similar to: DNS issues on both DC's

Hai Bob, Try this. First flush cache. net cache flush getent passwd username id username And run this one again for me: https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh Reply might be bit later on, im running around here. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Bob

Yesterday I had an issue with Samba v 4.13.0. Went to backup and discovered backup computer has a drive failure and backup is gone. Only resort is to rebuild the DC. I cannot figure out why bind9 will not "host -t SRV _ldap._ tcp.ad.dtntwk.work." or "host -t SRV _kerberos._udp.ad.dtntwk.work." root at dc1:~# host -t SRV _ldap._tcp.subdom.example.com. >

I've been working on setting up the Sernet 4.1x series samba builds for Centos 6. Provisioned via sudo /usr/bin/samba-tool domain provision --use-rfc2307 -interactive With the goal of providing authentication, user and group management with file and print services to Widows 7/8 clients, & authentication user and group management for Linux system users. The question is around my confusion

Hi, I tried samba 4.12.0 on our file server which is a domain member and exporting some shares. We're getting some strange errors on some shares since the update. Right after starting or restarting smbd everything is fine. After short while (seconds or a few minutes) users are getting errors when trying to access the shares, e.q. "Invalid Handle Error", "An unexpected

Hi, I have two member server and both with Samba 4.6.7. I'm using winbind for NSS and PAM. One of the member server is exporting an NFS4 mount which the other member server is mounting. For users with an rid-mapped uid below some value everything works fine. If the uid is above this value the group permissions are not evaluated and I'm getting a permission denied if a folder or file is

Hi Am 09.03.20 um 16:32 schrieb Rowland penny via samba: > On 09/03/2020 14:25, Andreas Hauffe via samba wrote: >> [global] >> ??????? dedicated keytab file = /etc/krb5.keytab >> ??????? kerberos method = secrets and keytab > Why the dedicated keytab ? We have a kerberized NFS4 running on that machine, too. > >> workgroup = ILRW >> ??????? idmap config dom :

On 7/3/2020 9:50 AM, Rowland penny via samba wrote: > I thought I explained that, but lets try again ;-) > > Originally, Samba used /var/lib/samba/private for the dns.keytab and > other dns files. This was then found to be possibly insecure, so it > was decided to use /var/lib/samba/bind-dns instead. When you upgrade > the Samba packages, the old files are not removed, but the

I am trying to add a (CentOS4.4) Samba-3.0.23d server to a AD Win2K3 domain and the following error occurs # /usr/kerberos/bin/kinit administrator@SUBDOM.DOMAIN # net join Using short domain name -- SUBDOM Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Disabled account for

I have been working on creating users with samba-tool create. samba-tool user create tuser70 --surname="Test" --given-name="User" --initials=70 --uid-number=10070 --gid -number=10000 --description='70 user' --gecos='Test 70. User' --uid='Test 70. User' --login-shell=/bin/sh --unix-home=/h ome/SAMDOM/tuser70

On 7/3/2020 10:01 AM, Robert E. Wooden via samba wrote: > On 7/3/2020 9:50 AM, Rowland penny via samba wrote: >> Originally, Samba used /var/lib/samba/private for the dns.keytab and >> other dns files. This was then found to be possibly insecure, so it >> was decided to use /var/lib/samba/bind-dns instead. When you upgrade >> the Samba packages, the old files are not

Thanks, I will give that a try. But I need the 'winbind separator = +'. We use some expensive commercial software (e.g. ANSYS, ABAQUS, ...), which uses shell scripts to start their software under linux. These scripts are not able to handle a backslash in the user name. The only solution was to switch to a "+" character. We reported these issues two years ago. Regards,

On 8/17/20 4:36 AM, Rowland penny via samba wrote: > On 17/08/2020 10:20, L.P.H. van Belle via samba wrote: >> >> But have you tried this : >> getent passwd "SAMDOM\username" > > Unless you have in smb.conf (which are not recommended): > > winbind enum users = yes > > winbind enum groups = yes > > Running 'getent passwd' and

Dear list, After (almost) successfully removing a dead DC from my domain I am left with only one visible symptom: samba-tool drs showrepl shows two stale outbound link for one of the remaining 2 DCs: DC=DomainDnsZones,DC=subdom,DC=mydom,DC=com NTDS DN: CN=NTDS

If I run Louis' "samba-check-db-repl.sh" script and it does not send an email then this is a "no news is good news" situation, I am assuming. DC1 sends no email. DC2 sends this: ERROR: Compare failed: -1 * Comparing [DOMAIN] context... * Objects to be compared: 287 * Result for [DOMAIN]: SUCCESS * Comparing [CONFIGURATION] context... * Objects to be compared: 1619 *

Hi James, thanks a lot for your hint. However, I seem to be unable to find it there. Can you please be a little more specific? I tried to check the replication topology, but no success. Thanks a lot! Best regards Johannes lingpanda101 via samba <samba at lists.samba.org> schrieb am Mo., 26. Juni 2017 um 20:52 Uhr: > On 6/26/2017 2:43 PM, Johannes Engel via samba wrote: > > Dear

Changing the default ou for the user creation? The samba-tool create user are placed in the default ou of "Users", for example this output from samba-tool show user: distinguishedName: CN=User 73. Test,*CN=Users*,DC=subdom,DC=example,DC=com This user72 I moved (drag and drop) within ADUC, so, here is where I am trying to associate our users. Again, output from samba-tool-show user:

Hai eveyone.   I know about the dns "things" in the past. DNS Islanding problems etc. This one is a bit hijacking the subject : “Horrible BIND9_DLZ DNS breakage after DC replaced and samba-tool domain demote --remove-other-dead-server”     I would like to suggest a smale change in how we suggest to setup samba ADDC dns things, and i do think this help in the setup of the AD

> On 17/03/2020 14:52 mabi <mabi at protonmail.ch> wrote: > > > ??????? Original Message ??????? > On Tuesday, March 17, 2020 1:38 PM, Aki Tuomi <aki.tuomi at open-xchange.com> wrote: > > > If you have message-id you can use > > > > `doveadm search -u user HEADER MESSAGE-ID "messageid"` to find out the UID. > > I tried the

On 8/17/2020 7:59 AM, Rowland penny via samba wrote: > Could it be that 'username' doesn't have a uidNumber ? > > Well, when I run "id [username]" on the DC, I get a "uid=3000013(SUBDOM\[username])" and"gid=10000", etc. When I run "id [username]" on the member server (mbr04) I get "id: 'SUBDOM\[username]': no such

On 25/09/2020 12:55, Robert Wooden wrote: > Thanks Dr, Naumer and Rowland. > > Although still not quite correct, my pam_mount.conf.xml looks like: > root at lws4:~# cat /etc/security/pam_mount.conf.xml > <debug enable="1" /> > <volume fstype="fuse" > server="mbr04.subdom.example.com <http://mbr04.subdom.example.com>" >