similar to: Properly extending the AD schema

On 24/10/2020 12:36, P?ter Bertalan Zolt?n via samba wrote: > Hi, > > I?ve been having a lot of trouble extending the schema on our DC. After > a few failed attempts and a few hours of researching the issue, I > decided to seek help here. > > For context, I am trying to extend the schema to add a custom attribute > to the Person class that would contain an IMAP login name.

I'm wondering if anyone can make any suggestions? Rowland? Andrew? Even if it's just to suggest a framework for troubleshooting on my own? I really appreciate any time you can spare. Matthew On 2020.11.02, 5:59 PM, "samba on behalf of Matthew Delfino Samba List via samba" <samba-bounces at lists.samba.org on behalf of samba at lists.samba.org> wrote: Hello! I

HOn Tue, 26 Mar 2019 09:29:41 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Tue, 26 Mar 2019 05:18:20 +0100 > Franta Hanzlík <franta at hanzlici.cz> wrote: > > > Hi Tim and Rowland, thanks for Your support! > > I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba > > versions require Python3), but You are right, here

On Tue, 26 Mar 2019 05:18:20 +0100 Franta Hanzlík <franta at hanzlici.cz> wrote: > Hi Tim and Rowland, thanks for Your support! > I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba > versions require Python3), but You are right, here in DB can be > problem > - first Samba AD DC was created by migrating Samba3 NT4 domain to > Samba4 AD cca week ago

I'm trying to load the apple attributes and classes to samba4 using ldbmodify. I can get it to load, sort of. I keep getting errors and having to modify the file. Command I'm using: sudo ldbmodify -v -H ldap://lda.server.local -UAdministrator /home/user/apple-mcx.ldif here is the ldif that I'm loading

Mandi! Rowland Penny via samba In chel di` si favelave... > You need to explicitly ask for it, for instance: Oh, cool! Seems effectivaly different: root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b "DC=ad,DC=fvg,DC=lnf,DC=it" "(cn=prova123)" nTSecurityDescriptor # record 1 dn: CN=prova123,CN=Aliases,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it nTSecurityDescriptor:

On 04/01/16 01:43, Jonathan Hunter wrote: > Hi, > > A while ago I successfully set permissions on a section of my LDAP / AD > tree, using either ADUC or ADSIEDIT (I forget which). These permissions > allowed my own user to access this section of the tree; I removed > permissions for 'Domain Admins' etc. to ensure that others would not be > able to view or change the

Rowland [2020-10-24 12:38:36 +0000]: >I take it your imap login is probably something like fred at example.org, >if so, what is wrong with using the 'otherMailbox' attribute? The IMAP logins are not email addresses, but rather simple login names, such as ?fred?. Otherwise we would just use the mail attribute. >You used [command] twice, unless it was typo. Typo, sorry.

Thank you, Louis, for your reply. By simply asking me to provide outputs of the aforementioned files, I found the cause of my first problem (auth failing). It was my /etc/hosts file on dc1. All of them should look like this, and indeed DC2 and DC3's *did* look like this: # cat /etc/hosts > 127.0.0.1 ? ? ? localhost.samdom.mycompany.net ?localhost > 192.168.3.201

And, BTW, right now, I am able to see my problem via the following 3 ways... 1) Through Windows DNS Manager, I cannot add, change or delete any DNS records from: mycompany.loc samdom.mycompany.net mycompany.net I *can* add, change and delete DNS records from: _msdcs.samdom.mycompany.net mycompany.com 7.168.192.in-addr.arpa 5.168.192.in-addr.arpa 3.168.192.in-addr.arpa

No, this is not needed. Solution here in this is simple. search primary.domain.tld # optional extra search domains after the primary. nameserver IP_AD-DC_OF_THIS_SERVER_FIRST nameserver IP_AD-DC_others Run : samba_upgradedns --dns-backend=BIND9_DLZ And your done, all needed records are fixed/updated. This goes wrong if the IP of the running server isnt the first and/or if search is setup

Louis, I appreciate your efforts with my predicament. I'm very sorry to say that your advice hasn't gotten me to a solution. After updating my /etc/network/interfaces to put my localhost IP address first (192.168.3.201, for example), saving, restarting services, rebooting, running "samba_upgradedns --dns-backend=BIND9_DLZ", saving, rebooting, etc., I still cannot add, edit or

Hi everyone, I'm relatively new to Samba - at least for more in-depth installations. Big Thank-You from my company to the brilliant developers responsible for this software. We have our Samba server integrated with our Windows 2003 AD domain users via Winbind - a working installation with some issues described below. getent passwd works as the many docs show (one entry below):

Hi, I'm not a seasoned samba user but I do have a little experience with it (mostly small setups with plain smbpasswd file and a few workstations). I also have some experience with OpenLDAP and I've even written some objectclasses and attributes when the standard ones weren't enough However, I'm trying to set up a midsized network using LDAP for SSO and I can't make samba

Hello everybody, I am not sure which DNS setup will fit best for my suites. I can imagine, that there are a lot of users out there using also BIND9 servers in their environment and can share their experience. In my case I am running following setup: I have two existing hosts running with DNS and DHCP services. I have setup a DHCP-Cluster with isc-dhcp-server on both machines, that means I have a

Thank you, Louis, for your reply. By simply asking me to provide outputs of the aforementioned files, I found the cause of my first problem (auth failing). It was my /etc/hosts file on dc1. All of them should look like this, and indeed DC2 and DC3's *did* look like this: # cat /etc/hosts > 127.0.0.1 ? ? ? localhost.samdom.mycompany.net ?localhost > 192.168.3.201

> > Hello everyone. > > Well, I have been working very hard lately, trying to get a > server up to > act as our Samba PDC with LDAP. So far, everything seems to > be working > well. I've been able to get samba 2.2.8 and openldap 2.0.27 > installed with > no problems. I've setup my config files (ldap.conf, > slapd.conf, smb.conf) > as well as

We recently switched our win2k domain to a native mode. We upgraded our Solaris 9 samba server from 2.2.8 to version 3.0.2a and configured MIT Kerberos version 1.3.2 I was able to join to machine as a domain member without any problems: ./net ads join -U moshe moshe password: [2004/03/30 13:26:46, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for shark already exists - modifying old

I've been working on this problem for a few hours. Here are some updates: Many of the domains I listed are duplicates of domains managed by other DNS servers on my network. There was no point in having them in Samba AD, so I deleted the zones in Windows DNS Manager and created slaves in my named.conf.local folder, so that they'd pull the records from my authoritative BIND DNS server,

Hello, all. Alas, another convoluted question. All the simple things are, well, simple so I suppose we only need to trouble the list with squirrely problems! We've noticed a call history problem when using Asterisk where the call history on the Snom phones (with which we are very pleased) reflects the number of the PBX extension used by the B2BUA to dial the end point. I assume the same