Displaying 5 results from an estimated 5 matches for "ab4da5a2".
Did you mean:
a04dafa2
2018 Aug 07
2
setting up a RODC
...>> wbinfo -u
>> wbinfo -g
>>
>> But as soon as I try to test the replication I got this message:
>> -----------
>> root at rodc-01:/var/lib/samba/private# samba-tool drs showrepl
>> offsite\RODC-01
>> DSA Options: 0x00000025
>> DSA object GUID: ab4da5a2-2755-45b4-9d83-1dec1f869477
>> DSA invocationId: 92ae0aeb-beea-4944-b65b-61ad4564a87b
>>
>> ==== INBOUND NEIGHBORS ====
>>
>> ERROR(runtime): DsReplicaGetInfo of type 0 failed - (8453,
>> 'WERR_DS_DRA_ACCESS_DENIED')
>> -----------
>>
>>...
2018 Aug 07
2
setting up a RODC
...:
ldbsearch --url=/var/lib/samba/private/sam.ldb
and all users and groups with:
wbinfo -u
wbinfo -g
But as soon as I try to test the replication I got this message:
-----------
root at rodc-01:/var/lib/samba/private# samba-tool drs showrepl
offsite\RODC-01
DSA Options: 0x00000025
DSA object GUID: ab4da5a2-2755-45b4-9d83-1dec1f869477
DSA invocationId: 92ae0aeb-beea-4944-b65b-61ad4564a87b
==== INBOUND NEIGHBORS ====
ERROR(runtime): DsReplicaGetInfo of type 0 failed - (8453,
'WERR_DS_DRA_ACCESS_DENIED')
-----------
If I try to do a replication I see the following messages:
-----------
root a...
2018 Aug 07
0
setting up a RODC
...more Question:
When I do a "host -t srv _ldap._tcp.example.net" I only see my writeable
DCs but not my RODC. So I tested with:
------
ldbsearch -H /var/lib/samba/private/sam.ldb '(invocationid=*)'
--cross-ncs objectguid
------
Found a objectguid for my RODC
-------
host -t CNAME ab4da5a2-2755-45b4-9d83-1dec1f869477._msdcs.example.net
-------
The CNAME is there
Then I did a:
--------
samba_dnsupdate --verbose --all-names
--------
Still no entry for any of the srv-records on my rodc.
Adding Users for password-caching works.
Next Question :-)
Is there any way to see which users load...
2018 Aug 07
0
setting up a RODC
...> and all users and groups with:
> wbinfo -u
> wbinfo -g
>
> But as soon as I try to test the replication I got this message:
> -----------
> root at rodc-01:/var/lib/samba/private# samba-tool drs showrepl
> offsite\RODC-01
> DSA Options: 0x00000025
> DSA object GUID: ab4da5a2-2755-45b4-9d83-1dec1f869477
> DSA invocationId: 92ae0aeb-beea-4944-b65b-61ad4564a87b
>
> ==== INBOUND NEIGHBORS ====
>
> ERROR(runtime): DsReplicaGetInfo of type 0 failed - (8453,
> 'WERR_DS_DRA_ACCESS_DENIED')
> -----------
>
> If I try to do a replication I s...
2018 Aug 07
2
setting up a RODC
...DC.
There is a good reason for that, RODC's do not get that address.
>So I tested with:
> ------
> ldbsearch -H /var/lib/samba/private/sam.ldb '(invocationid=*)'
> --cross-ncs objectguid
> ------
> Found a objectguid for my RODC
>
> -------
> host -t CNAME ab4da5a2-2755-45b4-9d83-1dec1f869477._msdcs.example.net
> -------
> The CNAME is there
> Then I did a:
> --------
> samba_dnsupdate --verbose --all-names
> --------
> Still no entry for any of the srv-records on my rodc.
As I said above, only RWDC's get that srv-record.
>
>...