search for: connon

On 09/03/2015 22:07, Rowland Penny wrote: > On 09/03/15 21:59, Richard Connon wrote: >> On 09/03/2015 21:59, Rowland Penny wrote: >>> How did you try to join the machine to the domain ? I think I know, >>> but it would like you to confirm my suspicions. >> >> Hi Rowland, >> >> This output was generated with `net ads join >...

...hing outside the domain the DC's will be obtain > from the forwarders set on them. This is contrary to what the wiki says. https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server This page indicates that as long as the client can resolve names in the domain DNS zone (in my case ads.connon.me.uk) they should be fine. > What I think is happening: your client is asking for the DC from your > forwarders, they do not know, so they ask the DC, who asks the > forwarder, who does not know and so on. I can confirm this isn't happening since I can resolve (for example) the SRV...

On 10/03/15 14:11, Richard Connon wrote: > Hi Rowland, > > Please see comments inline. > > On 10/03/15 08:51, Rowland Penny wrote: >> Your DC's must point to themselves for DNS and your domain clients must >> point to the DC's, anything outside the domain the DC's will be obtain >> from...

On 09/03/15 22:16, Richard Connon wrote: > On 09/03/2015 22:07, Rowland Penny wrote: >> On 09/03/15 21:59, Richard Connon wrote: >>> On 09/03/2015 21:59, Rowland Penny wrote: >>>> How did you try to join the machine to the domain ? I think I know, >>>> but it would like you to confirm my s...

On 09/03/2015 21:59, Rowland Penny wrote: > How did you try to join the machine to the domain ? I think I know, > but it would like you to confirm my suspicions. Hi Rowland, This output was generated with `net ads join -Uprovisioning%<password> -d10 Regards, Richard

...with 2 domain controllers on different sites. Both domain controllers are running samba 4.1.17 Until recently the domain operated exactly as expected. I recently tried to join a new machine to the domain and received the error: Failed to join domain: failed to lookup DC info for domain 'ADS.CONNON.ME.UK' over rpc I'm not sure what has triggered this change in behaviour. Authentication against the domain still works as normal. I've attached a full debug log of the domain join process. Anyone got any ideas where I should be looking? Regards, Richard

...:325(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2017/10/04 20:44:36.328706, 3] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62088215 [2017/10/04 20:44:36.330092, 3] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[richard] domain=[CONNON] workstation=[SHELL02] len1=24 len2=284 [2017/10/04 20:44:36.330134, 3] ../source4/auth/ntlm/auth.c:271(auth_check_password_send) auth_check_password_send: Checking password for unmapped user [CONNON]\[richard]@[SHELL02] auth_check_password_send: mapped user is: [CONNON]\[richard]@[SHELL02] [2...

...'m planning to count on debian backporting fixes for now and move to 4.1 (or 4.2) if and when required. I have just tried, as an experiment, upgrading this failing client to 4.1.17 to no avail. The nameservers in resolv.conf are just forwarders. They forward to my DCs for anything under ads.connon.me.uk. As an experiment I tried changing the resolv.conf on both the DC and the client to contain just the DC for this site rather than my normal recursive servers. Again, this didn't change the behaviour. I'm not familiar with the RPC protocol very much. Are there some tools I can use...

When I run "xm create winxp" my computer hard reboots. I am using the xen-sources, xen and xen-tools packages from gentoo ~amd64 (version 3.0.2) My virtual machine config is the following: kernel = "/usr/lib/xen/boot/hvmloader" builder = ''hvm'' memory = 512 name = "winxp" vcpus = 1 vif = [ ''type=ioemu, bridge=xenbr0'' ] disk = [

On 17/10/2017 14:08, Richard Connon via samba wrote: > On 17/10/2017 13:56, Rowland Penny via samba wrote: > >> On Tue, 17 Oct 2017 13:18:46 +0100 >> Richard Connon via samba <samba at lists.samba.org> wrote: >> >>> >>> On 17/10/2017 09:54, Rowland Penny via samba wrote: >>>&g...

