samba - Oct 2015 - gpo failure

Hi Louis, Marc, list,

Quick update:

On 7-10-2015 12:25, L.P.H. van Belle wrote:
> Marc,
>
> Its for mourik important, because he wants to know why he has this error in
his event logs. (i want to know also.) (learning mode)
>
> Mourik Jan, reboot the computer and login again, do you still see the error
message, just to check if this wasnt an old message.
> And/or, maybe this pc logged in at a time the file/policy was changed.
> And all your sysvols are synced?
I have found a problem:

As a regular user, I CAN open the UNCs
>
\\dc2.samba.company.com\SysVol\samba.company.com\Policies\{12AEE8C7-1711-4B26-B5AB-DC7BF1CC2143}
>
\\dc4.samba.company.com\SysVol\samba.company.com\Policies\{12AEE8C7-1711-4B26-B5AB-DC7BF1CC2143}
But I can NOT open the UNC
>
\\dc3.samba.company.com\SysVol\samba.company.com\Policies\{12AEE8C7-1711-4B26-B5AB-DC7BF1CC2143}
So my dc3 seems unsynced or so.

So I am now checking to make sure that my rsync replication script works 
as it should. (I'm guesssing it does NOT)

On 7-10-2015 13:18, mourik jan c heupink wrote:
> So my dc3 seems unsynced or so.
>
> So I am now checking to make sure that my rsync replication script
> works as it should. (I'm guesssing it does NOT)
The rsync seems to be working as it should, so now I'm
guessing that idmap.ldb differs between dc2/4 and dc3.
Is there a way to check that?

Is is safe to follow the instructions on the wiki page
>
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory#GID_mappings_of_built-in_groups
for an already working DC?

(as the page is about joining a brandnew dc...)

On 10/7/2015 7:31 AM, mourik jan c heupink wrote:
> On 7-10-2015 13:18, mourik jan c heupink wrote:
>> So my dc3 seems unsynced or so.
>>
>> So I am now checking to make sure that my rsync replication script
>> works as it should. (I'm guesssing it does NOT)
>
> The rsync seems to be working as it should, so now I'm
> guessing that idmap.ldb differs between dc2/4 and dc3.
> Is there a way to check that?
>
> Is is safe to follow the instructions on the wiki page
>>
https://wiki.samba.org/index.php/Join_an_additional_Samba_DC_to_an_existing_Active_Directory#GID_mappings_of_built-in_groups
>>
> for an already working DC?
>
> (as the page is about joining a brandnew dc...)
>
>From personal experience yes. Create a backup however in case things go
wrong.

-- 
-James