search for: ldap_referrals

hi, I'm trying to add secondary samba4 dc (stretch with samba 4.5 from official repository) to samba4 pdc (stretch also this), I did this other times few years ago with older debian and samba (4.0 and 4.1 if I remember good). This time always following this howto (https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory) failed all time, first time because I

On Mon, 1 Oct 2018 17:14:09 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai Fabio, > > We dont mind crappy english... > At least not me, I'm the same, lots of typos. You will learn it, the > more you type it. ;-) > > https://lists.samba.org/archive/samba/2018-February/214118.html > Shows exact the same, but not solution.

..., going offline (5 [Input/output error]) (Fri Sep 2 18:22:13 2016) [sssd[be[xxx.xxx]]] [be_run_offline_cb] (3): Going offline. Running callbacks. my sssd configuation is bellow [sssd] config_file_version = 2 domains = xxx.xxx services = nss, pam debug_level = 5 [nss] [pam] [domain/xxx.xx] ldap_referrals = false enumerate = true id_provider = ldap #access_provider = ldap auth_provider = ldap ldap_uri = ldap://xxx-DC-A.xxx.xxx:389 ldap_id_use_start_tls = False ldap_auth_disable_tls_never_use_in_production = true ldap_default_bind_dn = CN=ldapadmin,cn=Users,dc=xxx,dc=xxx ldap_default_authtok_type =...

This is the output of that command. root at DC01:~# ldbsearch --cross-ncs -H ldap://pdc -b "DC=DomainDnsZones,DC=fisherthompson,DC=local" -s sub -Uadministrator Password for [FISHERTHOMPSON\administrator]: search error - LDAP error 10 LDAP_REFERRAL - <0000202B: RefErr: DSID-0310063C, data 0, 1 access points ref 1: 'DomainDnsZones.fisherthompson.local' >

search error - LDAP error 10 LDAP_REFERRAL - <0000202B: RefErr: DSID-0310063C, data 0, 1 access points ref 1: 'DomainDnsZones.fisherthompson.local' > <ldap://DomainDnsZones.fisherthompson.local/DC=DomainDnsZones,DC=fisherthompson,DC=local> On Thu, Jul 7, 2016 at 11:04 AM, Rowland penny <rpenny at samba.org> wrote: > On 07/07/16 13:56, Jason Waters wrote:

Buchan Milne wrote: > > Ignacio Coupeau wrote: > >>Buchan Milne wrote: >> >>>Hi, I was following some of the howto at >>>http://www.unav.es/cti/ldap-smb/ldap-smb-2_2-howto.html#patches to >>>include the ldap referral patches in the samba packages for Mandrake, >>>but it seems that samba does not compile with the patch (I can give you

On Tue, 2 Oct 2018 10:33:35 +0200 Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: > Il 01/10/2018 17:33, Rowland Penny via samba ha scritto: > > On Mon, 1 Oct 2018 17:14:09 +0200 > > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > >> Hai Fabio, > >> > >> We dont mind crappy english... > >> At least

...figuation is bellow > > > > [sssd] > > config_file_version = 2 > > domains = xxx.xxx > > services = nss, pam > > debug_level = 5 > > > > > > [nss] > > > > > > [pam] > > > > > > [domain/xxx.xx] > > ldap_referrals = false > > enumerate = true > > > > id_provider = ldap > > #access_provider = ldap > > auth_provider = ldap > > ldap_uri = ldap://xxx-DC-A.xxx.xxx:389 > > ldap_id_use_start_tls = False > > ldap_auth_disable_tls_never_use_in_production = true > &g...

So I wanted to test if something was broke in my DC so I setup a "new" 2003 DC with a different domain, example.com. I do the ldbsearch against that and I get the same error instead of it listing the dns entries....So maybe it is a 2003 thing? On Thu, Jul 7, 2016 at 11:55 AM, Rowland penny <rpenny at samba.org> wrote: > On 07/07/16 16:19, Jason Waters wrote: > > search

On Tue, 2 Oct 2018 15:21:03 +0200 Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: > Il 02/10/2018 11:03, Rowland Penny via samba ha scritto: > > On Tue, 2 Oct 2018 10:33:35 +0200 > > Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: > > > >> Il 01/10/2018 17:33, Rowland Penny via samba ha scritto: > >>> On Mon, 1 Oct 2018 17:14:09 +0200 >

Hi, I have 2 DC in my network. DC master is a Samba 4 and the secondary is Windows Server 2008. I want to put another Samba 4 as DC to replace Windows Server, however the following errors are emerging: root at samba4-dc2:~# samba-tool domain join empresa.com.br DC -k yes -d 3 lpcfg_load: refreshing parameters from /etc/samba/smb.conf GENSEC backend 'gssapi_spnego' registered GENSEC

