search for: cbadc01

...e instance of cbadc02: twerks at filer:~$ sudo /usr/local/samba/bin/ldbsearch -H /usr/local/samba/private/sam.ldb --cross-ncs --show-deleted > ldbsearch_cross-ncs_deleted.txt itwerks at filer:~$ cat ldbsearch_cross-ncs_deleted.txt | grep cbadc dNSHostName: cbadc02.cb.cliffbells.com dNSHostName: cbadc01.cb.cliffbells.com dn: DC=cbadc01,DC=cb.cliffbells.com ,CN=MicrosoftDNS,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com name: cbadc01 dc: cbadc01 distinguishedName: DC=cbadc01,DC=cb.cliffbells.com ,CN=MicrosoftDNS,DC=DomainDn dNSHostName: cbadc01.cb.cliffbells.com dNSHostName: cbadc01.cb.cliffbells.com...

...2c2-c153-415e-b077-0772a61b96b5,CN=Deleted Objects,DC=cb,DC=cliffbells, DC=com TESTES is nowhere to be found and still fails due to ObjectSID. I don't understand how that is even possible. I also manually inspected ADUC, ADSS, ADSIEdit and DNS in RSAT for both of my live DCs (FILER & CBADC01) and removed all references to CBADC02 & CBADC03. Replication between FILER and CBADC01 is successful. RSync replication of sysvol from FILER to CBADC01 is running via cron. I am spun. I've been banging my head against Samba since 12/17/2015. Please advise, I need to get these VMs joine...

...are down because they were hosted on FILER which has now been demoted and is no longer running any samba services. What I did while following the wiki "Transfer/Seize FSMO Roles": 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles were owned by FILER. 2) logged on to CBADC01, executed samba-tool fsmo transfer --role=all -U administrator --realm=cb.cliffbells.com which succeeded. 3) ran samba-tool fsmo show again on FILER, verified all 7 roles were now owned by CBADC01. 4) ran samba-tool drs showrepl on FILER, replication succeded after transferring fsmo roles. 5) ra...

...at filer:~$ sudo /usr/local/samba/bin/ldbsearch -H > /usr/local/samba/private/sam.ldb --cross-ncs --show-deleted > > ldbsearch_cross-ncs_deleted.txt > itwerks at filer:~$ cat ldbsearch_cross-ncs_deleted.txt | grep > cbadc > dNSHostName: cbadc02.cb.cliffbells.com > dNSHostName: cbadc01.cb.cliffbells.com > dn: DC=cbadc01,DC=cb.cliffbells.com > ,CN=MicrosoftDNS,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com > name: cbadc01 > dc: cbadc01 > distinguishedName: DC=cbadc01,DC=cb.cliffbells.com > ,CN=MicrosoftDNS,DC=DomainDn > dNSHostName: cbadc01.cb.cliffbells.com &gt...

Hi Rowland, I had run those queries during troubleshooting last night as well, apologies if I get ahead of myself, here are all of my missing roles, they only have dn entries, the second line containing fsmoowner is blank: itwerks at cbadc01:~$ sudo /usr/local/samba/bin/ldbsearch -H /usr/local/samba/private/sam.ldb -b 'CN=System,DC=cb,DC=cliffbells,DC=com' -s sub '(&(objectclass=rIDManager)(cn=RID Manager$))' fSMORoleOwner # record 1 dn: CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com # returned 1 records # 1...

...FILER which has now been > demoted and is no longer running any samba services. > > What I did while following the wiki "Transfer/Seize FSMO Roles": > > 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles were > owned by FILER. > > 2) logged on to CBADC01, executed samba-tool fsmo transfer --role=all -U > administrator --realm=cb.cliffbells.com which succeeded. > > 3) ran samba-tool fsmo show again on FILER, verified all 7 roles were now > owned by CBADC01. > > 4) ran samba-tool drs showrepl on FILER, replication succeded after &gt...

...LER which has now > been demoted and is no longer running any samba services. > > What I did while following the wiki "Transfer/Seize FSMO Roles": > > 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles > were owned by FILER. > > 2) logged on to CBADC01, executed samba-tool fsmo transfer --role=all > -U administrator --realm=cb.cliffbells.com <http://cb.cliffbells.com> > which succeeded. > > 3) ran samba-tool fsmo show again on FILER, verified all 7 roles were > now owned by CBADC01. > > 4) ran samba-tool drs showrepl...

No dice. Logged in to a workstation with RSAT installed. Added computer to OU Domain Controllers, closed ADUC, attempted join again. itwerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service

...18:46, IT Admin wrote: > > Hi Rowland, > > I had run those queries during troubleshooting last night as well, > apologies if I get ahead of myself, here are all of my missing roles, > they only have dn entries, the second line containing fsmoowner is blank: > > itwerks at cbadc01:~$ sudo /usr/local/samba/bin/ldbsearch -H > /usr/local/samba/private/sam.ldb -b > 'CN=System,DC=cb,DC=cliffbells,DC=com' -s sub > '(&(objectclass=rIDManager)(cn=RID Manager$))' fSMORoleOwner > # record 1 > dn: CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=co...

