search for: fichds02

On Tue, 20 Jun 2017 22:31:02 +1200 Andrew Bartlett via samba <samba at lists.samba.org> wrote: > On Tue, 2017-06-20 at 11:13 +0200, L.P.H. van Belle via samba wrote: > > Now choose, of > > dedicated keytab file = /etc/krb5.keytab > > To be clear, this parameter is not used in the AD DC. > > Thanks, > > Andrew Bartlett > Shouldn't that be

Hello thanks again for the help ! I have analysed samba logs more closely. I'am very worried. I have three DC (fichdc, fichds01, fichds02) but here I talk just about fichdc's logs. -> Almost every times, "AS-REQ" fail for the 3 DCs with something like this : ---------------- Kerberos: AS-REQ FICHDC$@NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE.FR from ipv4:172.16.0.20:59818 for krbtgt/NET.LYC-GUILLAUME-FICHET.AC-GRENOBLE....

...have found. 1) I know now why kerberized nfs stop working on "fichdc". A SPN disappeared from the Kerberos database ! After the upgrade there are no "nfs/fichdc" credencial anymore so I can't export it again in a keytab. But strangely "nfs/fichds01" and "nfs/fichds02" still working. To find the root of the problem I have not tried to delete/recreate the SPN yet. ------------------------------- ~# samba-tool spn list nfs-fichdc nfs-fichdc User CN=nfs-fichdc,CN=Users,DC=net,DC=lyc-guillaume-fichet,DC=ac-grenoble,DC=fr has the following servicePrincipalName...

On Tue, 20 Jun 2017 17:54:09 +0200 Prunk Dump via samba <samba at lists.samba.org> wrote: > Hello thanks again for the help ! > > I have analysed samba logs more closely. I'am very worried. I have > three DC (fichdc, fichds01, fichds02) but here I talk just about > fichdc's logs. > How did you upgrade 'jessie' to 'stretch' and why ? Did all the Samba packages get upgraded (this includes things like talloc, tevent etc) Rowland

...ists.samba.org>: > On Tue, 20 Jun 2017 17:54:09 +0200 > Prunk Dump via samba <samba at lists.samba.org> wrote: > >> Hello thanks again for the help ! >> >> I have analysed samba logs more closely. I'am very worried. I have >> three DC (fichdc, fichds01, fichds02) but here I talk just about >> fichdc's logs. >> > > How did you upgrade 'jessie' to 'stretch' and why ? > > Did all the Samba packages get upgraded (this includes things like > talloc, tevent etc) > > Rowland > Hello. I upgraded Debian fro...

...; kinit with /var/lib/samba/private/secrets.keytabs fail. > > But on the AD database there is one error that is only related to one > of my DC. -> the kerberos principal of "nfs/fichdc" disappeared of > the kerberos database -> the "nfs/fichds01" and "nfs/fichds02" > principal works with kinit. > > Baptiste. Then I am not sure if backing up the DCs is going to work, if the problem is in AD, you will just backup the problem :-( Two things you could try, add another DC and if this works, transfer the FSMO roles to it and then demote the other...

...te and remote the two DCs without FSMO roles. This works with the three virtual machines but I don't know what's can happen with all my other Linux and Windows client. If someone can give me some tips. ("fichdc" is the DC owning all the FSMO roles, "fichds01" and "fichds02" are DCs not owning any FSMO role) 1) As DRS does not works, to demote "fichds01" for example I need to : -> on "fichds01" : disable Samba -> on "fichdc" : demote "fichds01" with the "--remove-other-dead-server" option. But I don't...

...th = /srv/dfs/homes read only = No msdfs root = yes [printers] path = /var/spool/samba printable = yes printing = CUPS [print$] path = /srv/samba/Printer_drivers comment = Printer Drivers writeable = yes ############# For sdc02 and sdc03 (in reality fichds01 and fichds02) ############# [global] workgroup = FICHNET realm = net.fichnet.fr netbios name = FICHDS01 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate idmap_ldb...

21.06.2017 11:45, L.P.H. van Belle via samba пишет: > I suggest before you upgrade do a very good read here. > > https://wiki.samba.org/index.php/Updating_Samba#Notable_Enhancements_and_Changes > > https://wiki.samba.org/index.php/Samba_Features_added/changed_(by_release) > And a summerize version for with all parameter changes as of upgrade from 4.2 up to 4.6 >

...t started fully. > ~/samba_test_script# ./samba-check-db-repl.sh No password for > user FICHNET\Administrator was set in this script! > Please enter the password for FICHNET\Administrator : > Running with with console output > Checking the DC_With_FSMO (fichdc) with SAMBA DC: > fichds02.net.lyc-guillaume-fichet.ac-grenoble.fr > fichds01.net.lyc-guillaume-fichet.ac-grenoble.fr > Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged,dc,cn' > ldap://fichdc.net.lyc-guillaume-fichet.ac-grenoble.fr > ldap://fichds02.net.lyc-guillaume-fichet.ac-grenoble.fr >...

Hello Samba team ! On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) : -> One PDC : pdc01 -> Two "slave" DC : sdc02, sdc03 I don't know why, but sometimes Samba receive the SIGTERM signal and restart even if I remove it from the logrotate configuration. On "pdc01" I see : ---------- pdc01 (log.samba) ---------- SIGTERM: killing children

Hello Samba team ! I'am in a very delicate situation. After an upgrade to debian Stretch my DRS stopped working. I have three DCs (fichdc, fichds01, fichds02), all Debian Stretch, all with the same problem. Everything seems to be fine except DRS. -> File shares works -> DNS (with bind9 DLZ) works -> "kinit administrator" works -> "kinit -k FICHDC$" works -> times synchronisation works -> winbind works (with nsswitch...