On Mon, 16 Oct 2017 17:01:29 +0100 Richard Connon via samba <samba at lists.samba.org> wrote: > To try and narrow down this issue I tried to setup a test environment > using two fresh install Debian 9.2 VMs, now running samba 4.5.12 > since it was updated in Debian. > > I provisioned a new domain using `samba-tool domain pr...

On Tue, 17 Oct 2017 13:18:46 +0100 Richard Connon via samba <samba at lists.samba.org> wrote: > > > On 17/10/2017 09:54, Rowland Penny via samba wrote: > > On Tue, 17 Oct 2017 09:29:00 +0100 > > Richard Connon via samba <samba at lists.samba.org> wrote: > > > >> On 16/10/2017 19:30, Rowland Penny...

On Tue, 17 Oct 2017 09:29:00 +0100 Richard Connon via samba <samba at lists.samba.org> wrote: > On 16/10/2017 19:30, Rowland Penny wrote: > > > > Is the member server using DHCP ? > Yes. Both test hosts are using DHCP with static leases for IP > addresses but not for DNS domains or nameservers. I wouldn't do this,...

Hey Richard, you should post your debug log because your attachment has been scrubbed. Have you checked your DNS entries? I don't know why but I had an issue some days ago that the host a entry for my fsmo DC had disappeared. Regards Tim Am 9. M?rz 2015 22:33:43 MEZ, schrieb Richard Connon <richard at connon.me.uk>: >Hi, > >I have an existing samba4 domain with 2 domain controllers on different >sites. > >Both domain controllers are running samba 4.1.17 > >Until recently the domain operated exactly as expected. I recently >tried >to join a new mach...

On Mon, 16 Oct 2017 19:06:20 +0100 Richard Connon via samba <samba at lists.samba.org> wrote: > Hi, > > I provided the dump of all the conf files to Rowland by email but in > case anyone else is curious they are also here: > > http://www.irconan.co.uk/dc.tar http://www.irconan.co.uk/member.tar > I didn't get it...

...init fails, then Rowland wil find your error..   ive seen this few times.. -S  solves it most of the times. Greetz, Louis (mobile) Op 16 okt. 2017 om 18:27 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: On Mon, 16 Oct 2017 17:01:29 +0100 Richard Connon via samba <samba at lists.samba.org> wrote: To try and narrow down this issue I tried to setup a test environment using two fresh install Debian 9.2 VMs, now running samba 4.5.12 since it was updated in Debian. I provisioned a new domain using `samba-tool domain provision` on the first VM...

On 09/03/15 23:19, Richard Connon wrote: > On 09/03/2015 22:36, Rowland Penny wrote: >> Hmm, everything looks ok and it shouldn't matter whether you use the >> standard 3.6 from debian or 4.1.17 from backports except for the fact >> that 3.6 isn't just old, it is EOL , so you may have to rely on >...

https://bugzilla.mindrot.org/show_bug.cgi?id=1802 Summary: Ability to tunnel socket files for more flexible permissions Product: Portable OpenSSH Version: 5.5p1 Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: Miscellaneous AssignedTo:

On 17/10/2017 13:56, Rowland Penny via samba wrote: > On Tue, 17 Oct 2017 13:18:46 +0100 > Richard Connon via samba <samba at lists.samba.org> wrote: > >> >> On 17/10/2017 09:54, Rowland Penny via samba wrote: >>> On Tue, 17 Oct 2017 09:29:00 +0100 >>> Richard Connon via samba <samba at lists.samba.org> wrote: >>> >>>> On 16/10/2017 19:3...

...lient` which failed, as before, with NT_STATUS_INTERNAL_ERROR. Is there some inherent problem with the Debian packages and the RPC server component of the DC? Alternatively, is there somewhere else I should be looking for the root cause of this? Regards, Richard On 04/10/2017 22:14, Richard Connon wrote: > Hi, > > I have a samba 4.5.8 AD DC (debian 9.1 package) which is having > problems with RPC requests. This DC has been updated from the > wheezy-backports package (4.1.17) via the jessie package (4.2.14) but > I'm not sure if RPC worked immediately before the upgra...