search for: s4master

Dear all, Running samba-tool ldapcmp on my both DCs samba 4.1.7 leads to the output : Attributes found only in ldap://s4master: msDS-NcType serverState FAILED How to deal with this? I am missing something? [root at s4slave ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator domain Password for [TPLK\administrator]: * Comparing [DOMAIN] context... * Objects to be compared: 518...

On my site with samba 4.18 on centos 6: 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with this result msDS-NC Type failed : [root at s4master ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator Password for [TPLK\administrator]: * Comparing [DOMAIN] context... * Objects to be compared: 606 Comparing: 'CN=Builtin,DC=tplk,DC=loc' [ldap://s4master] 'CN=Builtin,DC=tplk,DC=loc' [ldap://s4slave] Attribu...

...nny241155 at gmail.com>: > On 16/07/15 07:19, Daniel Müller wrote: > >> On my site with samba 4.18 on centos 6: >> >> 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with >> this result msDS-NC Type failed : >> >> [root at s4master ~]# samba-tool ldapcmp ldap://s4master >> ldap://s4slave -Uadministrator >> Password for [TPLK\administrator]: >> >> * Comparing [DOMAIN] context... >> >> * Objects to be compared: 606 >> >> Comparing: >> 'CN=Builtin,DC=tplk,DC=loc' [lda...

On 16/07/15 07:19, Daniel Müller wrote: > On my site with samba 4.18 on centos 6: > > 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with this result msDS-NC Type failed : > > [root at s4master ~]# samba-tool ldapcmp ldap://s4master ldap://s4slave -Uadministrator > Password for [TPLK\administrator]: > > * Comparing [DOMAIN] context... > > * Objects to be compared: 606 > > Comparing: > 'CN=Builtin,DC=tplk,DC=loc' [ldap://s4master] > 'CN=Builtin,DC=tpl...

Hi all, I'm having a test AD domain composed with 2 DC, using Sernet's version of Samba 4.2.2. These two DC are Centos 6.6 (dc20) and Debian 7.8 (dc00). These two are using TDB as a backend (as we have no other choice at this stage of Samba's development). *dc20*:~# ldbsearch -H $sam '(objectclass=group)' dn | tail -3 # returned 27392 records # *27389* entries # 3 referrals

...> On 16/07/15 07:19, Daniel Müller wrote: >> >>> On my site with samba 4.18 on centos 6: >>> >>> 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' failed with >>> this result msDS-NC Type failed : >>> >>> [root at s4master ~]# samba-tool ldapcmp ldap://s4master >>> ldap://s4slave -Uadministrator >>> Password for [TPLK\administrator]: >>> >>> * Comparing [DOMAIN] context... >>> >>> * Objects to be compared: 606 >>> >>> Comparing: >>> '...

...roups but administrator. This worked until the update. Now the dcs mix up only!!! group ids with computer ids (security tab) root at s4slave exim]# getent group personal TPLK\personal:x:3000044: root at s4slave exim]# getent group reserve09$ TPLK\reserve09$:x:3000038:TPLK\reserve09$ [root at s4master ~]# getent group personal <----------------------------------- TPLK\personal:x:3000044: [root at s4master ~]# getent group reserve09$<----------------------------- TPLK\reserve09$:x:3000044:TPLK\reserve09$ Is there a way I can change the GID of reserve09$ back to hits originaly? ADUC--&g...

There is a strange behaviour having two DCs joined in one Domain concerning the [home] share. The [home] is fixed on a replicating gluster volume on both DC. Now creating the users directory with ADUC ex.: \\s4master\home\%username% would do the necessary and the directory is created on both dcs. On the first DC all working fine without any issue but on the second the user cannot login their home shares pointing to ex: \\s4slave\home\testneu The reason is a different UID!? EX.: on the first DC 3000030 on the se...

Hello all, we are currently running several samba 3 services to give CIFS access to shares (mostly homedirs). Well, access to the shares are controlled by our LDAP service (not AD, OpenLDAP). Our servers are using sssd + pam to check wether or not a user is allowed to mount the share (on some old servers we also use the pam_ldap module for pam). Now, we just want to run samba 4 as simply as

Dear all, how can I solve the issue with samba 4 bind_dlz , when a windows client is joined to the domain I get this error,ex.: 4master named[2814]: client 192.168.135.126#55873: update 'tplk.loc/IN' denied Jul 31 14:29:17 s4master named[2814]: samba_dlz: cancelling transaction on zone tplk.loc I can add the client to the dns by hand: samba-tool dns add s4master tplk.loc EDV2 A 192.168.135.126 -Uadministrator but this is no solution!? ----------------------------------------------- EDV Daniel M?ller Leitung EDV Tropen...

