search for: repsto

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND and > OUTBOUND entries are coming later on after the ntd...

...neighbors be reflective of the KCC connection > objects? I would expect to find only inbound and outbound connections > for SOLDC1. Maybe I'm completely misinterpreting the intended behavior. the job of the samba_kcc script is to create the ntdsConnection objects. Afterward the repsFrom/repsTo attribute are created in accordance with the ntdsConnection objects (you can force the creation using samba-tool drs replicate although). You can check that the process is asynchronous when you join a new DC, the INBOUND and OUTBOUND entries are coming later on after the ntdsConnection object h...

...the attribute should be filled in, but for some reason this does not happen in samba when one is on a separate site, who can I contact who is working on kcc? It seems to me that this is the problem there, Rowland, what do you think? A precondition for event-driven replication involves server's repsTo abstract attribute, specified in [MS-DRSR] section 5.173. The repsTo abstract attribute is a sequence tuples, like repsFrom. Like repsFrom, each repsTo tuple contains a field uuidDsa that contains the objectGUID of an nTDSDSA object. The nTDSDSA object represents a DC as specified in section 6.1. I...

I was running samba 4.21 as a domain controller and now I see this situation , I have empty outbound neighbors, but if you look from the windows side, then this is the difference between windows controllers and samba, for some reason the repsTo attribute is not filled, for example, the configuration context, although windows controllers have both attributes fully filled, although they are the same there are some on the site, I also attach screenshots https://ibb.co/kyMDMpR https://ibb.co/CKL5BL9 https://ibb.co/fM4B3BV https://ibb.co/Pr9Jh...

...mba] showrepl is showing a deleted connexion Hi Jordi, > Solved ! > Thanks for the script. > In my case, it was just too late. > I have just found a ugly but working solution: > From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. > No more trouble with drs showrepl :-) Indeed, samba-tool drs showrepl show in fact the repsfrom/repsto attributes. They should be created / deleted by kcc. However I have seen lingering repsto attributes in the past too and had to ldbedit to cleanup the mess. Ldbdel'...

> > Wasn't aware of this. Thank you for the info. If I was to delete the > incorrect respsFrom/repsTo attributes, wouldn't the KCC just > regenerate them over time once the KCC check and ISTG check kicked in? As long as the topology doesn't change or DCs which are not bridgeheads do not go offline, there should be basically zero additional reps over time. How often they build up over...

...a > separate site > > On Fri, 11 Oct 2024 11:37:15 -0400 > James Atwell via samba <samba at lists.samba.org> wrote: > > > Do Samba logs show any errors with replication? > > Probably not, because in his initial post, he said replication was working, but > 'repsTo' wasn't populated. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba Hi Rowland, I seen that, but that appears to come from a screenshot using ADSI Edit when I reviewed...

...n Fri, 11 Oct 2024 11:37:15 -0400 > > James Atwell via samba <samba at lists.samba.org> wrote: > > > > > Do Samba logs show any errors with replication? > > > > Probably not, because in his initial post, he said replication was > working, but > > 'repsTo' wasn't populated. > > > > Rowland > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > Hi Rowland, > > I seen that, but that appears to come fro...

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania Envoyé : vendredi 22 janvier 2016 09:35 À : samba at lists.samba.org Objet : Re: [Samba] showrepl is showing a deleted connexio...

...n of my trouble: https://lists.samba.org/archive/samba/2015-December/196844.html KCC does not remove existing outdated kcc objects by itself (or didn't, if it has been changed in more recent versions). I had a chat with Douglas about this a while back. However it should remove your repsfrom/repsto attribute, unless you messed up the thing (I did once). I also had in the past repsfrom/repsto pointing to deleted NTDSDSA entries with the \0ADEL string. Before asking samba_kcc to buildup the connexions, you have to define the sites, put the DC in the correct site, remove the site from de de...

On Fri, 11 Oct 2024 11:37:15 -0400 James Atwell via samba <samba at lists.samba.org> wrote: > Do Samba logs show any errors with replication? Probably not, because in his initial post, he said replication was working, but 'repsTo' wasn't populated. Rowland

...1 Oct 2024 11:37:15 -0400 > James Atwell via samba <samba at lists.samba.org <mailto:samba at lists.samba.org> > wrote: > > > Do Samba logs show any errors with replication? > > Probably not, because in his initial post, he said replication was working, but > 'repsTo' wasn't populated. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba Hi Rowland, I seen that, but that appears to come from a screenshot using ADSI Edit when I reviewed...

