samba - Apr 2016 - Samba as AD-Controller: unable to update policies and call start scripts

Zitat von Rowland penny <rpenny at samba.org>:
>> Maybe is it possible that my tries with Samba as AD (this is my first
>> installation of Samba 4 as AD controller) damages the AD-data?
>
> Well if it works for one PC and not another, it is probably a  
> problem with the second PC.
Now I cannot update GPO on the first PC, too...

The very strange thing is, that gpupdate tries to copy somethings from  
\\cch.intra\sysvol and not from \\dc1\sysvol...
There a no server with name cch.intra, this is just the Realm...

Another strange thing is, hat I see a server with name CCH-SRV, that I  
don't have in my network...
>> How can I drop all and restart without reinstalling the Server?
>
> You could try restarting Samba on the DC as a first step. If that  
> doesn't work, you will need to backup the required files, Samba comes
Already done, didn't help...
> with a script to do this 'samba-backup' though you may have to
alter
> the paths in it.
I don't have this script...
> You could then re-install Samba and re-install your backup.
Well, there a not yet many users in the domain, so that I have no  
problem to complete delete the domain and recreate all...
How can I do that?

Thanks
Luca Bertoncello
(lucabert at lucabert.de)

Hi

Le 08/04/2016 09:05, Luca Bertoncello a écrit :
> Zitat von Rowland penny <rpenny at samba.org>:
>
>>> Maybe is it possible that my tries with Samba as AD (this is my
first
>>> installation of Samba 4 as AD controller) damages the AD-data?
>>
>> Well if it works for one PC and not another, it is probably a problem 
>> with the second PC.
>
> Now I cannot update GPO on the first PC, too...
>
> The very strange thing is, that gpupdate tries to copy somethings from 
> \\cch.intra\sysvol and not from \\dc1\sysvol...
> There a no server with name cch.intra, this is just the Realm...
Thats expected. your.realm should resolve to all your DC in a 
round-robin fashion.

Please paste the output of dig cch.intra (or nslookup on a windows box)

Regards

Zitat von Sébastien Le Ray <sebastien-samba at orniz.org>:
>> The very strange thing is, that gpupdate tries to copy somethings  
>> from \\cch.intra\sysvol and not from \\dc1\sysvol...
>> There a no server with name cch.intra, this is just the Realm...
>
> Thats expected. your.realm should resolve to all your DC in a  
> round-robin fashion.
OK, I didn't know that... Thansk!
> Please paste the output of dig cch.intra (or nslookup on a windows box)
 From the DC (Ubuntu 14.04):

root at dc1:~# dig cch.intra

; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> cch.intra
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47849
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;cch.intra.                     IN      A

;; ANSWER SECTION:
cch.intra.              900     IN      A       192.168.50.2

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Apr 08 09:36:39 CEST 2016
;; MSG SIZE  rcvd: 43

from a Windows PC:

nslookup cch.intra
Server:  dc1.cch.intra
Address:  192.168.50.2

Name:    cch.intra
Address:  192.168.50.2

Of course, the IP of the AD-Controller is 192.168.50.2...

Thanks
Luca Bertoncello
(lucabert at lucabert.de)