search for: kcs

...t really know what's going on, but I'm seeing an error I don't understand. It appears that when updating the sone record, something is not working right, but I'm not use what it is The logs have an error like this: client @0x7f7bd4089880 192.168.7.144#57386: update 'internal.kcs/IN' denied It is then followed by Samba_dlz allowing the update of various records from that IP address, followed by another error which is for the same IP and is similar but slightly different, like this, for example: client @0x7f7be408d970 192.168.7.144#59545: update 'internal.kcs/IN&...

Hi I am having a real nightmare over this: Setup is : win2k as ADS server linux samba server is: # smbd --version Version 3.0.14a-Ubuntu kerberos: # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: Administrator@KCS.COM Valid starting Expires Service principal 07/03/06 09:51:51 07/03/06 19:51:51 krbtgt/KCS.COM@KCS.COM Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached smb.conf snippets: [global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain na...

On 03/09/2020 20:57, Peter Pollock wrote: > Ubuntu 20.4 and whatever Samba it installs (sorry, I'm not in front?of > the server right now). 4.11. x if I remember correctly, so okay to start with, but can I introduce to Louis Van Belle's repo: http://apt.van-belle.nl/ Once you get up and running, you can use the packages there to keep current. > > Bind 9.16 (although there

...ince Fri 2020-09-04 21:41:41 PDT; 10min ago Docs: man:named(8) Main PID: 528 (named) Tasks: 14 (limit: 2282) Memory: 61.9M CGroup: /system.slice/named.service ??528 /usr/sbin/named -f -u bind Sep 04 21:52:22 dc01 named[528]: network unreachable resolving 'kcs/DS/IN': 2001:500:2d::d#53 Sep 04 21:52:22 dc01 named[528]: network unreachable resolving 'kcs/DS/IN': 2001:500:1::53#53 Sep 04 21:52:22 dc01 named[528]: network unreachable resolving 'kcs/DS/IN': 2001:500:9f::42#53 Sep 04 21:52:22 dc01 named[528]: network unreachable resolving &...

...ess server, which we were playing with before we started down this route automatically suggested we use the .local extension for internal domains, which we stupidly trusted. As far as I can tell Avahi is not running. Collected config --- 2020-09-01-10:30 ----------- Hostname: genesis DNS Domain: kcs.local FQDN: genesis.kcs.local ipaddress: 192.168.2.11 192.168.1.11 10.1.10.80 ----------- Kerberos SRV _kerberos._tcp.kcs.local record verified ok, sample output: Server: 127.0.0.1 Address: 127.0.0.1#53 _kerberos._tcp.kcs.local service = 100 100 88 luke.kcs.local. _kerberos._tcp.kcs.local service...

...ne 1053, > in query > ? ? raise_on_no_answer) > ? File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 234, > in __init__ > ? ? raise NoAnswer(response=response) > dns.resolver.NoAnswer: The DNS response does not contain an answer to > the question: _msdcs.kcs.local. IN NS Is your TLD really '.local' ? If it is, ensure that Avahi is turned off. > > It looks to me like there is an NS record missing. Do I create this > through Samba somehow or should I use Windows RSAT tools to create the > missing entry. I'm not 100% certain w...

Samba seems to have provisioned OK, but kinit cannot find the realm and I have some records missing that I don't know how to fix: itadmin at dc01:~$ kinit administrator at INTERNAL.KCS kinit: Cannot find KDC for realm "INTERNAL.KCS" while getting initial credentials itadmin at dc01:~$ host -t SRV _ldap._tcp.internal.kcs Host _ldap._tcp.internal.kcs not found: 3(NXDOMAIN) itadmin at dc01:~$ host -t SRV _kerberos._udp.internal.kcs Host _kerberos._udp.internal.kcs not foun...

...lt first went down, the others didn't know what to do with their lives. The same is true on these ones I've built today. DC01 has IP 192.168.4.5 DC02 has IP 192.168.4.6 The gateway is ar 192.168.4.1 If I set /etc/resolv.conf to nameserver 192.168.4.6 nameserver 192.168.4.1 search internal.kcs I get no internal or external name resolution. Trying to ping anything gives me: ping: google.com: Temporary failure in name resolution Dig gives me this error: itadmin at dc02:~$ dig dc01.internal.kcs ; <<>> DiG 9.16.1-Ubuntu <<>> dc01.internal.kcs ;; global options: +c...

...8) > ? ?Main PID: 528 (named) > ? ? ? Tasks: 14 (limit: 2282) > ? ? ?Memory: 61.9M > ? ? ?CGroup: /system.slice/named.service > ? ? ? ? ? ? ???528 /usr/sbin/named -f -u bind > > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:2d::d#53 > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:1::53#53 > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:9f::42#53 > Sep 04 21:52:22 dc0...

...> Docs: man:named(8) > Main PID: 528 (named) > Tasks: 14 (limit: 2282) > Memory: 61.9M > CGroup: /system.slice/named.service > ??528 /usr/sbin/named -f -u bind > > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:2d::d#53 > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:1::53#53 > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > 'kcs/DS/IN': 2001:500:9f::42#53 > Sep 04 21:52:22 dc01 named[528]: networ...

