search for: stroylandiya

On Wed, 21 Feb 2018 17:32:39 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > 1. >> 4. I can assure you that the join command works on 4.7.5, I did > it last Friday, albeit against a Samba AD DC. > > 2. Administrator is blocked, I unlocked he, tried it with him, but > the result of the same, not join(( > > > You can tell the...

On Wed, 21 Feb 2018 17:00:20 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > And why are you against Samba AD DC? I am definitely not against Samba AD DC, don't know where you got that from ? > > I do not have a user "Administrator" Well, where has the standard AD user 'Administrator' gone then ?? Have you removed it ? or...

On Tue, 20 Feb 2018 17:34:00 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > Not join(( > samba-tool domain join example.ru DC -Uvas.lah --password=password > --realm=EXAMPLE.RU --site=SITE2 -d 4 'example.ru' is your dns domain name, you should be using your netbios domain name 'EXAMPLE' Who is 'vas.lah' ? does the user h...

but I do not need a domain member ((( and another controller DC Flag compile %configure \ --enable-fhs \ --with-piddir=/run \ --with-sockets-dir=/run/samba \ --with-modulesdir=%{_libdir}/samba \ --with-pammodulesdir=%{_libdir}/security \ --with-lockdir=/var/lib/samba/lock \ --with-statedir=/var/lib/samba \

On Tue, 20 Feb 2018 14:10:16 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: It seems that the problem starts here: Could not find machine account in secrets database Yet near the top there is: Setting up secrets.ldb It seems that either 'secrets.ldb' doesn't contain the required info or 'vas.lah' doesn't have the required permissio...

...re outside the range > will be ignored. > > You also need to replace 'SAMDOM' with your workgroup name (not your > realm) -- Шигапов Денис системный администратор группы компаний "Стройландия" тел. 8 3532 997-777 доб. 8715 сот. 8 906 837-60-79 email denis.shigapov at stroylandiya.ru web https://stroylandiya.ru

the documentation says idmap config SAMDOM: backend = ad idmap config SAMDOM: schema_mode = rfc2307 idmap config SAMDOM: range = 10000-999999 Why the parameter idmap config SAMDOM: range = 10000-999999 if the guig uuid is defined on the side AD в Unix Attributes 15.06.2018 12:18, Rowland Penny via samba пишет: > If you did, then you must have completely misunderstood it, you need >

...as well as all dependencies for > samba. > > I mean what flags you set when ./configure --with-system-mitkrb5 etc > > В Ср, 21/02/2018 в 13:00 +0000, Rowland Penny via samba пишет: > > On Wed, 21 Feb 2018 17:32:39 +0500 > > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > > > 1. >> 4. I can assure you that the join command works on 4.7.5, I did > > > it last Friday, albeit against a Samba AD DC. > > > > > > 2. Administrator is blocked, I unlocked he, tried it with him, but > > > the result...

On Wed, 21 Feb 2018 10:45:43 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > Not join > samba-tool domain join EXAMPLE DC -Uvas.lah --password=password > --realm=EXAMPLE.RU --site=SITE2 find srv-site3-dc01 and the same > error occurred > > samba-tool domain join EXAMPLE DC -UAdministrator --password=password > --server=srv-dc01.example...

...er srv-dc01.example.ru Infrastructure owner srv-dc01.example.ru Setting update DNS in srv-dc01.example.ru: Security only В Пн, 19/02/2018 в 10:02 +0000, Rowland Penny via samba пишет: > On Mon, 19 Feb 2018 14:30:45 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > but I do not need a domain member ((( > > and another controller DC > > I never said you did ;-) > > The usage for 'samba-tool domain join is: > > samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] > [options] > &g...

Hi Can I set the same netbios name on multiple servers? more precisely why it does not work? server A [global]   netbios name = FS1   netbios aliases = fs fs.example.ru server B [global]   netbios name = FS2   netbios aliases = fs fs.example.ru

...,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru Deleted CN=SRV-SITE2- DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru В Пн, 19/02/2018 в 12:51 +0000, Rowland Penny via samba пишет: > On Mon, 19 Feb 2018 17:40:25 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > the first letter sent a journal > > > > как можно > > ========== log messages join DC============ > > ....more than a thousand lines of messages > > OK, run the command again without the '-d7' and post that output, I > am try...

On Mon, 19 Feb 2018 16:59:07 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > run samba-tool domain join example.ru DC --server=srv-dc01.example.ru > --username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 > > Failed to fetch machine account password for EXAMPLE from both > secrets.ldb (Could not find entry to match filter: &gt...

...recompiled packages from Fedora, as well as all dependencies for samba. I mean what flags you set when ./configure --with-system-mitkrb5 etc В Ср, 21/02/2018 в 13:00 +0000, Rowland Penny via samba пишет: > On Wed, 21 Feb 2018 17:32:39 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > 1. >> 4. I can assure you that the join command works on 4.7.5, I did > > it last Friday, albeit against a Samba AD DC. > > > > 2. Administrator is blocked, I unlocked he, tried it with him, but > > the result of the same, not join(( >...

the first letter sent a journal как можно ========== log messages join DC============ ....more than a thousand lines of messages ..... Replicated 3 objects (0 linked attributes) for DC=example,DC=ruCommitting SAM databaseDiscarding older DRS linked attribute update to member on . .......... ....more than a thousand lines of messages ...... Applying linked attribute change:dn:

...oin_add_objects() File "/usr/lib64/python2.7/site-packages/samba/join.py", line 668, in join_add_objects ctx.samdb.modify(m) В Вт, 20/02/2018 в 11:47 +0000, Rowland Penny via samba пишет: > On Tue, 20 Feb 2018 14:10:16 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > It seems that the problem starts here: > > Could not find machine account in secrets database > > Yet near the top there is: Setting up secrets.ldb > > It seems that either 'secrets.ldb' doesn't contain the required info or > 'vas.lah...

Yes, DNS runnig on Windows Server 2008R2(srv-dc01.example.ru) DNS integrated to AD in the domain management snap-in is created RODC, is it possible to translate it into a normal DC? What are the zones to check, example.ru? dig example.ru ; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7_4.2 <<>> example.ru ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode:

...indns_zone_dn) File "/usr/lib64/python2.7/site-packages/samba/samdb.py", line 939, in dns_lookup dns_partition=dns_partition) В Ср, 21/02/2018 в 08:59 +0000, Rowland Penny via samba пишет: > On Wed, 21 Feb 2018 10:45:43 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > Not join > > samba-tool domain join EXAMPLE DC -Uvas.lah --password=password > > --realm=EXAMPLE.RU --site=SITE2 find srv-site3-dc01 and the same > > error occurred > > > > samba-tool domain join EXAMPLE DC -UAdministrator --password=pass...

No I'm join samba to Windows DC(srv-dc01), he not server RODC >> If they do, try pre-creating the new DC in AD. in Windows manager console AD may create only RODC, it does not suit me run samba-tool domain join example.ru DC --server=srv-dc01.example.ru --username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 Failed to fetch machine account password for EXAMPLE from

...ation,DC=example,DC=ru > Deleted CN=SRV-SITE2- > DC1,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru > > В Пн, 19/02/2018 в 12:51 +0000, Rowland Penny via samba пишет: > > On Mon, 19 Feb 2018 17:40:25 +0500 > > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > > > the first letter sent a journal > > > > > > как можно > > > ========== log messages join DC============ > > > ....more than a thousand lines of messages > > > > OK, run the command again without the '-d7&...