search for: master_operations_

https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role I ran into that while trying to rebuild my LXC's as Debian 8. The proposed work arrounds assume you have access to a Windows Domain controller in your domain, and I don't. Is there anything else I can do to get all 7 Roles moved to my other domain co...

Hello, I wrote a major extension of the FSMO documentation: https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles We often had questions on the list about the FSMO roles and the consequences, when DCs owning roles are offline. I hope this will be a good reference. Regards, Marc

Dear All, I've read https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles Under section https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles#How_to_handle_situations_where_a_DC_with_FSMO_roles_is_offline Let assume that DC1 is take all the roles... It tell that we should put the fail DC1 back online and do the role transfer... Bu...

On 05/26/2015 07:34 AM, Rowland Penny wrote: > On 26/05/15 03:05, John Lewis wrote: >> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >> >> >> I ran into that while trying to rebuild my LXC's as Debian 8. The >> proposed work arrounds assume you have access to a Windows Domain >> controller in your domain, and I don't. Is there anything else I can do &g...

...ed to add user 'usr1': - >> ../source4/dsdb/samdb/ldb_modules/ridalloc.c:547: No RID Set DN - Remote >> RID Set creation needed > This sounds like your DC, didn't got an RID pool assigned from the RID > master. See > https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#RID_Master > for details. > > If you just have two DCs in your domain, then the first one has this > role, if you haven't transfered. > > Did you had more DCs in the past and maybe haven't demoted correctly and > the AD still thinks one of the missing DC...

...mba 4.2, but I see from a few discussions on the list that it is currently not possible to remove an AD DC using samba-tool because it does not delete all the FSMO roles. Can Windows tools be used to remove the DCs properly? The Samba Wiki page https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles#FSMO_role_management_using_the_Windows_GUI has a reference to using Windows tools to manage the FSMO roles, but the referenced page only says that are 5 roles. Does following this procedure to move the roles actually transfer all 7 roles? Is there some other way to properly remove...

...can't sync their time with that host. If you set an other/additional NTP server via GPO for that site, this isn't a problem anyway. The only real trouble I see is, that you can't login on pre-Win2k machines (NT4), if you still have some. https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles Regards, Marc

...and must be able to) perform any of them. Just that only one of them can hold that particular role at any given tome, so one is considered a master. They are explained in more detail here (it also tells you how to see which DC holds each role): https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles#The_five_FSMO_roles There is a wiki page on extensions, though there's not much detail there: https://wiki.samba.org/index.php/Samba_AD_Schema_Extenstions For the most part, things are no different than schema extensions on a Windows DC. Except you need to use different tools t...

...that perhaps this just need a little time to settle, but got the same results. Does this indicate a problem that I need to resolve? If so, how do I resolve it? Incidentally, the link for " FSMO role management using the Windows GUI" on https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles is broken. regards, John

Hello, I've set up 2 DCs. The first as been set up using the command: samba-tool domain provision ? The second, using the command: samba-tool domain join <realm> DC? As far as command return status say the commands went well. Using only the first DC, I can add windows client to the domain, I can manage users, everything seems to be ok. When adding the second DC, users database is

...rce4/dsdb/samdb/ldb_modules/ridalloc.c:547: No RID Set DN - >>>> Remote >>>> RID Set creation needed >>> This sounds like your DC, didn't got an RID pool assigned from the RID >>> master. See >>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#RID_Master >>> >>> for details. >>> >>> If you just have two DCs in your domain, then the first one has this >>> role, if you haven't transfered. >>> >>> Did you had more DCs in the past and maybe haven't demoted...

...: >> On 05/28/2015 04:18 AM, Rowland Penny wrote: >>> On 28/05/15 01:33, John Lewis wrote: >>>> On 05/26/2015 07:34 AM, Rowland Penny wrote: >>>>> On 26/05/15 03:05, John Lewis wrote: >>>>>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> I ran into that while trying to rebuild my LXC's as Debian 8. The >>>>>> proposed work arrounds assume you have...

...gt;>>>>> Remote >>>>>> RID Set creation needed >>>>> This sounds like your DC, didn't got an RID pool assigned from the >>>>> RID >>>>> master. See >>>>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#RID_Master >>>>> >>>>> >>>>> for details. >>>>> >>>>> If you just have two DCs in your domain, then the first one has this >>>>> role, if you haven't transfered. >>>>> >&g...

On 05/28/2015 04:18 AM, Rowland Penny wrote: > On 28/05/15 01:33, John Lewis wrote: >> On 05/26/2015 07:34 AM, Rowland Penny wrote: >>> On 26/05/15 03:05, John Lewis wrote: >>>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >>>> >>>> >>>> >>>> I ran into that while trying to rebuild my LXC's as Debian 8. The >>>> proposed work arrounds assume you have access to a Windows Domain >>>> controller in your do...

Hello guys, i use Samba 4 AD (4.2.1) for a small company. I use a domain which is a subdomain of our internal DNS domain ( directory.mydomain.io) Now my company will open several sites in different countries. I was wondering what is the actual limitations of Samba4 concerning the multi domain (i'm not a Windows guy and have very limited knowledge about AD). I read about trust relationship

...the OS of your new host puts the databases, provision a new domain in a test environment and see, where the databases are placed. About the FSMO roles, you usually don't have to worry. Make sure, that you understand what the five roles are for (https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#The_five_FSMO_roles). Some domain features aren't available, if the DC owning a role is temporary down. But in most situations, this isn't business critical. Like if the RID master is down, your can e. g. create only new objects (users, groups, etc), until your second DCs RI...

...> ERROR(ldb): Failed to add user 'usr1': - > ../source4/dsdb/samdb/ldb_modules/ridalloc.c:547: No RID Set DN - Remote > RID Set creation needed This sounds like your DC, didn't got an RID pool assigned from the RID master. See https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#RID_Master for details. If you just have two DCs in your domain, then the first one has this role, if you haven't transfered. Did you had more DCs in the past and maybe haven't demoted correctly and the AD still thinks one of the missing DCs is RID master? Please check, w...

...usr1': - >>> ../source4/dsdb/samdb/ldb_modules/ridalloc.c:547: No RID Set DN - Remote >>> RID Set creation needed >> This sounds like your DC, didn't got an RID pool assigned from the RID >> master. See >> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#RID_Master >> for details. >> >> If you just have two DCs in your domain, then the first one has this >> role, if you haven't transfered. >> >> Did you had more DCs in the past and maybe haven't demoted correctly and >> the AD still...

On Sun, 10 May 2015, Rowland Penny wrote: > It might not be as bad as what you think, do you have the two DNs ? > > ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b > "CN=Infrastructure,DC=DomainDnsZones,DC=europa,DC=icse,DC=cornell,DC=edu" Yes, I have both of the dn's. However, neither of them have an fSMORoleOwner attribute. That I will fix and report back.

On 28/05/15 01:33, John Lewis wrote: > On 05/26/2015 07:34 AM, Rowland Penny wrote: >> On 26/05/15 03:05, John Lewis wrote: >>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >>> >>> >>> I ran into that while trying to rebuild my LXC's as Debian 8. The >>> proposed work arrounds assume you have access to a Windows Domain >>> controller in your domain, and I don't. Is there anyth...