search for: domain

..., but can you try this on your second DC, run >> 'samba_dnsupdate --verbose' >> >> Rowland >> > > Doesn't look too good to me: > > > [root at DC2 me]# samba_dnsupdate --verbose > IPs: ['IP_of_2nd_DC'] > Looking for DNS entry A DC2.my.domain.tld IP_of_2nd_DC as > DC2.my.domain.tld. > Looking for DNS entry A my.domain.tld IP_of_2nd_DC as my.domain.tld. > Failed to find matching DNS entry A my.domain.tld IP_of_2nd_DC > Looking for DNS entry SRV _ldap._tcp.my.domain.tld DC2.my.domain.tld > 389 as _ldap._tcp.my.domain.tld....

...: >>>>> >>>>>>> Lets start with the obvious, does the record exist, running the >>>>>>> following command should produce a record for every DC: >>>>>>> >>>>>>> host -t SRV _ldap._tcp.dc._msdcs.augusta.domain.tld. >>>>>> >>>>>> root at dc:/home/torsten# host -t SRV >>>>>> _ldap._tcp.dc._msdcs.augusta.domain.tld. >>>>>> _ldap._tcp.dc._msdcs.augusta.domain.tld has SRV record 0 100 389 >>>>>> dc.augusta.domain.tld. &g...

On 10/12/15 14:00, Ole Traupe wrote: > > > Am 10.12.2015 um 14:38 schrieb Rowland penny: >> On 10/12/15 13:25, Ole Traupe wrote: >>> Is it possible that kdc server is always the SOA, at least if >>> derived from DNS and not specified *explicitly* in the krb5.conf? >>> >>> In my DNS-Manager console I find that >>> >>>

...)? >> >> >> > > Possibly, but can you try this on your second DC, run 'samba_dnsupdate > --verbose' > > Rowland > Doesn't look too good to me: [root at DC2 me]# samba_dnsupdate --verbose IPs: ['IP_of_2nd_DC'] Looking for DNS entry A DC2.my.domain.tld IP_of_2nd_DC as DC2.my.domain.tld. Looking for DNS entry A my.domain.tld IP_of_2nd_DC as my.domain.tld. Failed to find matching DNS entry A my.domain.tld IP_of_2nd_DC Looking for DNS entry SRV _ldap._tcp.my.domain.tld DC2.my.domain.tld 389 as _ldap._tcp.my.domain.tld. Checking 0 100 389 DC1.my...

...n >>> 'samba_dnsupdate --verbose' >>> >>> Rowland >>> >> >> Doesn't look too good to me: >> >> >> [root at DC2 me]# samba_dnsupdate --verbose >> IPs: ['IP_of_2nd_DC'] >> Looking for DNS entry A DC2.my.domain.tld IP_of_2nd_DC as >> DC2.my.domain.tld. >> Looking for DNS entry A my.domain.tld IP_of_2nd_DC as my.domain.tld. >> Failed to find matching DNS entry A my.domain.tld IP_of_2nd_DC >> Looking for DNS entry SRV _ldap._tcp.my.domain.tld DC2.my.domain.tld >> 389 as _ldap...

...i setup, sure looks dificult but its all about DNS setup and >>> what you add to it. >>> >>> For AD-DC.s ( AD, TIME, NS, LDAP ) >>> Hostname.FQDN.TLD : max 63chars, incl the .'s allowed chars: a-Z 0-9 - >>> >>> Hostname : sam-dc1.internal.domain.tld >>> IP : what you need/want. ( example 192.168.1.11 ) >>> PTR : 11.0.168.192.in-addr.arpa >>> CNAME : dc1 ns1 ldap1 ntp1 >>> >>> Hostname : sam-dc2.internal.domain.tld >>> IP : what you need/want. ( example 192.168....

...about 4-5 times, works very well for me. Very importent is that "old" entries are gone before you join the new But again above is a suggestion, i think you save time by doing a new correct install. And a tip, dont use any ip anyware for accessing server services. For example, ntp1.domain.tld CNAME DC1.domain.tld ntp2.domain.tld CNAME DC2.domain.tld ns1.domain.tld CNAME DC1.domain.tld ns2.domain.tld CNAME DC2.domain.tld ldap1.domain.tld CNAME DC1.domain.tld ldap2.domain.tld CNAME DC2.domain.tld now for an easy switch, also add ntp.domain.tld CNAME ntp1.domain.tld ldap.domain.tld...

...land Penny via samba: >>>> >>>>>> Lets start with the obvious, does the record exist, running the >>>>>> following command should produce a record for every DC: >>>>>> >>>>>> host -t SRV _ldap._tcp.dc._msdcs.augusta.domain.tld. >>>>> >>>>> root at dc:/home/torsten# host -t SRV >>>>> _ldap._tcp.dc._msdcs.augusta.domain.tld. >>>>> _ldap._tcp.dc._msdcs.augusta.domain.tld has SRV record 0 100 389 >>>>> dc.augusta.domain.tld. >>>> >&...

...erbose' >>>> >>>> Rowland >>>> >>> >>> Doesn't look too good to me: >>> >>> >>> [root at DC2 me]# samba_dnsupdate --verbose >>> IPs: ['IP_of_2nd_DC'] >>> Looking for DNS entry A DC2.my.domain.tld IP_of_2nd_DC as >>> DC2.my.domain.tld. >>> Looking for DNS entry A my.domain.tld IP_of_2nd_DC as my.domain.tld. >>> Failed to find matching DNS entry A my.domain.tld IP_of_2nd_DC >>> Looking for DNS entry SRV _ldap._tcp.my.domain.tld DC2.my.domain.tld >&...

