search for: vdcsv2

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > > c) seems to use some ''random'' AD DNS, not the one in the site, for > > example. > Yes that is correct. ( The DC Locator Process does that ) > If you dont want that, you can assign by GPO a preffered server. > You can set it as preffered server per site in the GPO. ( note, a pc needs 2

...either, the rndc.key is absolutely > not used by > > > Samba or Bind9 in an AD domain. > > Then great to hear im not alone. :-/ > > But by adding that part, my TSIG error message was gone > from my logs. > > Added, but catched that: > > Jun 15 05:48:40 vdcsv2 named[6494]: samba_dlz: starting > transaction on zone ad.fvg.lnf.it > Jun 15 05:48:40 vdcsv2 named[6494]: client 10.5.2.64#50403: > update 'ad.fvg.lnf.it/IN' denied > Jun 15 05:48:40 vdcsv2 named[6494]: samba_dlz: cancelling > transaction on zone ad.fvg.lnf.it > Jun...

...f,DC=it # record 2 dn: CN=NTDS Settings,CN=VDCSV1,CN=Servers,CN=SanVito,CN=Sites,CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it # record 3 dn: CN=Servers,CN=SanVito,CN=Sites,CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it # record 4 dn: CN=4d851fe0-967d-40c6-b1ba-c1d96b196042,CN=NTDS Settings,CN=VDCSV2,CN=Servers,CN=SanVito,CN=Sites,CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it # record 5 dn: CN=6703f3ea-d6f9-4907-8afd-b021256cb1af,CN=NTDS Settings,CN=VDCSV1,CN=Servers,CN=SanVito,CN=Sites,CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it # record 6 dn: CN=NTDS Settings,CN=VDCSV2,CN=Servers,CN=SanVi...

...an as of line 13? The first 13 lines in my logs are exact the same, but after 13, i update my reverse zone. Imo, we need a full config also of bind to get a better idea of this. > ..... > 'ad.fvg.lnf.it/NONE': adding an RR at 'ALBERT.ad.fvg.lnf.it' A > Jun 15 05:48:45 vdcsv2 named[6494]: client 10.5.2.64#50303: > request has invalid signature: TSIG > 1628-ms-7.213-4064bc3.c1816194-6fb1-11e8-5eb7-3464a91c1e49 > (ALBERT\$\@AD.FVG.LNF.IT): tsig verify failure (BADSIG) > > I think the first part is dnsupdate doing the update and the second > part is t...

...ifferenza di tempo dall'orologio locale RefID: vdcud1.ad.fvg.lnf.it [10.99.1.3] Strato: 4 vdcsv1.ad.fvg.lnf.it[10.5.1.25:123]: ICMP: 0ms ritardo NTP: +0.0129460s differenza di tempo dall'orologio locale RefID: armitage.sv.lnf.it [10.5.1.3] Strato: 4 vdcsv2.ad.fvg.lnf.it[10.5.1.27:123]: ICMP: 2ms ritardo NTP: +0.0122517s differenza di tempo dall'orologio locale RefID: armitage.sv.lnf.it [10.5.1.3] Strato: 4 vdctms1.ad.fvg.lnf.it[10.99.25.1:123]: ICMP: 16ms ritardo NTP: +0.0184087s differenza di tempo dall'orolo...

...tatus: NOERROR, id: 29592 > ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;ad.fvg.lnf.it. IN NS > > ;; ANSWER SECTION: > ad.fvg.lnf.it. 900 IN NS vdcsv2.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcud1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcpp1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdctms1.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdcpp2.ad.fvg.lnf.it. > ad.fvg.lnf.it. 900 IN NS vdc3t1.ad.fvg.lnf.it. > ad.fvg....

Mandi! Robert Marcano via samba In chel di` si favelave... > Yes, check the documentation of krb5.conf. Ahem, 'apt-get install krb5-doc' misses. ;-) > In summary you will need to > disable dns_canonicalize_hostname dns_lookup_kdc , etc if enabled and set > you admin and kdc hostnames there, something like: How can i determine kdc and master_kdc values? All DC server are

...->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29592 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ad.fvg.lnf.it. IN NS ;; ANSWER SECTION: ad.fvg.lnf.it. 900 IN NS vdcsv2.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcud1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcpp1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdctms1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcpp2.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdc3t1.ad.fvg.lnf.it. ad.fvg.lnf.it. 900 IN NS vdcsv1.ad.f...

...omain demote --server=vdcsv1.ad.fvg.lnf.it -U gaio (see https://lists.samba.org/archive/samba/2019-February/221195.html) But this leave some old DNS records, eg: root at vdcsv1:~# host -t SRV _kerberos._udp.ad.fvg.lnf.it | awk '{print $NF}'| sed 's/.$//' vdctms1.ad.fvg.lnf.it vdcsv2.ad.fvg.lnf.it vdcsv1.ad.fvg.lnf.it vdcpp2.ad.fvg.lnf.it vdcud1.ad.fvg.lnf.it vdc3t1.ad.fvg.lnf.it vdcpp1.ad.fvg.lnf.it Now, i need to upgrade (finally!) to something more fresh then 4.5. It is advise to cleanup (manually?) old dns records and do the upgrade, or i can safely upgrade to, eg, 4...

...ale > RefID: vdcud1.ad.fvg.lnf.it [10.99.1.3] > Strato: 4 > vdcsv1.ad.fvg.lnf.it[10.5.1.25:123]: > ICMP: 0ms ritardo > NTP: +0.0129460s differenza di tempo dall'orologio locale > RefID: armitage.sv.lnf.it [10.5.1.3] > Strato: 4 > vdcsv2.ad.fvg.lnf.it[10.5.1.27:123]: > ICMP: 2ms ritardo > NTP: +0.0122517s differenza di tempo dall'orologio locale > RefID: armitage.sv.lnf.it [10.5.1.3] > Strato: 4 > vdctms1.ad.fvg.lnf.it[10.99.25.1:123]: > ICMP: 16ms ritardo > NTP: +0.0184087s...

I need to do a simple query, against some LDAP data in 'laster draft schema' format i've added to te samba/AD schema. All LDAP query return the same result on all (6) of the DC: root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember Enter LDAP Password: # extended LDIF # # LDAPv3 # base <DC=ad,DC=fvg,DC=lnf,DC=it> with scope subtree # filter: (cn=prova123) # requesting: rfc822...