search for: fmso

On 05/04/2020 17:47, Arne Zachlod via samba wrote: > Hello, > > I'm currently in the process of updating our Samba environment from > 4.3 to 4.11. Looks like I did something wrong. Some pointers would be > much appreciated. > > Since I wanted to migrate from Ubuntu to Debian anyway, I decided to > not upgrade in place, but instead create new VMs, join them and then

Hi Arne, Le 05/04/2020 ? 19:47, Arne Zachlod via samba a ?crit?: > On 4/5/20 7:14 PM, Rowland penny via samba wrote: >> On 05/04/2020 17:47, Arne Zachlod via samba wrote: >>> Hello, >>> >>> I'm currently in the process of updating our Samba environment from >>> 4.3 to 4.11. Looks like I did something wrong. Some pointers would be >>>

Hello, I'm currently in the process of updating our Samba environment from 4.3 to 4.11. Looks like I did something wrong. Some pointers would be much appreciated. Since I wanted to migrate from Ubuntu to Debian anyway, I decided to not upgrade in place, but instead create new VMs, join them and then remove the old 4.3 ones. Everything went well until I also wanted to transfer FSMO roles

On 4/5/20 7:14 PM, Rowland penny via samba wrote: > On 05/04/2020 17:47, Arne Zachlod via samba wrote: >> Hello, >> >> I'm currently in the process of updating our Samba environment from >> 4.3 to 4.11. Looks like I did something wrong. Some pointers would be >> much appreciated. >> >> Since I wanted to migrate from Ubuntu to Debian anyway, I

...t: 26 November 2018 10:12 To: samba at lists.samba.org Subject: Re: [Samba] Adding a new DC - ID Mappings On Mon, 26 Nov 2018 09:47:06 +0000 Rob Mason via samba <samba at lists.samba.org> wrote: > I’m looking to replace a DC within a small network by adding a new DC > and transferring FMSO roles, then demoting the old DC > (https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC). > > I am able to successfully deploy the new DC following directions in > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory. > However, I am struggling with...

On 21/09/2020 15:00, Elias Pereira via samba wrote: > Another doubt is about this bydefaults entry. > The dc4 has this entry, but the dc3 does not. The dc3 is the fmso roles guy. > Does it work that way or is there something wrong there? Whilst there are a few attributes that do not replicate, all DN's should. > * Comparing [DOMAIN] context... > > * DN lists have different size: 5702 != 5703 > > * DNs found only in ldap://DC4: > > CN=B...

I’m looking to replace a DC within a small network by adding a new DC and transferring FMSO roles, then demoting the old DC (https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC). I am able to successfully deploy the new DC following directions in https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory. However, I am struggling with ID mappings – I’m not re...

...ervices will no longer authenticate to the domain. One of those is osTicket. Looking through the release notes I figured this would happen. However I'm a bit tentative to make changes to my smb.conf without doing damage and asking for help from the list. I have 6 DC's. One holds all the FMSO roles. This is the smb.conf from that DC. [global] workgroup = DOMAIN realm = DOMAIN.LOCAL netbios name = PFDC1 server role = active directory domain controller dns forwarder = 8.8.8.8 idmap_ldb:use rfc2307 = Yes log level = 0...

At this point I have a DC2 joined to a DC1 that has all the FMSO roles. I have confirmed that 'samba-tool drs showrepl' on both DCs produces the expected results without error. I am now looking at sysvol replication. On FreeBSD the sysvol is located at /var/db/samba4/sysvol. Here is the problem. On DC1 I see this: [root at smb4-1 ~ (master)]# ll /va...

On 21/09/2020 00:35, Elias Pereira via samba wrote: > No errors occur, but still not replicating. It is not of all entries. > > For example, there are some users that the groups they are part, differ > between the two DCs. > > In the link below there is a diff between groups of a specific user. > # ldbsearch -H /var/lib/samba/private/sam.ldb "(samAccountName=125202)"

Hi Rowland - just wanted to follow up and say thanks. It was a dependency issue with pam. All sorted now. May I quickly double check that the current Samba wiki is correct - there is no automatic sysvol replication? Therefore, I must replicate my old DC sysvol to the new DC before transferring FMSO roles and demoting the old DC?? -----Original Message----- From: Rob Mason Sent: 26 November 2018 14:01 To: Rowland Penny <rpenny at samba.org>; samba at lists.samba.org Subject: RE: [Samba] Adding a new DC - ID Mappings Hi Rowland - thank you for replying. I have now demoted and removed t...

