search for: hollinbeck

Dug deeper (i.e. into the source code)... no answer yet. The samba join process is failing when fetching the domain's machine password from the secrets.tdb database, which presumably it has just built as part of the JOIN.. Specifically, it is looking for an entry: "SECRETS/$MACHINE.ACC/OFFICE" in secrets.tdb. When that fails, samba looks in secrets.ldb in "cn=Primary

On Fri, 2020-02-14 at 12:47 -0700, Rick Hollinbeck via samba wrote: > Dug deeper (i.e. into the source code)... no answer yet. > > The samba join process is failing when fetching the domain's machine password > from the secrets.tdb database, which presumably it has just built as part of the JOIN.. > > Specifically, it is loo...

I'm looking for some general advice. I'm beginning to set up a Raspberry Pi 4 as a SOHO server with Samba on Raspbian Buster. I will be running as a member of an existing Windows AD (JOIN), then allow logging in from Windows and Linux clients. (I previously got Samba 4.11 to join my domain successfully using a Ubuntu VM.) I am also planning to install BIND9 DNS with dynamic updates

On 05/04/2020 17:34, Rick Hollinbeck via samba wrote: > Yes, I am setting up a new Samba-based AD DC. If you are joining? to an existing domain, then you cannot be setting up a new domain ;-) > The goal is to eventually transfer the FSMO roles to the Pi and remove my current Windows > 2008 servers. Shouldn't be a problem...

On 06/04/2020 19:53, Rick Hollinbeck wrote: > My dhcpcd.conf specifies a fixed ip for eth0, but I don't really know how well it will play with > bind9 and samba. > I think I'll take your advice here. I understand why Raspbian uses dhcpcd, it makes it easier for them, but I see no good reason to use it on something th...

On 15/02/2020 20:08, Rick Hollinbeck wrote: > Andrew and Rowland - thank you for your input. > > I've actually made some progress finally! > > I double checked the items mentioned in this old thread describing solving the same > behavior: > https://www.spinics.net/lists/samba/msg148337.html > > One littl...

I'm still digging for the solution to this problem... The error seems to be triggered by some failure with talking to the NBTNS service (lmhosts) on the windows machine. (Port 137) Here is the section of the winbindd log where it fails to fetch the machine account: ... [2020/02/13 01:18:42.759943, 3] ../../source3/winbindd/winbindd_util.c:297(add_trusted_domain) add_trusted_domain:

I'm been stumped trying to resolve a samba error when it runs samba_dnsupdate to resync with a Windows Server 2008 DC. This is on a Debian 9 VM on which I have configured a Samba 4.5.16 / BIND 9.10.3 server joined as a DC to an existing Windows 2008 domain. It's mostly working now, but I can't get rid of one error that is preventing some additions to the _msdcs for the new Samba

> > I'm looking for some general advice. > > > > I'm beginning to set up a Raspberry Pi 4 as a SOHO server with Samba on Raspbian Buster. > > > > I will be running as a member of an existing Windows AD (JOIN), then allow logging in from > > Windows and Linux clients. > > Do you mean as a Unix domain member or as an AD DC ? > > This is a

Thanks for the help with this, Rowland. > Where these 2008 DCs upgraded from an earlier version ? (2000, 2003) Yes, the two Windows servers were migrated over the years to Server 2008 (one is 2008 R2). I've now moved the _msdcs folder and made it a zone in the forest, restarted NETLOGON, and set the functionality of the forest to Server 2008, then rebooted both windows servers. This

Thanks for your response, Rowland. As far as newer versions of Debian/Samba, I actually started with Ubuntu 18.04, which had Samba 4.7. But I ran into another problem trying to use it, so I backed off to an older version that I was hoping was more stable. See: https://bugzilla.samba.org/show_bug.cgi?id=13298 Meanwhile, I did find out more about what was causing this error by looking at the

Thanks for your advice, Rowland > > Yes, I am setting up a new Samba-based AD DC. > If you are joining? to an existing domain, then you cannot be setting up > a new domain ;-) Yes - joining a new DC to an existing domain. > > Should I install BIND9 and DHCP first, then install Samba and do the join? > > I personally would do it in stages, set up the Rpi, add

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title></title> <meta http-equiv="content-type" content="text/html;charset=utf-8"/>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title></title> <meta http-equiv="content-type" content="text/html;charset=utf-8"/>

Got past this one.. see below... > > I cannot get bind9 to run now - it fails because bind9_dlz cannot update the reverse lookup > > zone: > Not sure about this, I use dhcp to update the records, but I seem to > remember something about the windows clients needing to be configured to > update the reverse because they do not do this by default. > > > > Feb 15

A small update... I was able to remove the "Cannot reach a KDC" errors by disabling Apparmor. However, the original WERR_DNS_ERROR_RCODE_NAME_ERROR error remains and is now the first error in the log. > Thanks for the help with this, Rowland. > > > Where these 2008 DCs upgraded from an earlier version ? (2000, 2003) > > Yes, the two Windows servers were migrated

Hi Rowland, > Can you try the join command like this: > samba-tool domain join office.example.com DC -UAdministrator > --password=TheActualPassword --dns-backend=BIND9_DLZ > Rowland When I run samba-tool like this without specifying the server, it chooses the older backup server that runs Server 2008 (named PE2600). Joining to this server results in a different error: .... INFO

Sorry about the HTML in the last email - I'm attempting to resend (with fingers crossed that my mailer doesn't throw in a bunch of HTML this time...) ----> I've taken the good suggestions and made some progress getting a bind-dhcp-samba server running on the Pi with Raspbian Buster. Rowland wrote: > The best way would be to find whatever is rewriting /etc/resolv.conf >