search for: bridgehead

...9;t aware of this. Thank you for the info. If I was to delete the >> incorrect respsFrom/repsTo attributes, wouldn't the KCC just >> regenerate them over time once the KCC check and ISTG check kicked in? > > As long as the topology doesn't change or DCs which are not > bridgeheads do not go offline, there should be basically zero > additional reps over time. How often they build up over time is an > open question (when DCs do go offline), I can't test every setup and > I'm sure there are edge cases. However if there are these additional > links for w...

Hi Louis, Move up to 4.7 is planned soon but I'm little scared to update bridgehead if it actually had performance problem. I would like to fix all problem before updating. My smb.conf is really simple: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind int...

Hi everybody ! I am encountering performance problem on my bridgehead DC. I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it repo) and they all synchronized on a main bridgehead DC. This performance problem first appears when the bridgehead DC was on Debian Jessie and kernel was updated with meltdown/spectre patch from Debian (3.16.51-3+deb8u1) I added &quo...

...your settings also.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > MORILLO Jordi via samba > Verzonden: vrijdag 16 maart 2018 11:52 > Aan: samba at lists.samba.org > Onderwerp: [Samba] performance problem on bridgehead DC > > Hi everybody ! > > I am encountering performance problem on my bridgehead DC. > I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it > repo) and they all synchronized on a main bridgehead DC. > > This performance problem first appears when the bridgehead DC...

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

...site Filial site > >> DC1 -------(OPENVPN)-------- DC3 > >> | > >> | > >> DC2 > >> All DCs at a site should replicate to each other and each site should replicate to each other through bridgehead servers, in your case, DC1 & DC3. If you turn off a bridgehead server, the replication between sites stops, but as soon as the bridgehead server comes back, replication will start again. I think at the moment, this is as far as you can go, I don't think Samba has all the code that windows...

...ingpanda101 at gmail.com wrote: > For clarification I'll add a few things. > > I initially deleted all the NTDS site links for each site and allowed > the new KCC to create them. However it did not create them I believe > correctly. By that I mean it defined what appeared to be a bridgehead > server at each site. So I disabled the new KCC > 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to > be used again. After all site links were recreated. I then switched > the 'kccsrv:samba_kcc=true' in my smb.conf and that's what prompted > th...

Everyone, Progress was slow today. I started out well, but then I ran into Documentation.htm. Progress slowed considerably, as I analyzed the document structure. I''m up to /etc/shorewall/hosts Configuration. I hope to finish Documentation.xml by tomorrow evening. Converted documents: 6to4.xml CorpNetwork.xml FAQ.xml Please post feedback, if you see any problems with the converted

...ng back to the old KCC clears the errors up. >> For clarification I'll add a few things. I initially deleted all the NTDS site links for each site and allowed the new KCC to create them. However it did not create them I believe correctly. By that I mean it defined what appeared to be a bridgehead server at each site. So I disabled the new KCC 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to be used again. After all site links were recreated. I then switched the 'kccsrv:samba_kcc=true' in my smb.conf and that's what prompted the following errors ab...

> > Wasn't aware of this. Thank you for the info. If I was to delete the > incorrect respsFrom/repsTo attributes, wouldn't the KCC just > regenerate them over time once the KCC check and ISTG check kicked in? As long as the topology doesn't change or DCs which are not bridgeheads do not go offline, there should be basically zero additional reps over time. How often they build up over time is an open question (when DCs do go offline), I can't test every setup and I'm sure there are edge cases. However if there are these additional links for when you have spuriou...

...>>>> DC1 -------(OPENVPN)-------- DC3 >>>> | >>>> | >>>> DC2 >>>> > All DCs at a site should replicate to each other and each site should > replicate to each other through bridgehead servers, in your case, DC1 > & DC3. If you turn off a bridgehead server, the replication between > sites stops, but as soon as the bridgehead server comes back, > replication will start again. > > I think at the moment, this is as far as you can go, I don't think > Samba h...

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

...ttps://github.com/pmoody-/pam-ussh > > (the uber version is here: https://github.com/uber/pam-ussh) Needing PAM auth via ssh-agent is not so uncommon and yet using sshd is not necessarily the first (or best) solution to come to mind. Having it available as part of openssh would be a useful bridgehead for educating users towards better solutions, when available, and anyway practically improve the security of the status quo. Superior solutions are not very useful if not widely adopted. Dom -- rsa4096: 3B10 0CA1 8674 ACBA B4FE FCD2 CE5B CF17 9960 DE13 ed25519: FFB4 0CC3 7F2E 091D F7DA 356E C...

....com wrote: >> For clarification I'll add a few things. >> >> I initially deleted all the NTDS site links for each site and allowed >> the new KCC to create them. However it did not create them I believe >> correctly. By that I mean it defined what appeared to be a bridgehead >> server at each site. So I disabled the new KCC >> 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to >> be used again. After all site links were recreated. I then switched >> the 'kccsrv:samba_kcc=true' in my smb.conf and that's what...

...DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others sites, and all others sites DC replicating only with sm4dc (not sending anything to each others) This is what i have done : - Sites and services MMC : put prefered bridgehead transport IP for smb4dc - Add kccsrv:samba_kcc=true on each DC configuration (smb4dc too) - Restart all samba - Sites and service MMC : * For each DC : manually added one connexion to smb4dc and i deleted all others generated connexions * For smb4dc :...

...gt; For clarification I'll add a few things. >>> >>> I initially deleted all the NTDS site links for each site and allowed >>> the new KCC to create them. However it did not create them I believe >>> correctly. By that I mean it defined what appeared to be a bridgehead >>> server at each site. So I disabled the new KCC >>> 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to >>> be used again. After all site links were recreated. I then switched >>> the 'kccsrv:samba_kcc=true' in my smb.conf and...

...ully connected replication, but that the RepsTo attribute, under equal conditions with windows, is not filled on the samba side, which in turn entails that the outbound neighbors are not displayed on the samba side . But let me clarify that I even made each server (there is only one in each site) a bridgehead, that is, connections should be built and the attributes of repsTo repsFrom should be fully filled even if the domain controller is alone on its site. Maybe I'm wrong and can you tell me where my mistake is? In the correspondence above, there are screenshots with the difference of attributes be...

Adam, When you have one DC in a site, the sole DC automatically considers itself a bridgehead server to other DC?s once the site links have been setup. Should be no need to manually configure this. I see you have NTDS connections for WIN2019-2 and Samba on each DC. In theory you shouldn?t be having an issue with no outbound neighbors. What I would do is delete the automatically genera...

...fully connected replication, but that the RepsTo attribute, under equal conditions with windows, is not filled on the samba side, which in turn entails that the outbound neighbors are not displayed on the samba side. But let me clarify that I even made each server (there is only one in each site) a bridgehead, that is, connections should be built and the attributes of repsTo repsFrom should be fully filled even if the domain controller is alone on its site. Maybe I'm wrong and can you tell me where my mistake is? In the correspondence above, there are screenshots with the difference of attributes be...

...ication, but that the RepsTo attribute, > under equal conditions with windows, is not filled on the samba side, which > in turn entails that the outbound neighbors are not displayed on the samba > side. But let me clarify that I even made each server (there is only one in > each site) a bridgehead, that is, connections should be built and the > attributes of repsTo repsFrom should be fully filled even if the domain > controller is alone on its site. Maybe I'm wrong and can you tell me where > my mistake is? In the correspondence above, there are screenshots with the > differe...