samba - Nov 2022 - R: R: R: R: R: R: R: windows 11 22h2

On 22/11/2022 07:35, Corrado Ravinetto wrote:
> Hi guys
> My situation
>          DC3     samba ver. 4.17.3 DC with FSMO role
>          DC2     samba ver. 4.17.3 DC
>          DC1     samba ver. 4.9.14 old DC ready to demote
> 
> But i have a problem with replica thru DC2<->DC3 with
(WERR_DS_DRA_ACCESS_DENIED)
> Replica from DC1 -> DC2 and DC3 is ok
> 
> Before demote DC1 i would like have a correct replica ?
> 
> 
> Below samba-tool drs showrepl for DC1,DC2 and DC3
> 
> Any other suggestions or things to look at?
> Any help is appreciated.
> 
Does each DC use its own ipaddress as the first nameserver in 
/etc/resolv.conf ?

If it does or changing it to do so doesn't help, try restarting Samba.

If all else fails, try adding this line to the DC's smb.conf:

dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool

Restart Samba

Rowland

I done all like in your suggestion but nothing changed
Add dns update command in each smb.conf

DC1 192.168.4.34
DC2 192.168.4.33
DC3 192.168.4.32

[root at dc1 ~]# cat /etc/resolv.conf
# Generated by NetworkManager
search lxcerruti.com
nameserver 192.168.4.34
nameserver 192.168.4.33
nameserver 192.168.4.32
nameserver 192.168.1.1

[root at dc2 ~]# cat /etc/resolv.conf
# Generated by NetworkManager
search lxcerruti.com
nameserver 192.168.4.33
nameserver 192.168.4.32
nameserver 192.168.4.34
nameserver 192.168.1.1

[root at dc3 ~]# cat /etc/resolv.conf
# Generated by NetworkManager
search lxcerruti.com
nameserver 192.168.4.33
nameserver 192.168.4.32
nameserver 192.168.4.34
nameserver 192.168.1.1

Does each DC use its own ipaddress as the first nameserver in /etc/resolv.conf ?

If it does or changing it to do so doesn't help, try restarting Samba.

If all else fails, try adding this line to the DC's smb.conf:

dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool

Restart Samba

Rowland




Corrado Ravinetto
Sistemi informativi
corrado.ravinetto at lanificiocerruti.com <mailto:corrado.ravinetto at
lanificiocerruti.com>
T: +39 015 3591283
[Lanificio F.lli CERRUTI]
Lanificio F.lli Cerruti S.p.A.
Via Cernaia 40, 13900 - Biella (BI) Italy
www.lanificiocerruti.com <http://www.lanificiocerruti.com/>

[Twitter] <https://twitter.com/Lan_Cerruti> [Facebook] 
<https://www.facebook.com/LanificioCerruti> [Instagram] 
<https://www.instagram.com/lanificiocerruti/>

Rispetta l'ambiente, non stampare questa mail se non necessario
Respect the environment, don't print unless necessary

[Unesco]