...Scope on a Samba DC > > On 04/09/2020 00:11, Peter Pollock wrote: > > Samba seems to have provisioned OK, but kinit cannot find the realm > > and I have some records missing that I don't know how to fix: > > > > itadmin at dc01:~$ kinit administrator at INTERNAL.KCS > > kinit: Cannot find KDC for realm "INTERNAL.KCS" while > getting initial > > credentials > > itadmin at dc01:~$ host -t SRV _ldap._tcp.internal.kcs > > Host _ldap._tcp.internal.kcs not found: 3(NXDOMAIN) > > itadmin at dc01:~$ host -t SRV _kerberos._u...

...switching to colour frame buffer device 128x48 fb0: VESA VGA frame buffer device ipmi message handler version 39.2 IPMI System Interface driver. ipmi_si 0000:09:00.4: enable device (0002 -> 0003) ipmi_si 0000:09:00.4: PCI INT C -> GSI 16 (level, low) -> IRQ 16 ipmi_si: Adding PCI-specified kcs state machine ipmi_si 0000:09:00.7: enable device (0000 -> 0003) ipmi_si 0000:09:00.7: PCI INT D -> GSI 17 (level, low) -> IRQ 17 ipmi_si: Adding PCI-specified bt state machine ipmi_si: Trying PCI-specified kcs state machine at mem address 0x90841000, slave address 0x0 irq 16 IRQ 16/ipmi_s...

...) > > Tasks: 14 (limit: 2282) > > Memory: 61.9M > > CGroup: /system.slice/named.service > > ??528 /usr/sbin/named -f -u bind > > > > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > > 'kcs/DS/IN': 2001:500:2d::d#53 > > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > > 'kcs/DS/IN': 2001:500:1::53#53 > > Sep 04 21:52:22 dc01 named[528]: network unreachable resolving > > 'kcs/DS/IN': 2001:500:9f::42#53 > &gt...

Hi Peter, As Rowland pointed out in a previous post to you "Each DC should use its own ipaddress for its nameserver in /etc/resolv.conf", so the gateway IP should not be there. So make /etc/resolv.conf on DC01 nameserver 192.168.4.5 search internal.kcs and /etc/resolv.conf on DC02 nameserver 192.168.4.6 search internal.kcs If you use the internal dns backend add the following to your [global] section in /etc/samba/smb.conf on both DC01 and DC02 dns forwarder = <public DNS server IP-address> If you use the bind dns backend make sure tha...

This is brand new. Created following Louis' instructions (although in my install of Ubuntu 20.04, it gets a little tricky with installing packages because it claims one or more don't exist after adding Louis' repository and doing an apt update). Totally separate network from my Zentyal installs, on a ProxMox virtual server, if that makes any difference. I know the admin password, I

Tried the join. Failed to find a writeable DC Tried with --server and gave it the name of one of the servers. No luck Tried a different server and.... itadmin at dc2020:/run/samba$ samba-tool domain join kcs.local DC -U"KCS\domainadmin" --dns-backend=SAMBA_INTE RNAL --server "luke.kcs.local" Password for [KCS\domainadmin]: INFO 2020-08-30 00:37:08,420 pid:175166 /usr/lib/python3/dist-packages/samba/join.py #1542: workgroup is KCS INFO 2020-08-30 00:37:08,420 pid:175166 /usr/lib/pyt...

...tyPages appliesTo attributeDisplayNames masteredBy interSiteTopologyGenerator adminContextMenu msDs-masteredBy classDisplayName revision * Comparing [SCHEMA] context... * DN lists have different size: 1789 != 1569 CN=Dns-Zone-Scope,CN=Schema,CN=Configuration,DC=kcs,DC=local Genesis is, I believe, correct. Is there a way to force Luke to update itself from Genesis completely? On Tue, Jul 14, 2020 at 10:46 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 14/07/2020 18:37, Peter Pollock via samba wrote: > > OK, tried that....

Hi Everyone, I have a dell 1750 server with ERA/O card running on FreeBSD 7.0-STABLE According to Dell, the ERA card supports ipmi 1.0: http://linux.dell.com/ipmi.shtml But so far no luck with freebsd :/ [root@home /usr/src/sys/i386/conf]# ipmitool -I open channel info 1 Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such file or directory

...rtlett On Sat, 2020-08-29 at 17:42 -0700, Peter Pollock wrote: > Tried the join. Failed to find a writeable DC > Tried with --server and gave it the name of one of the servers. No luck > > Tried a different server and.... > > itadmin at dc2020:/run/samba$ samba-tool domain join kcs.local DC -U"KCS\domainadmin" --dns-backend=SAMBA_INTE RNAL --server "luke.kcs.local" > Password for [KCS\domainadmin]: > INFO 2020-08-30 00:37:08,420 pid:175166 /usr/lib/python3/dist-packages/samba/join.py #1542: workgroup is KCS > INFO 2020-0...

OK, tried that. Kicked myself for not trying earlier... but it didn't work. In fact, the error has got worse. Now when I try to go from Genesis to Luke I get: sudo samba-tool drs replicate luke genesis DC=kcs,DC=local -Udomainadmin . . ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (1359, 'WERR_INTERNAL_ERROR') File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 386, in run drs_utils.sendDsRepli...