Il 02/10/2018 11:03, Rowland Penny via samba ha scritto: > On Tue, 2 Oct 2018 10:33:35 +0200 > Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: > >> Il 01/10/2018 17:33, Rowland Penny via samba ha scritto: >>> On Mon, 1 Oct 2018 17:14:09 +0200 >>> "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >>> >>>> Hai

...Finally, here is my sssd.conf: [sssd] services = nss, pam config_file_version = 2 domains = default # enable or disable the below # debug_level = 3 # debug_level = 5 debug_level = 8 [nss] [pam] [domain/default] debug_level = 8 ldap_schema = rfc2307bis id_provider = ldap access_provider = simple ldap_referrals = false ldap_force_upper_case_realm = true # on large directories, you may want to disable enumeration for performance reasons # enumerate = true auth_provider = krb5 chpass_provider = krb5 ldap_sasl_mech = gssapi ldap_sasl_authid = EPO$@SAMBA.COMPANY.COM krb5_realm = SAMBA.COMPANY.COM #krb5_ser...

...gt;> domains = xxx.xxx >>>> services = nss, pam >>>> debug_level = 5 >>>> >>>> >>>> [nss] >>>> >>>> >>>> [pam] >>>> >>>> >>>> [domain/xxx.xx] >>>> ldap_referrals = false >>>> enumerate = true >>>> >>>> id_provider = ldap >>>> #access_provider = ldap >>>> auth_provider = ldap >>>> ldap_uri = ldap://xxx-DC-A.xxx.xxx:389 >>>> ldap_id_use_start_tls = False >>>> ldap...

Il 02/10/2018 15:47, Rowland Penny via samba ha scritto: > On Tue, 2 Oct 2018 15:21:03 +0200 > Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: > >> Il 02/10/2018 11:03, Rowland Penny via samba ha scritto: >>> On Tue, 2 Oct 2018 10:33:35 +0200 >>> Fabio Fantoni <fabio.fantoni at m2r.biz> wrote: >>> >>>> Il 01/10/2018 17:33, Rowland

...dentials = true > auth_provider = krb5 > chpass_provider = krb5 > krb5_realm = RADIODJIIDO.NC > krb5_server = serveur.radiodjiido.nc > krb5_kpasswd = serveur.radiodjiido.nc > #next line only lists users with uidNumber/gidNumber entered via ldbedit > ldap_id_mapping = false > ldap_referrals = false > ldap_uri = ldap://serveur.radiodjiido.nc > ldap_search_base = dc=radiodjiido,dc=nc > ldap_user_object_class = user > ldap_user_name = samAccountName > ldap_user_uid_number = uidNumber > ldap_user_gid_number = gidNumber > ldap_user_home_directory = unixHomeDirectory &g...

On 10/02/2018 05:21 PM, Fabio Fantoni via samba wrote: > I updated both the linux domain controllers to samba 4.8.5, changed > the hostname of server I tried to add as dc but same error: > >> samba-tool domain join m2r.local DC -Uadministrator --realm=m2r.local >> --dns-backend=SAMBA_INTERNAL --option='idmap_ldb:use rfc2307 = yes' >> Finding a writeable DC for

On 23/06/16 19:53, Jason Waters wrote: > This is the output of that command. > > root at DC01:~# ldbsearch --cross-ncs -H ldap://pdc -b > "DC=DomainDnsZones,DC=fisherthompson,DC=local" -s sub -Uadministrator > Password for [FISHERTHOMPSON\administrator]: > search error - LDAP error 10 LDAP_REFERRAL - <0000202B: RefErr: > DSID-0310063C, data 0, 1 access points

On 07/07/16 16:19, Jason Waters wrote: > search error - LDAP error 10 LDAP_REFERRAL - <0000202B: RefErr: > DSID-0310063C, data 0, 1 access points > ref 1: 'DomainDnsZones.fisherthompson.local' > > > <ldap://DomainDnsZones.fisherthompson.local/DC=DomainDnsZones,DC=fisherthompson,DC=local> If you look here:

...ine_cb] (3): > Going offline. Running callbacks. > > > my sssd configuation is bellow > > [sssd] > config_file_version = 2 > domains = xxx.xxx > services = nss, pam > debug_level = 5 > > > [nss] > > > [pam] > > > [domain/xxx.xx] > ldap_referrals = false > enumerate = true > > id_provider = ldap > #access_provider = ldap > auth_provider = ldap > ldap_uri = ldap://xxx-DC-A.xxx.xxx:389 > ldap_id_use_start_tls = False > ldap_auth_disable_tls_never_use_in_production = true > ldap_default_bind_dn = CN=ldapadmin,cn=Use...