...>> to the domain. One of those is osTicket. Looking through the release >> notes I figured this would happen. However I'm a bit tentative to >> make changes to my smb.conf without doing damage and asking for help >> from the list. I have 6 DC's. One holds all the FMSO roles. This is >> the smb.conf from that DC. >> >> [global] >> workgroup = DOMAIN >> realm = DOMAIN.LOCAL >> netbios name = PFDC1 >> server role = active directory domain controller >> dns forwarder = 8.8.8.8 &...

...o samba4 (just followed howto article from official documentation) - DNS created, no errors in samba log, machines and users successfully logging in, etc; without any troubles i joined w2008 machine, used dcpromo to promote it to DC (dns records successfully updated), everything went fine, even fmso transfer works without errors. But here's the trouble - this new win DC isn't starting SYSVOL and NETLOGON shares, in event log it states only "eventid 13565", no other errors. Of course, without this shares this DC isn't operational and when i shutdown samba machine - dom...

...Mon, Sep 21, 2020 at 11:13 AM Rowland penny via samba < > samba at lists.samba.org> wrote: > >> On 21/09/2020 15:00, Elias Pereira via samba wrote: >>> Another doubt is about this bydefaults entry. >>> The dc4 has this entry, but the dc3 does not. The dc3 is the fmso roles >> guy. >>> Does it work that way or is there something wrong there? >> Whilst there are a few attributes that do not replicate, all DN's should. >>> * Comparing [DOMAIN] context... >>> >>> * DN lists have different size: 5702 != 5703 >&g...

...perly formed account name. [root at h-msn-smbdc-01 ~]# net rpc testjoin Join to domain 'LOCAL' is not valid: NT_STATUS_ACCESS_DENIED It looks like there's some sort of authentication issue with authenticating to itself? I've considered re-provisioning DC-02 and stealing all the FMSO roles, demoting/removing DC-01, and re-provisioning DC-01. Not sure if that'd fix the issue, but I'd rather understand what the root cause of this is. Any help would be greatly appreciated. Thanks, Derek

...er authenticate > to the domain. One of those is osTicket. Looking through the release > notes I figured this would happen. However I'm a bit tentative to make > changes to my smb.conf without doing damage and asking for help from > the list. I have 6 DC's. One holds all the FMSO roles. This is the > smb.conf from that DC. > > [global] > workgroup = DOMAIN > realm = DOMAIN.LOCAL > netbios name = PFDC1 > server role = active directory domain controller > dns forwarder = 8.8.8.8 > idmap_ldb:use rfc230...

On Mon, 26 Nov 2018 09:47:06 +0000 Rob Mason via samba <samba at lists.samba.org> wrote: > I’m looking to replace a DC within a small network by adding a new DC > and transferring FMSO roles, then demoting the old DC > (https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC). > > I am able to successfully deploy the new DC following directions in > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory. > However, I am struggling with...

...ependency issue with pam. All sorted now. What was missing ? The wiki may need updating. > > May I quickly double check that the current Samba wiki is correct - > there is no automatic sysvol replication? Therefore, I must replicate > my old DC sysvol to the new DC before transferring FMSO roles and > demoting the old DC?? You still need to manually sync Sysvol between DCs and you should also sync idmap.ldb from the DC holding the 'PdcEmulation' FSMO role to all other DCs Rowland Acasta Ltd - A Crown Commercial Service Supplier. CyberEssentials Certified QGCE013. Registe...

Regarding the groups, now it's all right. Another doubt is about this bydefaults entry. The dc4 has this entry, but the dc3 does not. The dc3 is the fmso roles guy. Does it work that way or is there something wrong there? * Comparing [DOMAIN] context... * DN lists have different size: 5702 != 5703 * DNs found only in ldap://DC4: CN=BYDEFAULTS,CN=NETGROUP,CN=YPSERV30,CN=RPCSERVICES,CN=SYSTEM,DC=CAMPUS,DC=COMPANY,DC=BR * Objects to be compared: 57...

...instead of dc3? On Mon, Sep 21, 2020 at 11:13 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 21/09/2020 15:00, Elias Pereira via samba wrote: > > Another doubt is about this bydefaults entry. > > The dc4 has this entry, but the dc3 does not. The dc3 is the fmso roles > guy. > > Does it work that way or is there something wrong there? > Whilst there are a few attributes that do not replicate, all DN's should. > > * Comparing [DOMAIN] context... > > > > * DN lists have different size: 5702 != 5703 > > > > * DNs...