similar to: Logging successful log-ins

There's a note at the top of that document: "Samba only supports logging of succeeded authorization events." Does that mean that it won't log authentication events at all? Because that's implied. I think it would be better, assuming it will log auth events, to say; "Samba only supports logging of *successful* authorization events, not unsuccessful. Samba also supports

Yeah, it's a wiki. Go for your life! Adding info on the per-log class stuff to log into different files like dsdb_password_json_audit:4@/var/log/samba/password.log would be awesome too. Andrew Bartlett On Wed, 2020-09-16 at 10:53 -0700, Gregory Sloop via samba wrote: > There's a note at the top of that document: > > "Samba only supports logging of succeeded

ABvs> Yeah, it's a wiki. Go for your life! I can do that - I just was not sure I was right and didn't want to put something in the wiki that wasn't factually accurate. So, just to be extra explicit. Samba can log both sucessful and failed authentications, but only successful authorizations, not unsuccessful authorizations. Right? ABvs> Adding info on the per-log class stuff

Hi all, We're a small charity and we've got a working and stable Debian 9 AD system using one Samba server (version 4.9.5-Debian) and 4 x Windows 10 Pro clients.? The server has two shared folders - "Profiles" for roaming profiles and "users" for user's home directories. We've just got delivery of two donated computers, and we got 2 new staff members.? I

Hello all, I've got a simple active directory server set-up with 5 computers and about 5 users which works reasonably well, but recently, when an user changes to a different computer, it takes about a hour for the user to log in.  However, future log-ins on the same computer is pretty much instant, but the exact same problems occurs when the user changes computers - even to one

Hello, I'm aiming to migrate a few Windows 2000 Server boxes to Linux with Samba and I would like to check what Samba can do before actually comitting myself to this idea. There are a few servers, all located in different locations, connected to one central server. The remote servers contains files only, and the central server controls internet access and has Exchange installed on.

Rowland, Thank you so much for replying!  I'm not exactly sure of the issues, but it includes very slow log-in times (>30 minutes if I move to another computer I've not used previously) and the KDC doesn't work.  I've tried joining the two servers, but it stopped the new one from working entirely, and I had to wipe the server and start again.  I've now spent some time

Hi all, So I've set up a new Samba server for our small office.  As it's completely separate to the old one, I had to use rsync to transfer files over to the new server.  Unsurprisingly, the permissions on the freshly transferred files are incorrect - what's the best way to reset permissions? Many thanks! Cheers - Piers

Sigh, hopefully 3rd time lucky! Thank you Rowland and Louis, > > > > I do not use roaming profiles, but I seem to remember that > > they are are > > liberally plastered with SID-RID's. It is the SID that identifies the > > domain, so it is this that is probably causing your computers looking > > for the old DC. > > > > Rowland > >

Hello all, We're running a Samba AD DC and we want to move to a new server. The old server is slightly misconfigured and have some issues, and the new server has already been set up freshly set up with no issues and everything working fine.  I need to move users, groups & passwords from the old server to the new one without moving configuration and retaining the old issues, am hoping

Hi all, I've decided to completely replace an old AD with a fresh, brand new one - the only thing linking the two is that I've transferred the user profiles & home folders over to the new one and I'm testing this configuration by disconnecting one of the Windows 10 computers from the old AD and then connecting it to the new AD. Old AD: Name - ad.domain.intranet IP -

Hi all, An user queried whether the error "Your profile was not synchronised with the server" was a big problem, so I had a look into it.? This only happens on one computer, all non-admin users has this problem, the Samba admin account don't have this problem.? Looking into the windows error log, we get plenty of messages of the below:

On 18/07/2018 14:43, Rowland Penny wrote: > Go on, spoil us by actually giving us some information, such as what > distro is the DC running on ?, what is in smb.conf, what are your > clients running etc etc. > > Rowland > Hello Rowland, Gaiseric, LPH & Miguel, Thanks for all of your replies! Not having much time at the moment, but to answer some questions... The server is

Hello Everyone, I need to do a complex migration of either a guest VM as a whole or as individual files with a dump and load of a progress database-based ERP system. The old host is an Amd Opteron 8 Core 16 GB ram single Socket CPU with a RAID 10 array of 8x 500 GB SATA Disks.? It is running Centos 6.10 as a base OS using OpenVZ as the VM technology.? Kernel version is 2.6.32-042stab142.1 x86_64

Rowland, Thanks for your response.  That's the issue, I'm not sure what other details I can give that would be helpful in this situation!  How do I identify who owns what and how do I propogate this over?  I'm aware how to do chmod/chown and find out the uid for Linux users, but I'm not sure how it works for Samba - does Samba use the same uid as Linux users, or does Samba

Hi all, So we have a single AD-DC master, and I'm trying to join a fresh new DC (DOMAIN-ad.DOMAIN.intranet, 192.168.0.11) to the master (ad.DOMAIN.intranet, 192.168.0.17), and I'm using the HOWTO here: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory and I've hit a problem in the section "Built-in User & Group ID Mappings" - when

> That explains it a bit further, Samba (and Windows) uses the SID to > identify the domain, so user 'kit' with the SID-RID of > S-1-5-21-3690213834-1721161859-1610588051-1116 isn't the same user as > 'kit' with the SID-RID of > S-1-5-21-456595659-2484967225-2845901235-1104 That is from a Windows > perspective, how Unix treats them depends on how you are

Hello all, Have joined a new DC to an existing active directory consisting of a sole DC.  So, we now have two domain controllers, the original being ad.DOMAIN.intranet (192.168.0.17), and the new one being DOMAIN-ad.DOMAIN.intranet (192.168.0.11).  The old DC is also the file server - I'm aware this is strongly advised against.  I want the new DC to become the file server but can't

> Can we start by seeing your smb.conf from the Samba machine that holds > the profiles share. > > Rowland Rowland, thanks for your prompt reply as usual! Yeah sure, have pasted it below.? Just an update - I've double checked the other donated computer - it works perfectly fine, roaming profiles gets written to the server and no error message. So in fact, it's just one of

On 2020-08-06 08:45, J Martin Rushton via CentOS wrote: > You'll need to upgrade to CentOS8. > > C7 is at rsync 3.1.2-10, and will not go above 3.1.2 ever. > > C8.2 is at 3.1.3-7, C8 will always be on 3.1.3 > > Martin Another option is to build rsync from source, which is what I did to try out the zstd compression. centos7$ rsync --version rsync? version 3.2.2? protocol