...ted > Objects,DC=cb,DC=cliffbells, > DC=com > > > > TESTES is nowhere to be found and still fails due to ObjectSID. I don't > understand how that is even possible. I also manually inspected ADUC, > ADSS, ADSIEdit and DNS in RSAT for both of my live DCs (FILER & CBADC01) > and removed all references to CBADC02 & CBADC03. Replication between FILER > and CBADC01 is successful. RSync replication of sysvol from FILER to > CBADC01 is running via cron. > > I am spun. I've been banging my head against Samba since 12/17/2015. > Please advise,...

Aaaaaaand more problems... Welcome to the continuing saga of FILER. It appears that neither SOA or NS records were updated during the process of moving fsmo roles to CBADC01. SOA entries on all three active DCs point to FILER. There aren't any NS records for any of the new DCs, only FILER. In RSAT each DNS server's properties show filer.cb.cliffbells.com is the primary server. This looks at awful lot like this to me: https://lists.samba.org/archive/samba/20...

...at gmail.com <lingpanda101 at gmail.com>: > On 3/31/2016 3:12 PM, IT Admin wrote: > >> Aaaaaaand more problems... Welcome to the continuing saga of FILER. >> >> It appears that neither SOA or NS records were updated during the process >> of moving fsmo roles to CBADC01. SOA entries on all three active DCs >> point >> to FILER. There aren't any NS records for any of the new DCs, only FILER. >> In RSAT each DNS server's properties show filer.cb.cliffbells.com is the >> primary server. This looks at awful lot like this to me: >...

Aaaaaaand more problems... Welcome to the continuing saga of FILER. It appears that neither SOA or NS records were updated during the process of moving fsmo roles to CBADC01. SOA entries on all three active DCs point to FILER. There aren't any NS records for any of the new DCs, only FILER. In RSAT each DNS server's properties show filer.cb.cliffbells.com is the primary server. This looks at awful lot like this to me: https://lists.samba.org/archive/samba/20...

On 3/31/2016 3:12 PM, IT Admin wrote: > Aaaaaaand more problems... Welcome to the continuing saga of FILER. > > It appears that neither SOA or NS records were updated during the process > of moving fsmo roles to CBADC01. SOA entries on all three active DCs point > to FILER. There aren't any NS records for any of the new DCs, only FILER. > In RSAT each DNS server's properties show filer.cb.cliffbells.com is the > primary server. This looks at awful lot like this to me: > https://lists.samba....

...01 at gmail.com>: > >> On 3/31/2016 3:12 PM, IT Admin wrote: >> >>> Aaaaaaand more problems... Welcome to the continuing saga of FILER. >>> >>> It appears that neither SOA or NS records were updated during the process >>> of moving fsmo roles to CBADC01. SOA entries on all three active DCs >>> point >>> to FILER. There aren't any NS records for any of the new DCs, only FILER. >>> In RSAT each DNS server's properties show filer.cb.cliffbells.com is the >>> primary server. This looks at awful lot like...

...gt;> > >>>> Aaaaaaand more problems... Welcome to the continuing saga of FILER. > >>>>> > >>>>> It appears that neither SOA or NS records were updated during the > >>>>> process > >>>>> of moving fsmo roles to CBADC01. SOA entries on all three active > DCs > >>>>> point > >>>>> to FILER. There aren't any NS records for any of the new DCs, only > >>>>> FILER. > >>>>> In RSAT each DNS server's properties show filer.cb.cliffbells....

...; On 3/31/2016 3:12 PM, IT Admin wrote: >>> >>> Aaaaaaand more problems... Welcome to the continuing saga of FILER. >>>> >>>> It appears that neither SOA or NS records were updated during the >>>> process >>>> of moving fsmo roles to CBADC01. SOA entries on all three active DCs >>>> point >>>> to FILER. There aren't any NS records for any of the new DCs, only >>>> FILER. >>>> In RSAT each DNS server's properties show filer.cb.cliffbells.com is >>>> the >>>&...

...;>> Aaaaaaand more problems... Welcome to the continuing saga of FILER. > > >>>>> > > >>>>> It appears that neither SOA or NS records were updated during the > > >>>>> process > > >>>>> of moving fsmo roles to CBADC01. SOA entries on all three active > > DCs > > >>>>> point > > >>>>> to FILER. There aren't any NS records for any of the new DCs, only > > >>>>> FILER. > > >>>>> In RSAT each DNS server's properties...