Re: [Samba] Samba 4 how to provision as simply a member of a domain
On 24/08/12 10:47, Rowland Penny wrote: On 24/08/12 09:28, steve wrote: Hi I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not samba and not as a DC) on a box which I shall join to an existing domain. How do I provision it? Or don't I and just join it using samba tool domain join? Cheers, Steve Hi Steve, You could try 'net ads join', the net command is there in /usr/local/samba/bin and this is the command that would be used from a samba 3 domain member, but I must say that I haven't yet tried this. Rowland Hi Rowland Yes, thanks I could alwasy do that but I thinking more of a samba'tool domain join method, as a member, not a dc. Anyone had any experience iof this? It looks too straightforaer to me. I must have missed something Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.3 and DOS read only
All, Sorry for not following up. Crazy week. Anyway, the "username" parameter should have been "valid users". I just took it out, since my test share is not browseable. I also upped log level to 4. I do not get any log entry at all when trying to set the DOS RO attribute, and the unix permissions do not get changed. The log for my test session is below. Thanks, Jim [2012/08/24 14:12:09, 3] param/loadparm.c:5982(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters [2012/08/24 14:12:09, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/opt/samba/sgpkg1/sgpkg1.conf" [2012/08/24 14:12:09, 3] param/loadparm.c:4658(do_section) Processing section "[global]" doing parameter lock directory = /var/opt/samba/sgpkg1/locks doing parameter private dir = /var/opt/samba/sgpkg1/private doing parameter pid directory = /var/opt/samba/sgpkg1/locks doing parameter state directory = /var/opt/samba/sgpkg1/locks doing parameter cache directory = /var/opt/samba/sgpkg1/locks doing parameter include = /etc/opt/samba/sgpkg1/sgpkg1.conf.%m [2012/08/24 14:12:09, 2] param/loadparm.c:4112(handle_include) Can't find include file /etc/opt/samba/sgpkg1/sgpkg1.conf.clientip doing parameter socket address = serverip doing parameter interfaces = serverip doing parameter bind interfaces only = yes doing parameter max log size = 1000 doing parameter username map = /etc/opt/samba/sgpkg1/smbusers.map doing parameter security = domain doing parameter local master = no doing parameter password server = doing parameter wins server = doing parameter dns proxy = yes doing parameter encrypt passwords = yes doing parameter smb passwd file = /var/opt/samba/sgpkg1/private/smbpasswd doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter dos filetime resolution = yes doing parameter read only = no doing parameter syslog = 0 doing parameter kernel oplocks = no doing parameter oplocks = no doing parameter level2 oplocks = no doing parameter guest account = smbguest doing parameter use mmap = no doing parameter unix extensions = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[vob_storage]" doing parameter path = /vob_storage doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter force group = group1 doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[view_storage]" doing parameter path = /view_storage doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter force group = group1 doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[build_storage]" doing parameter path = /build_storage doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter force group = group1 doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[developer_views]" doing parameter path = /developer_views doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter force group = group1 doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[proj1data01]" doing parameter path = /proj1data01 doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[proj1lib]" doing parameter path = /proj1lib doing parameter create mask = 0775 doing parameter directory mask = 0775 doing parameter oplocks = no doing parameter map archive = no doing parameter map hidden = no [2012/08/24 14:12:09, 2] param/loadparm.c:4675(do_section) Processing section "[Test]" doing parameter comment = Setup to test dos RO attribute doing parameter browseable = No doing parameter path = /home/jim doing parameter writeable = yes doing parameter ea support = no doing parameter store dos attributes = no doing parameter map readonly = yes doing parameter dos filemode = yes [2012/08/24 14:12:09, 4] param/loadparm.c:6017(lp_load_ex) pm_process() returned Yes [2012/08/24 14:12:09, 3] param/loadparm.c:3119(lp_add_ipc) adding IPC service [2012/08/24 14:12:09, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2012/08/24 14:12:09, 3] printing/print_svid.c:66(sysv_cache_reload) Scheduler is not runni
