[Samba] The problem with setting up AD domain to Samba 4

[Vladimir A Fomkin]

Good day!
What is "DN"?

smb.conf on PDC:
root at debian-samba4:/usr/local/samba/etc# cat smb.conf
# Global parameters
[global]
    workgroup = TEST
    realm = TEST.LOCAL
    netbios name = DEBIAN-SAMBA4
    server role = active directory domain controller
    dns forwarder = 192.168.1.102
    idmap_ldb:use rfc2307 = yes

[netlogon]
    path = /usr/local/samba/var/locks/sysvol/test.local/scripts
    read only = No

[sysvol]
    path = /usr/local/samba/var/locks/sysvol
    read only = No

[profiles]
    path = /usr/local/samba/var/profiles
    read only = No
root at debian-samba4:/usr/local/samba/etc#

smb.conf on BDC:
root at bdc-samba:/usr/local/samba/etc# cat ./smb.conf
# Global parameters
[global]
    workgroup = TEST
    realm = test.local
    netbios name = BDC-SAMBA
    server role = active directory domain controller
    dns forwarder = 192.168.1.102
    idmap_ldb:use rfc2307 = yes

[netlogon]
    path = /usr/local/samba/var/locks/sysvol/test.local/scripts
    read only = No

[sysvol]
    path = /usr/local/samba/var/locks/sysvol
    read only = No

[profiles]
    path = /usr/local/samba/var/profiles
    read only = No
root at bdc-samba:/usr/local/samba/etc#



2013/6/14 steve <steve at steve-ss.com>

> On Fri, 2013-06-14 at 18:05 +0400, Vladimir A Fomkin wrote:
> > Hello Marc!
> > Thank you for response!
> > I added this string in smb.conf on PDC and BDC, but after sync BDC again
> do
> > not give access. I see UID for files created for one user via PDC -
> 3000022
> > and via BDC - 3000019
>
> Hi
> Make sure that you have the rfc2307 line in both the DC's. Add:
> uidNumber: 3000022
> to the the DN of the user on one of the DC's. Wait a few minutes. Now
> create a file. It will have uid 3000022 no matter which DC is consulted.
> HTH
> Steve
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>



-- 
С уважением,
Фомкин Владимир Андреевич
ICQ:220967838
Skype:vladimir.fomkin
http://vaf.net.ru