Hello again, no idea!? Both my DCs running now 4.3.4, but there is a strange behaviour, Ex.: First DC root at s4master wingroup]# id maurerp uid=90036(TPLK\maurerp) gid=100(users) Gruppen=100(users),3000048(TPLK\schreiben),3000038(TPLK\orbis),3000023(TPLK\ agfa),3000009(BUILTIN\users) Second DC [root at s4slave ~]# id maurerp uid=90036(TPLK\maurerp) gid=100(users) Gruppen=100(users),3000048(TPLK\aerzte08$),300003...

...t----- Von: Daniel M?ller [mailto:mueller at tropenklinik.de] Gesendet: Mittwoch, 15. April 2015 14:40 An: 'samba-bounces at lists.samba.org' Betreff: Samba 4.1.7 /Centos 6 with bind-dlz ERROR: fialed to find dnsRecord for DC Dear all, looking into my log file is bothering me today with: s4master named-sdb[19491]: failed to find dnsRecord for DC=tplk.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=tplk,DC=loc How can I fix it?? Greetings Daniel EDV Daniel M?ller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 T?bingen Tel.: 07071/206-463, Fax: 07071/206-499 eMa...

Hello all, I managed to install an extra DC. The first DC is comsrv01a with ip 192.168.0.200. I run Samba 4.1.9 and BIND 9.8.1-P1. The new DC is srv01ham with ip 172.16.32.222. I use the internal DNS. I run Samba 4.1.9. I use a permanent LAN-2-LAN VPN via my Draytek routers. The first DC (comsrv01a, 192.168.0.200) is my primary DNS server. This is configured in all my routers and DHCP servers.

Dear all, My , samba-tool domain level show shows me it is W2003: [root at s4master ~]# samba-tool domain level show Domain and forest function level for domain 'DC=tplk,DC=loc' Forest function level: (Windows) 2003 Domain function level: (Windows) 2003 Lowest function level of a DC: (Windows) 2008 R2 Can I raise without issues to W 2008 R2? Or should I stay with 2003?...

Hello! I have 2 Samba 4 server (4.3.3) as VC and other Samba 4 (4.3) as Fileserver, until now all ok, but I'm one doubts, how to validate that in both servers the domain IDs of the users of this identical, a simple way to do this validation? I wanted to make sure it is a DC die fileserver has to go 100%. thank you

Hello, Now that I have my Samba4 DC running great on CentOS6.4 I was wondering if somebody could help understand better how to install and configure Samba4 with winbind and PAM. I used the tutorial here: [http://wiki.samba.org/index.php/Samba4/Winbind](http://wiki.samba.org/index.php/Samba4/Winbind) This got me through to the point where "Using pam_winbind" starts.

...at tropenklinik.de] >Gesendet: Mittwoch, 15. April 2015 14:40 >An: 'samba-bounces at lists.samba.org' >Betreff: Samba 4.1.7 /Centos 6 with bind-dlz ERROR: fialed to >find dnsRecord >for DC > >Dear all, > >looking into my log file is bothering me today with: >s4master named-sdb[19491]: failed to find dnsRecord for >DC=tplk.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=tplk,DC=loc > >How can I fix it?? > >Greetings >Daniel > > > > >EDV Daniel M?ller > >Leitung EDV >Tropenklinik Paul-Lechler-Krankenhaus >Paul-Lechler-Str. 24...

On 09/02/16 09:26, Mueller wrote: > Hello again, > no idea!? > > Both my DCs running now 4.3.4, but there is a strange behaviour, > Ex.: > First DC > root at s4master wingroup]# id maurerp > uid=90036(TPLK\maurerp) gid=100(users) > Gruppen=100(users),3000048(TPLK\schreiben),3000038(TPLK\orbis),3000023(TPLK\ > agfa),3000009(BUILTIN\users) > > Second DC > > [root at s4slave ~]# id maurerp > uid=90036(TPLK\maurerp) gid=100(users) > Gruppe...

...affected samba . Can I do it ? Just checking AD shouldn't do anything other than tell you if you have a problem or not, so yes, check it. > > > Smb.conf on Master only global: > > [global] > workgroup = TPLK > realm = tplk.loc > netbios name = S4MASTER > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate > idmap_ldb:use rfc2307 = yes > follow symlinks = yes > wide links = Yes >...

Hi, yesterday i tried to join a domain as a DC with bind9 as dns-backend on Debian Wheezy with samba 4.1.11 from backports. I followed the tutorial in the wiki https://wiki.samba.org/index.php/Join_a_domain_as_a_DC but didn' find the instruction completely clear, so perhaps i made a mistake during the join. It is written there: "If you choose BIND as DNS backend, instead of the