[Samba] migration from windows 2003 DC to samba4 DC
hello everyone. i am Planning migrating my microsoft infrastructure to linux gradually. i successfully migrated Fileserver, Virtualization, Proxy. now my goal is to replace my domain controller holding 2003 server. i have a mix client (33 clients) infrastructure including, WindowXP, 2003 Memeber server and Windows 7 while all are memeber of domain with default GPO, though i wanted to use GPOs in future via samba4, here is the detail of my domain controller, 1. 2003 Active directory 2. active directory integrated DNS with DNS forwarder. 3. DHCP. so my questions are. As per my understanding with DC . i can use ADC for failover. - is it possible to install samba DC as an ADC and later promoted to DC? - is there any one has migrated windows DC to SAMBA DC. what was his/her strategy/experience (any suggestions would be appreciated). - can anyone please tell me about the stability of SAMBA4. with his personal experience , since it is in beta stage? because my 2003 DC server is in production and i don't have a clue that beta is a better way to go in production or not. my requirement with samba4 after migration are. 1. DC 2. Integrated DNS so that when ever host join's. DNS records and other updates in AD should be done by it self. (same ad windows AD) 3. DHCP 4. Group policy implementation. BTW, i am using 2.7 SAMBA as file sharing server integrated with 2003 AD. so is it going to effect the migration or not? or samba 2.7 with consider SAMBA4 machine as an old DC. Thanks, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] XP Pro client perm issues after joining samba domain
On Fri, Aug 24, 2012 at 7:54 AM, Tom Ryan wrote: > > I googled for > > internet explorer crashes when administrator > > Figuring that samba wasn't to blame here. > > The first hit I got might be your cause.. (protected mode) > > Your right, Tom, it turned out not to be a samba problem at all, but your reply headed me off in the right direction. Being a *nix guru, I forget that win32 does have a "few" logs. A look at the system log showed that the latest version of Avast's AWS service was crashing IE8. Removing the "Browser Protection" module corrected the problem. Interestingly enough, IE8 appears to be the only browser affected this way. Incidentally, AFAICT there is no protected mode for IE8 installed on XP. Thanks again for helping break me loose on this! Kind Regards, Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Permissions incorrectly ordered on Windows after disabling inheritance
Hi everyone, I've noticed a problem with Debian wheezy + samba 3.6.6 configured with acl_xattr in my configuration. The following test sequence causes Windows Explorer to report incorrectly ordered permission entries: 1) Map a share as with "admin" user credentials to a drive letter on a Windows client 2) Create a folder at the root of the share "rootfolder" 3) Create a subfolder "subfolder1" under "rootfolder" 4) Un-check "Include inheritable permissions from this object's parent" in the windows security settings dialog for Windows Explorer on the root folder 5) Create a subfolder "subfolder2" under "subfolder1" 6) Right-click with Windows Explorer and attempt to edit the permissions of "subfolder2". Windows Explorer pops up a message stating "The permissions on subfolder2 are incorrectly ordered, which may cause some entries to be ineffective." This is reproducible on every Windows client system I've tried including Windows 7, XP, Server 2008 R2 and Server 2003. When incorrectly ordered, the permissions look like this as printed by smbcacls smbcacls //localhost/20120821_3 rootfolder/subfolder1/subfolder2 REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO ACL:Everyone:ALLOWED/OI|CI|I/RWXDPO For comparison, here is the same subfolder tree without performing