search for: testdc2

...idmap_ldb:use rfc2307 = yes load printers = no printing = bsd printcap name = /dev/null disable spoolss = yes [netlogon] path = /var/lib/samba/sysvol/sambadom.example.com/scripts read only = No [sysvol] path = /var/lib/samba/sysvol read only = No root at testdc2:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = SAMBADOM realm = SAMBADOM.EXAMPLE.COM netbios name = TESTDC2 server role = active directory domain controller dns forwarder = 8.8.8.8 idmap_ldb:use rfc2307 = yes load printers = no printing =...

Thank you Rowland - really clear example and explanation. >From your example, this is what I would see, once the RFC2307 attributes had been added: root at testdc2:~# getent passwd user2 user2:*:3000015:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false root at testdc2:~# net cache flush root at testdc2:~# getent passwd user2 user2:*:10004:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false [ ... wait some period of time ... ] root at testdc2:~# getent passwd user2 us...

On 14/06/15 03:20, Jonathan Hunter wrote: > Thank you Rowland - really clear example and explanation. > > From your example, this is what I would see, once the RFC2307 > attributes had been added: > > root at testdc2:~# getent passwd user2 > user2:*:3000015:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false > root at testdc2:~# net cache flush > root at testdc2:~# getent passwd user2 > user2:*:10004:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false > [ ... wait some period of time ... ] > root at tes...

Am 17.12.2015 um 16:10 schrieb Rowland penny: > On 17/12/15 14:56, Ole Traupe wrote: >> >> >> Am 17.12.2015 um 15:33 schrieb Rowland penny: >>> On 17/12/15 13:54, Ole Traupe wrote: >>>> Rowland, thank you, but before we do that: >>>> >>>> - what now with the 'gc' record? 2nd DC yes or no? >>> >>> Which one

...in only existed to try and find out why the second DC didn't have a NS record in the SOA and uses the internal dns. Both of the DCs have the relevant line in the hosts file: root at testdc1:~# nano /etc/hosts 127.0.0.1 localhost 192.168.0.240 testdc1.home.lan testdc1 root at testdc2:~# nano /etc/hosts 127.0.0.1 localhost 192.168.0.241 testdc2.home.lan testdc2 Both of the DCs point to each other as their nameserver: root at testdc1:~# nano /etc/resolv.conf search home.lan nameserver 192.168.0.241 nameserver 192.168.0.240 root at testdc2:~# nano /etc/resolv....

...lt from source with samba-4.7.1; and the file server, installed winbind, smb and nmb from CentOS repos. My problem is after bringing up the second domain controller and successfully joining it to the domain, as the wiki directs I tried to run samba-tool ntacl sysvolreset and this fails. [root at testdc2 private]# samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime): uncaught exception - (-1073741823, '{Operation Failed} The requested operation was unsuccessful.') File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", lin...

On 13/06/15 11:00, Jonathan Hunter wrote: > On 13 June 2015 at 09:34, buhorojo <buhorojo.lcb at gmail.com> wrote: >>> On 12 June 2015 at 08:55, Jonathan Hunter <jmhunter1 at gmail.com> wrote: >>> Sadly, even though sssd is now running and I'm no longer reliant on >>> winbind, the rest of samba doesn't seem to be taking notice of these >>>

...gt; second DC didn't have a NS record in the SOA and uses the internal dns. > > Both of the DCs have the relevant line in the hosts file: > > root at testdc1:~# nano /etc/hosts > > 127.0.0.1 localhost > 192.168.0.240 testdc1.home.lan testdc1 > > root at testdc2:~# nano /etc/hosts > > 127.0.0.1 localhost > 192.168.0.241 testdc2.home.lan testdc2 > > > Both of the DCs point to each other as their nameserver: > > root at testdc1:~# nano /etc/resolv.conf > > search home.lan > nameserver 192.168.0.241 > nameser...

...e Policies folder from DC1 to DC2 because I thought this might be the missing folder, but this also does not help. > > Stephan OK, the above results look ok to me, so I had a look on a test setup I have up and running and on the second DC (running sernet-samba 4.2.1) I found this: root at testdc2:~# ls -la /var/lib/samba/sysvol/ total 12 drwxr-xr-x 3 root root 4096 May 12 14:40 . drwxr-xr-x 10 root root 4096 May 26 09:55 .. drwxr-xr-x 3 root root 4096 May 12 14:40 sambadom.example.com root at testdc2:~# getfacl /var/lib/samba/sysvol getfacl: Removing leading '/' from absolute path...

