Displaying 20 results from an estimated 408 matches for "msds".
Did you mean:
bsds
2014 Dec 10
1
Samba 4.1.7 ldapcmp msDS-NcType Error comparing DCs
Dear all,
Running samba-tool ldapcmp on my both DCs samba 4.1.7 leads to the output
:
Attributes found only in ldap://s4master:
msDS-NcType
serverState
FAILED
How to deal with this?
I am missing something?
[root at s4slave ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave
-Uadministrator domain
Password for [TPLK\administrator]:
* Comparing [DOMAIN] context...
* Objects to be compared: 518
Comparing:
...
2013 Feb 20
1
samba_upgradeprovision and msDS-SupportedEncryptionTypes / msDS-NcType
...ed all
the roles to the samba 4.0.0 dc. Finally I removed the Windows DC from
the domain.
Everything has been working well. Today I upgraded from samba 4.0.0 to
4.0.3 and ran samba_upgradeprovision --full. Initially this was
failing in update_present throwing an exception when attempting to
modify msDS-NcType and msDS-SupportedEncryptionTypes attributes which
didn't exist. I was able to get the upgradeprovision to run to
completion by removing these from the deltas
i.e.,
delta.remove('msDS-SupportedEncryptionTypes')
delta.remove('msDS-NcType')
Everyth...
2015 Jul 16
3
4.2.2 as AD with 2 DCs: database incoherency
On my site with samba 4.18 on centos 6:
'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with this result msDS-NC Type failed :
[root at s4master ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator
Password for [TPLK\administrator]:
* Comparing [DOMAIN] context...
* Objects to be compared: 606
Comparing:
'CN=Builtin,DC=tplk,DC=loc' [ldap://s4master]
'CN=Builtin,DC=tplk...
2017 Mar 23
4
[Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ?
...query can take up to 25 sec to perform !!
>
> We have added some indexes :
>
> [root at califix ~]# ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b
> @INDEXLIST
> # record 1
> dn: @INDEXLIST
> @IDXONE: 1
> @IDXVERSION: 2
> @IDXATTR: objectClass
> @IDXATTR: msDS-Cached-Membership-Time-Stamp
> @IDXATTR: userPrincipalName
> @IDXATTR: rpcNsInterfaceID
> @IDXATTR: fileExtPriority
> @IDXATTR: dnsRoot
> @IDXATTR: mSMQLabelEx
> @IDXATTR: dNSTombstoned
> @IDXATTR: msDS-PhoneticCompanyName
> @IDXATTR: msSFU30Domains
> @IDXATTR: dhcpType
&...
2023 Oct 22
1
Question about silos and Authentication policies
...client-pol,CN=AuthN Policies,CN=AuthN
Policy Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
"dn": "CN=winclient-pol,CN=AuthN Policies,CN=AuthN Policy
Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
"instanceType": 4,
"msDS-AuthNPolicyEnforced": true,
"msDS-ServiceTGTLifetime": 60,
"msDS-StrongNTLMPolicy": 0,
"name": "winclient-pol",
"objectCategory":
"CN=ms-DS-AuthN-Policy,CN=Schema,CN=Configuration,DC=example,DC=net",
"objectClass&...
2023 Oct 23
2
Question about silos and Authentication policies
...licies,CN=AuthN
> Policy Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
> ? "dn": "CN=winclient-pol,CN=AuthN Policies,CN=AuthN Policy
> Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
> ? "instanceType": 4,
> ? "msDS-AuthNPolicyEnforced": true,
> ? "msDS-ServiceTGTLifetime": 60,
> ? "msDS-StrongNTLMPolicy": 0,
> ? "name": "winclient-pol",
> ? "objectCategory":
> "CN=ms-DS-AuthN-Policy,CN=Schema,CN=Configuration,DC=example,DC=net",...
2023 Oct 23
2
Question about silos and Authentication policies
...gt; > Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
> > "dn": "CN=winclient-pol,CN=AuthN Policies,CN=AuthN Policy
> > Configuration,CN=Services,CN=Configuration,DC=example,DC=net",
> > "instanceType": 4,
> > "msDS-AuthNPolicyEnforced": true,
> > "msDS-ServiceTGTLifetime": 60,
> > "msDS-StrongNTLMPolicy": 0,
> > "name": "winclient-pol",
> > "objectCategory":
> > "CN=ms-DS-AuthN-
> > Policy,CN=Schema,CN=Con...
