similar to: Inconsistent SYSVOL ACLs

Following the wiki replication guide precisely I got to this step. [root at smb4-2 ~ (master)]# rsync -XAavz --delete-after smb4-1.brockley.harte-lyne.ca:/var/db/samba4/sysvol/ /var/db/samba4/sysvol/ receiving file list ... done ./ brockley.harte-lyne.ca/ . . . brockley.harte-lyne.ca/scripts/ sent 142 bytes received 1,683 bytes 3,650.00 bytes/sec total size is 182 speedup is 0.10 [root at

Hello, We added a new samba DC with 4.10.11-SerNet-Debian-10.buster? to our existing 5 ones and can?t obtain replication. Comparing configuration with other functioning DCs did not show any relevant difference. The only difference during the configuration procedure was that DNS PTR and A records were added after joining the domain and not before. The sernet-samba-ad service is running but

Hi I have a DC server (named dc-server1) with corrupted database. I transferred all FSMO to dc-server2 and now I'm trying to demote dc-server1 running "samba-tool domain demote --verbose --remove-other-dead-server=dc-server1" on dc-server2, but the following error occurred. The problem continues even after running "samba-tool dbcheck --cross-ncs --fix --yes". Samba

Hi all, We were trying the new --remove-other-dead-server coming with the 4.4.0rc. The domain is a brand new one with several DC added and two Windows clients, no user yet. Here is the smb.conf: [global] workgroup = SAMBA realm = SAMBADOMAIN.TLD netbios name = DC200 server role = active directory domain controller server services = -dns

OK, I've traced this a little further on now. I think I have followed the trail via the following items that call or refer to each other in turn: - python samba-tool ntacl sysvolreset - source3/smbd/pysmbd.c: SMB_VFS_FSET_NT_ACL( fsp, security_info_sent, sd); - source3/include/vfs_macros.h:#define SMB_VFS_FSET_NT_ACL smb_vfs_call_fset_nt_acl - source3/smbd/vfs.c:NTSTATUS

On 26/05/15 12:51, Stephan Mattecka wrote: >> Gesendet: Dienstag, 26. Mai 2015 um 13:31 Uhr >> Von: "Rowland Penny" <rowlandpenny at googlemail.com> >> An: "Stephan Mattecka" <ste-fun_s at gmx.de> >> Cc: samba at lists.samba.org >> Betreff: Re: Aw: Re: [Samba] [SAMBA] Problems with joining a second DC to AD >> >> On 26/05/15

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS

On 1/12/2017 3:47 PM, Richard via samba wrote: > Hi > > root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes > ...some error information... > Checked 3647 objects (2 errors) > root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix > Checking 3647 objects > Checked 3647 objects (0 errors) > > root at dc1:~ # getfacl

So, I'm seeing some very odd behavior. I may have multiple issues - so I'm simply starting holding the thread of the problem and working my way back. So, the root symptom I'm having is that a GPO isn't applying correctly. [Roaming profiles namely.] I have two DC's. I change the GPO on one DC and rsync the update to the other DC. I can see that the files get updated. Yet when

On Wed, 20 Jun 2018 12:05:13 +0200 L.P.H. van Belle wrote: > > As said very busy, but i can spare a few minutes now. > > -rwxrwxr-x+ 1 3000000 domusers 2240 2018-06-18 17:33:55 /var/lib/samba/sysvol/hprs.local/policies/{3C103F7B-7250-4610-BC45-8B06353CAA7C}/User/Documents & Settings/fdeploy1.ini > -rwxrwx---+ 1 3000000 users 64 2018-06-18 17:34:22

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

Greetings, This post pertains to Samba version 4.16.8 on FreeBSD 13.1. When GPMC.MSC is invoked from within a Windows server domain member, it displays an inconsistency error: <https://attachments.samba.org/attachment.cgi?id=8386> <https://bugzilla.samba.org/show_bug.cgi?id=14927> # samba-tool ntacl sysvolreset # samba-tool ntacl sysvolcheck ERROR(<class

I remain baffled as to why richard.h cannot access the sysvol share. Permissions all seem ok from what I can see and I'm not sure why this should be any different from normal AD share behaviour (our other shares are working fine for domain users) I would really appreciate it if someone could let me know whether the sysvol has become corrupt in some way and I am wasting my time even trying

Hi, I'm using Samba 4.0.5 and when I use ls -la or getfacl on eg: sysvol/Policies directory Samba dies with this error message: ==> samba/samba.log <== [2013/07/10 07:49:30, 0] ../lib/util/fault.c:72(fault_report) =============================================================== [2013/07/10 07:49:30, 0] ../lib/util/fault.c:73(fault_report) INTERNAL ERROR: Signal 11 in pid 3222

Hi All, Trying to avoid making this into a "Me too" response :) but this is the single largest issue I have with Samba at the moment, I've struggled with this for literally years, both before I switched to rfc2307 (which did help in many areas) and since switching. I am following this thread with great interest, in the hope that I can get my GPOs working, too. Currently I've

Hello Gabriel, Am 25.05.2015 um 13:23 schrieb Gabriel Franca: > Good morning List > > On Friday I had to leave so I could no longer continue with our lab. > Weekend and holy all have to rest as much as possible. = D > So I'm back and I will put the smb.conf for analysis. > > # Global parameters > > [global] > > workgroup = CMC > > realm = CMC.CORP >

Rowland Penny skrev den 2015-02-19 18:15: > OK, there is a discussion over on samba-technical about nss_winbind > and the question about Administrator being mapped to 0 was raised. Now > I have always thought that it should, but in fairness, I decided to > see what happens when it isn't, so I removed Administrator from > idmap.ldb and restarted samba. Before restarting

Hi root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes ...some error information... Checked 3647 objects (2 errors) root at dc1:~ # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix Checking 3647 objects Checked 3647 objects (0 errors) root at dc1:~ # getfacl /usr/local/samba/var/locks/sysvol/ getfacl: Removing leading '/' from absolute path

Rowland Penny skrev den 2015-02-21 10:35: > On 20/02/15 21:27, Davor Vusir wrote: >> >> Rowland Penny skrev den 2015-02-19 18:15: >>> OK, there is a discussion over on samba-technical about nss_winbind >>> and the question about Administrator being mapped to 0 was raised. >>> Now I have always thought that it should, but in fairness, I decided

Ok, next, >From a windows pc connect to the server with computer manager, and now setup the share and folder rights. As in shown in the link posted ( https://lists.samba.org/archive/samba/2018-February/213690.html ) m leaving the office. So a reply wil probley tomorrow. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org]