similar to: sysvol permissions?

On Fri, 15 Dec 2017 13:16:51 -0600 Taylor Hammerling <thammerling at tcsbasys.com> wrote: > ok, I followed the directions on that wikipage, made a hot backup, > copied the hot backup over to the new DC, renamed the hot backup > (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl > sysvolreset" and it spat out the following after a minute or 2 of >

On Wed, 06 Dec 2023 09:45:13 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > I have provisioned a new DC with Samba 4.18.5. This DC is intended to > replace an older one in my AD domain. > > The old/current DC has a number of Group Policies set. Can I "rsync" > /var/lib/samba/sysvol/hprs.local/policies/ to my new >

I have provisioned a new DC with Samba 4.18.5. This DC is intended to replace an older one in my AD domain. The old/current DC has a number of Group Policies set. Can I "rsync" /var/lib/samba/sysvol/hprs.local/policies/ to my new /var/lib/samba/sysvol/hprs.locl/Policies/ per https://wiki.samba.org/index.php/SysVol_replication_(DFS-R), or will I have to manually create policies in the

Who am I to say this? I am only a lowly user and would-be admin, but it seems to me that one of the most useful features of an AD environment, GPOs, is not fully trust-able under Samba because of instability and ensuing fear, before and after each update, related to sysvol and who knows what. I still love you, though.

I created a new Samba 4.5.3 server to join our 4.5.3 AD domain as a DC Following these instructions: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di rectory everything went fine until I got here: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Di rectory#Built-in_Groups_GID_Mappings where running the required:

On 20/08/15 15:24, Mark Foley wrote: > Guilherme Boing, on 19 Aug 2015 14:31 you wrote: > >> I just noticed that my fresh install of Samba 4.2.3 has the same behaviour. > Did you get a solution? > > Odd, but this topic doesn't seem to be getting much traction. I wonder what > people are using Samba4 for. Outside of hard-cord samba-junkies who love > spending hours

On Jul 24 13:30:11 2023 Rowland Penny via samba <samba at lists.samba.org> wrote: > On 24/07/2023 17:46, Mark Foley via samba wrote: > > I removed the new computer from the domain and deleted the smb.conf file. I then > > did: > > > > samba-tool domain join hprs.local DC --option='idmap_ldb:use rfc2307 = yes' -U Administrator [deleted] > It sounds

Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created an initial DC and a replica DC by following: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory For the second one I had to add the extra DNS records as per:

-- 3 samba 4.10.2 DC's, binaries compiled from tarballs on Debian stretch -- 2 DC's are on the same (main office) LAN, one is at another location vpn'ed to the main office -- randomly windows 10 pc's will not be able to complete a gpupdate (repeated tries) with no consistency as to solutions. Sometimes the pc's can't connect to the \\dc\sysvol\local.somedomain.com --

I just noticed that my fresh install of Samba 4.2.3 has the same behaviour. I have a share (\\samba\it_share)) and some users when creating files have the UID as 3000000 and some have their correct UIDs. Share permissons are being controlled by Windows ACLs. On Wed, Aug 19, 2015 at 1:58 PM, Mark Foley <mfoley at novatec-inc.com> wrote: > More information, > > It appears I've

First off, thanks to Rowland Penny for his patience in working through my thread "Joining a new Samba AD DC". I first attempted to upgrade my old Samba 4.8.2 AD/DC to a more recent version, but that effort failed due to too many differences with the Samba version and the latest Slackware OS version. Next I tried to join a 2nd Samba DC to the existing domain with the intent of promoting

Op 12-11-2024 om 15:06 schreef John R. Graham: > > On 11/12/24 08:00, Kees van Vloten via samba wrote: >> >> Op 12-11-2024 om 10:52 schreef Rowland Penny via samba: >>> It looks like nss isn't set up on the DC, so '3000000' isn't being >>> mapped to 'BUILTIN\administrators' >> That is easy enough, just run: >> >>

hi everyone installed and joined a second dc following the instructions at https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory both version are 4.8.2 when i try to reset t the Sysvol folder's file system access control lists on the new dc i get the following error sudo samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

Well, I've just added another directory to not make the redirected folders a the root. And, Favorites and Documents do work. Goog suggestion to check the Windows event viewer. I'll do that and get back with what I find. Thanks, --Mark -----Original Message----- > To: samba at lists.samba.org > From: James <lingpanda101 at gmail.com> > Date: Tue, 1 Sep 2015 08:14:06 -0400

Danke! On Fri, Dec 15, 2017 at 1:03 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:56:25 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > Interesting... How do I go about getting them/keeping them in sync? > > > > see here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ >

I am planning up upgrading my AD/DC from Samba version 4.8.2 to the most recent version in my Slackware distro which is currently 4.15.13. In previous threads in this maillist I was advised that the best route to achieve this was to add a 2nd domain controller, then promote that one and demote the original. I'm in the process of setting up a 2nd DC to that end. I thought I ask questions as I

On 20/08/15 18:26, Guilherme Boing wrote: > Yes, you are correct. > > The users where the UID 3000000 was the owner were users that belong to > Domain Admins group. > Is this the correct behaviour ? I have other users that are in different > groups (e.g. Marketing) and whenever they create a new file, their own UID > shows up as the owner of that file, not the

I wrote earlier about setting the domain user password minimum to > 14 characters. It was advised that my first step should be to upgrade from Samba 4.8.2 to the most recent version available which for my Slackware 15.0 distro is 4.15.5. This also involved a distro upgrade from Slackware 14.2 to 15.0. After upgrading, just for the heck of it, I tried starting Samba without changing my 4.8.2

>-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny >Verzonden: donderdag 20 augustus 2015 16:56 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] Samba4 DC/AD documents created in >redirected folders with bogus UID > >On 20/08/15 15:24, Mark Foley wrote: >> Guilherme Boing, on 19 Aug 2015 14:31 you wrote:

You think ntp works with samba but it doesn?t. You *must* use chrony. It will take you exactly 5 minutes to get it up and running. On 5 Jan 2024 at 20:21 +0000, Mark Foley <mfoley at novatec-inc.com>, wrote: > > > > How do you know you're syncing with the DC? What does your 'w32tm /query /source' > give you? It?s all here :