similar to: Whole list of installation via PN possible?

Am 05.01.2024 um 12:02 schrieb Rowland Penny via samba: > On Fri, 5 Jan 2024 08:30:15 +0100 > lists--- via samba <samba at lists.samba.org> wrote: > >> Good morning Rowland, >> >> is it ok for you to send you the complete, not sanitized installation >> description? >> ... I'm lost in getting the samba-ad-dc running ... > > I think you mean,

Try this simplified tutorial. http://samba.bigbird.es/doku.php?id=samba:start LP On 5 Jan 2024 at 07:48 +0000, lists--- via samba <samba at lists.samba.org>, wrote: > Good morning Rowland, > > is it ok for you to send you the complete, not sanitized installation > description? > ... I'm lost in getting the samba-ad-dc running ... > > Cheers, > Torsten > >

I use this for the firewall. The ports are in the article. http://samba.bigbird.es/doku.php?id=samba:hardening-samba On 5 Jan 2024 at 11:52 +0000, lists--- via samba <samba at lists.samba.org>, wrote: > Am 05.01.2024 um 12:02 schrieb Rowland Penny via samba: > > On Fri, 5 Jan 2024 08:30:15 +0100 > > lists--- via samba <samba at lists.samba.org> wrote: > > >

On Fri, 5 Jan 2024 08:30:15 +0100 lists--- via samba <samba at lists.samba.org> wrote: > Good morning Rowland, > > is it ok for you to send you the complete, not sanitized installation > description? > ... I'm lost in getting the samba-ad-dc running ... I think you mean, Can I send you my unsanitised files ? If so, then yes, just send them to rpenny at samba dot org

On Wed, 8 May 2024 09:48:48 +0200 lists--- via samba <samba at lists.samba.org> wrote: > Hello list, > > I searched the wiki, but couldn't find any article on this topic - > maybe I used the wrong terms ... > > Is there a "Best Practise" documentation how to install a 2nd AD-DC > (or "backup"-DC)? > > Cheers, > Torsten > That

hi, Knowing the 3 idmap backends (ad, rid and autorid) available to configure samba as a domain member, could you give examples of scenarios in which each backend would be more suitable? -- Elias Pereira

On Wed, 05 Jun 2024 17:25:52 +0200 calm.job89448 at fastmail.com wrote: > Hi Rowland, > > thanks again. > > On Wed, Jun 5, 2024, at 17:10, Rowland Penny via samba wrote: > > >> I tried both. First sudo, as I setup everything with sudo and out > >> of curiosity with root. No luck. > >> Was it wrong to setup as user with sudo privileges? > >

Hola Iv?n, Good that you use MJT repo, but you probably don?t need it, bookworm back ports provides the same version these days. http://samba.bigbird.es/doku.php?id=samba:installing-from-backports https://buildd.debian.org/status/package.php?p=samba&suite=bookworm-backports Regarding your member server, may I suggest you check out my notes, based on official samba wiki:

These are my notes. I?d rather use xattr and configure shares from windows. http://samba.bigbird.es/doku.php?id=samba:configuring-shares Also, have you assigned privileges ? http://samba.bigbird.es/doku.php?id=samba:server-privileges Using autorid as the idmap backend has some limitations. I recommend using rid. Regards. On 27 Oct 2023 at 20:08 +0100, Greg Dickie via samba <samba at

Hi, people. I hope you are doing well Could you help me please?. I've a question about "username map" in SAMBA File Servers We have DCs and File Servers based on Samba? 4.19.6? (from MJT repository http://www.corpit.ru/mjt/packages/samba bookworm/samba-4.19/ ) running over Debian 12.5. When we were configuring file servers, we've followed first the guide

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering

Also, did you grant users rights to manage services in Member Servers ? http://samba.bigbird.es/doku.php?id=samba:server-privileges LP On Nov 27, 2023 at 19:02 +0100, Luis Peromarta via samba <samba at lists.samba.org>, wrote: > Looks like your root mapping isn?t working. > > Did you add "min domain uid = 0? to smb.conf ? > > See 'Mapping the AD Administrator user

Looks like your root mapping isn?t working. Did you add "min domain uid = 0? to smb.conf ? See 'Mapping the AD Administrator user to ?root?' : http://samba.bigbird.es/doku.php?id=samba:file-server On Nov 27, 2023 at 18:58 +0100, mail--- via samba <samba at lists.samba.org>, wrote: > Hello, > > recently I've "updated" an AD member file server to an

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC after

You think ntp works with samba but it doesn?t. You *must* use chrony. It will take you exactly 5 minutes to get it up and running. On 5 Jan 2024 at 20:21 +0000, Mark Foley <mfoley at novatec-inc.com>, wrote: > > > > How do you know you're syncing with the DC? What does your 'w32tm /query /source' > give you? It?s all here :

Cheers Rowland, There is a GPO in place to do that. But it?s not working. I have my notes here: http://samba.bigbird.es/doku.php?id=samba:update-dns Also, I can?t create / update PTR records using DNS tool??from RSAT then creating / updating the A record, despite selecting the option. Thanks, On Jan 17, 2024 at 10:25 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: >

Try this. http://samba.bigbird.es/doku.php?id=samba:main-menu Some examples there.??Also reference to sysvol syncing etc. LP On 30 May 2024 at 13:36 +0100, Gilberto Ferreira <gilberto.nunes32 at gmail.com>, wrote: > > I will appreciate any tips or docs. Thanks a lot.

Hi, We have a rat's nest of windows servers all sharing little bits of storage which I'm trying to consolidate on one biggish linux server. I've install a fresh Ubuntu 22.04 and samba 4.15 that comes standard. I've also joined the domain using autorid as the backend and users are getting UID and GIDs correctly as evidenced by wbinfo -i USER and id USER. I've also mapped a

I don?t think you need winbind on a DC as user mapping is done by its own databases. I think you have mixed up member server configs into DC configs. A smb.conf like this should be enough: [global] dns forwarder = 1.1.1.1 netbios name = AAA realm = XXXT server role = active directory domain controller workgroup = MAD idmap_ldb:use rfc2307??= yes #Allow this for free radius to work ntlm

Greetings, All! I've added a new DC to the working AD, transferred FSMO roles (checked, all 7 are ok') and (supposedly) correctly demoted the old DC. SchemaMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN= InfrastructureMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=S RidAllocationMasterRole owner: CN=NTDS