similar to: Slow ldap membership query in large active directory

Thank you Andrew, really appreciated. I have now run 'samba-tool dbcheck --cross-ncs --fix' and it has successfully fixed some errors; there were 110 previously, however there are still 69 remaining after a second pass of dbcheck --fix. The remaining errors seem to be mainly of this form: ERROR: duplicate attributeID values for myattrib in replPropertyMetaData on

On 14 April 2016 at 13:37, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > # samba-tool dbcheck --cross-ncs > Checking 4079 objects > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x00290001 > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x0029000a > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x00290004 > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x0009030e >

Hello, and thanks in advance for any assistance. I have a linux machine that I'm trying to join to a windows 2003 sp1 active directory. The specifics are: RHEL5, samba version samba-3.0.23c-2.el5.2.0.2 a firewall between this server and the rest of the world (which includes the DCs), ports are open for kerberos and CIFS inbound and kerberos, CIFS, NTP and UDP oubtound. this machine

On Thu, 2016-04-14 at 18:07 +0100, Jonathan Hunter wrote: > On 14 April 2016 at 13:37, Jonathan Hunter <jmhunter1 at gmail.com> > wrote: > > > # samba-tool dbcheck --cross-ncs > > Checking 4079 objects > > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x00290001 > > MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk: 0x0029000a > >

Thank you, Andrew - I hadn't done so. (In a good way, I haven't yet had problems with samba that have caused me to delve quite so deeply into the DB :) so I'm not as familiar with the range of tools as I could be, sorry!) This has flagged up quite a few errors, all along the lines of: # samba-tool dbcheck --cross-ncs Checking 4079 objects MYOBJ=value,OU=myou,DC=mydomain,DC=org,DC=uk:

Thank you Andrew and Rowland. (Rowland - I tried 'samba-tool dsacl get', thank you! but found the output hard to decipher so I used ldp.exe on Windows instead in the end) On Wed, 22 Nov 2023 at 20:22, Andrew Bartlett <abartlet at samba.org> wrote: > > On Wed, 2023-11-22 at 17:33 +0000, Jonathan Hunter wrote: > > Are permissions checked in a hiearchical fashion, i.e. if

On Fri, 2016-04-15 at 00:32 +0100, Jonathan Hunter wrote: > Thank you Andrew, really appreciated. > > I have now run 'samba-tool dbcheck --cross-ncs --fix' and it has > successfully fixed some errors; there were 110 previously, however > there are still 69 remaining after a second pass of dbcheck --fix. > > The remaining errors seem to be mainly of this form: >

Hello guys! How I can create an organizationalUnit (OU)? Now I created an user into an OU already existent, but I need to create a new OU. I tried with: root at s1 :~#nano file.ldif dn: ou=MyOU,DC=dominio,DC=pdc,DC=cu objectClass: top objectClass: organizationalUnit ou: MyOU root at s1 :~#ldbadd --url=/var/lib/samba/private/sam.ldb file.ldif but when I search MyOU on the Active

On Wed, 2023-11-22 at 17:33 +0000, Jonathan Hunter wrote: > On Wed, 22 Nov 2023 at 01:03, Andrew Bartlett < > abartlet at samba.org > > wrote: > > Are you sure that the ACLs on all the items in the chain should > > allow reading? > > It's an excellent question, thank you - I'd like to just say "Yes" > but > I will certainly check, as

On Fri, 5 Aug 2016 09:46:51 +0400 henri transfert <hb.transfert at gmail.com> wrote: > 2016-08-04 17:49 GMT+04:00 Rowland Penny <rpenny at samba.org>: > > > On Thu, 4 Aug 2016 16:44:34 +0400 > > henri transfert <hb.transfert at gmail.com> wrote: > > > > > Hi, > > > > > > On RSAT , we can see that there are some extra fields for

2016-08-04 17:49 GMT+04:00 Rowland Penny <rpenny at samba.org>: > On Thu, 4 Aug 2016 16:44:34 +0400 > henri transfert <hb.transfert at gmail.com> wrote: > > > Hi, > > > > On RSAT , we can see that there are some extra fields for users > > account like description, office, phone number or email address. > > > > I already have hundreds of

I am getting the following problem when I try to add new machines to the LDAP server. <snip> [2004/06/07 13:49:12, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462) init_sam_from_ldap: Entry found for user: administrator [2004/06/07 13:49:13, 2] passdb/pdb_ldap.c:init_group_from_ldap(1697) init_group_from_ldap: Entry found for group: 512 [2004/06/07 13:49:13, 2]

Hi Jonathan and Andrew, > Reminder of my original LDAP query: > (& > (objectCategory=Person) > (sAMAccountName=*) > (memberOf:1.2.840.113556.1.4.1941:=CN=mygroup,OU=myou,DC=mydomain,DC=org) > ) I came across the same/similar issue yesterday and found the origin that triggered the issue (at least in my case). I've added a response to your bugzilla entry

Hi, About a year ago (I think I was using v4.2.x at the time), I extended the schema of my Samba AD. This worked just fine and since then I have been able to create and edit objects from my custom schema via ADSIEdit. This worked fine under 4.3.x as well - the last such object I successfully created was just over two months ago, at which point I was running some variant of 4.3.x (probably 4.3.5).

Hi there, I have some questions about authenticating linux users against Active Directory 2003 using winbind. My server is a member of an AD 2003 domain. It is running Samba Version 3.0.23c-2.el5.2.0.2 on a RHEL5. First of all, authentication is working. But I have some smaller issues : * wbinfo -u is very, very slow when dumping AD users. About 30 seconds. Whereas wbinfo -g is instantaneous.

On Mon, 2016-04-11 at 21:23 +0100, Jonathan Hunter wrote: > Hi, > > About a year ago (I think I was using v4.2.x at the time), I extended > the > schema of my Samba AD. This worked just fine and since then I have > been > able to create and edit objects from my custom schema via ADSIEdit. > This > worked fine under 4.3.x as well - the last such object I successfully

On 11/04/16 21:23, Jonathan Hunter wrote: > Hi, > > About a year ago (I think I was using v4.2.x at the time), I extended the > schema of my Samba AD. This worked just fine and since then I have been > able to create and edit objects from my custom schema via ADSIEdit. This > worked fine under 4.3.x as well - the last such object I successfully > created was just over two

Thanks Rowland. In here, I can see the objects I have created using my schema extensions, but I cannot see the schema classes or attributes themselves; I don't know if that is the problem. I'm not sure if by running ldbedit on sam.ldb, this does not include the contents of CN=Schema,CN=Configuration,DC=mydomain,DC=... or if it does include this part of the AD tree and these items are

I can't seem to get the verbose mode of time working.? I am trying to compare the compute cost of sha256-crypt to sha512-crypt: time doveadm pw -s sha256-crypt -p secret real??? 0m0.128s user??? 0m0.081s sys???? 0m0.040s time doveadm pw -s sha512-crypt -p secret real??? 0m0.162s user??? 0m0.105s sys???? 0m0.047s But all attempts to add --verbose fail: time --verbose doveadm pw -s

Hi all, I'm trying to reduce the startup time for my JIT, but I'm running into the problem that the majority of the time is spent loading the bitcode for my standard library, and I suspect it's due to debug info. My stdlib is currently about 2kloc in a number of C++ files; I compile them with clang -g -emit-llvm, then link them together with llvm-link, call opt -O3 on it, and arrive