search for: cliffbells

...show-deleted reveals a single instance of cbadc02: twerks at filer:~$ sudo /usr/local/samba/bin/ldbsearch -H /usr/local/samba/private/sam.ldb --cross-ncs --show-deleted > ldbsearch_cross-ncs_deleted.txt itwerks at filer:~$ cat ldbsearch_cross-ncs_deleted.txt | grep cbadc dNSHostName: cbadc02.cb.cliffbells.com dNSHostName: cbadc01.cb.cliffbells.com dn: DC=cbadc01,DC=cb.cliffbells.com ,CN=MicrosoftDNS,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com name: cbadc01 dc: cbadc01 distinguishedName: DC=cbadc01,DC=cb.cliffbells.com ,CN=MicrosoftDNS,DC=DomainDn dNSHostName: cbadc01.cb.cliffbells.com dNSHostName:...

No dice. Logged in to a workstation with RSAT installed. Added computer to OU Domain Controllers, closed ADUC, attempted join again. itwerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service principal 03/21/2016 17:21:42 03/22/2016 03:21:42 krbtgt/ CB.CLIFFBELLS.COM at CB.CLIFFBELLS.COM renew until 03/...

Good times... Spent hours today rolling a fresh VM. FAIL itwerks at testes:~$ kinit administrator Password for administrator at CB.CLIFFBELLS.COM: itwerks at testes:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: administrator at CB.CLIFFBELLS.COM Valid starting Expires Service principal 03/27/2016 00:07:04 03/27/2016 10:07:04 krbtgt/ CB.CLIFFBELLS.COM at CB.CLIFFBELLS.COM renew until 03/2...

I cannot join two new VMs to my domain, I receive the following error on both machines: twerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service principal 03/21/2016 00:19:56 03/21/2016 10:19:56 krbtgt/ CB.CLIFFBELLS.COM at CB.CLIFFBELLS.COM renew until 03/...

...0ADEL:de85228c-f92b-4d5d-9d6a-01c3f915dec9,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu$ objectClass: top objectClass: server instanceType: 4 whenCreated: 20160310044543.0Z uSNCreated: 4215 objectGUID: de85228c-f92b-4d5d-9d6a-01c3f915dec9 systemFlags: 1375731712 dNSHostName: cbadc02.cb.cliffbells.com cn:: Q0JBREMwMgpERUw6ZGU4NTIyOGMtZjkyYi00ZDVkLTlkNmEtMDFjM2Y5MTVkZWM5 isDeleted: TRUE name:: Q0JBREMwMgpERUw6ZGU4NTIyOGMtZjkyYi00ZDVkLTlkNmEtMDFjM2Y5MTVkZWM5 lastKnownParent: CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati on,DC=cb,DC=cliffbells,DC=com isRecycled: TRUE whenChange...

...nger running any samba services. What I did while following the wiki "Transfer/Seize FSMO Roles": 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles were owned by FILER. 2) logged on to CBADC01, executed samba-tool fsmo transfer --role=all -U administrator --realm=cb.cliffbells.com which succeeded. 3) ran samba-tool fsmo show again on FILER, verified all 7 roles were now owned by CBADC01. 4) ran samba-tool drs showrepl on FILER, replication succeded after transferring fsmo roles. 5) ran samba-tool domain demote -Uadministrator on FILER. 6) shut down samba on FILER, re...

...d values when needed. As I have no real idea about your issue I would first try to set up a new VM with a different name, very different name, to test if your domain refuses to add all new DC (whatever is the name) or only DC with names already used. 2016-03-21 22:25 GMT+01:00 IT Admin <it at cliffbells.com>: > No dice. > > Logged in to a workstation with RSAT installed. Added computer to OU > Domain Controllers, closed ADUC, attempted join again. > > itwerks at cbadc03:~$ kinit > Administrator > Password for Administrator at CB.CLIFFBELLS.COM: > itwerks at cbadc03:...

