search for: eucalipto

Hi, I have two Samba 4.12.3 DCs (eucalipto and aroeira) on a Debian Buster and a Windows 2008R2 DC (antares). Replication got broken: root at eucalipto:~# samba-tool drs replicate antares eucalipto DC=ad,DC=a1,DC=ind,DC=br ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync fai...

...tificateFile /usr/share/ssl/certs/ldap.pem TLSCertificateFile /usr/share/ssl/certs/ldap.pem TLSCertificateKeyFile /usr/share/ssl/certs/ldap.pem I restart the service. Then, I run the comando authconfig and I select ldap with tls. I review the logs ldap server a thrown the following: Mar 5 11:54:38 eucalipto slapd[711]: conn=13 fd=14 ACCEPT from IP= 172.16.12.160:33935 (IP=0.0.0.0:389) Mar 5 11:54:38 eucalipto slapd[711]: conn=13 op=0 STARTTLS Mar 5 11:54:38 eucalipto slapd[711]: conn=13 op=0 RESULT oid= err=0 text= Mar 5 11:54:39 eucalipto slapd[711]: conn=13 fd=14 closed (TLS negotiation failure)...

On 19/06/2020 14:53, Marcio Merlone via samba wrote: > Hi, > > I have two Samba 4.12.3 DCs (eucalipto and aroeira) on a Debian Buster > and a Windows 2008R2 DC (antares). Replication got broken: > > root at eucalipto:~# samba-tool drs replicate antares eucalipto > DC=ad,DC=a1,DC=ind,DC=br > ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - > dr...

...shadow:     compat hosts:      files dns networks:   files protocols:  db files services:   db files ethers:     db files rpc:        db files netgroup:   nis sudoers     files root at marte:~# root at marte:~# cat /etc/krb5.conf [libdefaults] default_realm = AD.TLD [realms] AD.TLD = {   kdc = eucalipto.ad.TLD } [domain_realm]   .TLD      = AD.TLD   TLD       = AD.TLD  .kerberos.server = AD.TLD root at marte:~# root at marte:~# cat /etc/samba/smb.conf [global]     security = ADS     netbios name = Marte     realm = AD.TLD     workgroup = A1     log file = /var/log/samba/%m.log     log l...

...er = no     preferred master = no     dns proxy = no     encrypt passwords = yes     winbind use default domain = yes     winbind offline logon = false     winbind nss info = rfc2307     winbind separator = +     winbind enum users = Yes     winbind enum groups = Yes     password server = eucalipto.ad.TLD root at marte:~# -- *Marcio Merlone*

...:  db files > services:   db files > ethers:     db files > rpc:        db files > > netgroup:   nis > sudoers     files > root at marte:~# > root at marte:~# cat /etc/krb5.conf > [libdefaults] > default_realm = AD.TLD > > [realms] > AD.TLD = { >   kdc = eucalipto.ad.TLD > } > > [domain_realm] >   .TLD      = AD.TLD >   TLD       = AD.TLD >  .kerberos.server = AD.TLD > root at marte:~# > root at marte:~# cat /etc/samba/smb.conf > [global] >     security = ADS >     netbios name = Marte >     realm = AD.TLD >    ...

...dns proxy = no >     encrypt passwords = yes >     winbind use default domain = yes >     winbind offline logon = false >     winbind nss info = rfc2307 >     winbind separator = + >     winbind enum users = Yes >     winbind enum groups = Yes >     password server = eucalipto.ad.TLD > root at marte:~# > > Do all your users have a uidNumber attribute ? Have you done anything strange, such as changing the users primary group ID ? It should work (well it does for me) Rowland

...sswords = yes > >     winbind use default domain = yes > >     winbind offline logon = false > >     winbind nss info = rfc2307 > >     winbind separator = + > >     winbind enum users = Yes > >     winbind enum groups = Yes > >     password server = eucalipto.ad.TLD > > root at marte:~# > > > > > > Do all your users have a uidNumber attribute ? > Have you done anything strange, such as changing the users primary > group ID ? > > It should work (well it does for me) > > Rowland > > -- > To unsubsc...