search for: bridgehead

...9;t aware of this. Thank you for the info. If I was to delete the >> incorrect respsFrom/repsTo attributes, wouldn't the KCC just >> regenerate them over time once the KCC check and ISTG check kicked in? > > As long as the topology doesn't change or DCs which are not > bridgeheads do not go offline, there should be basically zero > additional reps over time. How often they build up over time is an > open question (when DCs do go offline), I can't test every setup and > I'm sure there are edge cases. However if there are these additional > links for w...

Hi Louis, Move up to 4.7 is planned soon but I'm little scared to update bridgehead if it actually had performance problem. I would like to fix all problem before updating. My smb.conf is really simple: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind int...

Hi everybody ! I am encountering performance problem on my bridgehead DC. I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it repo) and they all synchronized on a main bridgehead DC. This performance problem first appears when the bridgehead DC was on Debian Jessie and kernel was updated with meltdown/spectre patch from Debian (3.16.51-3+deb8u1) I added &quo...

...your settings also.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > MORILLO Jordi via samba > Verzonden: vrijdag 16 maart 2018 11:52 > Aan: samba at lists.samba.org > Onderwerp: [Samba] performance problem on bridgehead DC > > Hi everybody ! > > I am encountering performance problem on my bridgehead DC. > I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it > repo) and they all synchronized on a main bridgehead DC. > > This performance problem first appears when the bridgehead DC...

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

...site Filial site > >> DC1 -------(OPENVPN)-------- DC3 > >> | > >> | > >> DC2 > >> All DCs at a site should replicate to each other and each site should replicate to each other through bridgehead servers, in your case, DC1 & DC3. If you turn off a bridgehead server, the replication between sites stops, but as soon as the bridgehead server comes back, replication will start again. I think at the moment, this is as far as you can go, I don't think Samba has all the code that windows...

...ingpanda101 at gmail.com wrote: > For clarification I'll add a few things. > > I initially deleted all the NTDS site links for each site and allowed > the new KCC to create them. However it did not create them I believe > correctly. By that I mean it defined what appeared to be a bridgehead > server at each site. So I disabled the new KCC > 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to > be used again. After all site links were recreated. I then switched > the 'kccsrv:samba_kcc=true' in my smb.conf and that's what prompted > th...

Everyone, Progress was slow today. I started out well, but then I ran into Documentation.htm. Progress slowed considerably, as I analyzed the document structure. I''m up to /etc/shorewall/hosts Configuration. I hope to finish Documentation.xml by tomorrow evening. Converted documents: 6to4.xml CorpNetwork.xml FAQ.xml Please post feedback, if you see any problems with the converted

...ng back to the old KCC clears the errors up. >> For clarification I'll add a few things. I initially deleted all the NTDS site links for each site and allowed the new KCC to create them. However it did not create them I believe correctly. By that I mean it defined what appeared to be a bridgehead server at each site. So I disabled the new KCC 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to be used again. After all site links were recreated. I then switched the 'kccsrv:samba_kcc=true' in my smb.conf and that's what prompted the following errors ab...

> > Wasn't aware of this. Thank you for the info. If I was to delete the > incorrect respsFrom/repsTo attributes, wouldn't the KCC just > regenerate them over time once the KCC check and ISTG check kicked in? As long as the topology doesn't change or DCs which are not bridgeheads do not go offline, there should be basically zero additional reps over time. How often they build up over time is an open question (when DCs do go offline), I can't test every setup and I'm sure there are edge cases. However if there are these additional links for when you have spuriou...

...>>>> DC1 -------(OPENVPN)-------- DC3 >>>> | >>>> | >>>> DC2 >>>> > All DCs at a site should replicate to each other and each site should > replicate to each other through bridgehead servers, in your case, DC1 > & DC3. If you turn off a bridgehead server, the replication between > sites stops, but as soon as the bridgehead server comes back, > replication will start again. > > I think at the moment, this is as far as you can go, I don't think > Samba h...

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

...ttps://github.com/pmoody-/pam-ussh > > (the uber version is here: https://github.com/uber/pam-ussh) Needing PAM auth via ssh-agent is not so uncommon and yet using sshd is not necessarily the first (or best) solution to come to mind. Having it available as part of openssh would be a useful bridgehead for educating users towards better solutions, when available, and anyway practically improve the security of the status quo. Superior solutions are not very useful if not widely adopted. Dom -- rsa4096: 3B10 0CA1 8674 ACBA B4FE FCD2 CE5B CF17 9960 DE13 ed25519: FFB4 0CC3 7F2E 091D F7DA 356E C...

....com wrote: >> For clarification I'll add a few things. >> >> I initially deleted all the NTDS site links for each site and allowed >> the new KCC to create them. However it did not create them I believe >> correctly. By that I mean it defined what appeared to be a bridgehead >> server at each site. So I disabled the new KCC >> 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to >> be used again. After all site links were recreated. I then switched >> the 'kccsrv:samba_kcc=true' in my smb.conf and that's what...

...DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others sites, and all others sites DC replicating only with sm4dc (not sending anything to each others) This is what i have done : - Sites and services MMC : put prefered bridgehead transport IP for smb4dc - Add kccsrv:samba_kcc=true on each DC configuration (smb4dc too) - Restart all samba - Sites and service MMC : * For each DC : manually added one connexion to smb4dc and i deleted all others generated connexions * For smb4dc :...

...gt; For clarification I'll add a few things. >>> >>> I initially deleted all the NTDS site links for each site and allowed >>> the new KCC to create them. However it did not create them I believe >>> correctly. By that I mean it defined what appeared to be a bridgehead >>> server at each site. So I disabled the new KCC >>> 'kccsrv:samba_kcc=false' in my smb.conf and allowed the full mesh to >>> be used again. After all site links were recreated. I then switched >>> the 'kccsrv:samba_kcc=true' in my smb.conf and...

...lt-First-Site-Name. It appears the KCC continues to automatically configure replication links to all DC's in all sites. I would like to limit replication from Site 1 to strictly Site 2. The same with Site 3 being restricted to replicate form site 2. What am I missing? Do I need to configure Bridgehead servers? Thanks. -- -James

On 9/18/2016 6:23 PM, Garming Sam wrote: > Hi, > > For the unsorted attributeID values errors, can you first try: > > samba-tool dbcheck --cross-ncs --fix --yes 'fix_replmetadata_unsorted_attid' > > There's too much going on, and it does look like it might be bailing > out. Running it with 'fix_replmetadata_unsorted_attid' should fix those > first

Hi, Do you have some link to explain what are the difference between new and old KCC? Is it the old one do not respect "NTDS Settings" links in "Active Directory Sites and Services" console and force replication between every DC? If yes new KCC would rely on what is defined into each server's "NTDS Settings", is it? 2016-11-18 17:01 GMT+01:00 lingpanda101 via

Hi, The main (and probably the only) use case of this PAM module is to let sudo authenticate users via their ssh-agent, therefore without having to type any password and without being tempted to use the NOPASSWD sudo option for such convenience. The principle is originally implemented by an existing module [0][1] and many pages that explain how to use it for such purpose can be found online.