search for: hammerling

...ough I have added "Domain Admins" to the group "DnsAdmins" and tested again, still get the "access denied" error from within windows. On Tue, Dec 12, 2017 at 11:01 AM, lingpanda101 via samba < samba at lists.samba.org> wrote: > On 12/12/2017 11:24 AM, Taylor Hammerling via samba wrote: > >> I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which >> seemed to have someone experiencing the same issue I am. >> I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my >> smb.conf, rebooted the server,...

...2] ../source4/rpc_server/dcerpc_server.c:1824(dcesrv_request) dcesrv_request: restrict access by min_auth_level[0x4] to [dnsserver] with auth[type=0xa,level=0x2] on [ncacn_ip_tcp] from [ipv4: 172.28.9.100:49994] when I try to open the DNS Management RSAT On Tue, Dec 12, 2017 at 10:04 AM, Taylor Hammerling < thammerling at tcsbasys.com> wrote: > I cranked up the log level to 3 and found this in the log.samba file when > trying to open the DNS Manager RSAT from my client machine (which is joined > to the same domain as the DCs) > > [2017/12/12 09:59:30.601170, 2] ../source4/rpc_...

...my own certificate with all common > names used on my domain (for example domain.com, dc1.domain.com and > dc2.domain.com), I'm able to manage the dns using RSAT using that named. > With ip address still failing. > > Greetings!! > > El 12 dic. 2017 6:13 p. m., "Taylor Hammerling via samba" < > samba at lists.samba.org> escribió: > >> The user is a member of "Domain Admins" so they should be able to access >> the DNS (as is evident by the fact that they can access the DNS thru RSAT >> on the initial DC). >> But just to be t...

Andrew - i am trying to join a new DC. Both DCs (old and new) are running samba 4.5.12-Debian On Dec 11, 2017 8:11 PM, "Andrew Bartlett" <abartlet at samba.org> wrote: > On Mon, 2017-12-11 at 19:56 -0600, Taylor Hammerling via samba wrote: > > Good evening! > > > > I am having difficulty joining a Samba4 install to my current domain. > > What new version are you running? Samba 4.6 or 4.7 should work better > for this (support for a flag called GET_ANC), but the issue is server- > side s...

Danke! On Fri, Dec 15, 2017 at 1:03 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:56:25 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > Interesting... How do I go about getting them/keeping them in sync? > > > > see here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ > Existing_Active_Directory#Built-in_Groups_GID_Mappings > > Rowl...

in my optinion, yes, i use my own packages for years now, started with 4.1.x  ( still the same servers) started with debian wheezy and these are now debian stretch.   Start reading here, it wil help you ;-) https://github.com/thctlo/samba4/tree/master/howtos      Greetz,   Louis   Van: Taylor Hammerling [mailto:thammerling at tcsbasys.com] Verzonden: dinsdag 12 december 2017 15:13 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] failure joining a domain as a DC Thanks much!  I noticed that in order to get 4.7.3 I have to use stretch-unstable.  These are production DCs....

...N access the DNS on the original DC using the DNS Manager RSAT snapin. I'm hoping (and suspecting) this will just be an easy fix of chmodding/chowing something... I've spent the last hour googling and have come up with nada. Any help you can provide would be VERY appreciated! -- *Taylor Hammerling* | *IT Manager* 2800 Laura Lane | Middleton, WI 53562 *O *(608) 669-9070 *| C *(608) 512-7849 tcsbasys.com | ubiquistat.com

Apologies, despite that error, the permissions now look good on the sysvol folder. Is there anything I need to do moving forward to keep my DCs idmap.ldbs in sync? or is this a one time thing? On Fri, Dec 15, 2017 at 1:16 PM, Taylor Hammerling <thammerling at tcsbasys.com > wrote: > ok, I followed the directions on that wikipage, made a hot backup, copied > the hot backup over to the new DC, renamed the hot backup (thus replacing > the existing idmap.ldb) and ran "samba-tool ntacl sysvolreset" and it spat > o...

...a similar issue, and after create my own certificate with all common names used on my domain (for example domain.com, dc1.domain.com and dc2.domain.com), I'm able to manage the dns using RSAT using that named. With ip address still failing. Greetings!! El 12 dic. 2017 6:13 p. m., "Taylor Hammerling via samba" < samba at lists.samba.org> escribió: > The user is a member of "Domain Admins" so they should be able to access > the DNS (as is evident by the fact that they can access the DNS thru RSAT > on the initial DC). > But just to be thorough I have added &quo...

i suggest review my howto its on github find my name, thctlo, goto samba4. full ad and member howto and scripts to check things. Greetz, Louis (mobile) > Op 8 dec. 2017 om 18:49 heeft Taylor Hammerling via samba <samba at lists.samba.org> het volgende geschreven: > > I am working on building a test ADDC environment for my business. I have > performed a clean install of Debian 9.2, after which I performed an install > of samba 4.5.12-Debian. > > once samba was installed,...

