similar to: Azure AD Connect

We joined one MS Windows 2012 R2 server to our Samba DC fleet and pointed the Azure AD sync tool to that new Windows AD server and Azure password sync is working well now. I don?t have any experience with distribution groups. Good Luck! > On May 4, 2020, at 10:21 AM, Marcio Merlone via samba <samba at lists.samba.org> wrote: > > So, testing samba 4.12 on a Debian buster I found

G'Day Marcio and gabben, Douglas (CC'ed) is going to try and look into why this doesn't 'just work' with Samba. No promises, but at least a trained eye will look over the process. If you could help him get set up and understand what works and doesn't that will leave him more time for actual debugging. The Azure AD sync feature is a big of an oddity in Samba, because it

Em 04/05/2020 14:25, gabben escreveu: > We joined one MS Windows 2012 R2 server to our Samba DC fleet and pointed the Azure AD sync tool to that new Windows AD server and Azure password sync is working well now. Good to know. > I don?t have any experience with distribution groups. There was this *one* test group which had no permission to receive from outside the company, while all

Hello all, How can I support this effort? What can I provide to assist? Cheers > On May 7, 2020, at 3:18 AM, Andrew Bartlett <abartlet at samba.org> wrote: > > G'Day Marcio and gabben, > > Douglas (CC'ed) is going to try and look into why this doesn't 'just > work' with Samba. No promises, but at least a trained eye will look > over the process.

Hi, I have a running samba 4.7.6+dfsg~ubuntu-0ubuntu2.15 on a ubuntu 18.04 server and would like to upgrade to van Belle latest repo. My plan is plain simple: 1. Deploy a new ubuntu 18.04 server 2. Add van Belle repo 3. Install and *then* join the domain as a DC 4. Demote and remove the old one Is this OK? Thanks, best regards. -- *Marcio Merlone*

Hi, We are (again) looking at syncing our samba AD to the azure AD cloud. I installed a win2016 server domain member server and set it up for syncing, including password hashes, so users can login azure/O365 using their on-prem passwords. We're using microsoft's latest tech: the new "Azure AD Connect cloud provisioning". We made sure to check "password hash sync".

So, testing samba 4.12 on a Debian buster I found those no-go issues: - Password sync dont work either way, nor sync neither write-back. - Distribution groups can't receive external mails, it relies on missing properties on samba schema regarding Exchange. So I cant permit a group to receive mail from outside my domain. That said, only option to any kind of integration with Azure is give

just small update: - idfix tool (Directory Synchronization Error Remediation Tool / https://github.com/microsoft/idfix) shows just small issues like empty/missing displayName attrib in some of objects which I have corrected and no more issues present at all. - no errors from AAD connect event viewer: final log message is "Scheduler::SchedulerThreadMain : Completed configured scheduler

Hi, I have a samba 4.7 AD DC running on a Ubuntu 18.04 server with distro packages. I update a user with a new group and this new membership is not reflected on that user. On example below, I can successfully add the user "test.account" to group "test", but not my user "marcio.merlone": root at araucaria:~# id test.account uid=30214(A1\test.account)

Hi, I am running dovecot 2.2.22-1ubuntu2.4 on a ubuntu 16.04 server. It has a valid Letsencrypt certificate but the problem also happens with a self-digned one. Only openssl s_client -connect localhost:993 works fine and fast, while all MUA's and telnet does not. Telnet timeouts waiting for banner after a minute or so: root at netuno:~# openssl s_client -connect localhost:993

Greetings, A probably simple question and answer: can a sieve script be executed on outgoing messages? I already use deliver on postfix, perhaps the sieve script could be executed when saving to the Sent folder? Regards, -- Marcio Merlone

The AD connect sync to office365 also works with 4.10.18 i can not test with 4.11.x because on this version there is another bug requarding adding DNS records. so: 4.10.x -> the sync works 4.11.x -> i can not test 4.12.6 -> the sync fails with Errorcode: 0x55 Am Mittwoch, den 30.09.2020, 20:45 +0000 schrieb Heinz H?lzl via samba: > Hi, > > > I have downgraded a DC to

On 2016-09-19 14:08, Marcio Vogel Merlone dos Santos via samba wrote: > Em 09/09/2016 12:48, Luc Lalonde via samba escreveu: > >> We have some machines that have updated to the Windows 10 anniversary update (1607) that are having roaming profile sync problems. >> >> Before I search the event logs or provide details, has anyone experience profile sync wierdness? >>

Hi, Just noticed, I am unable to use nested groups when relying on RFC2307 for filesystem permissions, am I wright? What have I missed? (Samba 4.12 on Buster, 2008R2 domain level) Any migration path to stop using RFC2307 and go to pure idmap without loosing all permissions on a 6T filesystem? Is that a solution? Regards, -- *Marcio Merlone*

Em 12/12/2018 17:39, Rowland Penny via samba escreveu: > The above lines are only applicable for Samba >= 4.6.0 > Add: winbind nss info = rfc2307 > remove the last two lines, see here for more info: > > https://wiki.samba.org/index.php/Idmap_config_ad Oh, God! Vacation is coming... Thank you for such obvious correction. BUT I edited smb.conf the right way, removed

Em 05-05-2016 00:14, Jones Syue escreveu: > > How about add 'server signing = auto', > for example: > > [global] > server signing = auto Hi, Made no difference if set on the member I want to add to domain, but when set to the server I got this on member: mic-158 samba # net rpc join -S PDC -U domadminuser No realm has been specified! Do you really want to join an

Hi, I am trying to add a Windows server 2008 R2 as a DC on my domain running Samba 4.12.1 on Debian Buster. It fails complaining about incompatible domain level. root at sambadc:~/bin# samba-tool domain level show Domain and forest function level for domain 'DC=example,DC=tld' Forest function level: (Windows) 2008 R2 Domain function level: (Windows) 2008 R2 Lowest function level of a

Hi Michal, Seems we are doing similar things at the moment: getting samba to work with azure AD. We also see the high CPU usage on the DC that the Azure AD Connect server connected to. Between 70 - 100 percent in our case. We are not seeing any replication issues after azure AD Connect, and I have a script that automatically checks replication every few minutes. I was the one reporting the

Hi, I have set a dovecot-1:1.0.10-1ubuntu5.1 server on top of a Ubuntu 8.04 LTS box and everything goes fine. All my users are on a LDAP database integrated via nss_ldap, so from the dovecot point of view they are all local system users. Now I want to set maildir quota for everybody, and was wondering if I could store quota limits per user on LDAP. As I read on

That is a major bummer. :-( Would it work any better, if I promoted our windows 2012 server to a domain controller? Or would that have all kinds of other side-effects..? (we're currently running three dc's, all samba) One side-effect I can think of: GPO's, in a mixed samba/windows DC...? Any ideas what the requirements on the samba side would be, for samba to be able to