step 4 above to un-check the "Include inheritable perimssions" box from Windows explorer: smbcacls //localhost/20120821_3 rootfolder/subfolder1/subfolder2 REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI/RWXDPO admin@BizNAS-H5:/mnt/lvol0$ Note that the ACE entries are in the same order, however in the first case where Windows reports incorrectly ordered ACE's Creator Owner, Creator Group and Everyone ACE's include the "I" flag SEC_ACE_FLAG_INHERITED_ACE The share folder, rootfolder and subfolder1 permissions are as shown below (steps 1 through 3) smbcacls //localhost/20120821_3 rootfolder/.. REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\nobody GROUP:Unix Group\root ACL:BIZNAS-H5\nobody:ALLOWED/0x0/FULL ACL:Unix Group\%naslocal%:ALLOWED/0x0/FULL ACL:Unix Group\root:ALLOWED/0x0/FULL ACL:BIZNAS-H5\admin:ALLOWED/0x0/FULL ACL:Everyone:ALLOWED/0x0/ ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI|IO/RWXDPO smbcacls //localhost/20120821_3 rootfolder REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI/RWXDPO admin@BizNAS-H5:/mnt/lvol0$ smbcacls //localhost/20120821_3 rootfolder/subfolder1 REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI/RWXDPO Note that in each case flags OI|CI|IO are set on Creator Owner, Creator Group and Everyone ACE's, however corresponding subfolders do not have the "I" flag and SEC_ACE_FLAG_INHERITED_ACE set. I would have expected this to be set for each inherited permission. Indeed Windows explorer does mark these permissions as "Inherited From Z:\" where Z:\ is the mapped share folder. The value of subfolder1 after step 4 is: smbcacls //localhost/20120821_3 rootfolder/subfolder1 REVISION:1 CONTROL:0x8d04 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/I/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/I/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO ACL:Everyone:ALLOWED/OI|CI|I/RWXDPO Note that when un-checking "Include inheritable permissions" and adding existing permissions using Windows Explorer, Windows forces the "I" SEC_ACE_FLAG_INHERITED_ACE flag on subfolder1 (and all subdirectories below rootfolder) ACE's including the ACE entries "admin" and "None" which were actually not inherited but created through the "Creator Owner" ACE. When viewing "Advanced Security Settings" on a folder with incorrectly ordered permissions, Windows provides a "reorder" option. Reordering the ACE's results in the following permissions: smbcacls //localhost/20120821_3 rootfolder/subfolder1/subfolder2 REVISION:1 CONTROL:0x8d04 OWNER:BIZNAS-H5\admin GROUP:BIZNAS-H5\None ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO ACL:BIZNAS-H5\admin:ALLOWED/I/RWXDPO ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO ACL:BIZNAS-H5\None:ALLOWED/I/RWXDPO ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO AC
[Samba] [SAMBA] shadow_copy2 is not working for me on samba 3.6.7 and btrfs volume
Hi, I'm running samba 3.6.7 on a linux server: root@SRVUBUNTU:/btrfs/samba/.btrfs# smbd -V Version 3.6.7 root@SRVUBUNTU:/btrfs/samba/.btrfs# uname -a Linux SRVUBUNTU 3.5.2 #1 SMP Fri Aug 17 15:26:57 CEST 2012 x86_64 x86_64 x86_64 GNU/Linux I have a base dir to share with samba on /btrfs/samba root@SRVUBUNTU:/btrfs/samba# ls -l total 0 -rw-r--r-- 1 root root 0 Aug 24 13:07 a -rw-r--r-- 1 root root 0 Aug 24 13:07 b My snapshots are stored inside this basedir in the folder .btrfs root@SRVUBUNTU:/btrfs/samba/.btrfs# ls -l total 0 drwxr-xr-x 1 root root 12 Aug 24 13:15 @GMT-2012.08.24-15.15.25 drwxr-xr-x 1 root root 16 Aug 24 13:07 @GMT-2012.08.24-15.26.40 This is my smb.conf --- [data] vfs objects = shadow_copy2 shadow:snapdir = /btrfs/samba/.btrfs shadow:basedir = /btrfs/samba read only = no path = /btrfs/samba/ browsable = yes guest ok = yes follow symlinks = yes wide links = yes unix extensions = no I can't see the snapshots in "previous versions", however I can navigate/browse inside the windows 7 client to the (hidden) snapshot directory, so it seems not to be a permission issue. This worked previously fine for me on a freebsd server with zfs volumes. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] XP Pro client perm issues after joining samba domain
On 8/24/12 7:42 AM, "Chris Nighswonger" wrote: >No takers? I googled for internet explorer crashes when administrator Figuring that samba wasn't to blame here. The first hit I got might be your cause.. (protected mode) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] XP Pro client perm issues after joining samba domain
No takers? On Thu, Aug 23, 2012 at 10:44 AM, Chris Nighswonger < cnighswon...@foundations.edu> wrote: > Samba: 3.6.6 PDC > Client: XP Pro SP3 > > Background: > > 1. Started with a clean installation of XP Pro SP3 > 2. Joined the client to the samba domain > 3. Logged in as user 'root' the first time after the join. > 4. Added "Domain Users" group to the "Local Admin" group on the client > (forget about the security implications for the moment) > > Now when a user (any user) logs on to the client and attempt to open > Internet Explorer 8, Explorer promptly crashes. > > If the local administrator is logged into the client, Explorer works as > expected. > > Everything else works fine for all users including both local resources > and domain resources. > > This is happening on eight clients, all with clean installations of the OS. > > I'm suspecting this is a hidden permissions problem, but am really at a > loss for where to start looking or debugging. > > Any help would be greatly appreciated. > > Kind Regards, > Chris > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Problem in porting samba to HP-UX
Hi, I am a little new to samba. I am currently trying to port samba-3.6.6 to a HP-UX (11.31ia) machine. On compilation i get the following error. bugatti#make Using CFLAGS = -I../lib/zlib -AC99 -AC99 -I. -I/home/dheeraj/samba/samba-3.6.6/source3 -I/home/dheeraj/samba/samba-3.6.6/source3/../lib/popt -I/home/dheeraj/samba/samba-3.6.6/source3/../lib/iniparser/src -Iinclude -I./include -I. -I. -I./../lib/replace -I./../lib/tevent -I./librpc -I./.. -I./../lib/talloc -I../lib/tdb/include -DHAVE_CONFIG_H -Iinclude -I./include -I. -I. -I./../lib/replace -I./../lib/tevent -I./librpc -I./.. -I./../lib/popt -DLDAP_DEPRECATED -I/home/dheeraj/samba/samba-3.6.6/source3/lib -I.. -D_SAMBA_BUILD_=3 -D_SAMBA_BUILD_=3 PICFLAG= +z LIBS = -lsec -lnsl LDFLAGS= +z -L./bin DYNEXP = -Wl,-E,+b/usr/local/lib/hpux32:/usr/lib/hpux32:/usr/local/lib/hpux64:/usr/lib/hpux64 LDSHFLAGS = +z -b -Wl,-B,symbolic,-b -L./bin -lc SHLIBEXT = so SONAMEFLAG = -Wl,+h, creating /home/dheeraj/samba/samba-3.6.6/source3/exports/libtalloc.syms Linking shared library bin/libtalloc.so.2 creating /home/dheeraj/samba/samba-3.6.6/source3/exports/libtdb.syms Linking shared library bin/libtdb.so.1 Compiling passdb/pdb_ldap.c "passdb/pdb_ldap.c", line 1764: error #2029: expected an expression (ber_printf (ber, "ts", LDAP_TAG_EXOP_MODIFY_PASSWD_ID, ^ "passdb/pdb_ldap.c", line 1764: error #2018: expected a ")" (ber_printf (ber, "ts", LDAP_TAG_EXOP_MODIFY_PASSWD_ID, ^ "passdb/pdb_ldap.c", line 1776: error #2029: expected an expression LDAP_TAG_EXOP_MODIFY_PASSWD_NEW, ^ "passdb/pdb_ldap.c", line 1776: error #2018: expected a ")" LDAP_TAG_EXOP_MODIFY_PASSWD_NEW, ^ 4 errors detected in the compilation of "passdb/pdb_ldap.c". The following command failed: ) *** Error exit code 2 Stop. "LDAP_TAG_EXOP_MODIFY_PASSWD_ID"... is defined in /source3/include/smbldap.h. And it is rightly defined as of ber_tag_t type, the one that ber_printf expects. I have tried all the usual methods but the problem is not getting solved. Need some help! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] User profile service hangs, very slow logon after profile migration
I found a "solution" which solves my problem: Start on the client gpedit.msc Set maximum wait time for the network if a user has a roaming user profile or remote home folder setting and configure Wait for network for maximum option is 0 seconds under Computer Configuration\Policies\Administrative Templates\System\User Profiles. Activate Do not detect slow network connections under Computer Configuration\Administrative Templates\System\Logon This fixed my issue, the logon now takes roughly between 3-45 seconds depending on how much data is storred in the roaming profile. Regards, Mathias -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 how to provision as simply a member of a domain