...ll Partial support is added in c/s 13198, but the loader still complains that symbol "irq_to_evtchn_port" is missing. 2). IA32E: IA32E vista can''t boot up normally, it gives a blue screen. Then the qemu window disappears, but if "xm list", I can see the Vista VMX domain is still there. http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=849 3).IA32E/PAE: 32bit Vista RTM network doesn''t work. http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=840 Details: ========================== IA32: + Build&Boot SMP Xen0 without problem + Can bootup SM...

...m samba_dnsupdate for each record and launch samba-tool to create DNS record. This script is not clever: it tries to create all mentioned DNS record, generating warnings when record already exists. You will have to modify this awk script as the BEGIN section contains fake information related to AD domain: BEGIN { ad_zone = "YOUR.DOMAIN.TLD" msdcs_zone = "_msdcs." ad_zone dns_server = "YOUR-DC" } You must change "YOUR.DOMAIN.TLD" and "YOUR-DC" to match your domain configuration. The awk script uses kerberos authentication when running samba-...

Hello everyone, Can I ask for some assistance please. Apologies if there is an easy solution to this tail of wow that I haven't been able to find online. We've been having persistent problems with a Scientific Linux release 7.4 machine that is joined to an Active Directory domain. Ever 30 days or so it trust relationship between the server and the domain would fail, apparently because the machine password was not renewed. It worked for several months then at the end of last year started to have this issue very 30 days or so. I had originally configured the server using SSS...

...gt; wrote: >> >> > Hi, >> > >> > Samba DC generates a krb5.conf into private directory, where the >> database >> > is hold. >> > >> > Its content should be that: >> > [libdefaults] >> > default_realm = SAMBA.DOMAIN.TLD >> > dns_lookup_realm = false >> > dns_lookup_kdc = true >> > >> > Should only as I get it from a forgotten test platform where I set >> > dns_lookup_realm = true >> > >> > Cheers, >> > >> > mathias...

...u3 CPU Woodcrest Chipset Intel 5000(Blackford) Memory size 12G BIOS Date 77/11/06 Details: ============================================== PAE: + Build&Boot PAE SMP xen0 without problem + Can bootup SMP XenU with 256 M Memory + Can bootup unmodified RHEL4U1 IA32 nonPAE SMP 2.6 Linux VMX domain + Can bootup unmodified RHEL4U1/RHEL4U2/FC5 PAE SMP 2.6 Linux VMX domain + Can bootup RHEL4U1/RHEL4U2/FC5 PAE SMP 2.6 Linux VMX domain & XenU with different memory size (VMX:64MB,128MB,196MB,256MB,512MB,1500MB.XenU:256MB) + Can bootup RHEL4U1 PAE SMP Linux VMX domain with base kernel + xm-tes...

...rm to fill piece by piece my two small DCs and to run ldapcmp. The process follows. Test platform: 2 DCs using Debian 8.1 "net install" with only system tools, up to date, almost nothing added (munin-node, vim, ssh, gmond) and using Sernet Samba version 4.2.3. DC with FSMO is named deb1.domain.tld and provisioned with: samba-tool domain provision --use-rfc2307 --server-role=dc --realm=domain.tld --domain=domain --adminpass=Passw0rd Backup DC is joined using: samba-tool domain join domain.tld dc -Uadministrator --realm=domain.tld --domain-critical-only I expect I didn't waited enoug...

Mark, Below xxx.yyy. is my network prefix. [global] workgroup = DOMAIN realm = DOMAIN.LOCAL server string = Server %v security = ADS client signing = auto client use spnego = yes kerberos method = secrets and keytab log file = /var/log/samba/log.%m log level = 3 max log size = 50 load printers = No printcap name = /dev/null...

Hi Marcel thx. for your fast response. I didn't manage to follow up sooner. I had already verbose logging turned on but I don't seem to find the real reason, why the domain controller searchs for a userPrincipalName instead of servicePrincipalName. Because I wasn't sure whether it is the nfs client process or the server process that failed to get the kerberos ticket when I tried the nfs-mount locally on the server, I went to a client workstation and tried again t...

Hi all, I have a following problem: - Remus network buffering doesn''t work. It seems to be because of no vif is reported by the function server.xend.domain on line 29 of /usr/local/lib/python2.7/dist-packages/xen/remus/vm.py (seen using pdb) : 27 if domid: 28 try: 29 self.dominfo = server.xend.domain(domid, ''all'') > /usr/local/lib/python2.7/dist-packages/xen/remus/vm.py(36)__init__() -> i...

....31 with mailboxes in mdbox format. Since a couple of days some mailboxes have the problem, that sieve rules moving mails to folders stop working and .sieve.log in mailbox shows: sieve: info: started log at Sep 07 13:57:17. error: msgid=<20170907155704.EGroupware.S4yThVJRr12WSiJLpKbK0Bz at somedomain.egroupware.de>: failed to store into mailbox 'INBOX/Munser': Mailbox doesn't exist: INBOX/Munser. When I do a doveadm mailbox list -s -u <user>@<domain> I get all folders incl. the one mentioned above, while doveadm mailbox list without -s shows just user INBOX I alread...

Hello! I tryed to configure Debian Linux file server as Windows 2003 domain member using samba with security = ADS mode and stucked with such problem: File server (fs) succesfully joined my domain with correct user and group mapping (i'm using idmap rid). Users from domain have their unix accounts with <DOMAIN_NAME>\ prefix, i.e for domain user "andrey&q...