...eant to include the command you sent in my last message, I had executed it while troubleshooting... :~$ sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' CN=Schema,CN=Configuration,DC=cb,DC=cliffbells,DC=com CN=Partitions,CN=Configuration,DC=cb,DC=cliffbells,DC=com CN=Infrastructure,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com CN=Infrastructure,DC=ForestDnsZones,DC=cb,DC=cliffbells,DC=com CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com DC=cb,DC=cliffbells,DC=com CN=Infrastructure,DC=cb,DC=c...

...gt; What I did while following the wiki "Transfer/Seize FSMO Roles": > > 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles > were owned by FILER. > > 2) logged on to CBADC01, executed samba-tool fsmo transfer --role=all > -U administrator --realm=cb.cliffbells.com <http://cb.cliffbells.com> > which succeeded. > > 3) ran samba-tool fsmo show again on FILER, verified all 7 roles were > now owned by CBADC01. > > 4) ran samba-tool drs showrepl on FILER, replication succeded after > transferring fsmo roles. > > 5) ran samba...

On 21/03/16 04:26, IT Admin wrote: > I cannot join two new VMs to my domain, I receive the following error on > both machines: > > twerks at cbadc03:~$ kinit > Administrator > Password for Administrator at CB.CLIFFBELLS.COM: > itwerks at cbadc03:~$ klist -e > Ticket cache: FILE:/tmp/krb5cc_1000 > Default principal: Administrator at CB.CLIFFBELLS.COM > > Valid starting Expires Service principal > 03/21/2016 00:19:56 03/21/2016 10:19:56 krbtgt/ > CB.CLIFFBELLS.COM at CB.CLIF...

...oubleshooting last night as well, apologies if I get ahead of myself, here are all of my missing roles, they only have dn entries, the second line containing fsmoowner is blank: itwerks at cbadc01:~$ sudo /usr/local/samba/bin/ldbsearch -H /usr/local/samba/private/sam.ldb -b 'CN=System,DC=cb,DC=cliffbells,DC=com' -s sub '(&(objectclass=rIDManager)(cn=RID Manager$))' fSMORoleOwner # record 1 dn: CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com # returned 1 records # 1 entries # 0 referrals itwerks at cbadc01:~$ !284 sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H /usr/local/s...

Hi JS, Le 21/03/2016 05:26, IT Admin a écrit : > I cannot join two new VMs to my domain, I receive the following error on > both machines: > > twerks at cbadc03:~$ kinit > Administrator > Password for Administrator at CB.CLIFFBELLS.COM: > itwerks at cbadc03:~$ klist -e > Ticket cache: FILE:/tmp/krb5cc_1000 > Default principal: Administrator at CB.CLIFFBELLS.COM > > Valid starting Expires Service principal > 03/21/2016 00:19:56 03/21/2016 10:19:56 krbtgt/ > CB.CLIFFBELLS.COM at CB.CLIF...

...c9,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu$ > objectClass: top > objectClass: server > instanceType: 4 > whenCreated: 20160310044543.0Z > uSNCreated: 4215 > objectGUID: de85228c-f92b-4d5d-9d6a-01c3f915dec9 > systemFlags: 1375731712 > dNSHostName: cbadc02.cb.cliffbells.com > cn:: Q0JBREMwMgpERUw6ZGU4NTIyOGMtZjkyYi00ZDVkLTlkNmEtMDFjM2Y5MTVkZWM5 > isDeleted: TRUE > name:: Q0JBREMwMgpERUw6ZGU4NTIyOGMtZjkyYi00ZDVkLTlkNmEtMDFjM2Y5MTVkZWM5 > lastKnownParent: > CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configurati > on,DC=cb,DC=cliffbells,DC=...

...in my last message, I > had executed it while troubleshooting... > > :~$ sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H > /usr/local/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' | > sed 's|dn: ||' > > CN=Schema,CN=Configuration,DC=cb,DC=cliffbells,DC=com > CN=Partitions,CN=Configuration,DC=cb,DC=cliffbells,DC=com > CN=Infrastructure,DC=DomainDnsZones,DC=cb,DC=cliffbells,DC=com > CN=Infrastructure,DC=ForestDnsZones,DC=cb,DC=cliffbells,DC=com > CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com > DC=cb,DC=cliffbells,DC=com &gt...

