search for: bdcs

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME...

...is therefore not able to employ >precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will not create >SAM update delta files. Ok, I understand until that, but: >It will not interoperate with a PDC (NT4 or Samba) to synchronize >the SAM from delta files that are held by BDCs. >The BDC is said to hold a read-only of the SAM from which it is able to process network >logon requests and authenticate users. The BDC can continue to provide this service, >particularly while, for example, the wide-area network link to the PDC is down. So, when I have SaMBa PDC (with...

OK, I think I've hit a misfeature in samba 3.0(release, Debian/sid) when it comes to using both Samba BDCs and domain trusts. It seems that the domain trust password is stored in the secrets.pdb on the server establishing the trust. This, obviously doesn't facilitate BDCs exercising the trust relationship, or being at all accessable from workstations on the other side of the trust. I have a two...

...deny from succeding in workstations using policies? For example: could I avoid users from changing the IP address of the workstation? Could I set a fixed wallpaper or internet explorer proxy settings to workstations? Scalability ======== In a big scenario like the previous i mentioned: - How many BDCs would be needed? Is it enough to have 1 PDC and severals BDCs? - Is it possible to have multiple PDCs of the same domain each one being in a different VLAN? or, what's the right approach in terms of structure-architecture to implement PDCs and BDCs? Backend ======= Definitely I plan to use Ope...

...used the trusts to "bind" the domains together - *need* defined as we needed it working ASAP. Personally, I would prefer to keep them separate just for greater user/group control. But, I can also see that I may not *need* the independent PDCs that trust each other, but maybe a PDC and 2 BDCs. I'm looking hard at the latter just so I do not hit any major hurdles when moving to SAMBA. Thinking along those lines I must pose the question: Will a SAMBA BDC function as an NT BDC in that an NT BDC will cache (i.e. store locally) user/group/SID information and only update/sync with the P...

Hello, I am trying to figure out how to implement a samba domain in a number of remote offices around the world with partly bad and often interrupted WAN connections/VPNs. The goal is to administer the directory from the central data center. My obvious choice would be to set up a central server with SAMBA+OpenLDAP+smbldap-tools and in each remote office a SAMBA server with OpenLDAP as a

Steven Langasek wrote: > Having one PDC and two BDCs also gives you greater > fault-tolerance than > having three domains with a single PDC each. > > Samba+LDAP can give you this fault tolerance; it can't give you trust > relationships today, without a lot of finagling. > > Steve Langasek > postmodern programmer >...

Dear Help, We are currently running Samba 3.0.22 on a distributed network/domain as a PDC (primary domain controller) and several as BDCs (Backup domain controllers) in our branch offices located around the country. At this point, the PDC is set up in our corporate office (where I'm located) and users have no trouble authenticating (via logging into windows and accessing shares) and also have no trouble changing passwords (eithe...

Hello all, We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated, and the NIS maps are updated and pushed automatically to the slaves whenever a machine joins the domain. Let's say that the Samba PDC is in subnet A,...

Hi, For normal readers you kn ow already my setup, but for those new here, I have a Samba4 PDC and two BDCs one a samba4 and the other a W2k8 R2 machine. Yesterday we had problems with our upstream service provider and my PDC (Backend BIND 9 DLZ) went down for some hours, as you might guess my whole AD was down due to the fact that the main DNS was down. I would like youi to point me or tell me how d...

...ko.kortelainen@hut.fi -----Alkuper?inen viesti----- L?hett?j?: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org] Puolesta Gerald (Jerry) Carter L?hetetty: 17. tammikuuta 2003 18:06 Vastaanottaja: Mikko Kortelainen Kopio: Andrew Bartlett; samba@lists.samba.org Aihe: Re: [Samba] Samba BDCs and machine trust account passwords -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 16 Jan 2003, Mikko Kortelainen wrote: > Here's (what I think is) the essential part from my SLAVE smb.conf: > > security = user > domain logons = yes > domain master = no > o...

hello, I'd like to setup domain authentication purely based on Samba Domain Controllers. Each subnet would have its own BDC (with security = domain option), forwarding smb requests to the PDC (located on the backbone), ie authentication, shares.. My PDC is LDAP based, all that part is ok, win98 workstations successfully log into the PDC. I use idealx smbldap tools, that seem to work fine. I

...did not match for user 'memmerich' ! Defaulting to Lanman [1999/09/14 11:18:32, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'memmerich' in smb_passwd file. [1999/09/14 11:18:32, 2] smbd/server.c:exit_server(406) Closing connections The IP addresses of PDC and BDCs, server (SFM-LINUX1), workstation (PLAN) and user name (memmerich) are correct. The samba config file is: # Global parameters [global] workgroup = SF-DOM server string = Linux 2.2.10 (SuSe 6.2) Fileserver security = domain encrypt passwords = yes map to gue...

How much of a resource hog is a PDC? My understanding is that authentication is done vs a BDC if available. I configured my new file server as the domain PDC because I figured it would already have to run samba. I have two other machines configured as BDCs to serve as logon servers. I'm looking for opinions on whether I'm asking for performance problems by making my file server the PDC. Actually, this machine is already serving as PDC but its not in production yet as a file server. So right now, its just the domain PDC. When I log into th...

When BDC will not make any changes in ldap, is it safe to not set any *script paramater in smb.conf? --beast

Replication has been running smoothly until I upgraded to 4.5.0. I had various errors with all BDCs and a force sync didn't resolve it. I shutdown all BDCs, demoted them with --remove-other-dead-server then joined new BDCs with new names. At first replication was intermittently failing (consecutive failures counter kept resetting), but it seemed OK, just slow if anything. Now they all s...

Hello, I'm about to deploy Samba PDC and several BDCs. As far as I understand Samba and domain logons, this means that a user will be able to log onto any server, with his workstation choosing a domain controller that is probably the closest/fastest etc. one. As a consequence, this also means, that on each server there has to be a copy of a profi...

I have a problem with machine trust accounts breaking in a purely Samba controlled domain. I have one master Samba server acting as a PDC, and three slave servers in different networks. The UNIX user account information is updated by means of NIS, and smbpasswd gets rsync'ed to the slave servers whenever there is a change in the file. All this works without problems at all times. When I

I have a PDC named GOMER w/ IP of 10.8.3.37 and a BDC named BLDG2 w/ ip of 10.8.7.2. when someone on the 10.8.7.x network using the WINS server of 10.8.7.2 logs in and out, their roaming profile is stored on the PDC. is there any way to have the roaming profile stored on the BDC?, because I will have other 10.8.x.x networks and some of these remote sites will be using DSL and I don't

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that will be comprised of one Samba PDC and two Samba BDCs. These...