...emplate shell = /bin/bash template homedir = /share/%U [netlogon] path = /usr/local/samba/var/locks/sysvol/samdom.testing.com/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No Second DC: [global] netbios name = TESTDC2 realm = SAMDOM.TESTING.COM server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use rfc2307 = yes tls enabled = yes template shell = /bin/bash template homedir = /share/%U [netlogon] path = /usr/local/samba/...

> Gesendet: Dienstag, 26. Mai 2015 um 13:31 Uhr > Von: "Rowland Penny" <rowlandpenny at googlemail.com> > An: "Stephan Mattecka" <ste-fun_s at gmx.de> > Cc: samba at lists.samba.org > Betreff: Re: Aw: Re: [Samba] [SAMBA] Problems with joining a second DC to AD > > On 26/05/15 10:42, Stephan Mattecka wrote: > > Gesendet: Donnerstag, 21. Mai

...nd the file server, installed winbind, smb and nmb from CentOS > repos. > > My problem is after bringing up the second domain controller and > successfully joining it to the domain, as the wiki directs I tried to > run samba-tool ntacl sysvolreset and this fails. > > [root at testdc2 private]# samba-tool ntacl sysvolreset > open: error=2 (No such file or directory) > ERROR(runtime): uncaught exception - (-1073741823, '{Operation Failed} > The requested operation was unsuccessful.') > File > "/usr/local/samba/lib64/python2.7/site-packages/samba/netc...

On 04/12/15 16:20, Ole Traupe wrote: > >> Hi, If you can bear with me, I am trying to get the join to add the >> NS for the joining DC to the SOA, I believe I may be near to get this >> working (after leading myself down the garden path, what I tried >> previously, didn't work), once it does, I should be able answer your >> question, my test domain is using

...es) 600 ; retry (10 minutes) 86400 ; expire (1 day) 3600 ; minimum (1 hour) ) ;; Query time: 28 msec ;; SERVER: 192.168.0.241#53(192.168.0.241) ;; WHEN: Thu Dec 10 11:35:46 GMT 2015 ;; MSG SIZE rcvd: 81 root at testdc2:~# dig SOA +multiline home.lan ; <<>> DiG 9.9.5-4~bpo70+1-Debian <<>> SOA +multiline home.lan ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23755 ;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL...

...inutes) > 86400 ; expire (1 day) > 3600 ; minimum (1 hour) > ) > > ;; Query time: 28 msec > ;; SERVER: 192.168.0.241#53(192.168.0.241) > ;; WHEN: Thu Dec 10 11:35:46 GMT 2015 > ;; MSG SIZE rcvd: 81 > > root at testdc2:~# dig SOA +multiline home.lan > > ; <<>> DiG 9.9.5-4~bpo70+1-Debian <<>> SOA +multiline home.lan > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23755 > ;; flags: qr aa rd ra ad; QUERY: 1, ANSWER...

yes i realized that there is something wrong with BIND9_FLATFILE while encountering with samba_upgradedns -h which doesn't show BIND9_FLATFILE Any help on*drs repl* not working i think it is pointing to wrong FQDN how do i correct that ? > >/ Not able to to view replication.(samba-tool drs showrepl) > />/ > />/ > />/ [root at dc2

Hai, Ah, ok, wel, yeah, i was missing the NS on the SOA. This is imo a bug, i dont know it this is by design for samba, so maybe a samba dev can answere this since every joined DC should have a NS record on the SOA as far as i know, but thats my opinion and i can be wrong here. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at

...; expire (1 day) >> 3600 ; minimum (1 hour) >> ) >> >> ;; Query time: 28 msec >> ;; SERVER: 192.168.0.241#53(192.168.0.241) >> ;; WHEN: Thu Dec 10 11:35:46 GMT 2015 >> ;; MSG SIZE rcvd: 81 >> >> root at testdc2:~# dig SOA +multiline home.lan >> >> ; <<>> DiG 9.9.5-4~bpo70+1-Debian <<>> SOA +multiline home.lan >> ;; global options: +cmd >> ;; Got answer: >> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23755 >> ;; flags: qr aa rd...