search for: descriptor_modifi

Hi: I'm trying to join a samba 4.3.4 (as an additional domain controller) to a domain with Zentyal 4.3 (That has samba 4.3.4 inside). I know that this is an old samba version but I cann't upgrade zentyal first. So, When I can join the samba 4.3.4 to the domain I will demote the Zentyal. But when I try: samba-tool domain join dtcf.etecsa.cu DC -U "DTCF\administrator"

Hi *, I just upgraded my AD DC from 4.7.6 to 4.8.1. (Arch Linux) After a reboot my LDAP database is almost empty, when accessed from a LDAP browser or dsa.msc. samba-tool dbcheck --fix fails as even LostAndFound isn't there anymore. ERROR(ldb): uncaught exception - descriptor_modify on CN=SERVER,CN=LostAndFound,DC=dschungel,DC=local failed: No such Base DN:

On Mon, 2015-11-16 at 16:50 +0100, mathias dufresne wrote: > transaction: operations error at > ../source4/dsdb/samdb/ldb_modules/descriptor.c:1147 Looking at that line in your version of Samba may give you some idea why it failed. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer,

The issue is (almost) solved. As shown the previously explained process to repair, nothing's clear about that resolution. Perhaps just the big clean-up was necessary, perhaps synchronisation of a first DC was necessary, no idea. Anyway replication is working, almost. On 4 DCs among 5: ldbsearch -H $sam objectclass=* dn | tail -3 # returned 50968 records # 50965 entries # 3 referrals On one

Hi team, I have Samba (4.9.5) AD DC, and when trying to add second DC, join fail: # samba-tool domain join zamecek.home DC -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'zamecek.home' Found DC dc1.zamecek.home Password for [SSUPS-ZAMECEK\administrator]: workgroup is SSUPS-ZAMECEK realm is

On Wed, 27 Mar 2019 09:01:39 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Wed, 27 Mar 2019 09:45:18 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > Hai, > > > > > > I dont think one noticed this.. > > > > ldbsearch -H ldap://dc4 -UAdministrator > > ldbsearch -H

Hi all, Thank you for tips Andrew, unfortunately I have vague notions about C and these notions are growing old. I was not able to understand anything there except that the function descriptor_modify(module, sub_req) was not successful, without the slightest idea about what could contain variables module or sub_req. Anyway, last few hours I was working on that subject. I first opened DNS tool

On Wed, 27 Mar 2019 09:45:18 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > > I dont think one noticed this.. > > ldbsearch -H ldap://dc4 -UAdministrator > ldbsearch -H ldap://dc1 -U Administrator > > So whats the difference when you see this responce of the command: > Invalid option -U: unknown ... >

On Mon, 25 Mar 2019 15:12:16 +0100 franta via samba <samba at lists.samba.org> wrote: > Hi team, > I have Samba (4.9.5) AD DC, and when trying to add second DC, join > fail: > > # samba-tool domain join zamecek.home DC > -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = > yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain

Hi, That failure is a little odd. It's replicated all the DB objects, but is failing trying to commit the transaction. It looks like the error is happening trying to get the objectClass for the Administrator user. The weird thing is it should have already successfully passed this check once when it first received the object. You could try the following: 1. If you run 'samba-tool

Dne 2019-03-25 16:02, Rowland Penny via samba napsal: > On Mon, 25 Mar 2019 15:12:16 +0100 > franta via samba <samba at lists.samba.org> wrote: > >> Hi team, >> I have Samba (4.9.5) AD DC, and when trying to add second DC, join >> fail: >> >> # samba-tool domain join zamecek.home DC >> -U"SSUPS-ZAMECEK\administrator"

We have a Samba primary domain controller "empire", which seems to have DNS update issues. We can seem to query all records on empire just fine, and we can modify IPs for existing records, but it will not delete or add new records. Attempting to delete via the AD tools shows "Local security authority database contains an internal inconsistency". Adding a record on the command