search for: dmzrodc

On Wed, 13 Jun 2018 10:40:28 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi Louis, Hi Rowland, > > > I will respond to both in this mail. > > > Yes winbind is installed : > > > > [root at dmzrodc ~]# which winbindd > /usr/sbin/winbindd > [root at dmzrodc ~]# rpm -qa |grep winbind > sernet-samba-winbind-4.8.2-10.el7.x86_64 > What does '/usr/sbin/winbindd -V' produce ? > > I know about *mbd processes. so strange.. This is why I'm posting > here :-) I...

On Wed, 13 Jun 2018 11:12:43 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi, > > > I was just investigating the winbind execution issue : > > > This is what happens when winbind is started by samba > > > > [root at dmzrodc ~]# winbindd -D --option=server role check:inhibit=yes > --foreground -S -d 10 Error setting option 'server' Try it like this: winbindd -D --option='server role check:inhibit=yes' --foreground -S -d 10 > [root at dmzrodc ~]# winbindd -V > Version 4.8.2-SerNet-RedHat-...

On Wed, 2017-12-13 at 11:37 +0100, Gaetan SLONGO wrote: > Hi Andrew. > > Any idea to solve this ? You need to turn up the logs on the destination server until you get more useful log entries leading up to: ==> /var/log/samba/log.samba <==  [2017/12/07 10:10:55.825907, 0] ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_ap ply_changes_trigger)  Failed to

Hi Andrew, By increasing global logs (not only drs) I get this : Failed to apply records: ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3643: Failed to remove backlink of msDS-RevealedDSAs when deleting CN=DMZRODC Full log for this object : [2017/12/14 11:37:14.755054, 4] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5439(replmd_replicated_apply_search_callback) ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5439: Keeping object CN=DMZRODC-0,CN=Computers,DC=ads,DC=dom,DC=be at under 4927...

...vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 auth_audit: 10 auth_json_audit: 10 kerberos: 10 drs_repl: 10 smb2: 10 smb2_credits: 10 Processing section "[global]" doing parameter netbios name = DMZRODC doing parameter realm = ADS.MYDOMAIN.BE doing parameter server role = active directory domain controller doing parameter workgroup = MYDOMAIN doing parameter log level = 10 pm_process() returned Yes lp_servicenumber: couldn't find homes messaging_dgm_ref: messaging_dgm_init returned Succ...

...cannot be authenticated. Samba is running but these > ports are closed : > > > netbios-ssn 139/tcp # NETBIOS session service > netbios-ssn 139/udp > microsoft-ds 445/tcp > microsoft-ds 445/udp > > Some other ports are available : > > > > [root at dmzrodc ~]# netstat -tlpn > Connexions Internet actives (seulement serveurs) > Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program > name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba > tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba > tcp 0 0 0.0.0.0:49153 0.0.0....

Hi, I was just investigating the winbind execution issue : This is what happens when winbind is started by samba [root at dmzrodc ~]# winbindd -D --option=server role check:inhibit=yes --foreground -S -d 10 Error setting option 'server' [root at dmzrodc ~]# winbindd -V Version 4.8.2-SerNet-RedHat-10.el7 Gaëtan ----- Mail original ----- De: "Rowland Penny via samba" <samba at lists.samba.org&g...

On Wed, 13 Jun 2018 10:05:23 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi Rowland, > > > Same, as said; winbind isn't started :-) > > > > [root at dmzrodc ~]# ps ax | egrep "ntp|bind|named|samba|?mbd" > 650 ? Ss 0:00 /usr/sbin/ntpd -u ntp:ntp -g > 1205 ? Ss 0:00 /usr/sbin/samba -D > 1225 ? S 0:00 /usr/sbin/samba -D > 1226 ? S 0:00 /usr/sbin/samba -D > 1227 ? S 0:00 /usr/sbin/samba -D > 1228 ? S 0:00 /usr/sbin/samba -...

...dmapi: 10 > registry: 10 > scavenger: 10 > dns: 10 > ldb: 10 > tevent: 10 > auth_audit: 10 > auth_json_audit: 10 > kerberos: 10 > drs_repl: 10 > smb2: 10 > smb2_credits: 10 > Processing section "[global]" > doing parameter netbios name = DMZRODC > doing parameter realm = ADS.MYDOMAIN.BE > doing parameter server role = active directory domain controller > doing parameter workgroup = MYDOMAIN > doing parameter log level = 10 > pm_process() returned Yes > lp_servicenumber: couldn't find homes > messaging_dgm_re...

...etan SLONGO <gslongo at it-optics.com> wrote: > > > Hi, > > > > > > I was just investigating the winbind execution issue : > > > > > > This is what happens when winbind is started by samba > > > > > > > > [root at dmzrodc ~]# winbindd -D --option=server role check:inhibit=yes > > --foreground -S -d 10 Error setting option 'server' > > Try it like this: > > winbindd -D --option='server role check:inhibit=yes' > --foreground -S -d > 10 > > > > [root at dmzrodc...

