search for: donelsontrophi

I will add here that my server provisioned yesterday afternoon. However, I did not have time to do any testing. So, this morning testing and the first thing I discovered was "sernet-samba-ad" service was NOT running. I found a Debian Wheezy sernet samba posting (via Google) and within it read that users need to edit "/etc/default/sernet-samba" as follows: # ---- SETUP

I am building a 64bit machine for a DC (CentOS 7) following the instructions on the Samba wiki. Installed Samba 4.3.1.tar.gz and when I try to provision the domain I get: ERROR(ldb): uncaught exception - operations error at ../source4/dsdb/samdb/ldb_modules/password_hash.c:2241 Search the string and it is bug 11573 (assigned to Andrew.) I realize that he will work on it when he gets time

Rowland, I think you have confused my email with a different thread. Uhm . . what? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-29 07:30, Rowland Penny wrote: > On 29/01/15 12:54, Bob of Donelson Trophy wrote: > Rowland, I have tried your various alteration

You are correct. I discovered (a few minutes ago) that /etc/apt/sources.list.d/debian-wheezy-sernet.list had the duplicate line within it. Funny thing was, when I "comment out" the duplicate line, that "commented out" the single entry within the file. All other lines were already 'commented out'. So, after 'apt-get update' ran without error, I went back and

At one point, I thought the same. Tried a "sleep 5" and still got some failures. (That was before I started counting the fails.) This is a P4 3.2Ghz with 1Gb RAM. Could it be that sluggish (at that moment) and need a "sleep 10" or "sleep 15" or more? It worked on my VM (of course it is running on a multi-core Xeon processor so maybe a sleep?) I'm going to try

Thank you. This helps get me closer. One machine shows rsync 3.0.9 and the other shows rsync 3.1.0. Running "rsync --version" both show "ACL, xattr" are supported. Two questions, would the two different version cause it to fail? Second, does the order rsync "receives" the switches matter. Does "-A" and "-X" need to be near the beginning of

On my member server (Debian 7.8.0/Sernet Samba 4.2.2) when I run "apt-get update" I am receiving the following: Reading package lists... Done W: Duplicate sources.list entry https://download.sernet.de/packages/samba/4.2/debian/ wheezy/main amd64 Packages (/var/lib/apt/lists/download.sernet.de_packages_samba_4.2_debian_dists_wheezy_main_binary-amd64_Packages) W: You may want to run

Louis, I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed this (during install:) ==========SE Privileges =============================== Enter administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED This is my /etc/resolv.conf: root at dc01:~# cat /etc/resolv.conf search dts***m.dt nameserver

Thank you, Rowland. Copied your simpler ntp.conf file into my member server. Made the appropriate changes. Restarted all the ntp service on all machines (just in case.) Ran 'ntpq -p' (on member server) and got the correct answer. Proper connection to DC's. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >

I went and got the newest (upped recently) script. No love. I removed the email address line to get more command line output. root at dc01:~# ./samba-check-db-repl.sh Running with with console output Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged' ldap://dc01 ldap://dc02.dtsh***m.dt. Please wait.. this can take a while.. Failed to bind - LDAP error 49

I have created a DC01 & DC02 with Louis's (generation one) scripts. I have noticed, during some testing that 'pam-auth-update' shows PAM profiles Kerberos, Unix & Winbind listed on DC01. The DC02 only lists Kerberos & Unix and Winbind is missing. I thought that the two DC's were suppose to be identical? If DC01 goes "down" DC02 cannot carry a winbind

I upped 1.0.4 of the script.. I added checks if no DC's are found, error message and exits script, so no python errors anymore, if i did it right. ;-) on both DC's do the following. and whats the output of : cat /etc/hosts cat /etc/resolv.conf and kinit Administrator SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADRESS=`hostname -i` echo "Test domainname:

I expected to re-provision the domain. (That is easy, now.) Okay, so now the question becomes after the re-provision of the domain on the DC what needs to be changed on the MEMBER server. Obviously, the hostname needs to be corrected and check any needed changes within the smb.conf file. Thoughts? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main)

No. What I did was change the first few to see what happens. And still the first 13 (this time, last time 17) failed. I am baffled why the first 11 to 17 fail (randomly) and the remainder receive "Successfully granted rights." --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On

Copied Roweland's DC ntp.conf file into my two DC's. Restarted (all) ntp. Member still timing out! (I am starting to think that there is 'something' about the sernet packages that "they" do differently.) Rowland, Could I ask you to copy the ntp.conf from your client (appears to be your laptop) so I could review it's contents? --- ------------------------- Bob

Yes, it did install a bunch of packages from the sernet site. So far all the tests are failing. Seems that Sernet put samba under slightly different directories so I am struggling with testing. I was hoping there was some documentation on sernet site that I was having trouble finding, obviously not. Give me some time. It is just different again (from CentOS howto I had used in the past.) I

Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain

I have working through GPO usage and have activated one (single) modifiaction (via RSAT) to the default GPO set provided after provisioning. When I run "samba-tool gpo aclcheck" I am getting the following: root at dc01:~# samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File

Thanks Rowland but that idea did not work. I will simply grant access to those that failed manually. (Really wish I had kept the VM that the scripthad worked on so I could go back and see what happened but, too late, I have already deleted to save precious hard drive space.) If I have any issues, I'll be back. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846