...es Atwell via samba <samba at lists.samba.org <mailto: > samba at lists.samba.org> > wrote: > > > > > Do Samba logs show any errors with replication? > > > > Probably not, because in his initial post, he said replication was > working, but > > 'repsTo' wasn't populated. > > > > Rowland > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > Hi Rowland, > > I seen that, but that appears to come fro...

Hi Jordi, > Solved ! > Thanks for the script. > In my case, it was just too late. > I have just found a ugly but working solution: > From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. > No more trouble with drs showrepl :-) Indeed, samba-tool drs showrepl show in fact the repsfrom/repsto attributes. They should be created / deleted by kcc. However I have seen lingering repsto attributes in the past too and had to ldbedit to cleanup the mess. Ldbdel...

On 9/28/2016 1:25 AM, garming at catalyst.net.nz wrote: >> >> Wasn't aware of this. Thank you for the info. If I was to delete the >> incorrect respsFrom/repsTo attributes, wouldn't the KCC just >> regenerate them over time once the KCC check and ISTG check kicked in? > > As long as the topology doesn't change or DCs which are not > bridgeheads do not go offline, there should be basically zero > additional reps over time. How of...

...Could be what you?re >> experiencing when trying to synchronize naming context. >> >> >> >> One of your images shows the win2019-1 server as an outbound neighbor >> when previously there were none. I see you now have the configuration >> partition. Is the repsTo attribute now filled in? >> >> >> >> -James >> >> >> >> From: Adam Abramson <abramsona30 at gmail.com> >> Sent: Tuesday, October 15, 2024 3:49 AM >> To: james.atwell365 at gmail.com >> Cc: samba at lists.samba.org >> Subj...

...LDC1). I've > taken quite a few steps to rid the DCs of as many old repsFrom entries > as possible from within the KCC, but based on time delays and use of the > old KCC, this may not be enough in its current state to be equivalent to > a fresh domain. About the cleanup of repsFrom/repsTo, is the cleanup code included in 4.4.5 or only in 4.5? I have not yet found time to test that new version, but at least in 4.4.5, I still have the behavior where leftover repsFrom/repsTo are not automatically deleted. I hope to find time to test 4.5 next week. Cheers, Denis PS : sorry for my...

...<mailto:samba at lists.samba.org> <mailto:samba at lists.samba.org <mailto:samba at lists.samba.org> > > wrote: > > > Do Samba logs show any errors with replication? > > Probably not, because in his initial post, he said replication was working, but > 'repsTo' wasn't populated. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba Hi Rowland, I seen that, but that appears to come from a screenshot using ADSI Edit when I reviewed...

...11:20?AM Rowland Penny via samba < >> > samba at lists.samba.org> wrote: >> > >> >> On Wed, 9 Oct 2024 19:58:46 +0300 >> >> Adam Abramson <abramsona30 at gmail.com> wrote: >> >> >> >>> And how does replication occur if repsTo is not filled, does it turn >> >>> out that replication from a local DC should not occur to a remote DC >> >>> in another site, or am I not thinking about this quite correctly? >> >>> >> >> It is my understanding that replication does not rel...

...556.1.6.18.1;34:1.2.840.113556.1.6.1 8.2;35:1.2.840.113556.1.6.13.3;36:1.2.840.113556.1.6.13.4;37:1.3.6.1.1.1.1;38 :1.3.6.1.1.1.2;39:1.3.6.1.4.1.7165.4.1;40:1.3.6.1.4.1.7165.4.2;41:MY.CU.ST.OM.OID.1;42:MY.CU.ST.OM.OID.2 replUpToDateVector:: [...] repsFrom:: [...] repsFrom:: [...] repsFrom:: [...] repsTo:: [...] repsTo:: [...] repsTo:: [...] distinguishedName: CN=Schema,CN=Configuration,DC=mydomain,DC=org,DC=uk -- "If we knew what it was we were doing, it would not be called research, would it?" - Albert Einstein