similar to: Help adding RHEL 5.x workstation to Win2008R2 DC

I'm using 4.2.2, sernet, on Debian Jessie. Bare bones recently created dc. I can join workstations, add users, groups using the samba-tool and and the microsoft remote tools. Now I'm trying to add a freshly installed 2008R2 as an additional dc. All seems to go fine (I get an error about dns delegation which I think I can ignore), it finds the domain and the site name, but the join

On 13/09/2020 16:46, Carlos Jesus via samba wrote: > Hello all,I'm trying to add a self compiled samba 4.12 DC to a Windows > 2008R2 domain.Adding the samba DC was troublesome but successful (I had to > modify join.py as I swa in another thread "Join Samba to a Windows AD > ERR_DS_NO_CROSSREF_FOR_NC". After that I could join the samba DC and > everything seemed ok.

On 14/09/2020 10:39, Carlos Jesus wrote: > > > > samba-tool domain join MyDomain.lx.pt <http://MyDomain.lx.pt> DC > -U"MyDomain\administrator" > > Did you get any errors during the successful join ? > You do not seem to have any obvious errors, so can you run this ldbsearch on your Samba DC: ldbsearch -H /usr/local/samba/private/sam.ldb -b

Hello all,I'm trying to add a self compiled samba 4.12 DC to a Windows 2008R2 domain.Adding the samba DC was troublesome but successful (I had to modify join.py as I swa in another thread "Join Samba to a Windows AD ERR_DS_NO_CROSSREF_FOR_NC". After that I could join the samba DC and everything seemed ok. But now, when I check the DNS server on the samba DC using the windows DNS

Has anyone successfully added a Win2008R2 DC to a Samba4 domain? The issue I am encountering is the sysvol/netlogon shares are not created. I can manually create them and copy files, but as soon as I demote/forcefully remove the Samba4 server, the Win2008R2 server refuses to serve requests for the domain. I cannot even manage it through ADUC.

Hi! I'm almost done with a migration from Win2k to Samba4. To get this going I had to install a Win2008R2 Server as an intermediate server, now I want to get rid of it. I found a bug that Win2008R2 can not be demoted from Samba Domain - so I think I've to remove it somehow else. But I couldn't find anything about that in the docs and on google. So anyone out there with a

On 14/09/2020 21:11, Carlos Jesus wrote: > Hi rowland thanks for the tip. > Even though I'm trying to add a DC not a domain member, your > instructions are easily adapted. oops, sorry I sent you the wrong one :-[ > I followed your procedure using Louis' repo up to the point of joining > the domain. > Then I issued samba-tool domain join samdom.example.com >

> And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > joins to a Samba AD domain as a DC. I'm sure it does, that's why I suspect something is wrong in my Win2000-->Win2008R2 upgraded domain AD. > Another thing that comes to my mind is that the 2008R2 domain was > upgraded from an initial Win2000. > Win2000-->Samba direct migration is not possible

Hi, run please to Windows DC command dcdiag В Вс, 04/03/2018 в 08:54 +0000, Rowland Penny via samba пишет: > On Sun, 4 Mar 2018 00:14:48 +0100 > Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > > > > And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > > > joins to a Samba AD domain as a DC. > > > > I'm sure it

Check the DNS settings for the sambom.Local zone where it is located ForestDnsZone or DomainDnsZone. Must be in DomainDnsZone also it is necessary to make sure that in ForestDnsZone there is a zone _msdcs.sambom.local В Вс, 04/03/2018 в 08:54 +0000, Rowland Penny via samba пишет: > On Sun, 4 Mar 2018 00:14:48 +0100 > Claudio Nicora <claudio.nicora at gmail.com> wrote: > > >

> No, I was just checking if you where something you shouldn't, like > creating the zone files in the Bind configs. Good, it's better to clear out any doubt. > There doesn't seem to be anything wrong in any of your conf files, the > only other thing I can think of is, is Avahi running on the new DC ? > and this only applies if your TLD is '.local' No, it's

Il 06/03/2018 05:36, denis.shigapov ha scritto: > It is also desirable to check the access rights to DomainDnsZones and subfolders, this can be done through the ADSI editor. Thanks Denis, one of the screenshots attached to your message (reattached here) turned on the light on my issue, you're the winner ;) It seems that my Win2000-->Win2008R2 DNS upgrade went wrong or, at least, it

On 31/07/15 18:53, Denis Cardon wrote: > Hi Jefferson, > > Le 31/07/2015 15:22, Jefferson B. Limeira a écrit : >> What is the best way to authenticate users in SMB4 DC on Linux >> workstation? >> I'm using pam_winbind, but sometimes its very slow... > > Configuring everything correctly on the workstation side is quite > tricky. If you have laptops among

Hi Louis thanks for the help, > > Kerberos SRV _kerberos._tcp.MyDomain.lx.pt <http://tcp.mydomain.lx.pt/> record > verified ok, sample > > output: > > Server: 192.168.59.112 > > Address: 192.168.59.112#53 > > > > _kerberos._tcp.MyDomain.lx.pt <http://tcp.mydomain.lx.pt/> service > = 0 100 88 > > dc2.MyDomain.lx.pt

On 11/07/16 21:38, Jason Waters wrote: > Didn't his second email show the output of fsmo show? Which showed > all 7 roles. But you are correct, making sure things are actually > there before he kills the old one is best! > > On Mon, Jul 11, 2016 at 4:13 PM, Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>> wrote: > > On 11/07/16

Do you want to keep this 2008 machine in the mix? Or are you looking to move everything to samba? On Tue, Jul 12, 2016 at 8:14 AM, Rowland penny <rpenny at samba.org> wrote: > On 11/07/16 21:43, Rowland penny wrote: > >> On 11/07/16 21:38, Jason Waters wrote: >> >>> Didn't his second email show the output of fsmo show? Which showed all >>> 7 roles.

I will test this Thanks ;-) Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-07-12 9:45 GMT-03:00 Rowland penny <rpenny at samba.org>: > On 12/07/16 13:33, Jason Waters wrote: > >> This is what I would do. >> >> 1. Make sure everything is off of the 2008 machine so you don't need to

You are always receiving these: Adding DNS A record SRVAD-NEW.SAMDOM.LOCAL for IPv4 IP: 10.0.3.100 Join failed - cleaning up Questions: 1) Prior to the join, dos a kinit -V5 ADMINISTRATOR at SAMDOM.LOCAL works? 2) Can you create DNS entries without issues with your administrator account? 3) Can you do a test and join your samba server as a normal computer? Does it work? Regards, Vinicius. Em

On Fri, 2018-03-02 at 09:19 +0100, Ing. Claudio Nicora via samba wrote: > > I'm still focusing on log lines after the failure: > > --- no SRVAD-OLD address in /etc/hosts --- > Join failed - cleaning up > ldb_wrap open of secrets.ldb > Could not find machine account in secrets database: Failed to fetch > machine account password for SAMDOM from both secrets.ldb (Could

If I create SRVAD-NEW DNS record manually, under samdom.local zone, this is what I see with adsiedit: distinguishedName: DC=SRVAD-NEW,DC=samdom.local,CN=MicrosoftDNS,DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL In "Active Directory Users and Computers" under "Domain Controllers" I see this object (that disappears after failure): distinguishedName: CN=SRVAD-NEW,OU=Domain