On Wed, 13 Jun 2018 10:40:28 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote:> Hi Louis, Hi Rowland, > > > I will respond to both in this mail. > > > Yes winbind is installed : > > > > [root at dmzrodc ~]# which winbindd > /usr/sbin/winbindd > [root at dmzrodc ~]# rpm -qa |grep winbind > sernet-samba-winbind-4.8.2-10.el7.x86_64 >What does '/usr/sbin/winbindd -V' produce ?> > I know about *mbd processes. so strange.. This is why I'm posting > here :-)I have never used an RODC, but would image you need both smbd & winbindd to run> > > I joined the RODC following the procedure available on the wiki page > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : > > > samba-tool domain join ads.MYDOMAIN.be RODC -U > MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL > > > This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to > 4.8 but I don't think this is the issue. I had exactly same issue > with 4.6 and 4.7 versions where a dev told me to wait for next > release to get better RODC support. This did not solved the issue and > it becomes "urgent" to have this RODC :-( >As Louis as said, if it is that urgent, you may have to ask Sernet for help, perhaps Volker might care to comment on this problem. Rowland
Hi, I was just investigating the winbind execution issue : This is what happens when winbind is started by samba [root at dmzrodc ~]# winbindd -D --option=server role check:inhibit=yes --foreground -S -d 10 Error setting option 'server' [root at dmzrodc ~]# winbindd -V Version 4.8.2-SerNet-RedHat-10.el7 Gaëtan ----- Mail original ----- De: "Rowland Penny via samba" <samba at lists.samba.org> À: samba at lists.samba.org Envoyé: Mercredi 13 Juin 2018 11:06:04 Objet : Re: [Samba] Samba 4.8 RODC not working On Wed, 13 Jun 2018 10:40:28 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote:> Hi Louis, Hi Rowland, > > > I will respond to both in this mail. > > > Yes winbind is installed : > > > > [root at dmzrodc ~]# which winbindd > /usr/sbin/winbindd > [root at dmzrodc ~]# rpm -qa |grep winbind > sernet-samba-winbind-4.8.2-10.el7.x86_64 >What does '/usr/sbin/winbindd -V' produce ?> > I know about *mbd processes. so strange.. This is why I'm posting > here :-)I have never used an RODC, but would image you need both smbd & winbindd to run> > > I joined the RODC following the procedure available on the wiki page > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : > > > samba-tool domain join ads.MYDOMAIN.be RODC -U > MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL > > > This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to > 4.8 but I don't think this is the issue. I had exactly same issue > with 4.6 and 4.7 versions where a dev told me to wait for next > release to get better RODC support. This did not solved the issue and > it becomes "urgent" to have this RODC :-( >As Louis as said, if it is that urgent, you may have to ask Sernet for help, perhaps Volker might care to comment on this problem. Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- www.it-optics.com Gaëtan SLONGO | Head of Infrastructure Department Boulevard Initialis, 28 - 7000 Mons, BELGIUM Company : +32 (0)65 84 23 85 Direct : +32 (0)65 32 85 88 Fax : +32 (0)65 84 66 76 Skype ID : gslongo.pro GPG Key : gslongo-gpg_key.asc - Please consider your environmental responsibility before printing this e-mail -
On Wed, 13 Jun 2018 11:12:43 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote:> Hi, > > > I was just investigating the winbind execution issue : > > > This is what happens when winbind is started by samba > > > > [root at dmzrodc ~]# winbindd -D --option=server role check:inhibit=yes > --foreground -S -d 10 Error setting option 'server'Try it like this: winbindd -D --option='server role check:inhibit=yes' --foreground -S -d 10> [root at dmzrodc ~]# winbindd -V > Version 4.8.2-SerNet-RedHat-10.el7Good, at least you haven't got something strange going on, like a rogue winbindd version installed ;-) Rowland
Hai, i did see something else you might want to check.
I suspect a possible wrong character in smb.conf.
The line : server role = active directory domain controller
It the only line with "server" in it, i've just checked the
smb.conf you posted.
Try this, run
# backup
cp /etc/samba/smb.conf{,-TEST)
# This will remove all special characters except the keyboard characters
perl -i -pe 's/[^\x20-\x7f]//g' /etc/samba/smb.conf-TEST
diff /etc/samba/smb.conf /etc/samba/smb.conf-TEST
Check if you see/get differences.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Rowland Penny via samba
> Verzonden: woensdag 13 juni 2018 11:20
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba 4.8 RODC not working
>
> On Wed, 13 Jun 2018 11:12:43 +0200 (CEST)
> Gaetan SLONGO <gslongo at it-optics.com> wrote:
>
> > Hi,
> >
> >
> > I was just investigating the winbind execution issue :
> >
> >
> > This is what happens when winbind is started by samba
> >
> >
> >
> > [root at dmzrodc ~]# winbindd -D --option=server role
check:inhibit=yes
> > --foreground -S -d 10 Error setting option 'server'
>
> Try it like this:
>
> winbindd -D --option='server role check:inhibit=yes'
> --foreground -S -d
> 10
>
>
> > [root at dmzrodc ~]# winbindd -V
> > Version 4.8.2-SerNet-RedHat-10.el7
>
> Good, at least you haven't got something strange going on,
> like a rogue
> winbindd version installed ;-)
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>