search for: ldapcmp

Hi all, It seems "samba-tool ldapcmp" does not support too much items in Samba's database. Playing for a while with DB I was never able to run ldapcmp successfully. So yesterday I installed a platform to fill piece by piece my two small DCs and to run ldapcmp. The process follows. Test platform: 2 DCs using Debian 8.1 &quot...

Hi Mathias, I am under the impression that whenChanged is one of the fields that do not replicate. Therefore we run ldapcmp like: samba-tool ldapcmp ldap://dcX ldap://dcY --filter=whenChanged Hope that helps, MJ On 09/01/2015 02:45 PM, mathias dufresne wrote: > Hi all, > > It seems "samba-tool ldapcmp" does not support too much items in Samba's > database. > > Playing for a while wit...

...er, samba upgrade 4.10=> 4.11 van-belle repo. ) # update 4.10 to 4.11 sed 's/410/411/g'? /etc/apt/sources.list.d/van-belle.list apt update apt dist-upgrade --autoremove --purge apt --fix-broken install apt dist-upgrade --autoremove --purge And its done. ? When running :? samba-tool ldapcmp --filter="whenChanged,dc,DC,cn,CN" ldap://dc1.fqdn ?ldap://dc2.fqdn This works fine, untill i remove the filter.. ? samba-tool ldapcmp? ldap://dc1.fqdn ?ldap://dc2.fqdn This errors out with : * Comparing [DOMAIN] context... ? * Objects to be compared: 845 ERROR(<class 'KeyError&...

Hi Mourik, whenChanged was replicated in my test once I did replicate in both way, so it seems to me it is supposed to be replicated... Then the fact it is not always replicated seems to me an issue. Perhaps a bug report for these two issue (whenChanged not always replicated and ldapcmp hanging once DB is too much filled) would be the right way to proceed... Cheers, mat 2015-09-03 10:42 GMT+02:00 mourik jan heupink <heupink at merit.unu.edu>: > Hi Mathias, > > I am under the impression that whenChanged is one of the fields that do > not replicate. Therefore w...

...ote: > Hi, > > Once you have installed Samba to be able to run it as Active Directory you > would have samba-tool available. > > # which samba-tool > /usr/bin/samba-tool > # file /usr/bin/samba-tool > /usr/bin/samba-tool: Python script, ASCII text executable > # locate ldapcmp.py > /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py > /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.pyc > /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.pyo > # file /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py > /usr/lib64/python2.7/site-...

Am 16.07.2015 um 17:18 schrieb Rowland Penny: > On 16/07/15 13:27, Reindl Harald wrote: >> >> Am 16.07.2015 um 14:02 schrieb Rowland Penny: >>> /etc/hosts should be: >>> >>> 127.0.0.1 localhost.localdomain localhost >> >> uhm no - you want 127.0.0.1 normally resolved to localhost and hence >> 127.0.0.1 localhost

Dear all, Running samba-tool ldapcmp on my both DCs samba 4.1.7 leads to the output : Attributes found only in ldap://s4master: msDS-NcType serverState FAILED How to deal with this? I am missing something? [root at s4slave ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator domain Pa...

I am in the process of preparing to demote a couple of (hardware) aging domain controllers. At moment, I have four DC's running on my domain. When I "ldapcmp" between any of the DC's I get failures that appear to be simple "typos". Like these: root at dtdc07:~# samba-tool ldapcmp ldap://dtdc03 ldap://dtdc07 -Uadministrator >>>>> snipped for brevity <<<<<<< SUMMARY --------- Attributes found only...

Hello: I'd really like to leverage the samba-python API to perform 'net ads search' style queries for an upcoming project. Is there any documentation or examples someone can point me to? The 'python/examples' directory is a misnomer (!) and the online API documentation was generated from 2011 and is also just as cryptic. I even checked the binaries in samba-client to see if

All- I've got 3 DCs (version 4.9.6-12) that, prior to today, were running without issue (as best I could tell). Every night I run a few commands to monitor the status of the DCs/domain. I run: * dbcheck --cross-ncs * samba-tool drs kcc <other DCs> * samba-tool ldapcmp <local DC> <other DCs> (domain|configuration|schema|dnsdomain|dnsforest) * samba-tool drs showrepl These commands are run on each DC and logged. Since upgrading to this version about a month ago, I have not seen issues since offsetting the CRONs (offsetting the run times fixed an inte...