On 24/08/12 09:28, steve wrote: Hi I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not samba and not as a DC) on a box which I shall join to an existing domain. How do I provision it? Or don't I and just join it using samba tool domain join? Cheers, Steve Hi Steve, You could try 'net ads join', the net command is there in /usr/local/samba/bin and this is the command that would be used from a samba 3 domain member, but I must say that I haven't yet tried this. Rowland -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 4 how to provision as simply a member of a domain
Hi I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not samba and not as a DC) on a box which I shall join to an existing domain. How do I provision it? Or don't I and just join it using samba tool domain join? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Schema modification with auxiliary class vs builtin class and vbscript
Hello The situation is the following : I've successfully created an auxiliary class with an attribute by following this method : http://semifershome.free.fr/semifer/index.php?2008/02/12/42-etendre-le-schema-active-directory-classes-attributs-et-display-specifiers The auxiliary class is "allowedService" and the attribute is "allowedServiceAttribute". The following VB script for changing the attribute doesn't run for the bold line. The first time we run the script we have the following error but the value of allowedServiceAttribute is successfully setted: /Erreur : Cet objet ne gère pas cette propriété ou cette méthode "allowedServiceAttribute"/ But even if we run another time the script we have the following same message (so we can see the previous value). The VB Script (example script) -- dim args dim user dim temp set args = wscript.arguments set user = GetObject(args(0)) on error resume next *temp = InputBox("Service attribute : " , , user.allowedServiceAttribute)* user.put allowedServiceAttribute", "test value" user.setinfo set user = Nothing set args = Nothing wscript.Quit -- Where I do not understand is that for another auxiliary class (PossixAccount) and another attribute (LoginShell) the bold line is ok : *temp = InputBox(Loginshell : " , , user.LoginShell)* and we can see the previous value of LoginShell if we have already setted it. Here are the ldiff files of the auxiliary class and his attribute : dn: CN=allowedService, CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org mayContain: allowedServiceAttribute objectClass: top objectClass: classSchema defaultObjectCategory: CN=allowedService,CN=Schema,CN=Configuration,DC=sc,DC= isc84,DC=org defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCC DCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU) objectCategory: CN=Class-Schema,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org schemaIDGUID:: ee+/vURt77+9H++/vUHvv73vv73nsJLvv70d77+9 subClassOf: top cn: allowedService objectClassCategory: 3 lDAPDisplayName: allowedService showInAdvancedViewOnly: TRUE distinguishedName: CN=allowedService,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org whenChanged: 20120824065037.0Z whenCreated: 20120823124813.0Z governsID: 1.2.840.113556.1.8000.2554.6382.11911.19017.19847.32977.12302487.3262913.1 adminDisplayName: allowedService objectGUID:: UB9G77+9GwoVTO+/vUjvv71s77+977+9 rDNAttID: uid uSNChanged: 7129 uSNCreated: 7110 instanceType: 4 adminDescription: allowedService name: allowedService dn: CN=allowedServiceAttribute, CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org objectClass: top objectClass: attributeSchema oMSyntax: 64 objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org isMemberOfPartialAttributeSet: TRUE schemaIDGUID:: 77+9GUrvv70WCu+/vUzvv71T77+976SjCu+/vQ== cn: allowedServiceAttribute isSingleValued: TRUE lDAPDisplayName: allowedServiceAttribute showInAdvancedViewOnly: TRUE searchFlags: 23 attributeID: 1.2.840.113556.1.8000.2554.6382.11911.19017.19847.32977.12302487.3262913.1.1 distinguishedName: CN=allowedServiceAttribute,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org whenChanged: 20120824065737.0Z whenCreated: 20120823124919.0Z msDS-IntId: -1322168606 adminDisplayName: allowedServiceAttribute objectGUID:: 77+9eTDvv73vv73vv70EQe+/vSwKXgRA77+9 attributeSyntax: 2.5.5.12 uSNChanged: 7133 uSNCreated: 7113 instanceType: 4 adminDescription: allowedServiceAttribute name: allowedServiceAttribute Any idea ? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba