similar to: Migrating from NT4 to Samba/LDAP - Demoting PDC to domain member

A client has an existing NT4 domain with several NT4 servers. Two of the NT4 Servers function as a PDC and a BDC. We are installing Samba-3 on SuSE 9.0 Pro as a PDC with an LDAP backend, and decommissioning the NT4 PDC at the same time. So far, so good. We can also rebuild the old PDC hardware as a Samba-3 on SuSE 9.0 Pro BDC. Unfortunately however, the NT4 BDC cannot be removed from the network

Hi, When installing Samba, I made it a PDC in a new domain. Now I would like the old NT4 PDC in the old domain to become a plain host in my Samba domain. Is this possible? I need to keep the old NT4 machine because it's running the Symantec Corporate Edition NAV. In other words, I have NEWDOMAIN with Samba PDC and all clients OLDDOMAIN with NT4 PDC alone, no client Can my NT4 PDC become

Are you sure of that ? I thought it was possible... If it is not, I've got another slightly off topic question : how to I demote my former Windows NT PDC (that is now a BDC) to a normal Windows NT server, so that I have no problem with it ? Thanks in advance. -------- Message d'origine-------- De: Umberto Zanatta [mailto:uzanatta@provincia.treviso.it] Date: lun. 26/07/2004 14:09

Thanks But this is for demoting a PDC to a BDC. I've done that already. What I want to demote my BDCs to standalone server. I'll give a try to upromote. Kind regards Julien -------- Message d'origine-------- De: andreas oster [mailto:aoster@novanetwork.de] Date: lun. 26/07/2004 16:44 ?: samba@lists.samba.org Cc: Objet: Re: RE : [Samba] Samba as a PDC / Windows NT 4

Hi, First of all, The problem i am having is not directly related to Samba. So apologies, however there are a lot of people on this list who know a good deal about how windows (and related technologies) work so i'm hoping they can shed some light on the matter. Background : I successfully completed a migration from a Windows NT4 Domain to s Samba domain with LDAP backend about 2 months.

Hi group Quick question before I switch my domain from NT4 PDC to Samba-LDAP: Can I leave the old NT-PDC in my subnet, if I just disable it's netlogon service? Reason: This old NT-Server has a database running which is still needed after the migration to samba, but it doesn't need to have any NETBIOS-NTDomain functionality after the switch, just TCP-IP. I know of third-party tools

Hi, I just can't seem to get winbind to work on my BDC. I'm using FC3 and samba 3.0.20rc2. My PDC is RHEL4 running Samba 3.0.14a. / Openldap. I can join the BDC to the domain successfully using "net rpc join..." , but when i enter wbinfo -t to check the trust relationship i get checking the trust secret via RPC calls failed error code was (0x0) Could not check secret I

Hi, I just downloaded the fedora samba-3.0.20pre2 source rpm. I built the binary RPM's using the rpmbuild -bb samba-spec command. I hav'nt installed the new rpm's yet but noticed they are much bigger than previous rpms. see below: -rw-r--r-- 1 root root 23M Jun 14 20:12 samba-3.0.14a-4.i386.rpm -rw-r--r-- 1 root root 25M Jun 30 19:04 samba-3.0.20pre1-1.i386.rpm -rw-r--r-- 1

Greetings Samba users, I'm the proud administrator of a samba 3 domain with openldap backend. All is well but for one niggling little problem which i hope somebody could help me with ?. My pdc is set up as a time server "time server = yes" and I have created a logon script with the following entry : net time \\mypdc /set /yes Now, when i logon to a windows 2k domain client as

Hello Samba Users, I work for the IT Department of a small company and we've already replaced our NT4 File Servers with Linux servers running Samba. We'd like to replace some of our windows workstations also. It would be really cool if employee's could log into the Linux workstations using their existing NT accounts ! Has anybody had much luck using winbind and PAM to allow log on to

Hi, I am using a samba domain controller with an LDAP backend. I am also using samba domain controllers with this setup similar to those described in the 'Domain Members, Updating Samba and Migration' chapter of the Samba By Example book. On the domain member servers winbind stores the UID<->SID in the Idmap section of the directory. This appears to be working correctly, however

Hi, I recently migrated from an NT4 Domain to a Samba domain with LDAP backend. We use Exchange 5.5 on NT4 as our mail/groupware. All existing users on the domain appear to be using the Exchange Server without any problems. However, when i create new users they cannot access their mail box'es from Outlook. The Event log on the Exchange Server reports the following error : > A logon

Hi, I am having problems getting winbind on a BDC to work in a Samba3 /LDAP Enviornment and have one straightforward question. Should the secrets.tdb file on the BDC contain an entry with the name of the BDC , e.g. where BACKUP is the name of the BDC ?. { key = "SECRETS/SID/BACKUP" data =

I have recently added a DC to my AD - Former DC was Samba 4.1.6, new DC is 4.3.11 (latest supported by Ubuntu). There's also a Window 2008 server I had tried to join as an AD - that server, wouldn't completely join and replicate to the 4.1.6 samba AD, and now it will not Un-join the AD "domain" either via dcpromo. This brings me to my actual question - Now that I have

In the event demoting a DC caused an issue due to an error (yes, on the user part) could the demoted DC be re-joined to allow correction of the issue? Or should one never rejoin a demoted DC? -- Thank you. Bob Wooden

Hi everybody, I'm having a problem with winbind creating 2 entries for some of my users that really wrecking my head ;-/ . My situation is as follows : I have a typical Samba (3.0.14a)/LDAP setup. I have a trusted domain (another Samba/LDAP setup) and use winbind to map the users from the foreign domain, with the UID to SID mappings stored in LDAP . This works very well. The relevant part

Hello, I am running in a duplicate test environment of my work domain. I have 2 x 4.1 DCs and 2 x 4.7 DCs. I have transferred FSMO role to #3 and it is replicating to #4 fine. I have demoted #1 which appeared to go fine and have turned it off. When I try to demote #2 it fails with the error... Using dc3.domain.com as partner server for the demotion Password for [DOMAIN\administrator]:

Hi, I have searched here, and noticed some discussion lately on problems demoting a dc. In my case, all roles are on DC2, and DC1 & DC3 know that: root at DC1:/var/log/samba# samba-tool fsmo show InfrastructureMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com RidAllocationMasterRole owner: CN=NTDS

Hello, I've configured a squid proxy server to use the wb_auth module to authenticate NT Users . I'm aware that this is not the squid users mailing list but since the wb_auth modle uses the winbind application i thought this might be a good place to look for some help. Basically, the wb_auth module asks winbind to authenticate a users. Winbind then returns a '0' if the

Hello! I'm trying to remove a DC from our samba domain (samba 4.17.4). It was the primary controller (with FSMO roles), - I successfully transferred the roles to another DC. Now it's time to demote: ai# samba-tool domain demote -U mjt-adm Using svdcp.tls.msk.ru as partner server for the demotion Password for [TLS\mjt-adm]: Deactivating inbound replication Asking partner server