similar to: Samba DC and alternate sudo login

> On Mon, 13 May 2024 17:10:20 -0700 > Gregory Sloop via samba <samba at lists.samba.org> wrote: >> I feel like this should be super easy, and that I must be doing >> something dumb, but I need to create another sudo user for the VM's >> the DC's are running on. >> I've created a "domain admin" equivalent user in AD - and perhaps >>

On 14-05-2024 15:11, Gregory Sloop via samba wrote: > >> On Mon, 13 May 2024 17:10:20 -0700 >> Gregory Sloop via samba <samba at lists.samba.org> wrote: >>> I feel like this should be super easy, and that I must be doing >>> something dumb, but I need to create another sudo user for the VM's >>> the DC's are running on. >>> I've

On Mon, 13 May 2024 17:10:20 -0700 Gregory Sloop via samba <samba at lists.samba.org> wrote: > I feel like this should be super easy, and that I must be doing > something dumb, but I need to create another sudo user for the VM's > the DC's are running on. > > I've created a "domain admin" equivalent user in AD - and perhaps > this account can be

Any harm in removing it now? On Tue, May 14, 2024, 10:04?AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 14 May 2024 09:48:47 -0700 > "Greg Sloop <gregs--- via samba" <samba at lists.samba.org> wrote: > > > > Ah, that is your problem, if you are using winbind, you do not need > > > it. > > > > It's been

On Tue, 14 May 2024 09:48:47 -0700 "Greg Sloop <gregs--- via samba" <samba at lists.samba.org> wrote: > > Ah, that is your problem, if you are using winbind, you do not need > > it. > > It's been a while since I did the setup, but IIRC, Louis' setup > walk-through installed it. > (But yeah, it's been a long while - so I could certainly be

On Tue, 14 May 2024 06:11:01 -0700 Gregory Sloop via samba <samba at lists.samba.org> wrote: > > > > On Mon, 13 May 2024 17:10:20 -0700 > > Gregory Sloop via samba <samba at lists.samba.org> wrote: > > >> I feel like this should be super easy, and that I must be doing > >> something dumb, but I need to create another sudo user for the VM's

> Ah, that is your problem, if you are using winbind, you do not need it. It's been a while since I did the setup, but IIRC, Louis' setup walk-through installed it. (But yeah, it's been a long while - so I could certainly be wrong.) I don't know that it really matters though. Is there any other undesirable impacts from having it installed? -Greg On Tue, May 14, 2024 at

On Tue, 14 May 2024 06:35:24 -0700 Gregory Sloop via samba <samba at lists.samba.org> wrote: > > > Can I ask if you have libpam-krb5 installed ? > > Yes. Ah, that is your problem, if you are using winbind, you do not need it. Rowland

> adminuser at tmpdc1:~ $ sudo adduser testadmin > Adding user `testadmin' ... > Adding new group `testadmin' (1001) ... > Adding new user `testadmin' (1001) with group `testadmin (1001)' ... > Creating home directory `/home/testadmin' ... > Copying files from `/etc/skel' ... ? It's at this point I get the Kerberos password prompt BTW. ? > New

So, I'm generally running my DC's in VM's on Xen [XCP-NG]. And I'm considering recovery from different disaster situations - say a crashed/corrupt DC. Or hardware failure. Yes, I could run a second VM with a second DC. But unless I setup another XCP server and put the VM on that - the biggest threat to the current VM/DC is the hardware it's running on. So, it really

Kind of a whole set of general questions - pardon for one more, please! I've read some of the thinking behind not having a DC also be a file server. But it's not a "rule" - just a suggestion. But here's a wrinkle on things. In more than a few setups, I'll have DC's on VM's - and they won't be serving files they'll be purely DC's. Then on dedicated

Rpvs> On 14/07/2020 06:40, Gregory Sloop via samba wrote: >> Kind of a whole set of general questions - pardon for one more, please! >> I've read some of the thinking behind not having a DC also be a file server. >> But it's not a "rule" - just a suggestion. >> But here's a wrinkle on things. >> In more than a few setups, I'll have

First, thanks so much for doing this. I used Louis's packages previously and was in a quandary about what to do when those stopped getting updates. Having you fill that gap has been super nice. Thanks! ? Second. I'm on Ubuntu (22.04) I'm currently using your MJT repo. ? I note you list official debian repos that are part of the official debian system... And that would perhaps be better

Yeah, I could setup an extra XCP box - but at smaller setups, it really seems like overkill. So, it sounds like restores of the VM work "fine." How often do machine accounts reset their passwords? [This is the one that is most likely to be problematic. Rejoining the domain means a new profile. And that's a big PITA on the client side.] User password changes can simply be handled by

Louis, et al. Hi! So, I'm working on a 20.04 setup. I think I'll still use the distro version and not Louis' packages. [No offense Louis - I just need to be sure if (forbid) anything happens to Louis, his packages aren't going to be supported any more, and I'll be on my own for security updates etc. The 20.04 versions are pretty current, and I think will meet my needs for the

>How did you upgrade ? >If I remember correctly, both 20.04 and 22.04 come with 4.15.13 (latest Samba version available), so could it be that the upgrade from 20.04 to >22.04 managed to install unrequired packages ? I did a do-release-upgrade first to go from 20.04 to 22.04, and then updated my /etc/apt/sources.list.d/mjt.list to go from focal/samba-4.18 to jammy/samba-4.19. I also

On Tue, 5 Dec 2023 15:21:50 +0100 Joachim Lindenberg via samba <samba at lists.samba.org> wrote: > I just upgraded one of my DCs ununtu 20.04 -> 22.04 and samba 4.18 -> > 4.19, but the Dc is not yet working again. How did you upgrade ? If I remember correctly, both 20.04 and 22.04 come with 4.15.13 (latest Samba version available), so could it be that the upgrade from 20.04 to

So, I'm wondering if anyone has a "howto" on promoting a non-master DC to FSMO/Operation master and making it the Primary DC? [I don't see it in the Wiki and searching doesn't produce anything for me.] In my particular case, I have a couple of test DC's I've setup. Rather than tear them down, I might like to just move them into production/final testing and then

Rpvs> On 14/07/2020 17:25, Gregory Sloop via samba wrote: >> Rpvs> On 14/07/2020 16:51, Gregory Sloop via samba wrote: >>>> Yeah, I could setup an extra XCP box - but at smaller setups, it really seems like overkill. >>>> So, it sounds like restores of the VM work "fine." >>>> How often do machine accounts reset their passwords? >>

Hi! After providing samba builds for several debian and ubuntu releases for over 1.5 years, I see this service is quite popular still. However, I'd love to understand how useful it is still, and which releases should be provided in the future. For example, samba 4.16.x series is end-of-life, there has been no updates for it for quite some time and none planned, either. Yet people do have