search for: join_a_domain_as_a_rodc

On Thu, 2017-11-30 at 15:46 +0000, Andrej Gessel via samba wrote: > Hello Andrew, > > thank you for the answer. > > 1) User credentials need to be preloaded with samba-tool to be > automatically replicated later if they change, its correct? No, preloading just makes the first login faster. > 2) And if user try to login on RODC without preloaded credentials, this >

Hi, I've tried replacing some 2012R2 RODC by samba-4.9.4 RODCs. One question about password replication: Samba wiki (https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) states that samba RODC acts as a proxy server to a writable DC if users are not member of the Allowed RODC Password Replication Group, which is the behavior we knew (and what we want) from the MS RODCs. Our test installation of the samba RODC acts different, users which are not members of the...

...> I know about *mbd processes. so strange.. This is why I'm posting > here :-) I have never used an RODC, but would image you need both smbd & winbindd to run > > > I joined the RODC following the procedure available on the wiki page > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : > > > samba-tool domain join ads.MYDOMAIN.be RODC -U > MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL > > > This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to > 4.8 but I don't think this is the issue. I had exactly same issue > with 4....

...tps://bugzilla.samba.org/show_bug.cgi?id=12774)  From your experience, are we facing a known bug or limitation, or are there some configuration settings that we are missing ?  Do you have any recommendations/documentation to set up Samba as a RODC (other than https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) ?  Best regards,  Julien -- Message envoyé grâce à OBM, la Communication Libre par Linagora

On Wed, 13 Jun 2018 10:05:23 +0200 (CEST) Gaetan SLONGO <gslongo at it-optics.com> wrote: > Hi Rowland, > > > Same, as said; winbind isn't started :-) > > > > [root at dmzrodc ~]# ps ax | egrep "ntp|bind|named|samba|?mbd" > 650 ? Ss 0:00 /usr/sbin/ntpd -u ntp:ntp -g > 1205 ? Ss 0:00 /usr/sbin/samba -D > 1225 ? S 0:00 /usr/sbin/samba

...ler (DC2) along the smooth running first domain controller DC1. Samba version 4.8.5, Centos 7 Linux, further config files below. The command used to join the DC2 as RODC: # samba-tool domain join ad.example.nl RODC -U "ad.example.nl\Administrator" (see https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) This seemed to run OK, DC2 was joined to the domain. Before I restarted the samba-ad service, I set the uidNumber of DC2 because I use idmap backend = ad on the other domain members. Machine and user accounts are replicated to DC2. The A record entry for DC2.ad.example was added to the dns o...

I couldn't readily find this answer to this question but can samba act as a member dc along side windows running the domain? This would be a samba as a 'secondary' domain controller. Why would I want to do this? I am thinking of putting samba on the outside of the firewall acting as a RO DC and providing ldap authentication to web applications. -- David Bear mobile: (602) 903-6476

...I know about *mbd processes. so strange.. This is why I'm posting > here :-) I have never used an RODC, but would image you need both smbd & winbindd to run > > > I joined the RODC following the procedure available on the wiki page > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : > > > samba-tool domain join ads.MYDOMAIN.be RODC -U > MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL > > > This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to > 4.8 but I don't think this is the issue. I had exactly same issue > with...

...nning first domain controller DC1. Samba version 4.8.5, > Centos 7 Linux, further config files below. > > The command used to join the DC2 as RODC: > # samba-tool domain join ad.example.nl RODC -U > "ad.example.nl\Administrator" (see > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) This seemed > to run OK, DC2 was joined to the domain. > > Before I restarted the samba-ad service, I set the uidNumber of DC2 > because I use idmap backend = ad on the other domain members. > > Machine and user accounts are replicated to DC2. > The A record entry for DC2...

...know. Cheers, Garming >  From your experience, are we facing a known bug or limitation, or are > there some configuration settings that we are missing ? > >  Do you have any recommendations/documentation to set up Samba as a > RODC (other than > https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) ? > > >  Best regards, > >  Julien > > > > -- > Message envoyé grâce à OBM, la Communication Libre par Linagora >

On Thu, 28 Mar 2019 16:31:51 +0100 Adam Minski via samba <samba at lists.samba.org> wrote: > Hi, > > I've tried replacing some 2012R2 RODC by samba-4.9.4 RODCs. One > question about password replication: > > Samba wiki (https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) > states that samba RODC acts as a proxy server to a writable DC if > users are not member of the Allowed RODC Password Replication Group, > which is the behavior we knew (and what we want) from the MS RODCs. Samba when running as an AD computer tries to emulate a Windows AD computer, i...

...nbindd /usr/sbin/winbindd [root at dmzrodc ~]# rpm -qa |grep winbind sernet-samba-winbind-4.8.2-10.el7.x86_64 I know about *mbd processes. so strange.. This is why I'm posting here :-) I joined the RODC following the procedure available on the wiki page https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : samba-tool domain join ads.MYDOMAIN.be RODC -U MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to 4.8 but I don't think this is the issue. I had exactly same issue with 4.6 and 4.7 versions where a dev told me to wai...

...ch winbindd /usr/sbin/winbindd [root at dmzrodc ~]# rpm -qa |grep winbind sernet-samba-winbind-4.8.2-10.el7.x86_64 I know about *mbd processes. so strange.. This is why I'm posting here :-) I joined the RODC following the procedure available on the wiki page https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : samba-tool domain join ads.MYDOMAIN.be RODC -U MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to 4.8 but I don't think this is the issue. I had exactly same issue with 4.6 and 4.7 versions where a dev told me to wait...

...nbindd /usr/sbin/winbindd [root at dmzrodc ~]# rpm -qa |grep winbind sernet-samba-winbind-4.8.2-10.el7.x86_64 I know about *mbd processes. so strange.. This is why I'm posting here :-) I joined the RODC following the procedure available on the wiki page https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC : samba-tool domain join ads.MYDOMAIN.be RODC -U MYDOMAIN\\Administrator --dns-backend=SAMBA_INTERNAL This is a Samba AD domain. But other DC are 4.7.7. Cannot upgrade to 4.8 but I don't think this is the issue. I had exactly same issue with 4.6 and 4.7 versions where a dev told me to wai...