search for: dc6

...I just realized that one of them is desynced and cannot get it to resync. The long story: we got 5 DCs splitted over several sites. Recently we had to replace one of them (let's call him DC5). Since both had to run in parallel for data recovery/users work we decided to join a brand new DC (DC6) and latter demote the second one (DC5). Where things get even more complicated is that once DC5 has been removed we put DC6 on its IP (following wiki). We performed some cleanup in the DNS and all was beautiful, data got replicated. However I just realized that a completly different DC (say DC...

...d and cannot get it to resync. >> >> The long story: we got 5 DCs splitted over several sites. Recently we >> had to replace one of them (let's call him DC5). Since both had to >> run in parallel for data recovery/users work we decided to join a >> brand new DC (DC6) and latter demote the second one (DC5). Where >> things get even more complicated is that once DC5 has been removed we >> put DC6 on its IP (following wiki). We performed some cleanup in the >> DNS and all was beautiful, data got replicated. However I just >> realized t...

...> Can I confirm that the procedure to upgrade the three DCs is as follows:- > > 1) backup > 2) upgrade domain and forest to latest 2012_R2 > 3) upgrade the schema to latest 2012_R2 > > Also, in what order of DCs should I perform these changes? > > DC5 (FSMO Role) > DC6 > DC7 Did anyone have a comment on this please? -- Paul Littlefield

...e of them is desynced and cannot get it to resync. > > The long story: we got 5 DCs splitted over several sites. Recently we > had to replace one of them (let's call him DC5). Since both had to run > in parallel for data recovery/users work we decided to join a brand > new DC (DC6) and latter demote the second one (DC5). Where things get > even more complicated is that once DC5 has been removed we put DC6 on > its IP (following wiki). We performed some cleanup in the DNS and all > was beautiful, data got replicated. However I just realized that a > completly...

...gt;> >>>> The long story: we got 5 DCs splitted over several sites. Recently >>>> we had to replace one of them (let's call him DC5). Since both had >>>> to run in parallel for data recovery/users work we decided to join >>>> a brand new DC (DC6) and latter demote the second one (DC5). Where >>>> things get even more complicated is that once DC5 has been removed >>>> we put DC6 on its IP (following wiki). We performed some cleanup in >>>> the DNS and all was beautiful, data got replicated. However I j...

...to resync. >>> >>> The long story: we got 5 DCs splitted over several sites. Recently >>> we had to replace one of them (let's call him DC5). Since both had >>> to run in parallel for data recovery/users work we decided to join a >>> brand new DC (DC6) and latter demote the second one (DC5). Where >>> things get even more complicated is that once DC5 has been removed >>> we put DC6 on its IP (following wiki). We performed some cleanup in >>> the DNS and all was beautiful, data got replicated. However I just >&gt...

...;Have tried all these combinations to no avail" # default_etypes_des = des-cbc-crc # default_tkt_enctypes = des-cbc-md5 # default_tgs_enctypes = des-cbc-md5 # default_tkt_enctypes = rc4-hmac # default_tgs_enctypes = rc4-hmac [realms] AD.RICE.EDU = { kdc = tcp/support-dc6...... admin_server = support-dc6....... } RICE.EDU = { kdc = kerberos.rice.edu. kdc = cerberos.rice.edu. admin_server = kerberos.rice.edu. } [domain_realm] .ad.rice.edu = AD.RICE.EDU .rice.edu = RICE.EDU *************************************************...

...>.corp/scripts read only = Yes [sysvol] path = /var/lib/samba/sysvol read only = Yes Also see below resolv.conf search mydomain.corp otherdomain.corp otherdomain.net otherdomain.co.za mydomain.co.za nameserver DC2 nameserver DC3 nameserver DC1 nameserver DC5 nameserver DC6 nameserver DC4 Regards On Fri, Feb 28, 2020 at 11:07 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 28/02/2020 08:46, Eben Victor via samba wrote: > > Hello All, > > > > I hope you can assist me, > > I'm running Bind DLZ with our Samba AD...

...ated from DC1 > > Remote_Site_1 > DC4 => tries to replicate from DC2, but fails with WERR_FILE_NOT_FOUND > error > (even manually with samba-tool drs replicate DC4 DC1 DC=mydomain,DC=lan) > > Remote_Site_2 > DC5 => well replicated from DC1 > > Remote_Site_3 > DC6 => well replicated from DC1, but sometimes fails trying to > replicate from DC3... > > > > I tried demoted DC4 several times and rejoined it, whithout success. > Each time it fails with ths machine (i checked network and dns > settings, nothing's wrong) > > >...

...s is working, I can do a kinit user@JHUAPL.EDU, and get a ticket. My smb.conf is: [global] workgroup = JHUAPL server string = edna socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 IPTOS_LOWDELAY encrypt password = yes password server = dom1-dc6.dom1.jhuapl.edu realm = DOM1.JHUAPL.EDU netbios name = biolinux security = ads idmap uid = 10000-40000 idmap gid = 10000-40000 winbind separator = _ winbind enum users = yes winbind enum groups = yes winbind use defaul...

