search for: failti

> Keytabs look reasonable, as far as I can see, but why does > graz-dc-sem have the same SPN output as graz-dc-1b in > addition to its own? A snapshotted server/cloned server? I dont know but thats not correct. I suggest, cleanup the DS with FSMO roles. Then remove a failty server and re-add it as a new installed DC. ( the good DS with FSMO) First backup:

On 10/16/2017 11:13 AM, Rowland Penny via samba wrote: > On Mon, 16 Oct 2017 16:53:17 +0200 > mj via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> dbcheck tells us we have two "dangling forward links" that I am >> trying to get rid of. On my test domain, I have simply done >> >> ldbedit -e nano -H

Yes, if you flexible with reinstalling, you could.. (more below) > -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: dinsdag 5 september 2017 16:32 > Aan: L.P.H. van Belle; samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): > Server

Now, looking at this, we can make a bug report at debian. # Automatically added by dh_installinit if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ]; then if [ -x "/etc/init.d/winbind" ]; then update-rc.d winbind defaults >/dev/null invoke-rc.d winbind start || exit $? fi fi The

> -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: vrijdag 8 september 2017 14:40 > Aan: L.P.H. van Belle; samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): > Server (GC/name/dom at DOM) unknown > > On 2017-09-08 10:37, L.P.H.

On 05/02/2020 10:33, L.P.H. van Belle via samba wrote: > >> I didn't bother checking, I can cause the panic just by editing >> smb.conf, adding the two lines in question and then >> restarting Samba. I >> do this over SSH, so presumably the network is up on eth0 ;-) > Ah, ok, so we clearly have bug in samba??? > But i dont see this one on Debian Buster

On Thu, 22 Jun 2017 12:23:15 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > > For any debian samba 4.1.x and debian samba 4.2.x upgrades to 4.5 > > > and up > > I've seend that (on list archive, or in some debian bugs, i don't > > remember) but seems not relevant to me bacause i've had just do > > 'classic

Hai, The "scripts" are not the problem, i'll explain more. A failty configured smb.conf is the problem, or a smb.conf which contained "removed" settings. Which exist in a lots of setups. You need to setup you smb.conf to match 4.5.x settings "before" you upgrade, then you dont have any problems upgradeing. If we can think of a way to this before the

Okay, time to bring some order into this. == Keytab and replication == Editing servicePrincipalName cleaned up the keytab. Some things are even replicating correctly (modulo the missing host), others aren't. DNS replication (DC=ForestDnsZones and DC=DomainDnsZones) is still not working, at least one host is trying to connect to deleted servers for this. The other I cannot confirm because

On Fri, 23 Jun 2017 12:40:35 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > > Better to fire up a bug in debian BTS? > > > Which version of samba did you upgrade to ? > > Where did it come from, a Debian repo or Louis's ? > > Louis's repo.

Hai MJ Brainwave.. Goto this object, in this object is the reference which if failty. CN=84bea0a7-82dd-4237-9296-030573700698,CN=Partitions,CN=Configuration,DC=samba,DC=merit,DC=unu,DC=edu Same for : CN=d9d76e21-8cae-457d-b212-6cb192612739,CN=Partitions,CN=Configuration,DC=samba,DC=merit,DC=unu,DC=edu Now check which server this GUID are, you know the faulty GUID. Remove them from these.

Hai Sven, > -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: dinsdag 5 september 2017 17:13 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): > Server (GC/name/dom at DOM) unknown > > On

Yes, Ive fixed 1 of the 2 problems at install. Im testing fix 2 atm, and ask @technical for extra info. There are 2 bugs with the upgrade of 4.8 to 4.9. For others, please note, i've only tested this on debian with the debian packages (experimental) and my own packages. Bug 1) at install samba is unable to start due to : a change (commit) 0b261dc4e3f2 in 4.9 that requires to have

Maybe try something like this, dont know it its right, i cant test it atm, and i never used its so.. But in krb5.conf try to match the failty one with a rule. auth_to_local = RULE:[1:SAMDOM:$1] Maybe it works maybe not, but imo, try-able ;-) , just an idee.. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Kacper

Sven, Fist fix the smb.conf as i suggested, cap and non caps where it should be. Resolving settings based on the script output looks ok. Fix krb5.conf Then how many DC's are you having? > So, could somebody maybe help with the NT_STATUS_INTERNAL_DB_CORRUPTION > / DRS replication issue? Or will it be easier to just demote > the DC and provision a new one? Are all DC's

Hi ! I'm trying to authenticate users on a Linux Red hat AS 2.1 against a radius server. I have upgraded my OpenSSHd to : OpenSSH_4.2p1, OpenSSL 0.9.6b [engine] 9 Jul 2001 The users accounts are NOT stored locally on the sever (no accounts in /etc/passwd ). Users ssh to the box : ssh test at testserver.com passwd: test I'm usign PAM to direct the authentication request to the radius

Hai,   I noticed something strange in the keytab file on my member server. This is a followup of : [Samba] winbind question. (challenge/response password authentication) Samba 4.5.3 on Debian Jessie.   Leave the domain. net ads leave -k Deleted account for 'PROXY2' in realm 'REALM'   I checked in windows, and the computer is gone in the “Computer” ou.   Removed the

On Wed, 1 Nov 2017 19:49:32 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Wed, 1 Nov 2017 20:28:05 +0100 > Kacper Wirski <kacper.wirski at gmail.com> wrote: > > > I'm going to start with clean centos install, so I might as well use > > some additional guidelines, thank You. > > > > When You run kinit, does Your user have

Hai Sven, Sorry for the long wait, i had some things todo first here. > -----Oorspronkelijk bericht----- > Van: Sven Schwedas [mailto:sven.schwedas at tao.at] > Verzonden: woensdag 6 september 2017 16:06 > Aan: L.P.H. van Belle; samba at lists.samba.org > Onderwerp: Re: [Samba] Server GC/name.dom/dom is not > registered with our KDC: Miscellaneous failure (see text): >

Today's episode of "why is AD break", brought to you by: > [2017/09/05 10:17:06.015617, 3] ../source4/auth/gensec/gensec_gssapi.c:613(gensec_gssapi_update) > Server GC/graz-dc-1b.ad.tao.at/ad.tao.at is not registered with our KDC: Miscellaneous failure (see text): Server (GC/graz-dc-1b.ad.tao.at/ad.tao.at at AD.TAO.AT) unknown > [2017/09/05 10:17:06.015717, 0]