Restored krb5.conf and smb.conf, rejoined. >>

Am 26.11.19 um 17:37 schrieb Rowland penny via samba: > How about 'getent group Domain\ Users' ? no result = empty reply The "admin" there is able to access stuff and reset his ACLs already. So ... things work so far. thanks. I will consider the config Louis suggested ... but not now (my reply was rejected by some samba-ml-SMTP-server ... another problem)

On 26/11/2019 16:28, Stefan G. Weichinger via samba wrote: > Am 26.11.19 um 17:15 schrieb Rowland penny via samba: >> On 26/11/2019 16:00, Stefan G. Weichinger via samba wrote: >>> Last week the mobo in a DM server died, so we had to set up a fallback >>> machine and reinstall Debian 10.2 including Samba >>> >>> I had smb.conf but not /var/lib/samba in

Upgrading DC1 at site 3 (next site ;-)) I edited sources.list and van-belle.list (s/stretch/buster/g ...) apt-get update: ok apt-get upgrade: as well apt-get dist-upgrade: DANGER -> it tells me it would remove samba! Die folgenden Pakete werden ENTFERNT: libcurl3 libkdb5-8 libmariadbclient18 libnss-winbind libpam-winbind libsmbclient libuptimed0 python3-ldb python3-samba samba

On 02/12/2019 10:51, Stefan G. Weichinger via samba wrote: > Am 02.12.19 um 11:43 schrieb Rowland penny via samba: >> On 02/12/2019 10:07, Stefan G. Weichinger via samba wrote: >>> Am 02.12.19 um 08:47 schrieb L.P.H. van Belle via samba: >>>> Hai, >>>> >>>> Sorry for the late reply. >>> Never mind, weekend is important ... >>>

Hello list! For some reason ACL inheritance is not working on my FS. Anytime anyone creates a folder/file under a share, the permissions are not inherited. My system is a 2DC + a FS running samba 4.10.10. Everything self compiled running on Debian Buster. Several shares were created according to https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs By adding the following lines

Am 26.11.19 um 17:19 schrieb L.P.H. van Belle: > Hai Stefan, > > Remove the netbios alias and then put that as CNAME in the DNS > Verify if the server its PTR is set also. > > And yeah, your totaly correct that your ACL is messed up.. > Because your using backend RID. > > The "advantage" of backend AD. > Consistent IDs on all Samba clients and servers

On 26/11/2019 16:00, Stefan G. Weichinger via samba wrote: > Last week the mobo in a DM server died, so we had to set up a fallback > machine and reinstall Debian 10.2 including Samba > > I had smb.conf but not /var/lib/samba in backups. > > Restored krb5.conf and smb.conf, rejoined. > > Things work mostly ... > > but for example I get gid 10006 for "domain

Hello, I am preparing for upgrading from Debian Stretch to Buster. I am using Louis Van Belle's Samba packages. My current Samba version is: # smbstatus --version Version 4.7.7-Debian I can see that the Samba version that will be installed, when I upgrade from Stretch to Buster, will be the 4.11 since this is the current stable release... I would like to know if there are major changes

Ah, ok, apt-get remove libldb1 ldb-tools Then try again : apt install samba winbind acl The replacement of libldb1 to libldb2 is missing something. I'll have a look at that. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Lmloge [mailto:lmloge at orange.fr] > Verzonden: vrijdag 20 december 2019 13:15 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org

What I am aware of I didn?t mess with the bidmap config. But I don?t really understand what it is, and where I use it for. I am really new to samba. All I know is that I have something regarding this in my config. And that it has something to do with users and groups. Thanks a lot btw for all the help. Without it I would be stuck on things like this for weeks Philip > On 4 Sep 2020, at 18:57,

Ok, you did to much as far i can tell. You want to see this: i'll show my output, then i is better to see what i mean. this is where you start with. klist -ke |sort ( default member ) ---- -------------------------------------------------------------------------- 3 host/HOSTNAME1 at REALM.DOMAIN.TLD (aes128-cts-hmac-sha1-96) 3 host/HOSTNAME1 at REALM.DOMAIN.TLD

what do I miss here: wbinfo -u / -g -/ -pPt works [2019/09/05 17:15:25.963590, 1] ../source3/librpc/crypto/gse.c:658(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/SAMBA.noras.intra at NORAS.INTRA(kvno 54) in keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)] [2019/09/05 17:15:25.963681, 1]

Am 26.11.19 um 18:06 schrieb Stefan G. Weichinger via samba: > Am 26.11.19 um 17:19 schrieb L.P.H. van Belle: >> Hai Stefan, >> >> Remove the netbios alias and then put that as CNAME in the DNS >> Verify if the server its PTR is set also. >> >> And yeah, your totaly correct that your ACL is messed up.. >> Because your using backend RID. >>

Hai, ? If updated the repo's for amd64/i386 . ? Buster????samba 4.10.10 Stretch???samba 4.9.15 + 4.10.10 Bionic??? samba 4.9.15 + 4.10.10 ? No changes made by me. ? Repo info : https://apt.van-belle.nl/ ? Have fun with these.. ? ? Greetz, ? Louis ? ?

Am 19.12.19 um 19:15 schrieb Lmloge via samba: > When upgrading use : apt-get dist-upgrade --autoremove > Which is needed to replace and remove optional samba packages. > In the step from 4.10 to 4.11 the upgrade might stop. > Then use: apt --fix-broken install > That should remove libldb1 and upgrade contineus with installing libldb2. hijacking this older thread now: Did an

Hi Rowland, thanks for your email. The working DC was installed around 2 years ago. It is the reason to stick in Stretch. But if I can upgrade the working DC to Buster and Samba 4.9.5 without any problem, it is OK to me. I'm not a Samba expert. How can I verify my database? Can you point me to some link, tutorial, etc? I have used the samba-tool dbcheck (with and without --cross-ncs), is

I've just provisioned the new AD DC domain following the steps on the wiki.? Using Debian Buster but with samba and kerberos packages from unstable.? Everything seems fine but when I do (entering the password): smbclient //localhost/netlogon -UAdministrator -c 'ls'? I get: tree connect failed: NT_STATUS_BAD_NETWORK_NAME What could be the problem here? -- Bob Wooldridge EDM

I have SambaDC, version 4.1.7, with Debian 7.5 My smb.conf ######################### # Global parameters [global] workgroup = TEST realm = test.lcl netbios name = ATLANTIS server role = active directory domain controller dns forwarder = 10.0.0.8 allow dns updates = nonsecure server services = -dns log level = 3 host msdfs =

On 27/11/2019 09:52, Stefan G. Weichinger via samba wrote: > Am 26.11.19 um 18:06 schrieb Stefan G. Weichinger via samba: >> Am 26.11.19 um 17:19 schrieb L.P.H. van Belle: >>> Hai Stefan, >>> >>> Remove the netbios alias and then put that as CNAME in the DNS >>> Verify if the server its PTR is set also. >>> >>> And yeah, your totaly