search for: pfdc1

On Wed, 24 Aug 2016 11:56:06 -0400 lingpanda101--- via samba <samba at lists.samba.org> wrote: > > I know you asked recently but I do have them from a long ago > provisioned DC as reference. > > If you have them, I think you may be the only one who does ;-) A bit of searching doesn't turn up anything about _ldaps records, just _ldap. Rowland

...onse: request 0x7fb3edea0eb0 show_message() Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:54937 ;; flags: qr aa rd ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;domain.local.INSOA ;; ANSWER SECTION: domain.local.3600INSOApfdc1.domain.local. hostmaster.domain.local. 432 900 600 86400 3600 Found zone name: domain.local The master is: pfdc1.domain.local start_gssrequest 27-Oct-2015 13:15:15.443 Failure initiating security context: GSSAPI error: Major = Unspecified GSS failure.Minor code may provide more information,...

...ing to query. I still think I have a issue with ldconfig. I started over and used 4.5.2 as well. I'm going to switch to Debian 8.6 just to see if I get different results. *root at DR210:~# /usr/local/samba/bin/wbinfo --ping-dc* checking the NETLOGON for domain[DOMAIN] dc connection to "pfdc1.domain.local" succeeded *root at DR210:~# cat /var/log/samba/log.wb-DR210* [2016/12/08 15:48:28.989794, 1] ../source3/passdb/pdb_tdb.c:543(tdbsam_open) tdbsam_open: Converting version 0.0 database to version 4.0. [2016/12/08 15:48:28.990276, 1] ../source3/passdb/pdb_tdb.c:304(tdbsam_co...

...ovisioned DC as reference. >> >> > If you have them, I think you may be the only one who does ;-) > > A bit of searching doesn't turn up anything about _ldaps records, just > _ldap. > > Rowland > > My domain was provisioned from 4.0. Here is my info. root at pfdc1:~# samba -V Version 4.4.5 root at pfdc1:~# uname -a Linux pfdc1.domain.local 3.2.0-106-generic #147-Ubuntu SMP Tue Jun 28 21:27:24 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Using Internal DNS. From Windows command line I typed Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Cor...

On Thu, 8 Dec 2016 13:54:17 -0500 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 12/8/2016 1:14 PM, Rowland Penny via samba wrote: > > On Thu, 8 Dec 2016 13:03:49 -0500 > > lingpanda101 via samba <samba at lists.samba.org> wrote: > > > >> On 12/8/2016 12:52 PM, Rowland Penny via samba wrote: > >>> On Thu, 8 Dec 2016 12:27:20

On 5/17/2020 1:43 PM, Rowland penny via samba wrote: > On 17/05/2020 16:54, James Atwell wrote: >> >> Strange results on a domain member >> >> jatwell at osticket:~$ net ads user info administrator -U administrator >> Enter administrator's password: >> create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for >> file

...bject GUID: 3c08db42-9416-40df-99ad-6d0c0ec554a6 Last attempt @ Fri Sep 23 14:41:00 2016 EDT was successful 0 consecutive failure(s). Last success @ Fri Sep 23 14:41:00 2016 EDT DC=DomainDnsZones,DC=domain,DC=local Default-First-Site-Name\PFDC1 via RPC DSA object GUID: acc2392f-9567-450f-bcb3-4fb1034b8753 Last attempt @ Fri Sep 23 14:40:58 2016 EDT was successful 0 consecutive failure(s). Last success @ Fri Sep 23 14:40:58 2016 EDT CN=Schema,CN=Configuration,DC=domain,DC...

...9ad-6d0c0ec554a6 > Last attempt @ Fri Sep 23 14:41:00 2016 EDT was > successful > 0 consecutive failure(s). > Last success @ Fri Sep 23 14:41:00 2016 EDT > > DC=DomainDnsZones,DC=domain,DC=local > Default-First-Site-Name\PFDC1 via RPC > DSA object GUID: acc2392f-9567-450f-bcb3-4fb1034b8753 > Last attempt @ Fri Sep 23 14:40:58 2016 EDT was > successful > 0 consecutive failure(s). > Last success @ Fri Sep 23 14:40:58 2016 EDT > > CN=Sche...

.... However I'm a bit tentative to make changes to my smb.conf without doing damage and asking for help from the list. I have 6 DC's. One holds all the FMSO roles. This is the smb.conf from that DC. [global] workgroup = DOMAIN realm = DOMAIN.LOCAL netbios name = PFDC1 server role = active directory domain controller dns forwarder = 8.8.8.8 idmap_ldb:use rfc2307 = Yes log level = 0 logging = syslog at 1 file debug uid = Yes debug pid = Yes allow dns updates = nonsecure load printe...

...Name,CN=Sites,CN=Configuration,DC=domain,DC=local TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection! Connection -- Connection name: 1244834d-74e3-4a5a-981e-88367d7f1a36 Enabled : TRUE Server DNS name : pfdc1.domain.local Server DN name : CN=NTDS Settings,CN=PFDC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection! Connection -- Connection...

On 9/21/2016 11:32 PM, Garming Sam wrote: > I would have assumed that deleting all the NTDS connections for all the > DCs would have remedied this issue. I'll write a patch to try to avoid > this error in any case. > > Ignoring this error and answering your earlier question, it's often hard > to tell if the KCC is doing what is expected or not. To figure that out, >

...b.conf without doing damage and asking for help >> from the list. I have 6 DC's. One holds all the FMSO roles. This is >> the smb.conf from that DC. >> >> [global] >> workgroup = DOMAIN >> realm = DOMAIN.LOCAL >> netbios name = PFDC1 >> server role = active directory domain controller >> dns forwarder = 8.8.8.8 >> idmap_ldb:use rfc2307 = Yes >> >> log level = 0 >> logging = syslog at 1 file >> debug uid = Yes >> debug pid = Y...

...ze, but use '--force' (this stops a useless transfer attempt). >>> >>> Rowland >>> >>> >>>> >>>> -James >>>> >>> >>> >> So I suppose I still have trouble with my domain. >> >> root at pfdc1:/# net ads user info administrator -U administrator >> >> Enter administrator's password: >> kerberos_kinit_password SAMBA at SAMBA.LOCAL failed: Client not found in >> Kerberos database >> >> kerberos_kinit_password SAMBA at SAMBA.LOCAL failed: Client not f...

...t; Thanks. >> > Simple answer, if you can transfer, then transfer, if not, then seize, > but use '--force' (this stops a useless transfer attempt). > > Rowland > > >> >> -James >> > > So I suppose I still have trouble with my domain. root at pfdc1:/# net ads user info administrator -U administrator Enter administrator's password: kerberos_kinit_password SAMBA at SAMBA.LOCAL failed: Client not found in Kerberos database kerberos_kinit_password SAMBA at SAMBA.LOCAL failed: Client not found in Kerberos database

...used by BIND ----------------------------------------------------------------------- cat /usr/local/samba/etc/smb.conf # Global parameters [global] workgroup = DOMAIN realm = DOMAIN.LOCAL // I know about using .local as a domain isn't ideal netbios name = PFDC1 server role = active directory domain controller dns forwarder = 75.75.75.75 208.67.222.222 idmap_ldb:use rfc2307 = Yes server services = -dns log file = /usr/local/samba/var/log.samba log level = 1 auth_audit:3 auth_json_audit:3 debug...

...,DC=domain,DC=local > TransportType: RPC > options: 0x00000001 > Warning: No NC replicated for Connection! > Connection -- > Connection name: 1244834d-74e3-4a5a-981e-88367d7f1a36 > Enabled : TRUE > Server DNS name : pfdc1.domain.local > Server DN name : CN=NTDS > Settings,CN=PFDC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local > TransportType: RPC > options: 0x00000001 > Warning: No NC replicated for Connection! > Connecti...

On Tue, 6 Dec 2016 14:52:20 -0500 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 12/6/2016 1:49 PM, Rowland Penny via samba wrote: > > On Tue, 6 Dec 2016 19:38:49 +0100 > > Marc Muehlfeld via samba <samba at lists.samba.org> wrote: > > > >> Hello, > >> > >> Am 06.12.2016 um 19:15 schrieb lingpanda101 via samba: >

...nice if someone could post what the default ACL should be, in hopes of  resolving this issue in the future where I may actually need to keep the GPO. I did decide to get the ACL on the offending GPO in hopes someone with more knowledge then I could possibly spot the issue. See below. root at pfdc1:~# samba-tool ntacl get /usr/local/samba/var/locks/sysvol/domain.local/Policies/{AB0F05DC-D6EB-44B3-BED1-3E2F19F9A9AC} lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[global]&qu...

...crosoft DNS snap in tool. Shouldn't the client update it's existing record and not create a new one? Is this considered normal behavior at the moment? Samba 4.1.13 Ubuntu 12.04 # Global parameters [global] workgroup = DOMAIN realm = DOMAIN.LOCAL netbios name = PFDC1 server role = active directory domain controller dns forwarder = 8.8.8.8 idmap_ldb:use rfc2307 = yes # Debug Logging Information log level = 3 log file = /usr/local/samba/var/logs/log.%m max log size = 2000 # Don't allow...

...e /usr/local/samba/etc/smb.conf.client-%I ERROR: Unable to load default file Samba does find the file as evident by the log being created and using the appropriate parameters. pdc1:~# ls /usr/local/samba/etc/ lmhosts rsyncd.secret smb.conf smb.conf.client-172.16.232.30 smb.conf.client-debug @pfdc1:~# ls -l /var/log/samba/ total 22468 -rw-r--r-- 1 root root 85125 Oct 6 08:49 log.0.0.0.0 -rw-r--r-- 1 root root 2115 Oct 6 08:39 log.172.16.232.25 -rw-r--r-- 1 root root 22905810 Oct 6 08:43 log.172.16.232.30 -rw-r--r-- 1 root root 705 Oct 6 08:39 log.172.16.232.97 Created sym lin...