search for: vdcpp2

...emoved a DC, and the NS records? > > > > Following: > > https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC > > i've demoted and removed a DC. > > A note. The demotion caused a reconfiguration of bind in every DCs. > logs are: > > Feb 15 11:44:34 vdcpp2 named[1036]: received control channel > command 'reload' > Feb 15 11:44:34 vdcpp2 named[1036]: reading built-in trusted > keys from file '/etc/bind/bind.keys' > Feb 15 11:44:34 vdcpp2 named[1036]: using default UDP/IPv4 > port range: [1024, 65535] > Feb 15 11...

...: 4096 ;; QUESTION SECTION: ;ad.fvg.lnf.it. IN NS ;; ANSWER SECTION: ad.fvg.lnf.it. 900 IN NS vdcsv2.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcud1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcpp1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdctms1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcpp2.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdc3t1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcsv1.ad.fvg.lnf.it. ;; Query time: 0 msec ;; SERVER: 10.5.1.25#53(10.5.1.25) ;; WHEN: Fri Feb 15 12:05:24 CET 2019 ;; MSG SIZE rcvd: 190 I've removed some entry (mostly, the GUID alias), but see...

...lt;samba at lists.samba.org> wrote: > > Sorry. Still on this issue. > > Today i'm upgrading my DC (with latest 4.5 from louis repo). Note that > i've 7 DC in total. > > In site 'PP' i've upgraded samba, then rebooted the container. reboot > on 'vdcpp2' happen on: > > Feb 11 13:59:52 vdcpp2 shutdown[33452]: shutting down for system > reboot > > at '14:00:30' bind, ntp and (i suppose) samba was stared. > > > After that, i've upgraded and rebooted the second DC in that site > (really, the first ;): &g...

...renza di tempo dall'orologio locale RefID: vdcud1.ad.fvg.lnf.it [10.99.1.3] Strato: 4 vdcpp1.ad.fvg.lnf.it[10.27.1.21:123]: ICMP: 10ms ritardo NTP: +0.0129764s differenza di tempo dall'orologio locale RefID: stregatto.pp.lnf.it [10.27.1.3] Strato: 4 vdcpp2.ad.fvg.lnf.it[10.27.1.23:123]: ICMP: 11ms ritardo NTP: +0.0126408s differenza di tempo dall'orologio locale RefID: stregatto.pp.lnf.it [10.27.1.3] Strato: 4 vdcud1.ad.fvg.lnf.it[10.99.1.3:123]: ICMP: errore IP_REQ_TIMED_OUT - nessuna risposta entro 1000ms NTP: +0...

On Wed, 30 Jan 2019 17:25:19 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > nscd caches certain things, as does winbind, if you want to run nscd > > with winbind, you need to stop nscd caching the things that winbind > > does, when you do this, nscd isn't caching very much,

...or 2 ) server. ( and not pool ntp sources ) Because below i see stratum 4 and stratum 3 servers and a timeout on one server. When i look at this. > C:\Users\gaio>w32tm /query /peers > N. peer: 1 > Peer: vdcpp2.ad.fvg.lnf.it > Stato: Attivo > Tempo rimanente: 914.2880000s > Modalità: 3 (Client) > Strato: 0 (non specificato)...

Sorry. Still on this issue. Today i'm upgrading my DC (with latest 4.5 from louis repo). Note that i've 7 DC in total. In site 'PP' i've upgraded samba, then rebooted the container. reboot on 'vdcpp2' happen on: Feb 11 13:59:52 vdcpp2 shutdown[33452]: shutting down for system reboot at '14:00:30' bind, ntp and (i suppose) samba was stared. After that, i've upgraded and rebooted the second DC in that site (really, the first ;): Feb 11 14:03:09 vdcpp1 shutdown[26601]: shutt...

...goes > > away, so do your users. > > No, rowland; because: > > a) could be for 'aesthetic aliases' (marco.gaiarin@ that is the same > as gaio@), but this is not the case. > > b) still i put at least TWO DC in ldap calls: > > ldap_default_servers = > vdcpp2.ad.fvg.lnf.it::3268:vdcpp1.ad.fvg.lnf.it::3268 > > ;-) > That actually proves my point, exim is doing ldap lookups (note you do not really need the port number, all Samba DC's are global catalogues) I also take it that each DC is using itself as its nameserver. I think this is wha...

....fvg.lnf.it. IN NS > > ;; ANSWER SECTION: > ad.fvg.lnf.it. 900 IN NS vdcsv2.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcud1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcpp1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdctms1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcpp2.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdc3t1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcsv1.ad.fvg.lnf.it. > > ;; Query time: 0 msec > ;; SERVER: 10.5.1.25#53(10.5.1.25) > ;; WHEN: Fri Feb 15 12:05:24 CET 2019 > ;; MSG SIZE rcvd: 190 > > I've removed so...

Mandi! Robert Marcano via samba In chel di` si favelave... > Yes, check the documentation of krb5.conf. Ahem, 'apt-get install krb5-doc' misses. ;-) > In summary you will need to > disable dns_canonicalize_hostname dns_lookup_kdc , etc if enabled and set > you admin and kdc hostnames there, something like: How can i determine kdc and master_kdc values? All DC server are

...-U gaio (see https://lists.samba.org/archive/samba/2019-February/221195.html) But this leave some old DNS records, eg: root at vdcsv1:~# host -t SRV _kerberos._udp.ad.fvg.lnf.it | awk '{print $NF}'| sed 's/.$//' vdctms1.ad.fvg.lnf.it vdcsv2.ad.fvg.lnf.it vdcsv1.ad.fvg.lnf.it vdcpp2.ad.fvg.lnf.it vdcud1.ad.fvg.lnf.it vdc3t1.ad.fvg.lnf.it vdcpp1.ad.fvg.lnf.it Now, i need to upgrade (finally!) to something more fresh then 4.5. It is advise to cleanup (manually?) old dns records and do the upgrade, or i can safely upgrade to, eg, 4.8 and then do something like: samba-tool...

...t/DC=DomainDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it # search reference ref: ldap://ad.fvg.lnf.it/DC=ForestDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it # search result search: 2 result: 0 Success # numResponses: 4 # numReferences: 3 While, against a working DC: root at vdcsv1:~# ldapsearch -H ldap://vdcpp2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" Enter LDAP Password: # extended LDIF # # LDAPv3 # base <DC=ad,DC=fvg,DC=lnf,DC=it> with scope subtree # filter: (cn=prova123) # requesting: ALL # # prova123, A...

Mandi! Rowland Penny via samba In chel di` si favelave... > If an ldap lookup works on every DC, except for one and the data is > definitely there on the one DC it doesn't work on, then it must be > something on that DC. is there a firewall or apparmor/selinux in the > way ? No. Anyway, note that query return correctly 'result: 0 Success', simply return no data. Another