similar to: Sites and Services not updating sites in DNS

I have restored the container from an early snapshot. This has all bits installed, but no config and not joined. I needed -U with a username. By the way my network is a /22 root at member:~# samba-tool dns zonelist awing.mad.mater.int --reverse -U?MAD\luis" WARNING: Using passwords on command line is insecure. Installing the setproctitle python module will hide these from shortly after

Mmm? strange ? Or is this what you were expecting ? root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password for [MAD\administrator]: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password

Hi there, I wonder if this is relevant on Active Directory or maybe is a thing of older NT4 style domains. https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege I have tried setting up a member server with ad-idmap, and used a user ?luis? (with uidNumber) from the Unix Admins group (that has gidNumber). Unix Admins group is a

On Sun, 9 Jun 2024 13:29:15 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Hi there, > > I wonder if this is relevant on Active Directory or maybe is a thing > of older NT4 style domains. > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege > > I have tried setting up a member

LP On Jun 8, 2024 at 17:56 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: > > I have never run those commands like that, I normally run 'net ads join > -Uadministrator' or 'net ads leave -Uadministrator', I have never > specified the domain. I did specify domain out of frustration I think. More test as per your inputs: (net ads join fails)

Agree. But I don?t think it is. See: root at member:/# cat /etc/hostname member root at member:/# cat /etc/hosts 127.0.0.1 localhost 192.168.3.1 member.mad.mater.int member root at member:/# cat /etc/resolv.conf search mad.mater.int nameserver 192.168.0.12 -> DC1 nameserver 192.168.0.13 -> DC2 nameserver 192.168.0.14 -> DC3 nameserver 192.168.0.62 -> DC4 root at member:/# cat

Cheers Rowland, There is a GPO in place to do that. But it?s not working. I have my notes here: http://samba.bigbird.es/doku.php?id=samba:update-dns Also, I can?t create / update PTR records using DNS tool??from RSAT then creating / updating the A record, despite selecting the option. Thanks, On Jan 17, 2024 at 10:25 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: >

On Sun, 9 Jun 2024 18:52:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Update: > > I have revoked the privilege to BUILIN\Administratos. As before, no > root mapping. > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > Successfully revoked

I tried already, feedback welcome and this is all free to use anywhere else. http://samba.bigbird.es/doku.php?id=samba:no-need-for-use-rfc2307 LP On Jun 20, 2024 at 10:19 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: > > We should then document 'idmap_ldb:use rfc2307' > to say it allows the use of uidNumber & gidNumber attributes on a Samba >

Update: I have revoked the privilege to BUILIN\Administratos. As before, no root mapping. root at member:/# net rpc rights revoke "BUILTIN\Administrators" SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: Successfully revoked rights. root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uluis Password for [MAD\luis]: SeDiskOperatorPrivilege:

All, Doing some testing with 4.20.1 on a member server. I have no explanation for this. ?Member? member is just a test machine, I joined to domain *with* net ads join, no issues. A few minutes later ... root at member:/etc/samba# net ads leave domain -U luis Password for [MAD\luis]: Deleted account for 'MEMBER' in realm 'MAD.MATER.INT' root at member:/etc/samba# net ads join

Also, did you grant users rights to manage services in Member Servers ? http://samba.bigbird.es/doku.php?id=samba:server-privileges LP On Nov 27, 2023 at 19:02 +0100, Luis Peromarta via samba <samba at lists.samba.org>, wrote: > Looks like your root mapping isn?t working. > > Did you add "min domain uid = 0? to smb.conf ? > > See 'Mapping the AD Administrator user

On Fri, 21 Jun 2024 17:08:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > > LP > On Jun 21, 2024 at 12:02 +0100, Rowland Penny via samba > <samba at lists.samba.org>, wrote: > > > > Up until here it was 'DC=mydomain,DC=int', then it becomes something > > different, bad sanitisation ? > > > > Yes :( > >

ldap account manager has a nice tree view function. MJ On 6/21/24 11:02, Luis Peromarta via samba wrote: > Anyone ? > > Thanks, > > LP

Try this simplified tutorial. http://samba.bigbird.es/doku.php?id=samba:start LP On 5 Jan 2024 at 07:48 +0000, lists--- via samba <samba at lists.samba.org>, wrote: > Good morning Rowland, > > is it ok for you to send you the complete, not sanitized installation > description? > ... I'm lost in getting the samba-ad-dc running ... > > Cheers, > Torsten > >

On Mon, 10 Jun 2024 08:33:13 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 9 Jun 2024 18:52:39 +0100 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > Update: > > > > I have revoked the privilege to BUILIN\Administratos. As before, no > > root mapping. > > > > root at member:/# net rpc rights

On Mon, 10 Jun 2024 13:38:21 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 10 Jun 2024 08:33:13 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On Sun, 9 Jun 2024 18:52:39 +0100 > > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > > > Update: > > > > > > I

Try: http://samba.bigbird.es/doku.php?id=samba:aditional-dc Regards, LP On 25 Sep 2024 at 20:19 +0200, Carlos Jesus via samba <samba at lists.samba.org>, wrote: > Hello all, > I could use some advice on setting up this project. > I have a small W2k8-R2 domain with a single DC. It runs great in spite of > its age. > However, the redundancy of the system is, of course, low.

On Tue, 11 Jun 2024 15:52:45 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Again, my exact same experience. > > LP > On Jun 11, 2024 at 14:58 +0100, Bailey Allison via samba > <samba at lists.samba.org>, wrote: > > Hey Rowland, > > > > Just wanted to say you are 100% correct, and it does (seemingly) > > nothing, at least

Congratulations. Happy to hear you got it running. Just out of curiosity and apologies if this has been answered before, but why Slack and not Debian when general consensus is Debian is great for Samba ? Building a Samba AD on Debian is painless and takes 20m from start to finish. Anyway, glad you sort it. LP. On 11 Feb 2024 at 05:11 +0100, Mark Foley <mfoley at novatec-inc.com>, wrote: