search for: ntdsconnections

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

...thing very well, but still, as I understand it, in order for the sites to start communicating with each other, a linked site link is needed, and also if there is only one dc on the site, we tell him to act as breadgehead, which I did in the screenshots below, but this did not affect the creation of ntdsconnections, but as I understand it, replication somehow functions anyway, maybe there are some guesses why ntds connection is not being created? win2019-1 sites and services https://ibb.co/QMbFy4J https://ibb.co/7n28sZP https://ibb.co/gM2BC8r https://ibb.co/S3nfWfz https://ibb.co/dgMJs1h win2019-2 sites and s...

Hi LingPanda101, .... > > DC=domain,DC=local > site-c\DUNDC1 via RPC > DSA object GUID: a216e718-488f-4821-8d9c-a399e6789222 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=ForestDnsZones,DC=domain,DC=local > site-c\DUNDC2 via RPC

Hi all, We were trying the new --remove-other-dead-server coming with the 4.4.0rc. The domain is a brand new one with several DC added and two Windows clients, no user yet. Here is the smb.conf: [global] workgroup = SAMBA realm = SAMBADOMAIN.TLD netbios name = DC200 server role = active directory domain controller server services = -dns

Hi all, some background : ===== recently I had to cleanup a network of 1 DC on main office and 5 RODC on remote location. On one RODC for some reason there where still ntdsConnection objects with fromServer attribute pointing to servers GUID that do not exists anymore. Those fromServer attribute with spurious guid can be seen with ldbsearch but cannot be seen through ldap connexion, so I

...o start communicating with each other, >>> > a linked site link is needed, and also if there is >>> > only one dc on the site, we tell him to act as breadgehead, which I >>> > did in the screenshots below, but this did not affect the creation of >>> > ntdsconnections, but as I understand it, replication somehow functions >>> > anyway, maybe there are some guesses why ntds connection is not being >>> > created? >>> > win2019-1 sites and services >>> > https://ibb.co/QMbFy4J >>> > https://ibb.co/7n28sZP...

Hi, On 20/06/2018 20:38, Andrew Bartlett wrote: > To be clear, we don't replicate sysvol, you need to work that out > yourself (yes, this sucks). > Right, I'm doing that with Robocopy from the Windows DC initially, then with rsync. >> Is there any further preparation I need to do on the Windows server side >> to make a clean demotion possible? I can force the

...ating with each other, >>>> > a linked site link is needed, and also if there is >>>> > only one dc on the site, we tell him to act as breadgehead, which I >>>> > did in the screenshots below, but this did not affect the creation of >>>> > ntdsconnections, but as I understand it, replication somehow functions >>>> > anyway, maybe there are some guesses why ntds connection is not being >>>> > created? >>>> > win2019-1 sites and services >>>> > https://ibb.co/QMbFy4J >>>> > htt...

Hello Denis, Same problem here, playing with RODC Where have you found spurious entries ? sam.ldb ? I've tried searching < nTDSConnection > without success Thanks for your help

On 14/09/2020 10:39, Carlos Jesus wrote: > > > > samba-tool domain join MyDomain.lx.pt <http://MyDomain.lx.pt> DC > -U"MyDomain\administrator" > > Did you get any errors during the successful join ? > You do not seem to have any obvious errors, so can you run this ldbsearch on your Samba DC: ldbsearch -H /usr/local/samba/private/sam.ldb -b

Hi: I want to test migrating windows dc to samba dc (without considering sysvol replication). I installed brand new 2003R2, 2008R2, 2012R2 (with 2008R2 functional level). I compiled samba 4.7.7, 4.8.1 at centos 7.4. 1. I tried to join samba as DC to windows with command: samba-tool domain join samdom.example.com DC -U"SAMDOM\administrator"

> > On 13/09/2020 22:40, Carlos Jesus wrote: > > Hi Rowland, thank you for your help. > > I've added the include "/var/lib/samba/bind-dns/named.conf in > > /etc/bind/named.conf instead of named.conf.options. > Please don't do that, it isn't a good idea, use an 'include', that way > if something changes, it will still work. > > It IS an

Hi Pietro, I noticed this problem removing a Windows DC the other day. I've sent a patch to the samba-technical mailing list that should fix this. https://lists.samba.org/archive/samba-technical/2018-June/128703.html I also raised a bug for it: https://bugzilla.samba.org/show_bug.cgi?id=13484 The patch should hopefully be delivered soon. If you feel comfortable patching the Samba code

On 9/22/2016 6:31 PM, Garming Sam wrote: > On 23/09/16 00:59, lingpanda101 at gmail.com wrote: >> For clarification I'll add a few things. >> >> I initially deleted all the NTDS site links for each site and allowed >> the new KCC to create them. However it did not create them I believe >> correctly. By that I mean it defined what appeared to be a bridgehead

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS

Hello list, I run 2 Samba 4.7.1 RODCs. One in my Default-First-Site-Name and in additional Site where only Samba RODC exists. When I start samba_kcc on first RODC it run’s without errors. If I start samba_kcc on RODC in additional Site it fails with: /usr/local/samba/sbin/samba_kcc: Traceback (most recent call last): /usr/local/samba/sbin/samba_kcc: File

Hi, I'm preparing to move a small business environment away from Windows-based AD (Windows Server 2012R2, Domain and Forest downgraded to Win2008R2 level) to Samba. So far in my lab environment joining Samba as a DC works, including DNS and Sysvol replication. OS: Debian 9 Samba versions 4.5.12 (Debian repository) and 4.8.2 (latest release compiled from source), same behavior on both

Dear list, in this corona crisis a delivery of a AD to a location abroad takes longer than I expected. I demoted the AD which is in delivery with samba-tool domain demote --remove-other-dead-server=ADDC3 If I know trigger a samba-tool drs showrepl I still see him in the list: CN=Configuration,DC=example,DC=com ??? NTDS DN: CN=NTDS

Dear All, Need some help as I was trying to follow the guide below. https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC Until the steps of ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid and my ldbsearch reply with such a result. ldb: unable to dlopen /usr/lib64/samba/ldb/acl.so : /usr/lib64/ldb/libreplace.so: version

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of