similar to: Some users / Access Denied

On 12/30/2017 05:22 PM, Paul R. Ganci via samba wrote: > 1.) net ads leave -U administrator > 2.) Remove the machine entry on the 1st DC (used ldbedit) > 3.) mv /var/lib/samba /var/lib/samba-client > 4.) mv /etc/krb5.keytab /etc/krb5.keytab-client > 5.) samba-tool domain join 2nd DC I tried this procedure and it just doesn't want to work. I have this error: >samba-tool

Hello All, I am having a very strange problem with samba 3.0.23c. I upgraded everything from 3.0.9 and I am able to smbclient to the samba 3.0.23c PDC with the administrator user just fine. When I go to add a machine to the domain, it adds the unix machine account to the ou=computers like it is supposed to but none of the samba entries are added. I get an error on the windows side of

Hi, Could this a bug or misconfiguration? 'wbinfo -g' only return partial result compare to 'net ads group', thus unable to authenticate # wbinfo -g | wc -l 4998 # net ads group | wc -l 9114 # getent group | wc -l 5047 [+ local groups] Take a group dl.samplegroup, which is in the DC, but missing from wbinfo # net ads group | grep dl.samplegroup

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

I have some hardware running CentOS 7 and Sernet Samba 4.7 that started out as a member server that I would like to make into a 2nd DC. However I am having trouble converting it because it seems I am not removing all the remnants of the client setup. What I thought I would have to do is this: 1.) net ads leave -U administrator 2.) Remove the machine entry on the 1st DC 3.) mv /var/lib/samba

Daniel R. Meigs wrote: > Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan > Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf.

Hi Denis, thanks a lot! > you said that the zone is empty. It is not a problem per se but for some > time Bind-DLZ has been a bit more strict and ask for a NS record for > every zone. So you just have to create a NS field in your zone pointing > to one of your DC and you should be fine. Internal DNS does not have > this requirements. > > samba-tool dns mydc

On 04/05/2018 08:29 PM, Paul R. Ganci via samba wrote: > Back on February 28, 2018, I started a thread "User permissions of > profile/home directory lost" describing a problem occurring with my > wife's user account. Since that time the random problem has persisted > so I turned on some debugging. I have been able to determine that > somehow her account idmap is

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

On Tue, 26 Dec 2017 18:08:11 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > I have a problem that is now becoming very annoying. Namely I have a > Centos 7 member server running Sernet Samba 4.7.4 for which > everything seems to work except gdm or ftp logins. On the linux > client it seems winbindd is set up correctly. For example (the data >

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression

I am using samba as a domain member for A W2K Domain. The purpose is provide storage services to Unix and W2K Metaframe Servers using kerberos authentication. ( So we are using Samba 3.0 from a while and SUN NFS with kerberos in the same storage - but no sharing locks as Veritas products offer ). so I used the net command: net ads join This command creted a samba3.0 computer account in

Hello, I use --link-dest which works perfectly : rsync -a -R --link-dest="../2016-12-28/" --link-dest="../2016-12-27/" /my/backup/folder ::daemon/mycomputer/2016-12-29/ Now I would like to use --fuzzy --fuzzy, so that rsync algorithm can also work with similarly named files found in other link-dest directories. So I simply added --fuzzy --fuzzy to my previous command line.

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

Lars, You could try a batch file with NETDOM /Domain:MYDOMAIN /user:adminuser /password:apassword MEMBER MYCOMPUTER /JOINDOMAIN Then NETDOM /Domain:MYDOMAIN MEMBER MYCOMPUTER /JOINDOMAIN search microsoft.com for comand line join domain for more info. Bob -----Original Message----- From: Lars O. Grobe [mailto:grobe@gmx.net] Sent: Wednesday, December 18, 2002 7:53 AM To:

I am trying join a w2k bo to a samba DC on RH9. I have read that I need to add the computer as a user first then join so I did it via these commands: adduser myComputer$ smbpasswd -a -m myComputer Is that all i need to do? When I join I get the "welcome to the domain message" and then I restart. However when trying to login I get "This systems computer account is not in the

Hello. I've got samba 2.0.6. My smb.conf file contains: --------- [myhome] comment = My Home path = /home/myhome username = mary, jack read only = No -------- When I run: smbclient '//mycomputer/myhome' and type valid password for mary or jack. The answer is: -------- Password: session setup failed: ERRSRV - ERRbadpw (Bad password - name/password

Hey, I keep posting but no replies yet, this is a new issue, the rest I seem to have fixed. I have an odd issue: * When I do net rpc join the PDC creates the account, and puts it into LDAP, which looks fine. * I then can access the domain and winbind works fine from the Domain Member server. * On the PDC I see the following error: "pdb_get_group_sid: Failed to find Unix account

Hello everyone, How can I specify in tcltk file browser the initial directory to "MyComputer" in Windows where Drives and Partition are accessible? And just a little question if anyone knows, is there a way to use the function choose.files under windows to select a directory? Thanks a lot for your help. Laetitia.

Hi all! Samba 2.x has been running for a while now but now it's time to upgrade. I tried everything (Google, Books, HOWTO's, etc.) but for the last month I've been unable to perform a succesfull migration. Maybe I try to do to many things at once but I cannot get the following to work: - Move the samba domain from a 2.x server to 3.x on a different machine - switch to a ldap