At this point I have a DC2 joined to a DC1 that has all the FMSO roles. I have
confirmed that 'samba-tool drs showrepl' on both DCs produces the
expected
results without error.
I am now looking at sysvol replication. On FreeBSD the sysvol is located at
/var/db/samba4/sysvol. Here is the problem. On DC1 I see this:
[root at smb4-1 ~ (master)]# ll /var/db/samba4/sysvol
total 1
d---rwx---+ 4 root 3000000 4 Jun 8 12:27 brockley.harte-lyne.ca
On DC2 I see this:
[root at smb4-2 ~ (master)]# ll /var/db/samba4/sysvol
total 1
drwxr-xr-x 3 root wheel 3 Jun 25 14:26 brockley.harte-lyne.ca
I have not yet attempted a replication, which will use rsync when it is
attempted. Are the settings on DC2 expected or should they match those on DC1?
Thanks,
--
*** e-Mail is NOT a SECURE channel ***
Do NOT transmit sensitive data via e-Mail
Unencrypted messages have no legal claim to privacy
Do NOT open attachments nor follow links sent by e-Mail
James B. Byrne mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
On 09/07/2020 17:35, James B. Byrne via samba wrote:> At this point I have a DC2 joined to a DC1 that has all the FMSO roles. I have > confirmed that 'samba-tool drs showrepl' on both DCs produces the expected > results without error. > > I am now looking at sysvol replication. On FreeBSD the sysvol is located at > /var/db/samba4/sysvol. Here is the problem. On DC1 I see this: > > [root at smb4-1 ~ (master)]# ll /var/db/samba4/sysvol > total 1 > d---rwx---+ 4 root 3000000 4 Jun 8 12:27 brockley.harte-lyne.ca > > On DC2 I see this: > > [root at smb4-2 ~ (master)]# ll /var/db/samba4/sysvol > total 1 > drwxr-xr-x 3 root wheel 3 Jun 25 14:26 brockley.harte-lyne.ca > > I have not yet attempted a replication, which will use rsync when it is > attempted. Are the settings on DC2 expected or should they match those on DC1? > > Thanks, >When you first join a DC to a domain, sysvol is virtually empty, so you need to sync sysvol from the original DC to the new one, but there is a gotcha, idmap.ldb on each DC is different, so you also need to sync idmap.ldb from the original DC to the new one, but you need to do this before you sync sysvol. Rowland