On Wed, 13 Jun 2018 09:46:03 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi, > > Here is the current process list. We can see missing winbind and *mbd > processes : > > > > [root at dmzrodc ~]# netstat -plaunt | egrep "ntp|bind|named|samba|?mbd" I wouldn't worry about 'winbind' not being in the output of the above command, I don't get 'winbind' either, but I do, if I run this command: ps ax | egrep "ntp|bind|named|samba|?mbd" Rowland

...orts are closed : > > > > > > netbios-ssn 139/tcp # NETBIOS session service > > netbios-ssn 139/udp > > microsoft-ds 445/tcp > > microsoft-ds 445/udp > > > > Some other ports are available : > > > > > > > > [root at dmzrodc ~]# netstat -tlpn > > Connexions Internet actives (seulement serveurs) > > Proto Recv-Q Send-Q Adresse locale Adresse distante Etat > PID/Program > > name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba > > tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba > &g...

On Tue, 2017-12-19 at 11:00 +0100, Gaetan SLONGO wrote: > Hi Andrew, > > Thank you for your answer. The issue is in the source or destination ? > Because meanwhile I noticed the destination server was on 4.6.11 and not 4.7.3 as the source. What do you think about it ? Update the destination to 4.7.4 when this is released in a few days. I hope this helps, Andrew Bartlett -- Andrew

...dmapi: 10 > registry: 10 > scavenger: 10 > dns: 10 > ldb: 10 > tevent: 10 > auth_audit: 10 > auth_json_audit: 10 > kerberos: 10 > drs_repl: 10 > smb2: 10 > smb2_credits: 10 > Processing section "[global]" > doing parameter netbios name = DMZRODC > doing parameter realm = ADS.MYDOMAIN.BE > doing parameter server role = active directory domain controller > doing parameter workgroup = MYDOMAIN > doing parameter log level = 10 > pm_process() returned Yes > lp_servicenumber: couldn't find homes > messaging_dgm_re...

Hi Louis, Hi Rowland, I will respond to both in this mail. Yes winbind is installed : [root at dmzrodc ~]# which winbindd /usr/sbin/winbindd [root at dmzrodc ~]# rpm -qa |grep winbind sernet-samba-winbind-4.8.2-10.el7.x86_64 I know about *mbd processes. so strange.. This is why I'm posting here :-) I joined the RODC following the procedure available on the wiki page https://wiki.samba.o...

...LONGO [mailto:gslongo at it-optics.com] Verzonden: woensdag 13 juni 2018 10:40 Aan: Rowland Penny; L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Samba 4.8 RODC not working Hi Louis, Hi Rowland, I will respond to both in this mail. Yes winbind is installed : [root at dmzrodc ~]# which winbindd /usr/sbin/winbindd [root at dmzrodc ~]# rpm -qa |grep winbind sernet-samba-winbind-4.8.2-10.el7.x86_64 I know about *mbd processes. so strange.. This is why I'm posting here :-) I joined the RODC following the procedure available on the wiki page https://wiki.samba.org/in...

...e domain controller appears in the DC list (MMC) However, users cannot be authenticated. Samba is running but these ports are closed : netbios-ssn 139/tcp # NETBIOS session service netbios-ssn 139/udp microsoft-ds 445/tcp microsoft-ds 445/udp Some other ports are available : [root at dmzrodc ~]# netstat -tlpn Connexions Internet actives (seulement serveurs) Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba tcp 0 0 0.0.0.0:49153 0.0.0.0:* LISTEN 23619/samba t...

...e requested update, but still have the same issue when doin samba-tool drs replicate : On the destination server : [2018/01/25 10:34:04.404627, 1] ../source4/dsdb/repl/replicated_objects.c:894(dsdb_replicated_objects_commit) Failed to apply records: replmd_delete: Failed to modify object CN=DMZRODC-0,CN=Deleted Objects,DC=ads,DC=XXX,DC=be in delete - attribute 'msDS-RevealedUsers': no such attribute for delete on 'CN=DMZRODC-0,CN=Deleted Objects,DC=ads,DC=XXX,DC=be': No such attribute Executed command : [root at dc ~]# samba-tool drs replicate nas dc DC=ads,DC=XXX,DC=...

...s cannot be authenticated. Samba is running but these > ports are closed : > > > netbios-ssn 139/tcp # NETBIOS session service > netbios-ssn 139/udp > microsoft-ds 445/tcp > microsoft-ds 445/udp > > Some other ports are available : > > > > [root at dmzrodc ~]# netstat -tlpn > Connexions Internet actives (seulement serveurs) > Proto Recv-Q Send-Q Adresse locale Adresse distante Etat PID/Program > name tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 23622/samba > tcp 0 0 0.0.0.0:49152 0.0.0.0:* LISTEN 23619/samba > tcp 0 0 0.0.0.0:49153 0.0.0.0...

Hi Rowland, Same, as said; winbind isn't started :-) [root at dmzrodc ~]# ps ax | egrep "ntp|bind|named|samba|?mbd" 650 ? Ss 0:00 /usr/sbin/ntpd -u ntp:ntp -g 1205 ? Ss 0:00 /usr/sbin/samba -D 1225 ? S 0:00 /usr/sbin/samba -D 1226 ? S 0:00 /usr/sbin/samba -D 1227 ? S 0:00 /usr/sbin/samba -D 1228 ? S 0:00 /usr/sbin/samba -D 1229 ? S 0:00 /usr/sbin/sam...