I have moved to 4.1.16 on both controllers. It did not solve my issue
(though it reduced the errors as seen in the new attached ldap
comparison). I am still getting the error telling me to see the
administrator when trying to add a user via the Windows Active Directory
Users and Computers utility.
Gilbert
[root at pdc ~]# /usr/local/samba/bin/samba-tool ldapcmp ldap://pdc
ldap://sdc domain
* Comparing [DOMAIN] context...
* Objects to be compared: 233
Comparing:
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://pdc]
'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://sdc]
Attributes found only in ldap://pdc:
serverState
FAILED
Comparing:
'DC=phxinternet,DC=lcl' [ldap://pdc]
'DC=phxinternet,DC=lcl' [ldap://sdc]
Attributes found only in ldap://pdc:
serverState
msDS-NcType
FAILED
* Result for [DOMAIN]: FAILURE
SUMMARY
---------
Attributes found only in ldap://pdc:
msDS-NcType
serverState
ERROR: Compare failed: -1
On 1/21/2015 12:31 PM, Rowland Penny wrote:> OK, try using the Sernet packages: http://enterprisesamba.com/
>
> Failing that, download and compile the latest samba4 tarball:
> https://download.samba.org/pub/samba/stable/samba-4.1.16.tar.gz
>
> Rowland
>
Even though I am still showing errors. I was able to add a user to the domain using a Windows 7 machine with the administration tools installed (when I first posted, I could not). Using a Windows 8 machine I cannot add a user with the tool. Gilbert On 1/21/2015 5:11 PM, Gilbert Gutierrez wrote:> I have moved to 4.1.16 on both controllers. It did not solve my issue > (though it reduced the errors as seen in the new attached ldap > comparison). I am still getting the error telling me to see the > administrator when trying to add a user via the Windows Active > Directory Users and Computers utility. > > Gilbert > On 1/21/2015 12:31 PM, Rowland Penny wrote: >> OK, try using the Sernet packages: http://enterprisesamba.com/ >> >> Failing that, download and compile the latest samba4 tarball: >> https://download.samba.org/pub/samba/stable/samba-4.1.16.tar.gz >> >> Rowland >> >
On 22/01/15 00:11, Gilbert Gutierrez wrote:> I have moved to 4.1.16 on both controllers. It did not solve my issue > (though it reduced the errors as seen in the new attached ldap > comparison). I am still getting the error telling me to see the > administrator when trying to add a user via the Windows Active > Directory Users and Computers utility. > > Gilbert > > [root at pdc ~]# /usr/local/samba/bin/samba-tool ldapcmp ldap://pdc > ldap://sdc domain > > * Comparing [DOMAIN] context... > > * Objects to be compared: 233 > > Comparing: > 'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://pdc] > 'CN=Builtin,DC=phxinternet,DC=lcl' [ldap://sdc] > Attributes found only in ldap://pdc: > serverState > FAILED > > Comparing: > 'DC=phxinternet,DC=lcl' [ldap://pdc] > 'DC=phxinternet,DC=lcl' [ldap://sdc] > Attributes found only in ldap://pdc: > serverState > msDS-NcType > FAILED > > * Result for [DOMAIN]: FAILURE > > SUMMARY > --------- > > Attributes found only in ldap://pdc: > > msDS-NcType > serverState > ERROR: Compare failed: -1 > > >OK, the two attributes in question do not replicate, so they could be different between DC's, to stop the errors, add ' --filter=msDS-NcType,serverState' to the 'samba-tool ldapcmp' command. So now that you know that the 'errors' are not causing your problems, is there anything in the error logs on the windows PC's or the samba4 DC ? Rowland
On 1/22/2015 3:42 AM, Rowland Penny wrote:> OK, the two attributes in question do not replicate, so they could be > different between DC's, to stop the errors, add ' > --filter=msDS-NcType,serverState' to the 'samba-tool ldapcmp' command. > > So now that you know that the 'errors' are not causing your problems, > is there anything in the error logs on the windows PC's or the samba4 > DC ? > > Rowland >I will look into this... No errors were popping that I originally saw. I now have cleaned it up enough that it works with Window7 admin tools. Windows8.1 admin tools do not seem to be working. I appreciate your reply. Gilbert