...work and now I have two DCs that appear to be replicating. As part of our setup, we have a health check script that runs daily, which runs a variety of commands to verify everything is OK. On the production cluster, this works without issue. However, on the development cluster, "samba-tool ldapcmp" returns: ERROR(ldb): uncaught exception - LDAP error 1 LDAP_OPERATIONS_ERROR - <00002020: Operation unavailable without authentication> <> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 178, in _run return self.run(*args, **kwargs) File...

...ted in my test once I did replicate in both way, so >> it seems to me it is supposed to be replicated... Then the fact it is not >> always replicated seems to me an issue. >> >> Perhaps a bug report for these two issue (whenChanged not always >> replicated >> and ldapcmp hanging once DB is too much filled) would be the right way to >> proceed... >> >> Cheers, >> >> mat >> >> >> > According to two microsoft webpages: > > https://msdn.microsoft.com/en-us/library/ms680921%28v=vs.85%29.aspx > https://msdn.micr...

On 23/07/15 16:23, mathias dufresne wrote: > Hi all, > > I tried "samba-tool ldapcmp" several times to solve this issue, without > success. > > On DC acting as full FSMO: > dc20:~# samba-tool ldapcmp ldap://dc00.ad.dgfip.lan > ldap://dc20.ad.dgfip.lan domain > ERROR(ldb): uncaught exception - ldb_wait: Time limit exceeded (3) > File "/usr/lib64/pyt...

Hi all, I tried "samba-tool ldapcmp" several times to solve this issue, without success. On DC acting as full FSMO: dc20:~# samba-tool ldapcmp ldap://dc00.ad.dgfip.lan ldap://dc20.ad.dgfip.lan domain ERROR(ldb): uncaught exception - ldb_wait: Time limit exceeded (3) File "/usr/lib64/python2.6/site-packages/samba/netcmd/_...

Hello I am running samba-tool ldapcmp, but is giving the following error. What may be happening? samba-tool ldapcmp ldap://dc-server1 ldap://dc-server2 -Uadministrator domain --filter=msDS-NcType,serverState Password for [UEL.BR\administrator]: * Comparing [DOMAIN] context... Failed search of base=DC=campus,DC=uel,DC=br ERROR(ldb):...

Hi all, I have just updated our dc's from sernet 4.1.11 to sernet 4.1.12. And suddenly since that update, we're getting many ldapcmp failures on the attribute 'whenChanged'. In 4.1.11 life was good, and ldapcmp reported no differences at all. Here is a sample: (dc2 <-> dc3) Comparing: 'CN=podcast,CN=Users,DC=samba,DC=company,DC=com' [ldap://dc2] 'CN=podcast,CN=Users,DC=samba,DC=company,DC=com' [...

Hello Samba Friends, I have a single DC (we'll call it, "DC1") that simply will not take my password when I run this command:? #samba-tool ldapcmp ldap://dc2 ldap://dc3 -Uadministrator? Or this command:? #samba-tool ldapcmp ldap://dc1 ldap://dc2 -Uadministrator? I basically get this:? > Password for [SAMDOM\administrator]:? > Password for [SAMDOM\administrator]:? > Password for [SAMDOM\administrator]:? > Failed to bind - L...

...un it as Active Directory >>> you >>> would have samba-tool available. >>> >>> # which samba-tool >>> /usr/bin/samba-tool >>> # file /usr/bin/samba-tool >>> /usr/bin/samba-tool: Python script, ASCII text executable >>> # locate ldapcmp.py >>> /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py >>> /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.pyc >>> /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.pyo >>> # file /usr/lib64/python2.7/site-packages/samba/netcmd/ldapcmp.py...

...a at lists.samba.org > Onderwerp: [Samba] One DC cannot authenticate off of another DC > > > Hello Samba Friends, > > > I have a single DC (we'll call it, "DC1") that simply will > not take my password when I run this command:? > > > #samba-tool ldapcmp ldap://dc2 ldap://dc3 -Uadministrator? > > > Or this command:? > > > #samba-tool ldapcmp ldap://dc1 ldap://dc2 -Uadministrator? > > > I basically get this:? > > > > Password for [SAMDOM\administrator]:? > > Password for [SAMDOM\administrator]:? &...

...ba4 DC (using 4.0.0 release) and asked it to join the existing domain as an additional controller. Replication of both the objects and dns entries appears to be working well, and the usual tests of adding a user to one and confirming it is available in the other is similarly working. However, the `ldapcmp` tool claims there are numerous discrepancies in the replicated data between the two ldap directories. Note the 'attributes found only in' list in the example comparison for a specific user in the directory: $ sudo samba-tool ldapcmp ldap://windowsdc.exampledn.com ldap://samba4dc.exampledn...