On 12/12/2017 11:24 AM, Taylor Hammerling via samba wrote: > I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which > seemed to have someone experiencing the same issue I am. > I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my > smb.conf, rebooted the server, but still I get the...

...the values passed to the API). Also, yes I mispoke, we would only be modifying the records on one DC, and replication would take care of the rest. On Mon, Nov 13, 2017 at 11:17 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Mon, 13 Nov 2017 11:07:28 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > I am looking for a way to programatically modify DNS settings from > > outside of my SAMBA4 DCs. > > > > I am working on creating a PHP inventory page, which (in an ideal > > world) would hook into our SAMBA4 d...

...the DC. IE, the inventory server needs to send a request to the DC to add/update/remove etc DNS records. This is why I'm looking for an API. On Tue, Nov 14, 2017 at 11:32 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 14 Nov 2017 11:18:04 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > by modify I mean add, change and/or remove DNS records (depending on > > the values passed to the API). > > Also, yes I mispoke, we would only be modifying the records on one > > DC, and replication would take care of the r...

...4.7.3. and other replication (like AD object replication) is working in both directions. it is just DNS replication that is only working one way. On Tue, Dec 12, 2017 at 2:15 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 12 Dec 2017 14:00:32 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > I'm hoping this is the last issue I run into with bringing this new DC > > online. > > > > DNS replication is currently only working in one direction, from my > > old DC to my new DC. Items added or change...

...server from the DC. it's a FOG server which has had several additional tables bolted onto the database and a PHP inventory page added to it. On Tue, Nov 14, 2017 at 12:05 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 14 Nov 2017 11:48:29 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > We aren't using BIND, we are using the builtin SAMBA backend. Also > > the requests for updates are going to come from external to the DC. > > IE, the inventory server needs to send a request to the DC to > > add/updat...

...ory, and then have the backend of the inventory communicate with the DCs over an API and modify the DNS on the DCs. Is it possible that this is something that already exists, or am I going to have to build my own API from scratch? Thanks in advance for any assistance you can provide! -- *Taylor Hammerling* | *IT Manager* 2800 Laura Lane | Middleton, WI 53562 *O *(608) 669-9070 *| C *(608) 512-7849 tcsbasys.com | ubiquistat.com

...security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service) root at dc1 samba/private# Please note, DC2 is the DC that has the correct GID mappings, DC1 does not, so I'm copying from DC2 to DC1. On Fri, Dec 15, 2017 at 1:08 PM, Taylor Hammerling <thammerling at tcsbasys.com > wrote: > Danke! > > On Fri, Dec 15, 2017 at 1:03 PM, Rowland Penny via samba < > samba at lists.samba.org> wrote: > >> On Fri, 15 Dec 2017 11:56:25 -0600 >> Taylor Hammerling <thammerling at tcsbasys.com> wrote: >> &...

Interesting... How do I go about getting them/keeping them in sync? On Fri, Dec 15, 2017 at 11:47 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:09:38 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > This isn't necessarily an issue (I don't think) but more so a > > curiosity. > > > > How are UIDs mapped to SIDs and then SIDs mapped to names in Samba4 > > across multiple DCs? > > > > I se...

...9-ab03-e09c3ffc0d1a._ msdcs.tcsbasys.com 7da1efbb-3b68-4249-ab03-e09c3ffc0d1a._msdcs.tcsbasys.com is an alias for dc2.tcsbasys.com. root at dc1:~# On Tue, Dec 12, 2017 at 2:44 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 12 Dec 2017 14:19:58 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > I'm sorry Rowland, I meant to mention in my initial email that I am > > running 4.7.3. > > and other replication (like AD object replication) is working in both > > directions. it is just DNS replication that is only w...

...ses. When I try to run NSLOOKUP from the windows client against the DC, I get a timeout error. There are no IPtables running on the DC1, and both DC and the windows client are on the same subnet with no firewall imbetween them. Any help you can provide would be greatly appreciated! -- *Taylor Hammerling* | *IT Manager* 2800 Laura Lane | Middleton, WI 53562 *O *(608) 669-9070 *| C *(608) 512-7849 tcsbasys.com | ubiquistat.com