similar to: Sites and Services not updating sites in DNS

I have restored the container from an early snapshot. This has all bits installed, but no config and not joined. I needed -U with a username. By the way my network is a /22 root at member:~# samba-tool dns zonelist awing.mad.mater.int --reverse -U?MAD\luis" WARNING: Using passwords on command line is insecure. Installing the setproctitle python module will hide these from shortly after

Mmm? strange ? Or is this what you were expecting ? root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password for [MAD\administrator]: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password

On Sun, 9 Jun 2024 13:29:15 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Hi there, > > I wonder if this is relevant on Active Directory or maybe is a thing > of older NT4 style domains. > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege > > I have tried setting up a member

LP On Jun 8, 2024 at 17:56 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: > > I have never run those commands like that, I normally run 'net ads join > -Uadministrator' or 'net ads leave -Uadministrator', I have never > specified the domain. I did specify domain out of frustration I think. More test as per your inputs: (net ads join fails)

Hi there, I wonder if this is relevant on Active Directory or maybe is a thing of older NT4 style domains. https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege I have tried setting up a member server with ad-idmap, and used a user ?luis? (with uidNumber) from the Unix Admins group (that has gidNumber). Unix Admins group is a

Cheers Rowland, There is a GPO in place to do that. But it?s not working. I have my notes here: http://samba.bigbird.es/doku.php?id=samba:update-dns Also, I can?t create / update PTR records using DNS tool??from RSAT then creating / updating the A record, despite selecting the option. Thanks, On Jan 17, 2024 at 10:25 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: >

Agree. But I don?t think it is. See: root at member:/# cat /etc/hostname member root at member:/# cat /etc/hosts 127.0.0.1 localhost 192.168.3.1 member.mad.mater.int member root at member:/# cat /etc/resolv.conf search mad.mater.int nameserver 192.168.0.12 -> DC1 nameserver 192.168.0.13 -> DC2 nameserver 192.168.0.14 -> DC3 nameserver 192.168.0.62 -> DC4 root at member:/# cat

On Sun, 9 Jun 2024 18:52:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Update: > > I have revoked the privilege to BUILIN\Administratos. As before, no > root mapping. > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > Successfully revoked

I tried already, feedback welcome and this is all free to use anywhere else. http://samba.bigbird.es/doku.php?id=samba:no-need-for-use-rfc2307 LP On Jun 20, 2024 at 10:19 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: > > We should then document 'idmap_ldb:use rfc2307' > to say it allows the use of uidNumber & gidNumber attributes on a Samba >

On Fri, 21 Jun 2024 17:08:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > > LP > On Jun 21, 2024 at 12:02 +0100, Rowland Penny via samba > <samba at lists.samba.org>, wrote: > > > > Up until here it was 'DC=mydomain,DC=int', then it becomes something > > different, bad sanitisation ? > > > > Yes :( > >

Update: I have revoked the privilege to BUILIN\Administratos. As before, no root mapping. root at member:/# net rpc rights revoke "BUILTIN\Administrators" SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: Successfully revoked rights. root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uluis Password for [MAD\luis]: SeDiskOperatorPrivilege:

All, Doing some testing with 4.20.1 on a member server. I have no explanation for this. ?Member? member is just a test machine, I joined to domain *with* net ads join, no issues. A few minutes later ... root at member:/etc/samba# net ads leave domain -U luis Password for [MAD\luis]: Deleted account for 'MEMBER' in realm 'MAD.MATER.INT' root at member:/etc/samba# net ads join

On Thu, 27 Jun 2024 17:12:38 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > I can confirm that, in order to do backups from a member server, you > need to install samba-ad-dc in the member server running > 4.20. > Whilst I do have samba-ad-dc installed on my Unix domain member, I fail to see why it would be required for 'samba-tool domain backup

On Mon, 10 Jun 2024 08:33:13 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 9 Jun 2024 18:52:39 +0100 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > Update: > > > > I have revoked the privilege to BUILIN\Administratos. As before, no > > root mapping. > > > > root at member:/# net rpc rights

ldap account manager has a nice tree view function. MJ On 6/21/24 11:02, Luis Peromarta via samba wrote: > Anyone ? > > Thanks, > > LP

On Mon, 10 Jun 2024 13:38:21 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 10 Jun 2024 08:33:13 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On Sun, 9 Jun 2024 18:52:39 +0100 > > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > > > Update: > > > > > > I

On Tue, 11 Jun 2024 17:02:58 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what > purpose ? Good question. The only real use could be if you are adding rfc2307 attributes to AD AND using the DC as a fileserver (not recommended) AND also running Unix domain members using the 'ad' idmap

Try this simplified tutorial. http://samba.bigbird.es/doku.php?id=samba:start LP On 5 Jan 2024 at 07:48 +0000, lists--- via samba <samba at lists.samba.org>, wrote: > Good morning Rowland, > > is it ok for you to send you the complete, not sanitized installation > description? > ... I'm lost in getting the samba-ad-dc running ... > > Cheers, > Torsten > >

On Tue, 11 Jun 2024 15:52:45 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Again, my exact same experience. > > LP > On Jun 11, 2024 at 14:58 +0100, Bailey Allison via samba > <samba at lists.samba.org>, wrote: > > Hey Rowland, > > > > Just wanted to say you are 100% correct, and it does (seemingly) > > nothing, at least

On Sun, 9 Jun 2024 10:20:46 +0100 Luis Peromarta <lperoma at icloud.com> wrote: > Agree. > > But I don?t think it is. See: > > root at member:/# cat /etc/hostname > member > > root at member:/# cat /etc/hosts > 127.0.0.1 localhost > 192.168.3.1 member.mad.mater.int member > > root at member:/# cat /etc/resolv.conf > search mad.mater.int >