[Samba] GPO templates problem

[Rowland Penny]

On 01/12/15 17:09, Hector Suarez Planas wrote:
> Greetings.
>
> El 01/12/2015 a las 09:12 AM, Viktor Trojanovic escribió:
>> On 26.11.2015 00:48, Hector Suarez Planas wrote:
>>> Greetings.
>>>
>>> I set up a new Samba 4 AD Server and I have some errors. On the tree 
>>> 4.1 this errors not appeared and until 4.2.3:
>>>
>>> - On the RSAT: GPO Management ---> Computer Settings ---> Policies 
>>> ---> Windows Settings ---> Security Settings, the console gave this 
>>> error: "Windows cannot load the temnplate", and not show several 
>>> options.
>>> - Another error: "The Server Is Not Operational". I have the DNS 
>>> configurated correctly and the network connections are right.
>>>
>>> :-(
>>>
>> Hi Hector,
>>
>> If you still need help on this, you should consider posting more 
>> information, such as your smb.conf, the result of the AD DC 
>> troubleshooting operations mentioned in the Samba Wiki 
>> (https://wiki.samba.org/index.php/Samba_AD_DC_Troubleshooting), and 
>> also your error logs.
>>
>> Viktor
>
> Here is:
>
> smb.conf:
>
> [global]
>         workgroup = TT
>         realm = tt.cu
>         netbios name = PDC-MASTER-1
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, 
> winbind, ntp_signd, kcc, dnsupdate, smb
>         server services = -s3fs +dns
>         allow dns updates = secure
>         dns forwarder = 172.16.1.2
>         dcerpc endpoint servers = +winreg +srvsvc
>         interfaces = eth0 lo
>         template shell = /bin/false
>         log file = /var/log/samba/tt.cu.log
>         syslog = 0
>         log level = 3
>         vfs objects = full_audit
>         template homedir = /home/users/%ACCOUNTNAME%
>
>
>

Try removing the 'server services' lines and the 'dcerpc endpoint 
servers' line, I cannot see any reason for having them, they also don't 
look right.

Rowland