search for: fichds01

...st thing to do is to demote and remote the two DCs without FSMO roles. This works with the three virtual machines but I don't know what's can happen with all my other Linux and Windows client. If someone can give me some tips. ("fichdc" is the DC owning all the FSMO roles, "fichds01" and "fichds02" are DCs not owning any FSMO role) 1) As DRS does not works, to demote "fichds01" for example I need to : -> on "fichds01" : disable Samba -> on "fichdc" : demote "fichds01" with the "--remove-other-dead-server"...

...../source4/librpc/rpc/dcerpc_util.c:745(dcerpc_pipe_auth_recv) > Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for > ncacn_ip_tcp:172.16.0.21[1024,seal,krb5,target_hostname=04c6b4b0-4584-4368-831e-42aa7ac08c04._msdcs.net.lyc-guillaume-fichet.ac-grenoble.fr,target_principal=GC/fichds01.net.lyc-guillaume-fichet.ac-grenoble.fr/net.lyc-guillaume-fichet.ac-grenoble.fr,abstract_syntax=e3514235--4b06-11d1-ab04-00c04fc2dcd2/0x00000004,localaddress=172.16.0.20] > NT_STATUS_LOGON_FAILURE > ------------------------ > > -> my msDS-SupportedEncryptionTypes value is 31 ? Is thi...

On Tue, 20 Jun 2017 22:31:02 +1200 Andrew Bartlett via samba <samba at lists.samba.org> wrote: > On Tue, 2017-06-20 at 11:13 +0200, L.P.H. van Belle via samba wrote: > > Now choose, of > > dedicated keytab file = /etc/krb5.keytab > > To be clear, this parameter is not used in the AD DC. > > Thanks, > > Andrew Bartlett > Shouldn't that be

Hello thanks again for the help ! I have analysed samba logs more closely. I'am very worried. I have three DC (fichdc, fichds01, fichds02) but here I talk just about fichdc's logs. -> Almost every times, "AS-REQ" fail for the 3 DCs with something like this : ---------------- Kerberos: AS-REQ FICHDC$@NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR from ipv4:172.16.0.20:59818 for krbtgt/NET.LYC-GUILLAUME-FICHET.AC...

...s] path = /srv/dfs/homes read only = No msdfs root = yes [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes ############# For sdc02 and sdc03 (in reality fichds01 and fichds02) ############# [global] workgroup = FICHNET realm = net.fichnet.fr netbios name = FICHDS01 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate...

On Tue, 20 Jun 2017 17:54:09 +0200 Prunk Dump via samba <samba at lists.samba.org> wrote: > Hello thanks again for the help ! > > I have analysed samba logs more closely. I'am very worried. I have > three DC (fichdc, fichds01, fichds02) but here I talk just about > fichdc's logs. > How did you upgrade 'jessie' to 'stretch' and why ? Did all the Samba packages get upgraded (this includes things like talloc, tevent etc) Rowland

...samba at lists.samba.org>: > On Tue, 20 Jun 2017 17:54:09 +0200 > Prunk Dump via samba <samba at lists.samba.org> wrote: > >> Hello thanks again for the help ! >> >> I have analysed samba logs more closely. I'am very worried. I have >> three DC (fichdc, fichds01, fichds02) but here I talk just about >> fichdc's logs. >> > > How did you upgrade 'jessie' to 'stretch' and why ? > > Did all the Samba packages get upgraded (this includes things like > talloc, tevent etc) > > Rowland > Hello. I upgraded...

...eytab account works > -> kinit with /var/lib/samba/private/secrets.keytabs fail. > > But on the AD database there is one error that is only related to one > of my DC. -> the kerberos principal of "nfs/fichdc" disappeared of > the kerberos database -> the "nfs/fichds01" and "nfs/fichds02" > principal works with kinit. > > Baptiste. Then I am not sure if backing up the DCs is going to work, if the problem is in AD, you will just backup the problem :-( Two things you could try, add another DC and if this works, transfer the FSMO roles to...

Hello Samba team ! On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) : -> One PDC : pdc01 -> Two "slave" DC : sdc02, sdc03 I don't know why, but sometimes Samba receive the SIGTERM signal and restart even if I remove it from the logrotate configuration. On "pdc01" I see : ---------- pdc01 (log.samba) ---------- SIGTERM: killing children

...71312, 0] ../source4/librpc/rpc/dcerpc_util.c:745(dcerpc_pipe_auth_recv) Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for ncacn_ip_tcp:172.16.0.21[1024,seal,krb5,target_hostname=04c6b4b0-4584-4368-831e-42aa7ac08c04._msdcs.net.lyc-guillaume-fichet.ac-grenoble.fr,target_principal=GC/fichds01.net.lyc-guillaume-fichet.ac-grenoble.fr/net.lyc-guillaume-fichet.ac-grenoble.fr,abstract_syntax=e3514235--4b06-11d1-ab04-00c04fc2dcd2/0x00000004,localaddress=172.16.0.20] NT_STATUS_LOGON_FAILURE ------------------------ -> my msDS-SupportedEncryptionTypes value is 31 ? Is this bad ? -----------...

21.06.2017 11:45, L.P.H. van Belle via samba пишет: > I suggest before you upgrade do a very good read here. > > https://wiki.samba.org/index.php/Updating_Samba#Notable_Enhancements_and_Changes > > https://wiki.samba.org/index.php/Samba_Features_added/changed_(by_release) > And a summerize version for with all parameter changes as of upgrade from 4.2 up to 4.6 >

...heck-db-repl.sh No password for > user FICHNET\Administrator was set in this script! > Please enter the password for FICHNET\Administrator : > Running with with console output > Checking the DC_With_FSMO (fichdc) with SAMBA DC: > fichds02.net.lyc-guillaume-fichet.ac-grenoble.fr > fichds01.net.lyc-guillaume-fichet.ac-grenoble.fr > Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged,dc,cn' > ldap://fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr > ldap://fichds02.net.lyc-guillaume-fichet.ac-grenoble.fr > Please wait.. this can take a while.. > Failed to b...

Hello Samba team ! I'am in a very delicate situation. After an upgrade to debian Stretch my DRS stopped working. I have three DCs (fichdc, fichds01, fichds02), all Debian Stretch, all with the same problem. Everything seems to be fine except DRS. -> File shares works -> DNS (with bind9 DLZ) works -> "kinit administrator" works -> "kinit -k FICHDC$" works -> times synchronisation works -> winbind works (wit...