search for: tool_ldapcmp

Hi all, I'm having a test AD domain composed with 2 DC, using Sernet's version of Samba 4.2.2. These two DC are Centos 6.6 (dc20) and Debian 7.8 (dc00). These two are using TDB as a backend (as we have no other choice at this stage of Samba's development). *dc20*:~# ldbsearch -H $sam '(objectclass=group)' dn | tail -3 # returned 27392 records # *27389* entries # 3 referrals

...ome back to a > coherent state? > Could we tdbdump the DB on one host then tdbrestore it on the other? > > Kindly regards, > > mathias What does 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' show ? More info, see here: https://wiki.samba.org/index.php/Samba-tool_ldapcmp Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

...og back in. Try authenticating to the netlogon share from each of your DC's with one of the affected usernames. smbclient //localhost/netlogon -Uusername -c 'ls' I would also check replication is working as expected and all databases match. https://wiki.samba.org/index.php/Samba-tool_ldapcmp The biggest change you made was upgrading the schema. Did you ensure to include ad dc functional level = 2016 in the smb.conf file on all your DC's? Without log files its hard to troubleshoot. You need to pull the authentication attempt failure to analyze. Do you have other services that u...

...come back to a coherent > state? > Could we tdbdump the DB on one host then tdbrestore it on the other? > > Kindly regards, > > mathias What does 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' show ? More info, see here: https://wiki.samba.org/index.php/Samba-tool_ldapcmp Rowland

...#39;m doing some labs about SAMBA4 AD DC with 4 domain controllers (03 Linux Debian 8 x64 with SAMBA 4.3.1 installed by souce packeage and 01 Windows Server 2008 R2 Standard x64 to study for LPIC3 certification exam.) About the "samba-tool ldapcmp" (https://wiki.samba.org/index.php/Samba-tool_ldapcmp), in my lab, even applying the indicated filters I keeping getting failed comparison of LDAP Servers. I observed that inserting 2 more items in the filter errors do not appear. The additional items are: whenChanged msDS-HasInstantiatedNCs I wonder if these items should also be excluded from com...

...private/secrets.keytab. Are you also aware that you can find Debian Samba packages here: http://apt.van-belle.nl/ Is Apparmor running and blocking access to the keytab ? Have you tried running some of the basic tests on both DC's ? samba-tool dbcheck https://wiki.samba.org/index.php/Samba-tool_ldapcmp Rowland >I said that when I join the domain, restarting the > machine takes the GPO, the other restart does not take the gpo > computer. Thanks for your help > Not entirely sure what the above means, is it that a GPO is applied to one computer but not another, or only one GPO is ap...

...en tdbrestore it on the other? >>> >>> Kindly regards, >>> >>> mathias >>> >> What does 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' show >> ? >> >> More info, see here: https://wiki.samba.org/index.php/Samba-tool_ldapcmp >> >> Rowland >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >> > Stop worrying, all the failing attributes are non replicating attributes,...

...e? >> Could we tdbdump the DB on one host then tdbrestore it on the other? >> >> Kindly regards, >> >> mathias > What does 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' show ? > > More info, see here: https://wiki.samba.org/index.php/Samba-tool_ldapcmp > > Rowland > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > Stop worrying, all the failing attributes are non replicating attributes, this has been fixed in later samba4 versions...

...gt;>> >>>> Kindly regards, >>>> >>>> mathias >>>> >>> What does 'samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator' show >>> ? >>> >>> More info, see here: https://wiki.samba.org/index.php/Samba-tool_ldapcmp >>> >>> Rowland >>> >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >>> >> Stop worrying, all the failing att...

compiled samba version : 4.8.5 and my distribution is: debian stretch 9.6 I said that when I join the domain, restarting the machine takes the GPO, the other restart does not take the gpo computer. Thanks for your help Le mar. 26 févr. 2019 à 17:11, Rowland Penny via samba < samba at lists.samba.org> a écrit : > On Tue, 26 Feb 2019 16:37:39 +0100 > David Jehin <bedou210977 at

On Mon, 2023-11-20 at 13:43 -0500, James Atwell via samba wrote: > > > > -----Original Message----- > > From: samba <samba-bounces at lists.samba.org> On Behalf Of Ray > > Klassen via > > samba > > Sent: Monday, November 20, 2023 1:09 PM > > To: samba at lists.samba.org > > Subject: Re: [Samba] windows workstations needing reboot to > >

>> >> I was able to get replication working again by deleting DNS records that were conflicting in LDAP. >> >> Used ldapcmp tool to find conflicts >> https://wiki.samba.org/index.php/Samba-tool_ldapcmp >> > > Ok, the problem seems to be back again. > > Ubuntu 16.04, samba 4.9.3 > > I’ve checked with: samba-tool ldapcmp > between dc1 and every other dc[2-6] > > ldapcmp shows no errors in any combination mentioned above > > Running this command: >...

...; > > > > > > > > > > > > > > > > > > > > I would also check replication is working as expected and all > > > > > databases match. > > > > > > > > > > https://wiki.samba.org/index.php/Samba-tool_ldapcmp > > > > > > > > > > The biggest change you made was upgrading the schema. Did you > > > > > ensure > > > > > to include > > > > > > > > > > ad dc functional level = 2016 > > > > > > > &...

...derwerp: Re: [Samba] Replication failures > > >> > >> I was able to get replication working again by deleting > DNS records that were conflicting in LDAP. > >> > >> Used ldapcmp tool to find conflicts > >> https://wiki.samba.org/index.php/Samba-tool_ldapcmp > >> > > > > Ok, the problem seems to be back again. > > > > Ubuntu 16.04, samba 4.9.3 > > > > I’ve checked with: samba-tool ldapcmp > > between dc1 and every other dc[2-6] > > > > ldapcmp shows no errors in any combination menti...

I’m getting errors with replication Samba 4.9.3 on Ubuntu 16.04 6 Samba DC’s at 3 sites I recently joined a Win2k8 R2 server to the domain and promoted it to domain controller. The replication was working before that, and not working after. I didn’t realize the problems and tried to join a Win2012 R2 server and promote to DC as well. That also failed with an error about replication failures.

I conducted many tests and I noticed that I lose the domain-join on SMB1 soon as I joined SMB2 in the domain. Step 1: SMB1 "net ads join -Uadministrator" -> OK Step 2: SMB1 "net ads testjoin" -> OK Step 3: SMB2 "net ads join -Uadministrator" -> OK Step 4: SMB2 "net ads testjoin" -> OK Step 5: SMB1 "net ads testjoin" ->