search for: scem_ad

...lessly so no urgency to update, until the huge security hole was announced the other week. Now I've got to get it done, but want the ailing server going right first - or should I just do the updates and then worry about the ailing server? Smb.conf: # Global parameters [global] workgroup = SCEM_AD realm = samba4.scem.westernsydney.edu.au netbios name = SAMBA4-10 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate # log level = 1 auth:2 # logs split per machine log file = /...

...ed the other week. Now I've got to get it >> done, but want the ailing server going right first - or should I just >> do the updates and then worry about the ailing server? >> >> Smb.conf: >> >> # Global parameters >> [global] >>     workgroup = SCEM_AD >>     realm = samba4.scem.westernsydney.edu.au >>     netbios name = SAMBA4-10 >>     server role = active directory domain controller >>     server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, >> winbindd, ntp_signd, kcc, dnsupdate >> >> # ...

...> security hole was announced the other week. Now I've got to get it > done, but want the ailing server going right first - or should I just > do the updates and then worry about the ailing server? > > Smb.conf: > > # Global parameters > [global] >     workgroup = SCEM_AD >     realm = samba4.scem.westernsydney.edu.au >     netbios name = SAMBA4-10 >     server role = active directory domain controller >     server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > winbindd, ntp_signd, kcc, dnsupdate > > #        log level = 1 auth:2...

Thanks Carlos, The thing is, that I did not upgrade the version of Samba - that is the next step, so the ports used would not have changed. I only updated the OS. > On 21/03/2018, at 10:04 PM, Carlos Alberto Panozzo Cunha <carlos.hollow at gmail.com> wrote: > > Hi, > I have same problem after update for samba. > I allow new ports in firewall. > >

...got to get it >>> done, but want the ailing server going right first - or should I >>> just do the updates and then worry about the ailing server? >>> >>> Smb.conf: >>> >>> # Global parameters >>> [global] >>>     workgroup = SCEM_AD >>>     realm = samba4.scem.westernsydney.edu.au >>>     netbios name = SAMBA4-10 >>>     server role = active directory domain controller >>>     server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, >>> drepl, winbindd, ntp_signd, kcc, dnsupdate...

...r Connection! Which is what I'd expect given that samba4-40 has issues. So, I thought that I'd try to demote samba4-40 and re-try the domain join. samb-tool domain demote -U administrator Using samba4-00.samba4.scem.westernsydney.edu.au as partner server for the demotion Password for [SCEM_AD\administrator]: Deactivating inbound replication Asking partner server samba4-00.samba4.scem.westernsydney.edu.au to synchronize from us Error while demoting, re-enabling inbound replication ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a DsReplicaSync for parti...

...d expect given that samba4-40 has issues. > > So, I thought that I'd try to demote samba4-40 and re-try the domain join. > > samb-tool domain demote -U administrator > > Using samba4-00.samba4.scem.westernsydney.edu.au as partner server for > the demotion > Password for [SCEM_AD\administrator]: > Deactivating inbound replication > Asking partner server samba4-00.samba4.scem.westernsydney.edu.au to > synchronize from us > Error while demoting, re-enabling inbound replication > ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a...