Hi Andrew and Louis, Found the issue: after rsync-ing the sysvol from our old decommissioned DCs, the sysvolreset/sysvolcheck DO work out. I tried to keep the things simple first, by NOT immediately importing our old sysvol contents, but first check with a default sysvol... I thought that the sysvolreset would just reset whatever is located under samba/sysvol, but I guess that it reads the directories from the database. Once the on-disk directories matched the sam database contents, things worked fine. Sorry... :-| MJ
On Thu, 26 Oct 2017 12:09:55 +0200 mj via samba <samba at lists.samba.org> wrote:> Hi Andrew and Louis, > > Found the issue: after rsync-ing the sysvol from our old > decommissioned DCs, the sysvolreset/sysvolcheck DO work out. > > I tried to keep the things simple first, by NOT immediately importing > our old sysvol contents, but first check with a default sysvol... > > I thought that the sysvolreset would just reset whatever is located > under samba/sysvol, but I guess that it reads the directories from > the database. > > Once the on-disk directories matched the sam database contents, > things worked fine. > > Sorry... :-| > > MJ >No, don't be sorry, you have raised a valid point, one that I was trying to get across. If you join a DC and there are more than the default GPOs in sysvol on the other DCs, you will get this problem because the GPOs are also in AD and the GPOs in AD are replicated, but the GPOs in sysvol aren't. Now that you have fixed your DCs, never run sysvolcheck or sysvolreset again, they are broken. Rowland
Mandi! mj via samba In chel di` si favelave...> Once the on-disk directories matched the sam database contents, things > worked fine.Ops, i've read only now. As you can see in my previous post, i've had the same behaviour (on jessie, but with samba 'backport' version, 4.5.8+dfsg-2+deb9u1~bpo8+1). -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On Thu, 26 Oct 2017 12:48:37 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> Mandi! mj via samba > In chel di` si favelave... > > > Once the on-disk directories matched the sam database contents, > > things worked fine. > > Ops, i've read only now. As you can see in my previous post, i've had > the same behaviour (on jessie, but with samba 'backport' version, > 4.5.8+dfsg-2+deb9u1~bpo8+1). >You will get this behaviour with any version of Samba. If you join a new DC to a domain that has more than the default GPOs, you need to sync Sysvol from the first DC to the new DC. I have added a note to the Samba 'join' wikipage about this. Rowland