2014 Jan 17
0
Deleting ADDC Cadaver from AD
...on: CN=Schema,CN=Configuration,DC=jll,DC=local
invocationId: f706dd03-6c88-40b0-b3bd-32c95da471d3
showInAdvancedViewOnly: TRUE
name: NTDS Settings
objectGUID: cf7d8ac1-b0ae-4e72-9129-ed480ee38006
options: 1
systemFlags: 33554432
objectCategory: CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=jll,DC=local
msDS-Behavior-Version: 4
whenChanged: 20140116124910.0Z
hasMasterNCs: CN=Configuration,DC=jll,DC=local
hasMasterNCs: CN=Schema,CN=Configuration,DC=jll,DC=local
hasMasterNCs: DC=jll,DC=local
msDS-HasInstantiatedNCs: B:8:0000000D:CN=Configuration,DC=jll,DC=local
msDS-HasInstantiatedNCs:
B:8:0000000D:CN=Sc...
2015 Dec 29
3
Was not found in the schema 'msDS-SupportedEncryptionTypes'
...2008 R2
Lowest function level of the DC (Windows) 2008 R2
But it seems that Samba is not with all attributes of a Windows 2008.
Even try to join another Samba error appears
ERROR (ldb): uncaught exception - LDAP error 16 LDAP_NO_SUCH ATTRIBUTE -
<0000200 A: objectclass attrs: attribute "msDS-SupportedEncryptionTypes'
on entry 'CN = DC-LINUX-09, OU = Domain Controllers, DC = mydomain' was
not found in the schema> <!>
Any idea ?
S.O systems:
Both Ubuntu 14:04
Samba version 4.3.3 (the Current was made Upgrade 4.2 -> 4.3 -> 4.3.3)
2019 Dec 06
2
Account locked and delayed user data propagation...
...` si favelave...
> You cannot create an ldap filter using the above, you would have to filter
> the result of the ldap search.
I can confirm:
root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b DC=ad,DC=fvg,DC=lnf,DC=it '(&(objectClass=user)(sAMAccountName=gaio))' msDS-User-Account-Control-Computed
# record 1
dn: CN=gaio,OU=Users,OU=SanVito,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it
msDS-User-Account-Control-Computed: 16
[...]
# returned 4 records
# 1 entries
# 3 referrals
root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b DC=ad,DC=fvg,DC=lnf,DC=it &...
2019 Jun 25
2
Error determinigng PSOs in system [SEC=UNOFFICIAL]
UNOFFICIAL
Thanks Tim,
I was just wondering if my mistake was raising the functional-level. This confirms it.
This apparently also broke backup.
I cannot create the container, because the current schema (2003) doesn't support msDS-PasswordSettingsContainer.
It seems impossible (and dangerous) to update the schema.
I was given a reference to a thread about updating the schema but
- the thread didn't contain the actual ldf files
- the thread seemed to be an upgrade from 2003 R2 and I just have 2003.
Is it possible to...
2017 Jan 16
0
Initial replication halts with "The handle is invalid." (msDS-NC-Replica-Locations corrupted?)
...to an original,
long since demoted, DC. But these values appear in neither the results
of an ldbsearch or via ADSI edit.
[root at larkin27 ~]# ldbsearch --cross-ncs -H
/var/lib/samba/private/sam.ldb -b "CN=Configuration,DC=micore,DC=US" -
s sub CN=3ad6381a-9725-4e28-8157-a5a3fde68a43 msDS-NC-Replica-Locations
# record 1
dn: CN=3ad6381a-9725-4e28-8157-
a5a3fde68a43,CN=Partitions,CN=Configuration,DC=micore,DC=us
msDS-NC-
Replica-Locations: CN=NTDS Settings,CN=LARKIN26,CN=Servers,CN=Default-
First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us
msDS-NC-Replica-Locations: CN=NTDS...
2017 Jan 16
0
Initial replication halts with "The handle is invalid." (msDS-NC-Replica-Locations corrupted?)
...make
ls bin/samba-tool
[**2]
https://bugzilla.samba.org/show_bug.cgi?id=12297
>> [root at larkin27 ~]# ldbsearch --cross-ncs -H
>> /var/lib/samba/private/sam.ldb -b
>> "CN=Configuration,DC=micore,DC=US" - s sub
>> CN=3ad6381a-9725-4e28-8157-a5a3fde68a43 msDS-NC-Replica-Locations
>> # record 1
>> dn: CN=3ad6381a-9725-4e28-8157-
>> a5a3fde68a43,CN=Partitions,CN=Configuration,DC=micore,DC=us
>> msDS-NC-
>> Replica-Locations: CN=NTDS Settings,CN=LARKIN26,CN=Servers,CN=Default-
>> First-Site-Name,CN=Sites,CN=Configuratio...
2015 Jul 16
2
4.2.2 as AD with 2 DCs: database incoherency
...2015-07-16 9:37 GMT+02:00 Rowland Penny <rowlandpenny241155 at gmail.com>:
> On 16/07/15 07:19, Daniel Müller wrote:
>
>> On my site with samba 4.18 on centos 6:
>>
>> 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with
>> this result msDS-NC Type failed :
>>
>> [root at s4master ~]# samba-tool ldapcmp ldap://s4master
>> ldap://s4slave -Uadministrator
>> Password for [TPLK\administrator]:
>>
>> * Comparing [DOMAIN] context...
