similar to: Samba BDCs and machine trust account passwords

> IIRC the client should contact the PDC (domain<0x1b>). But can you > check the logs and see if the clients are trying to change it on > domain<0x1c> (any DC)? Thanks. Can you give me any hints on how to find such information in the log files? My log level is 5, and I can find some password change messages in the logs, but I don't know how to check if they are looking

Hello all, We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated,

Hi, I want to set up SaMBa PDC and BDC with LDAP. I read the TOSHARG2, but don't understand something: >Samba-3 cannot participate in true SAM replication and is therefore not able to employ >precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will not create >SAM update delta files. Ok, I understand until that, but: >It will not interoperate with a PDC (NT4 or

Hello, I am trying to figure out how to implement a samba domain in a number of remote offices around the world with partly bad and often interrupted WAN connections/VPNs. The goal is to administer the directory from the central data center. My obvious choice would be to set up a central server with SAMBA+OpenLDAP+smbldap-tools and in each remote office a SAMBA server with OpenLDAP as a

Hi, There's been some demand from users to make it possible to use the period character (.) in folder names, but that is impossible when the folder separator is already period. Is there any possibility of replacing that which another separator, say a / ? -Mikko

Hi! I would like to ask you Samba gurus if it is possible to set up Samba PDC which uses OpenLDAP replica as backend. I had two separate OpenLDAP master servers (2.2.13-4) for two different Samba PDC servers (3.0.14a-2) with TLS support in different virtual networks (VLANs), and all worked fine. However, I decided that it would be nice (from an administrative point of view) to have all

Hi Everybody, Here in my company we have migrated from nt4 to Debian Sarge with Samba 3.0.14a + OpenLdap 2.2.23 + db4. Well, it's working fine except for one problem. When I have to get back to a backup copy on my ldap slaves on my BDCs some, or sometimes all, Windows XP machines need to be rejoined to the domain. I manage a workaround stopping Samba every time I need to reset the ldap

OK, I think I've hit a misfeature in samba 3.0(release, Debian/sid) when it comes to using both Samba BDCs and domain trusts. It seems that the domain trust password is stored in the secrets.pdb on the server establishing the trust. This, obviously doesn't facilitate BDCs exercising the trust relationship, or being at all accessable from workstations on the other side of the trust. I

Andrew Barlett wrote: > > Domain trusts (in terms of us being a PDC trusting other DCs) are > currenetly a work in progress. We hope to have it finished for Samba > 3.0. > > However, why do you need domain trusts? (There are lots of > good answers > to this question, but make sure you do have one of the answers). > > Samba 2.2 has always supported being a member

Steven Langasek wrote: > Having one PDC and two BDCs also gives you greater > fault-tolerance than > having three domains with a single PDC each. > > Samba+LDAP can give you this fault tolerance; it can't give you trust > relationships today, without a lot of finagling. > > Steve Langasek > postmodern programmer > Steve: I understand the role of/need for the

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Hello, I just rsync'd my 1TB partitions formated with jfs filesystem containing ~720GB data. I saw -3G difference between source and destination which made me suspect possible dataloss. Also I had experienced loss of integrity on my previous copies but I did not find the cause until now. As command line I used following: sh-3.2# rsync --verbose --sparse --append-verify --fuzzy --progress

Hi, For normal readers you kn ow already my setup, but for those new here, I have a Samba4 PDC and two BDCs one a samba4 and the other a W2k8 R2 machine. Yesterday we had problems with our upstream service provider and my PDC (Backend BIND 9 DLZ) went down for some hours, as you might guess my whole AD was down due to the fact that the main DNS was down. I would like youi to point me or tell

Hi people: I've been using Samba for a long time with some "basic" features like Samba working as a PDC, integrated with OpenLDAP, being a print server, among others, for a small number of "almost controlled" users (no more than 30 or 50 users). But now I'm interested to implement a Windows domain using Samba for a University with 6000-8000 users distributed through

I'm helping a small grade school district convert to Samba servers, more specifically, replace the existing NT domain controllers. The district has 3 schools and about 1,700 students and staff members. There is one domain. Currently there are four NT4 DCs, a PDC and 3 BDCs, one in each school. The BDCs act as file servers. There are also several Linux machines running Samba as file

Hello I have a network setup with one Samba PDC and two Samba BDCs separated by routers (ref http://www.cybersource.com.au/users/mikef/samba/). In this test environment the Samba servers all use the master OpenLDAP server on the PDC, but the production system will have OpenLDAP servers (using master-slave replication) on all Samba servers. I can't get the Windows XP client to change a

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

Hi: Can anybody point me to some guidelines about SMB network design or give some advice? Samba HOWTOs are very detailed recipes, but I need some general tips, like if we are serving fish or pasta tonight :-) This is the situation: a WAN with 20 offices with 2 to 30 people in each, plus a headquarter with 50 people, plus the databases and central file servers. The organization grew up on a NT4

hello I've been reading the thread (http://marc.theaimsgroup.com/?t=113286376900001&r=1&w=2) and I have the same limitation with WINS in a PDC/BDC. That's why I have the following (experimental) setup: PDC ==> wins support = yes, passdb backend: master ldap BDC ==> wins support = yes, passdb backend: slave ldap I configured some of my XP clients to use both WINS servers

hello, I'd like to setup domain authentication purely based on Samba Domain Controllers. Each subnet would have its own BDC (with security = domain option), forwarding smb requests to the PDC (located on the backbone), ie authentication, shares.. My PDC is LDAP based, all that part is ok, win98 workstations successfully log into the PDC. I use idealx smbldap tools, that seem to work fine. I