Hai, I snapped this part of you logs. > Successful AuthZ: [DCE/RPC,krb5] user [COMPANY]\[DC6$] [S-1-5-21-2660373802-310620142-1895175072-6626] at [Fri, 26 Apr 2019 10:16:20.224329 PDT] Remote host [ipv4:10.14.16.11:35006] local host [ipv4:10.12.16.11:49153] > [2019/04/26 10:16:23.503632, 0] ../../source4/lib/cmdline/popt_common.c:74(popt_s4_talloc_log_fn) > Bad talloc magic value...

...1 >> DC4 => tries to replicate from DC2, but fails with >> WERR_FILE_NOT_FOUND error >> (even manually with samba-tool drs replicate DC4 DC1 DC=mydomain,DC=lan) >> >> Remote_Site_2 >> DC5 => well replicated from DC1 >> >> Remote_Site_3 >> DC6 => well replicated from DC1, but sometimes fails trying to >> replicate from DC3... >> >> >> >> I tried demoted DC4 several times and rejoined it, whithout success. >> Each time it fails with ths machine (i checked network and dns >> settings, nothing&...

Mandi! Julien TEHERY via samba In chel di` si favelave... > Is there a good pratice when adding new remote DCs in terms of replication > topology? I think you have to define a topology of the domain, using ADSS: https://blogs.technet.microsoft.com/canitpro/2015/03/03/step-by-step-setting-up-active-directory-sites-subnets-site-links/ defining links and weight. -- dott. Marco Gaiarin

...main.net> otherdomain.co.za > <http://otherdomain.co.za> > > mydomain.co.za <http://mydomain.co.za> > Remove all domains except for the AD dns domain > > nameserver DC2 > > nameserver DC3 > > nameserver DC1 > > nameserver DC5 > > nameserver DC6 > > nameserver DC4 > > > The DC should use itself as its nameserver, whether you have other > nameservers is debatable, if Samba crashes, do you want it contacting > another DC ? > > Rowland > > > > -- > To unsubscribe from this list go to the follow...

...C2, but fails with >>> WERR_FILE_NOT_FOUND error >>> (even manually with samba-tool drs replicate DC4 DC1 >>> DC=mydomain,DC=lan) >>> >>> Remote_Site_2 >>> DC5 => well replicated from DC1 >>> >>> Remote_Site_3 >>> DC6 => well replicated from DC1, but sometimes fails trying to >>> replicate from DC3... >>> >>> >>> >>> I tried demoted DC4 several times and rejoined it, whithout success. >>> Each time it fails with ths machine (i checked network and dns &gt...

.... Greetz, Louis > > > On Apr 29, 2019, at 12:37 AM, L.P.H. van Belle via samba > <samba at lists.samba.org> wrote: > > > > Hai, > > > > I snapped this part of you logs. > > > >> Successful AuthZ: [DCE/RPC,krb5] user [COMPANY]\[DC6$] > [S-1-5-21-2660373802-310620142-1895175072-6626] at [Fri, 26 > Apr 2019 10:16:20.224329 PDT] Remote host > [ipv4:10.14.16.11:35006] local host [ipv4:10.12.16.11:49153] > >> [2019/04/26 10:16:23.503632, 0] > ../../source4/lib/cmdline/popt_common.c:74(popt_s4_talloc_log_f...

....  Or, upgrade to ubuntu 18.04 and setup my 4.9 repo.  Or use my repo and rebuild the packages for your own.  Greetz,  Louis Typical output from script: Running with with console output Checking the DC_With_FSMO (dc1) with SAMBA DC: dc5.my.company.tld dc4.my.company.tld dc7.my.company.tld dc6.my.company.tld dc2.my.company.tld Running : /usr/bin/samba-tool ldapcmp --filter="whenChanged,dc,DC,cn,CN" ldap://dc1.my.company.tld ldap://dc5.my.company.tld  Please wait.. this can take a while.. cat /tmp/samba_ldapcmp_checkdb * Comparing [DOMAIN] context... * Objects to be compared...

...=> well replicated from DC1 DC3 => well replicated from DC1 Remote_Site_1 DC4 => tries to replicate from DC2, but fails with WERR_FILE_NOT_FOUND error (even manually with samba-tool drs replicate DC4 DC1 DC=mydomain,DC=lan) Remote_Site_2 DC5 => well replicated from DC1 Remote_Site_3 DC6 => well replicated from DC1, but sometimes fails trying to replicate from DC3... I tried demoted DC4 several times and rejoined it, whithout success. Each time it fails with ths machine (i checked network and dns settings, nothing's wrong) So from what i see "drs showrepl" s...

...main.net> otherdomain.co.za > <http://otherdomain.co.za> > > mydomain.co.za <http://mydomain.co.za> > Remove all domains except for the AD dns domain > > nameserver DC2 > > nameserver DC3 > > nameserver DC1 > > nameserver DC5 > > nameserver DC6 > > nameserver DC4 > > > The DC should use itself as its nameserver, whether you have other > nameservers is debatable, if Samba crashes, do you want it contacting > another DC ? > > Rowland > > > > -- > To unsubscribe from this list go to the follow...

...ly on Schema version 47 and Domain level 2008_R2. Can I confirm that the procedure to upgrade the three DCs is as follows:- 1) backup 2) upgrade domain and forest to latest 2012_R2 3) upgrade the schema to latest 2012_R2 Also, in what order of DCs should I perform these changes? DC5 (FSMO Role) DC6 DC7 Thanks, -- Paul Littlefield