>>
>> * Objects to be compared: 606
>>
>> Co...
2017 Jan 16
2
Initial replication halts with "The handle is invalid." (msDS-NC-Replica-Locations corrupted?)
...moted, DC. But these values appear in neither the
> results of an ldbsearch or via ADSI edit.
>
> [root at larkin27 ~]# ldbsearch --cross-ncs -H
> /var/lib/samba/private/sam.ldb -b
> "CN=Configuration,DC=micore,DC=US" - s sub
> CN=3ad6381a-9725-4e28-8157-a5a3fde68a43 msDS-NC-Replica-Locations
>
> # record 1
> dn: CN=3ad6381a-9725-4e28-8157-
> a5a3fde68a43,CN=Partitions,CN=Configuration,DC=micore,DC=us
> msDS-NC-
> Replica-Locations: CN=NTDS Settings,CN=LARKIN26,CN=Servers,CN=Default-
> First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us...
2017 Mar 23
1
[Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ?
...ere was not performance issues.
A simple LDAP query can take up to 25 sec to perform !!
We have added some indexes :
[root at califix ~]# ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b @INDEXLIST
# record 1
dn: @INDEXLIST
@IDXONE: 1
@IDXVERSION: 2
@IDXATTR: objectClass
@IDXATTR: msDS-Cached-Membership-Time-Stamp
@IDXATTR: userPrincipalName
@IDXATTR: rpcNsInterfaceID
@IDXATTR: fileExtPriority
@IDXATTR: dnsRoot
@IDXATTR: mSMQLabelEx
@IDXATTR: dNSTombstoned
@IDXATTR: msDS-PhoneticCompanyName
@IDXATTR: msSFU30Domains
@IDXATTR: dhcpType
@IDXATTR: ou
@IDXATTR: gidNumber
@...
2024 Apr 03
1
SAMBA 4.20 - function level upgrade
...But command samba-tool domain
schemaupgrade --schema=2019 ends with error.
Could I ask you check my progress or find solution?
samba-tool domain schemaupgrade --schema=2019
Temporarily overriding 'dsdb:schema update allowed' setting
Applying Sch70.ldf updates...
Unable to find attribute msDS-DeviceMDMStatus in the schema
5 changes applied
Applying Sch71.ldf updates...
7 changes applied
Applying Sch72.ldf updates...
5 changes applied
Applying Sch73.ldf updates...
5 changes applied
Applying Sch74.ldf updates...
../../source4/dsdb/schema/schema_init.c:816: name == NULL in
CN=ms-DS-Key-Cr...
2018 Mar 29
2
How to change Domain password as normal user?
...onto the AD/DC as the Domain Administrator and do 'samba-tool user setpassword'.
> >
> > Suggestions on how I can get the expiration back to the 'Maximum password age' value?
>
> This sounds very strange. Are you sure the password changed on the DC?
> Did the msDS-KeyVersionNumber change, did the pwdLastSet change?
Yes, I know it changed on the DC because I was able to use the new password to log into another
Windows workstation, and I use the domain credential to log into an internal web application.
All these worked with the new PW. Later, I checked the...
2017 Mar 27
4
[Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ?
...query can take up to 25 sec to perform !!
>
> We have added some indexes :
>
> [root at califix ~]# ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b
> @INDEXLIST
> # record 1
> dn: @INDEXLIST
> @IDXONE: 1
> @IDXVERSION: 2
> @IDXATTR: objectClass
> @IDXATTR: msDS-Cached-Membership-Time-Stamp
> @IDXATTR: userPrincipalName
> @IDXATTR: rpcNsInterfaceID
> @IDXATTR: fileExtPriority
> @IDXATTR: dnsRoot
> @IDXATTR: mSMQLabelEx
> @IDXATTR: dNSTombstoned
> @IDXATTR: msDS-PhoneticCompanyName
> @IDXATTR: msSFU30Domains
> @IDXATTR: dhcpType
&...
2024 Apr 10
1
SAMBA 4.20 - function level upgrade
...Authentication
>> Policies
>> direcly copied from console[root at vorvan ~]# samba-tool domain
>> schemaupgrade --schema=2019
>> Temporarily overriding 'dsdb:schema update allowed' setting
>> Applying Sch70.ldf updates...
>> Unable to find attribute msDS-DeviceMDMStatus in the schema
>> 5 changes applied
>> Applying Sch71.ldf updates...
>> 7 changes applied
>> Applying Sch72.ldf updates...
>> 5 changes applied
>> Applying Sch73.ldf updates...
>> 5 changes applied
>> Applying Sch74.ldf updates....