...> apologies if I get ahead of myself, here are all of my missing roles, > they only have dn entries, the second line containing fsmoowner is blank: > > itwerks at cbadc01:~$ sudo /usr/local/samba/bin/ldbsearch -H > /usr/local/samba/private/sam.ldb -b > 'CN=System,DC=cb,DC=cliffbells,DC=com' -s sub > '(&(objectclass=rIDManager)(cn=RID Manager$))' fSMORoleOwner > # record 1 > dn: CN=RID Manager$,CN=System,DC=cb,DC=cliffbells,DC=com > > # returned 1 records > # 1 entries > # 0 referrals > > itwerks at cbadc01:~$ !284 > sudo /usr/loca...

...d-ctor. [2015/12/28 21:12:06.779495, 3] ../source4/rpc_server/dcerpc_server.c:1208(dcerpc_register_ep_server) DCERPC endpoint server 'rpcecho' registered [2015/12/28 21:12:06.764776, 0] ../source4/dsdb/common/util.c:1693(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=one,DC=cliffbells,DC=com for attribute fsmoRoleOwner - Cannot find DN DC=one,DC=cliffbells,DC=com to get attribute fsmoRoleOwner for reference dn: (null) [2015/12/28 21:12:06.780250, 1] ../source4/dsdb/common/util.c:1877(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in D...

...6.779495, 3] > ../source4/rpc_server/dcerpc_server.c:1208(dcerpc_register_ep_server) > DCERPC endpoint server 'rpcecho' registered > [2015/12/28 21:12:06.764776, 0] > ../source4/dsdb/common/util.c:1693(samdb_reference_dn_is_our_ntdsa) > Failed to find object DC=one,DC=cliffbells,DC=com for attribute > fsmoRoleOwner - Cannot find DN DC=one,DC=cliffbells,DC=com to get attribute > fsmoRoleOwner for reference dn: (null) > [2015/12/28 21:12:06.780250, 1] > ../source4/dsdb/common/util.c:1877(samdb_is_pdc) > Failed to find if we are the PDC for this ldb: Search...

...:06.779495, 3] > ../source4/rpc_server/dcerpc_server.c:1208(dcerpc_register_ep_server) > DCERPC endpoint server 'rpcecho' registered > [2015/12/28 21:12:06.764776, 0] > ../source4/dsdb/common/util.c:1693(samdb_reference_dn_is_our_ntdsa) > Failed to find object DC=one,DC=cliffbells,DC=com for attribute > fsmoRoleOwner - Cannot find DN DC=one,DC=cliffbells,DC=com to get > attribute > fsmoRoleOwner for reference dn: (null) > [2015/12/28 21:12:06.780250, 1] > ../source4/dsdb/common/util.c:1877(samdb_is_pdc) > Failed to find if we are the PDC for this ldb: Se...

<=?windows-1252?Q?L.P.H._van_Belle?=> writes: > > Hai, > > Can be incorrect rights, of corrupted db. > > Can you give the output of > > ls -al /var/lib/samba/ > ls -al /var/lib/samba/private > ls -al /var/lib/samba/private/dns > > Greetz, > > Louis > Hi Louis, thanks for your reply, here is the info you requested: ls -al

...ze I receive a second error when executing the seize command: sudo samba-tool fsmo seize ldb_wrap open of secrets.ldb ERROR: Invalid FSMO role. > ( i dont think i will work, but give it a try, any outputs is most welkom ) > > These do worry me. > Failed to find object DC=one,DC=cliffbells,DC=com for attribute fsmoRoleOwner - Cannot find DN > DC=one,DC=cliffbells,DC=com to get attribute fsmoRoleOwner for reference dn: (null) > > ./source4/dsdb/common/util.c:1877(samdb_is_pdc) > Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=one,DC=clif...