search for: exza

...------------------------ [root at dc private]# systemctl start named Job for named.service failed because the control process exited with error code. See "systemctl status named.service" and "journalctl -xe" for details. [root at dc private]# journalctl -xe May 11 20:03:41 dc.exza.local named[2506]: ---------------------------------------------------- May 11 20:03:41 dc.exza.local named[2506]: adjusted limit on open files from 4096 to 1048576 May 11 20:03:41 dc.exza.local named[2506]: found 2 CPUs, using 2 worker threads May 11 20:03:41 dc.exza.local named[2506]: using 2...

Hi, After upgrading to BIND9_DLZ, BIND service is properly starting. However, DNS updates are failing. When I try to force the DNS update, I get the following error. Even kinit command returns "kinit: Cannot find KDC for realm "EXZA.LOCAL" while getting initial credentials" --------------------------------------- [root at dc ~]# samba_dnsupdate --verbose --all-names IPs: ['192.168.100.17'] force update: A dc.exza.local 192.168.100.17 force update: NS exza.local dc.exza.local force update: NS _msdcs.exza.loc...

Hi, Problem solved. It was related to SELINUX. The moment it is disabled, BIND service started properly. -- Thanks & Regards, Anantha Raghava DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify t...

Hello Marc, Upgrade DNS worked properly as you can see below. --------- samba_upgradedns --dns-backend=BIND9_DLZ Reading domain information DNS accounts already exist No zone file /usr/local/samba/private/dns/EXZA.LOCAL.zone # is this the culprit? DNS records will be automatically created DNS partitions already exist dns-dc account already exists See /usr/local/samba/private/named.conf for an example configuration include file for BIND and /usr/local/samba/private/named.txt for further...

...sn't work, add 'log level = 10' to smb.conf on the Unix > domain member and see if anything pops out. > > I have however noticed this: > > DC smb.conf: > > realm = XXXX.COM > workgroup = XXXX > > [netlogon] > path = /usr/local/samba/var/locks/sysvol/exza.com/scripts > > Unix domain member smb.conf: > > workgroup = CSAEROTHERM > realm = CSAEROTHERM.COM > > On the DC, the realm appears to actually be 'exza.com' but on the Unix > domain member it is set to 'CSAEROTHERM.COM', these must match, yours &gt...

...server is able to detect the port as 389. But cannot detect the BaseDN. However the same setting works perfectly with AD on Windows Server 2008 R2 or Windows Server 2012 R2. Our smb.conf: --------------------------------------- # Global parameters [global]     netbios name = DC1     realm = EXZA.COM     server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate     workgroup = EXZA     server role = active directory domain controller     idmap_ldb:use rfc2307 = yes     ldap server require strong auth = No #Log Level and File     log level =...

...ember and see if anything pops out. >>> >>> I have however noticed this: >>> >>> DC smb.conf: >>> >>> realm = XXXX.COM >>> workgroup = XXXX >>> >>> [netlogon] >>> path = /usr/local/samba/var/locks/sysvol/exza.com/scripts >>> >>> Unix domain member smb.conf: >>> >>> workgroup = CSAEROTHERM >>> realm = CSAEROTHERM.COM >>> >>> On the DC, the realm appears to actually be 'exza.com' but on the >>> Unix domain member i...

...on the Unix > > domain member and see if anything pops out. > > > > I have however noticed this: > > > > DC smb.conf: > > > > realm = XXXX.COM > > workgroup = XXXX > > > > [netlogon] > > path = /usr/local/samba/var/locks/sysvol/exza.com/scripts > > > > Unix domain member smb.conf: > > > > workgroup = CSAEROTHERM > > realm = CSAEROTHERM.COM > > > > On the DC, the realm appears to actually be 'exza.com' but on the > > Unix domain member it is set to 'CSAEROTHE...

On Sat, 2017-12-02 at 11:58 +0530, Anantha Raghava wrote: > Hello Andrew, > > Thanks for proper explanation.  > > To overcome this,  also as we need to store logs for long,  now we > have written a shell script,  executed as a crop every three minutes > that checks the file size.  If the file size is 1 GB or above,  it > moves the log file to

Hi, Let me just check this and revert back. -- Thanks & Regards, Anantha Raghava DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify t...

Hello Rowland, ldap search command throws error as below. I am unable to search ldap. ------- ldap_initialize( ldap://dc.exza.local:3268 ) ldap_start_tls: Can't contact LDAP server (-1) Enter LDAP Password: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) ---------- I am using BIND_DLZ dns back end. and server is listening on 3268 and 3269 -- Thanks & Regards, Anantha Raghava eXzaTech Consulting A...

...B5028185 Windows 10 - KB5028166 On Monday, we will remove this update on couple of members and check. If it sets back to normal, I will report back here. Thanks & Regards, Anantha Raghava H A DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to Exza Technology Consulting & Services, Bangalore, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system a...

...write into .old file. Could you please provide pointers where to look for this log writing routine and why this peculiar behavior? My smb.conf and the script I am using is shown below. Samba version is 4.7.1 /*smb.conf*/ # Global parameters [global]         netbios name = DC1         realm = EXZA.COM         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate         workgroup = EXZA         server role = active directory domain controller         ldap server require strong auth = No         log level = 10         log file = /var/log/...

..."unable to connect to directory". However, the Proxy's Content Gateway is a member of AD DC and it uses integrated windows authentication. -- Thanks & Regards, Anantha Raghava DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify t...

...rators Group. Before adding while selecting, it properly shows name and SID in (). However, the moment we apply, only SID is shown, not the friendly name. Thanks & Regards, Anantha Raghava H A DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to Exza Technology Consulting & Services, Bangalore, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system a...

...will recreate all the Samba databases. If this doesn't work, add 'log level = 10' to smb.conf on the Unix domain member and see if anything pops out. I have however noticed this: DC smb.conf: realm = XXXX.COM workgroup = XXXX [netlogon] path = /usr/local/samba/var/locks/sysvol/exza.com/scripts Unix domain member smb.conf: workgroup = CSAEROTHERM realm = CSAEROTHERM.COM On the DC, the realm appears to actually be 'exza.com' but on the Unix domain member it is set to 'CSAEROTHERM.COM', these must match, yours don't. Rowland

Hello.. Can we promote the Samba AD DC (Version 4.6) to be a global catalogue server? We need to integrate Websense Proxy with this and Proxy server searches Global Catalogue on Port 3268. -- Thanks & Regards, Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forwar...

Hi, Although Samba is listening on port 3268, proxy returns error "unable to connect" Any suggestions to fix this? -- Thanks & Regards, Anantha Raghava DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify t...

...to start functioning again. Is there is any specific reason for this error? How do we fix it. My smb.conf is as shown below. -------------------------------------------------------------------------------------------------- Global parameters [global] ??????? netbios name = PDC ??????? realm = EXZA.COM ??????? server role = active directory domain controller ??????? workgroup = EXZA ??????? server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate ??????? idmap_ldb:use rfc2307 = yes ??????? ldap server require strong auth = No ??????? dns for...

...pl, winbindd, ntp_signd, kcc, dnsupdate workgroup = XXXX idmap_ldb:use rfc2307 = yes ldap server require strong auth = No # Logs and events eventlog list = Security log level = 3 log file = /var/log/samba/dc1.%T.log max log size = 1000000 [netlogon] path = /usr/local/samba/var/locks/sysvol/exza.com/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No -------------- next part -------------- [gdlobal] workgroup = CSAEROTHERM server string = Samba Server Version %v security = ads realm = CSAEROTHERM.COM # socket options = TCP_NODELAY...