samba - May 2014 - Attributes on Extended AD disappeared...

hey,

I'm trying to extend my AD. For that, I start by adding to smb.conf, 
under globals, this line: "dsdb:schema update allowed = true"

After that, I restart samba4 and installed Active Directory Schema tools 
on a windows machine. I logged on with Administrator account and started 
adding attributes. After some attributes, 12 approximately, the 
connections to domain goes down and some processes, samba and smbd, 
start to 100% cpu.

Another thing, as I was adding attributes to AD, I was confirming that 
via CN=SCHEMA,CN=CONFIGURATION,DC=EXAMPLE,DC=COM.ldb and the attributes 
were getting created. After some time I re-checked some of that 
attributes and they had dissapeared from that file.

Is there anybody with similar problems or know what can causes this??

Thanks in advance.

On 28/05/14 15:32, Bruno Andrade wrote:
> hey,
>
> I'm trying to extend my AD. For that, I start by adding to smb.conf, 
> under globals, this line: "dsdb:schema update allowed = true"
>
> After that, I restart samba4 and installed Active Directory Schema 
> tools on a windows machine. I logged on with Administrator account and 
> started adding attributes. After some attributes, 12 approximately, 
> the connections to domain goes down and some processes, samba and 
> smbd, start to 100% cpu.
>
> Another thing, as I was adding attributes to AD, I was confirming that 
> via CN=SCHEMA,CN=CONFIGURATION,DC=EXAMPLE,DC=COM.ldb and the 
> attributes were getting created. After some time I re-checked some of 
> that attributes and they had dissapeared from that file.
>
> Is there anybody with similar problems or know what can causes this??
>
> Thanks in advance.
I usually just use ldifs on the linux machine, see here: 
https://wiki.samba.org/index.php/Samba_AD_Schema_Extenstions

care to share with us just what you are trying to add ? this may help.

Rowland

Hello Bruno,

Am 28.05.2014 16:32, schrieb Bruno Andrade:
> I'm trying to extend my AD. For that, I start by adding to smb.conf,
> under globals, this line: "dsdb:schema update allowed = true"
> 
> After that, I restart samba4 and installed Active Directory Schema tools
> on a windows machine. I logged on with Administrator account and started
> adding attributes. After some attributes, 12 approximately, the
> connections to domain goes down and some processes, samba and smbd,
> start to 100% cpu.
> 
> Another thing, as I was adding attributes to AD, I was confirming that
> via CN=SCHEMA,CN=CONFIGURATION,DC=EXAMPLE,DC=COM.ldb and the attributes
> were getting created. After some time I re-checked some of that
> attributes and they had dissapeared from that file.

Do you have multiple DCs? If yes, have you done the schema extension on
the one owning the Schema Master role (FSMO)?



Regards,
Marc